Ubuntu
freeradius package

FreeRADIUS 2.1.12 is out of date (several bugs require upgrade to at least 2.2.0)

Asked by Stefan Paetow

FreeRADIUS 2.1.12 is out of date. The FreeRADIUS maintainers strongly suggest to upgrade to at least version 2.2.0 because of various stability fixes as well as CVE-2012-3547 (even though Ubuntu patched that CVE in 2.1.10).

Considering that 2.2.0 was released in September 2012 (over a year ago), there is no reason why the package on Ubuntu (and Debian for that matter) should be two years out of date.

Question information

Language:
English Edit question
Status:
Answered
For:
Ubuntu freeradius Edit question
Assignee:
No assignee Edit question
Last query:
Last reply:

This question was originally filed as bug #1245854.

Revision history for this message
Stefan Paetow (stefan-paetow) said : 		#1

FreeRADIUS 2.1.12 is out of date. The FreeRADIUS maintainers strongly suggest to upgrade to at least version 2.2.0 because of various stability fixes as well as CVE-2012-3547 (even though Ubuntu patched that CVE in 2.1.10).

Considering that 2.2.0 was released in September 2012 (over a year ago), there is no reason why the package on Ubuntu (and Debian for that matter) should be two years out of date.

Revision history for this message
actionparsnip (andrew-woodhead666) said : 		#2

I suggest you report a bug

Revision history for this message
Manfred Hampl (m-hampl) said : 		#3

Ubuntu is taking over much software from Debian, including freeradius, which also on Debian is still on 2.1.12.
When Debian upgrades to the new version of freeradius, Ubuntu will most probably follow with the next Ubuntu release.
There is already a wishlist bug in Debian http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=691770 for upgrading freeradius to a higher version. Hopefully it will be taken up in due course.

For the time being there are PPAs with the updated version on https://launchpad.net/ubuntu/+ppas?name_filter=freeradius
e.g. https://launchpad.net/~freeradius/+archive/stable

Can you help with this problem?

Provide an answer of your own, or ask Stefan Paetow for more information if necessary.

To post a message you must log in.