control: forwarded -1 https://github.com/openssl/openssl/issues/28287

The freeradius' debci breaks with 3.5.2. Upstream report has been filled,
this is just to keep track on the Debian side.

Sebastian

control: reassign -1 freeradius 3.2.7+dfsg-1
control: affects -1 = src:openssl
control: tags -1 patch upstream fixed-upstream
control: forwarded -1 https://github.com/FreeRADIUS/freeradius-server/issues/5631

This is a freeradius bug and has been fixed freeradius upstream.
Please find attached commit 59e262f1134fe ("change "fips=no" to
"-fips"") from the freeradius tree.

Sebastian

On Tue, 19 Aug 2025 19:43:15 +0200 Sebastian Andrzej Siewior <sebastian@breakpoint.cc> wrote:
https://github.com/FreeRADIUS/freeradius-server/issues/5631
filled,

Dear Maintainer(s),

Given this bug is RC, and blocks openssl from migrating to testing,
which blocks cryptsetup, which blocks my package, I have uploaded to
DELAYED/1 the aforementioned patch as an NMU, debdiff attached, to
unblock the situation.

Please let me know if you'd like me to cancel this or handle it
differently.

Thanks.

Dear Luca,

I just started working today again on Debian tasks.

You have my blessing to upload that (without NMU mark, and pushing the
commits to the Salsa repo) immediately. If you don't want to do this
I'll acknowledge the NMU in a later upload.

Bernhard

Am 21.08.25 um 16:01 schrieb Luca Boccassi:

Ok thanks, uploaded and pushed to salsa

We believe that the bug you reported is fixed in the latest version of
freeradius, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1111328@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Luca Boccassi <bluca@debian.org> (supplier of updated freeradius package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Thu, 21 Aug 2025 13:06:02 +0100
Source: freeradius
Architecture: source
Version: 3.2.7+dfsg-2
Distribution: unstable
Urgency: high
Maintainer: Debian FreeRADIUS Packaging Team <pkg-freeradius-maintainers@lists.alioth.debian.org>
Changed-By: Luca Boccassi <bluca@debian.org>
Closes: 1111328
Changes:
 freeradius (3.2.7+dfsg-2) unstable; urgency=high
 .
   * Team upload.
   * Backport patch to fix compatibility with OpenSSL 3.5.2 (Closes:
     #1111328)
Checksums-Sha1:
 c1031f84f2d2985154a15db02d6298bd5946e1aa 3614 freeradius_3.2.7+dfsg-2.dsc
 4e93c0714544267a373f94a2dbde01703eefa0fe 57724 freeradius_3.2.7+dfsg-2.debian.tar.xz
 3d3c730a1f9a86bac549bc25104400adf0b84584 9077 freeradius_3.2.7+dfsg-2_source.buildinfo
Checksums-Sha256:
 73b4e619eeb43e66d9795728ce02d984489befce26f65dd96735bc8626fa797e 3614 freeradius_3.2.7+dfsg-2.dsc
 77ec4bc33d116590e516f5e00ad3593810aed9dae56d520e2ead9bd5acf9b9de 57724 freeradius_3.2.7+dfsg-2.debian.tar.xz
 770bded79a1c1906b0ce9125679388ab01ace4c9dce4de5da79314b5a85c5585 9077 freeradius_3.2.7+dfsg-2_source.buildinfo
Files:
 8c704cae3a3eb7643df76bde0b5447c5 3614 net optional freeradius_3.2.7+dfsg-2.dsc
 723283db7cdb414f9eca04ca9197c1c9 57724 net optional freeradius_3.2.7+dfsg-2.debian.tar.xz
 f1be27b216a0e831b5efa27148a39c9e 9077 net optional freeradius_3.2.7+dfsg-2_source.buildinfo
-----BEGIN PGP SIGNATURE-----
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=OOF5
-----END PGP SIGNATURE-----

Hi Bernhard,

I would need this in Trixie via a pu. Do you want me to prepare a pu for
Trixie based on this change by Luca or would you prefer to do it
yourself?

Sebastian

On 21/08/25 06:16 PM, Sebastian Andrzej Siewior wrote:

Hi,

I will probably be afk for a couple of days again and I wanted to wait
for the autopkgtest regression on src:openssl to actually clear up with
the new version.

If you can beat me with the trixie-pu, feel free to go ahead.

Bernhard