Version in base suite: 1.11.2-1 Base version: radsecproxy_1.11.2-1 Target version: radsecproxy_1.11.2-1+deb13u1 Base file: /srv/ftp-master.debian.org/ftp/pool/main/r/radsecproxy/radsecproxy_1.11.2-1.dsc Target file: /srv/ftp-master.debian.org/policy/pool/main/r/radsecproxy/radsecproxy_1.11.2-1+deb13u1.dsc changelog | 7 +++++++ gbp.conf | 2 +- patches/fix_GHSA-wj29-mxmc-q98c | 20 ++++++++++++++++++++ patches/series | 1 + 4 files changed, 29 insertions(+), 1 deletion(-) dpkg-source: warning: cannot verify inline signature for /srv/release.debian.org/tmp/tmp3w9fs0a9/radsecproxy_1.11.2-1.dsc: no acceptable signature found dpkg-source: warning: cannot verify inline signature for /srv/release.debian.org/tmp/tmp3w9fs0a9/radsecproxy_1.11.2-1+deb13u1.dsc: no acceptable signature found diff -Nru radsecproxy-1.11.2/debian/changelog radsecproxy-1.11.2/debian/changelog --- radsecproxy-1.11.2/debian/changelog 2025-03-29 14:07:51.000000000 +0000 +++ radsecproxy-1.11.2/debian/changelog 2026-09-25 12:53:00.000000000 +0000 @@ -1,3 +1,10 @@ +radsecproxy (1.11.2-1+deb13u1) trixie-security; urgency=high + + * Import patch to fix ms-mppe alignment check (GHSA-wj29-mxmc-q98c) + * Set gbp.conf branch to Trixie + + -- Sven Hartge Fri, 25 Sep 2026 14:53:00 +0200 + radsecproxy (1.11.2-1) unstable; urgency=medium * New upstream version 1.11.2 diff -Nru radsecproxy-1.11.2/debian/gbp.conf radsecproxy-1.11.2/debian/gbp.conf --- radsecproxy-1.11.2/debian/gbp.conf 2025-03-29 14:07:51.000000000 +0000 +++ radsecproxy-1.11.2/debian/gbp.conf 2026-09-25 12:53:00.000000000 +0000 @@ -1,5 +1,5 @@ [DEFAULT] upstream-branch = upstream -debian-branch = master +debian-branch = trixie pristine-tar = True diff -Nru radsecproxy-1.11.2/debian/patches/fix_GHSA-wj29-mxmc-q98c radsecproxy-1.11.2/debian/patches/fix_GHSA-wj29-mxmc-q98c --- radsecproxy-1.11.2/debian/patches/fix_GHSA-wj29-mxmc-q98c 1970-01-01 00:00:00.000000000 +0000 +++ radsecproxy-1.11.2/debian/patches/fix_GHSA-wj29-mxmc-q98c 2026-09-25 12:53:00.000000000 +0000 @@ -0,0 +1,20 @@ +From 9256b4a78ad6b14d97f80a0e749c66d97e46d5e1 Mon Sep 17 00:00:00 2001 +From: Fabian Mauchle +Date: Tue, 28 Jul 2026 08:20:58 +0200 +Subject: [PATCH] fix ms-mppe alignment check (GHSA-wj29-mxmc-q98c) + +--- + radsecproxy.c | 2 +- + 2 files changed, 2 insertions(+), 1 deletion(-) + +--- a/radsecproxy.c ++++ b/radsecproxy.c +@@ -912,7 +912,7 @@ int pwdrecrypt(uint8_t *pwd, uint8_t len + } + + int msmpprecrypt(uint8_t *msmpp, uint8_t len, uint8_t *oldsecret, int oldsecret_len, uint8_t *newsecret, int newsecret_len, uint8_t *oldauth, uint8_t *newauth) { +- if (len < 18) ++ if (len < 18 || (len - 2) % 16) + return 0; + if (!msmppdecrypt(msmpp + 2, len - 2, oldsecret, oldsecret_len, oldauth, msmpp)) { + debug(DBG_WARN, "msmpprecrypt: failed to decrypt msppe key"); diff -Nru radsecproxy-1.11.2/debian/patches/series radsecproxy-1.11.2/debian/patches/series --- radsecproxy-1.11.2/debian/patches/series 2025-03-29 14:07:51.000000000 +0000 +++ radsecproxy-1.11.2/debian/patches/series 2026-09-25 12:53:00.000000000 +0000 @@ -1 +1,2 @@ fix-spelling +fix_GHSA-wj29-mxmc-q98c