- Freeradius-Announce - lists.freeradius.org

Version 3.2.10 and 3.0.28 have been released
by Matthew Newton 03 Jun '26

03 Jun '26

We have released FreeRADIUS versions 3.2.10 (and 3.2.9, ahem), and 3.0.28. These releases contain bug fixes for a number of overflows and memory leaks. Please see the announcement at https://www.freeradius.org/security/ There are also a lot of other updates and improvements. Please see the changelog. We recommend that everyone upgrades to these new versions. Those still on 3.0.x should consider making the move to 3.2.10. There are now few reasons to stay on 3.0. Except for critical security issues, this is likely to be the last release in the 3.0 branch. Packages are not available for 3.0.28 on several newer distributions as it will no longer build - please upgrade to 3.2.10. Download from the usual places: https://www.freeradius.org/releases/ https://www.freeradius.org/ftp/pub/freeradius/ https://github.com/FreeRADIUS/freeradius-server/releases/tag/release_3_2_10 Pre-built packages for common Linux distributions are available from InkBridge Networks: https://packages.inkbridgenetworks.com/ -- Matthew

1 0

Version 3.2.8 has been released
by Matthew Newton 22 Aug '25

22 Aug '25

We have released FreeRADIUS 3.2.8. A few noteworthy items from the changelog: - Added rlm_kafka to produce messages to Kafka. - Alterations to how reject_delay works. - Ability to delay proxied messages, too. - Improvements to the dpsk module. - More debug output with helpful pointers to documentation. As well as many bug fixes. Full information is in doc/ChangeLog. Download from the normal places: https://freeradius.org/releases/ https://freeradius.org/ftp/pub/freeradius/ https://github.com/FreeRADIUS/freeradius-server/releases/tag/release_3_2_8 Packages -------- Packages are available from InkBridge Networks for common Linux distributions as usual: https://packages.inkbridgenetworks.com/ Note that there are not yet packages for Rocky 10 or Debian 13 due to these being newly released. These will follow in due course. Docker images are also available: https://hub.docker.com/r/freeradius/freeradius-server Important note on Docker ------------------------ With this release we are making experimental multi-arch Docker images available at freeradius/freeradius-test:3.2.8 (and similar). The current intention is to swap the main `freeradius/freeradius-server` tags over to this at the next release. To date, images have been built at release time only meaning no further updates are made. As well as having support for common ARM architectures as well as amd64, the images going forwards will be refreshed on a more regular basis meaning base OS security updates will be applied to the FreeRADIUS images. (At least the images for the last couple of released versions will be rebuilt regularly.) This will break the assumption that a Docker image does not change once the tag has been released (not common for Docker in general, but has largely been true for FreeRADIUS thus far). We recommend that you check any processes (e.g. CI or release pipelines) before the next release. If you have a requirement that the image does not change once pulled, you may need to use an intermediary local docker registry or build based on the image hashes (which are fixed), rather than the published tags. FreeRADIUS Support ------------------ Finally, brief a reminder that commercial FreeRADIUS support (including system builds and professional development services) is available from InkBridge Networks, which helps fund FreeRADIUS development. -- Matthew

1 1

Version 3.2.6 has been released
by Matthew Newton 24 Aug '24

24 Aug '24

We have released FreeRADIUS version 3.2.6. A few issues were found after the last release, which have been fixed, as well as some other small updates. Note especially that the "require_message_authenticator" behaviour has been fixed when set to "auto" and used with wildcard clients (i.e. a network rather than a single address). When using wildcard clients, the "auto" option will now never require Message-Authenticator. You should either use one client entry per client or, preferably, upgrade all the clients. There is a similar fix for dynamic clients which will now inherit "require_message_authenticator" and "limit_proxy_state" from the dynamic clients definition. See doc/ChangeLog for full details. Download from the usual places: https://freeradius.org/releases/ https://freeradius.org/ftp/pub/freeradius/ ftp://ftp.freeradius.org/pub/freeradius/ https://github.com/FreeRADIUS/freeradius-server/releases/tag/release_3_2_6 As usual, InkBridge Networks (Network RADIUS) is providing pre-built packages for common Linux distributions: https://packages.networkradius.com/ and Docker images on Dockerhub: https://hub.docker.com/r/freeradius/freeradius-server -- Matthew

1 0

Version 3.2.4 has been released
by Matthew Newton 29 May '24

29 May '24

We have released FreeRADIUS version 3.2.4. It's been a while since the last release, so there's a lot going on this time. Some highlights: - Better TLS debugging output - Simple "radsecret" script to generate good RADIUS secrets - Configurable look back/forward window for TOTP - Preliminary support for TEAP - Less confusing output when requesting client stats - Many bug fixes See doc/ChangeLog for details. There are some minor configuration fixes which are unlikely to affect anyone, notably %{randstr:...} returns the requested length of data, rather than one byte too many. Download from the usual places: https://freeradius.org/releases/ https://freeradius.org/ftp/pub/freeradius/ ftp://ftp.freeradius.org/pub/freeradius/ https://github.com/FreeRADIUS/freeradius-server/releases/tag/release_3_2_4 As usual, Network RADIUS is providing pre-built packages for common Linux distributions: https://packages.networkradius.com/ and, lastly, Docker images on Dockerhub: https://hub.docker.com/r/freeradius/freeradius-server -- Matthew

1 0

Version 3.2.3 has been released
by Matthew Newton 26 May '23

26 May '23

We have released version 3.2.3. This is the latest stable v3 "feature" release. There are a number of features and bug fixes included in this version. Notably: - A notable bug occasionally causing connections to stall when using RADSEC has been fixed. - rlm_ldap and rlm_sql now have a "max_retries" option to limit the number of connection retries due to failure. - Several locking issues and small memory leaks fixed. - A number of dictionary updates, as usual. as well as several other fixes and updates as shown in the ChangeLog. Of importance please note: - Python users Debian/Ubuntu packages now have "freeradius-python2" and "freeradius-python3" packages. Previously the python module was included in the main "freeradius" package. If you are upgrading using the Network RADIUS packages and use python, please make sure you now also install the correct python package for your system. The "freeradius" package recommends both new python packages which will hopefully pull them in on upgrade, but you should check to be certain. Previously the python package built depended on the which version of python was available by default on the OS, which was e.g. python3 on Ubuntu22, but python2 on Debian11 - both options are now available. - Checkrad If anyone is still using the "checkrad" script, it is now passed NAS-Port-Id when called from SQL simultaneous use, rather than "NAS-Port". This fixes the script (the SQL queries always used NAS-Port-Id), but may break installations where the an invalid value such as 0 was previously passed, and is now the correct string. Download from all the usual places: https://freeradius.org/releases/ https://freeradius.org/ftp/pub/freeradius/ ftp://ftp.freeradius.org/pub/freeradius/ https://github.com/FreeRADIUS/freeradius-server/releases/tag/release_3_2_3 Packages are available from Network RADIUS: https://packages.networkradius.com/ (Note that packages are no longer built for Debian 9 Stretch as it is EoL.) Docker images are available on Dockerhub: https://hub.docker.com/r/freeradius/freeradius-server -- Matthew

1 0

Version 3.2.2 has been released
by Matthew Newton 16 Feb '23

16 Feb '23

We have today released FreeRADIUS version 3.2.2. Full changelog is in the source at doc/ChangeLog. Some highlights: - Ability to add a header to linelog output files - Config for xlats in rlm_rest - Default configuration improvements, such as attr_filter and SQL. - Thread stats now available from radmin - Clearer "configure" output when building from source - rlm_unbound added to packages and default build - Obsolete Dockerfiles for centos8 and debian9 removed - Fix EAP-TTLS-MSCHAPv2 with TLS 1.3 Download from the usual places: https://freeradius.org/releases/ ftp://ftp.freeradius.org/pub/freeradius/ https://github.com/FreeRADIUS/freeradius-server/releases/tag/release_3_2_2 Packages are available from Network RADIUS: https://packages.networkradius.com/ Docker images are available on Dockerhub. The default Ubuntu Docker image has been bumped from ubuntu20 to ubuntu22: https://hub.docker.com/u/freeradius -- Matthew

1 0

Version 3.2.1 has been released
by Matthew Newton 03 Oct '22

03 Oct '22

We have released version 3.2.1. This is the latest version 3 "feature" release. There are a number of improvements and bug fixes, see the changelog for full details. As usual, see the web site for release notes and downloads: https://freeradius.org/releases/ ftp://ftp.freeradius.org/pub/freeradius/ https://github.com/FreeRADIUS/freeradius-server/releases/tag/release_3_2_1 Packages are available on the Network RADIUS site: https://packages.networkradius.com/ Rocky Linux 9 packages have been added with this release. Note that since Ubuntu 16 is now EOL, packages will be dropped at some point in the future; you are encouraged to upgrade. Docker images have been pushed to Dockerhub. With this release the Docker "latest" tag now points at version 3.2.1, along with the "latest-3.2" tag. For anyone wishing to stay with version 3.0, please use the "latest-3.0" tag. -- Matthew

1 0

Version 3.0.26 has been released
by Matthew Newton 20 Sep '22

20 Sep '22

We have released version 3.0.26 today. This is a stable release for those still on version 3.0 and wish to avoid new features going in to 3.2.x. There have been a small number of new features in 3.0.26. - 3.0.26 now supports OpenSSL 3. This was done to ensure that 3.0 can continue to work on modern systems and has a longer lifespan. Similarly with the addition of TLS 1.3. - Some dictionaries have been added/updated. - A new xlat added, concat, to concatenate attributes with a character. - Other feature updates are largely configuration additions and packaging improvements. This release also fixes a number of bugs since the last release. Full release notes are available on the web site, together with links to FTP downloads: https://freeradius.org/releases/ ftp://ftp.freeradius.org/pub/freeradius/ https://github.com/FreeRADIUS/freeradius-server/releases/tag/release_3_0_26 Packages are available on the Network RADIUS site: https://packages.networkradius.com/ Docker images have been pushed to Dockerhub. (Note that the 'latest' tag currently points to version 3.0. This will change to 3.2 at the next release. Please use the latest-3.0 tag to follow 3.0.) We recommend upgrading to version 3.2 for most deployments. -- Matthew

1 0

Version 3.2.0 has been released
by Matthew Newton 21 Apr '22

21 Apr '22

Version 3.2.0 has now been released. This is the new "feature" branch of v3. All features and bug fixes from 3.0.x are included in the 3.2.0 release. Notable updates include: - Support PEAP and TTLS with TLS 1.3. This has been tested with wpa_supplicant and Windows 11. - Support OpenSSL 3. - Support for the haproxy "PROXY" protocol. Source and tarballs are available on GitHub: https://github.com/FreeRADIUS/freeradius-server/releases/tag/release_3_2_0 Packages and Docker images will be available shortly. -- Matthew

1 0

Version 3.0.25 has been released
by Matthew Newton 07 Oct '21

07 Oct '21

We have released version 3.0.25 today. Thanks everyone for your patience after the issues with 3.0.24 - hopefully not repeated this time... This is a bugfix release. - `correct_escapes` has been added back into the default configuration. - A segfault when trying to proxy to zombie home servers has been fixed. - A number of other small bugs and compiler warnings were fixed. - Added support for building with PostgreSQL 14. Many thanks to those who helped track down the segfault, which was particularly tricky and took a number of days to trigger. It had been added as part of another bug fix. :( Packages, Docker images and source tarballs are all available in the usual places. https://packages.networkradius.com/ https://freeradius.org/releases/ ftp://ftp.freeradius.org/pub/freeradius/ -- Matthew

1 0