Am 04.06.26 um 01:21 schrieb Matthew Newton via Freeradius-Users:
We have released FreeRADIUS versions 3.2.10 (and 3.2.9, ahem), and 3.0.28.
These releases contain bug fixes for a number of overflows and memory leaks. Please see the announcement at
https://www.freeradius.org/security/
There are also a lot of other updates and improvements. Please see the changelog.
We recommend that everyone upgrades to these new versions.
Those still on 3.0.x should consider making the move to 3.2.10. There are now few reasons to stay on 3.0. Except for critical security issues, this is likely to be the last release in the 3.0 branch.
Packages are not available for 3.0.28 on several newer distributions as it will no longer build - please upgrade to 3.2.10.
Download from the usual places:
https://www.freeradius.org/releases/
https://www.freeradius.org/ftp/pub/freeradius/
https://github.com/FreeRADIUS/freeradius-server/releases/tag/release_3_2_10
Pre-built packages for common Linux distributions are available from InkBridge Networks:
The 3.2.10-alpine docker image is a developer build according to the first log lines. I think this is not supposed to be. ####################################################################### # # The server was built with the 'WITH_VERIFY_PTR' flag set. This is a # developer-only build option that DRASTICALLY slows down the server. # If you are using the server in a production environment, you will see # significantly improved performance (3x-4x) by re-running 'configure' # with the flag '--disable-developer', and then re-building and # re-installing the server. # ####################################################################### FreeRADIUS Version 3.2.10 Copyright (C) 1999-2026 The FreeRADIUS server project and contributors