This release has a number of fixes, including mitigations for the BlastRADIUS attack.

Begin forwarded message:

From: Matthew Newton <notifications@github.com> Subject: [FreeRADIUS/pam_radius] Release release_3_0_0 - 3.0.0 Date: August 9, 2024 at 5:37:04 AM EDT To: FreeRADIUS/pam_radius <pam_radius@noreply.github.com> Cc: Subscribed <subscribed@noreply.github.com> Reply-To: FreeRADIUS/pam_radius <noreply@github.com>

3.0.0 <https://github.com/FreeRADIUS/pam_radius/releases/tag/release_3_0_0> Repository: FreeRADIUS/pam_radius <https://github.com/FreeRADIUS/pam_radius> · Tag: release_3_0_0 <https://github.com/FreeRADIUS/pam_radius/tree/release_3_0_0> · Commit: b6442c3 <https://github.com/FreeRADIUS/pam_radius/commit/b6442c3e0147f1019990520483fa3a30e4ccf059> · Released by: mcnewton <https://github.com/mcnewton> Feature improvements

RPM and DEB packages can be built from the source. Just do "make rpm" or "make deb". Add continuous integration (CI) tests Configuration is now in /etc/pam_radius_auth.conf BlastRADIUS attack mitigations (add Message-Authenticator to Access-Request packets, new require_message_authenticator config flag) Bug fixes

All known and reported bugs have been fixed. Ignore packets from unknown sources. Based on patches from Alex Malowany. Remove obsolete functionality (Old-Password support, workarounds for Livingston RADIUS server, password change support, etc) — This release has 6 assets:

pam_radius-3.0.0.tar.bz2 pam_radius-3.0.0.tar.bz2.sig pam_radius-3.0.0.tar.gz pam_radius-3.0.0.tar.gz.sig Source code (zip) Source code (tar.gz) Visit the release page <https://github.com/FreeRADIUS/pam_radius/releases/tag/release_3_0_0> to download them.

— You are receiving this because you are watching this repository. View it on GitHub <https://github.com/FreeRADIUS/pam_radius/releases/tag/release_3_0_0> or unsubscribe <https://github.com/FreeRADIUS/pam_radius/unsubscribe_via_email/AAAEJTE3WYHDRYBGHBWCTJLZQSEUBANCNFSM4ADAYRHA> from all notifications for this repository.