Fedora Account System
Red Hat Associate
Red Hat Customer
Description of problem: BlastRADIUS vulnerability fix is not available in EPEL8 (for RHEL 8). Steps to Reproduce: Install pam_radius module on RHEL 8.2 1. sudo subscription-manager repos --enable codeready-builder-for-rhel-8-$(arch)-rpms 2. sudo dnf install https://dl.fedoraproject.org/pub/epel/epel-release-latest-8.noarch.rpm 3. sudo dnf install pam_radius 4. Do the required configuration changes 5. Send a Radius request and check on server side. 6. Check the RADIUS server logs Actual results: RADIUS server log statements indicate 'message-authenticator' is not present in the request Expected results: 'message-authenticator' flag needs to be present in each request Additional info: The fix for EPEL9 (RHEL 9) is available as FEDORA-EPEL-2025-fbddb8f0bb (pam_radius-2.0.0-4.el9). Please provide the same fix for EPEL8 (RHEL 8)
FEDORA-EPEL-2025-f4f3b9490a (pam_radius-2.0.0-4.el8) has been submitted as an update to Fedora EPEL 8. https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-f4f3b9490a
FEDORA-EPEL-2025-f4f3b9490a has been pushed to the Fedora EPEL 8 testing repository. You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-f4f3b9490a See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.
FEDORA-EPEL-2025-f4f3b9490a (pam_radius-2.0.0-4.el8) has been pushed to the Fedora EPEL 8 stable repository. If problem still persists, please make note of it in this bug report.
I installed the fix FEDORA-EPEL-2025-f4f3b9490a (pam_radius-2.0.0-4.el8) using following commands: sudo subscription-manager repos --enable codeready-builder-for-rhel-8-$(arch)-rpms sudo dnf install https://dl.fedoraproject.org/pub/epel/epel-release-latest-8.noarch.rpm sudo yum install pam_radius when I check the installed pam_radius version, it is still older version: pam_radius.x86_64 2.0.0-3.el8 @epel Am I missing anything here?
Everything seems fine there if you are installing pam_radius, but do you need to install or update? In the latter case you should run: sudo dnf update pam_radius
Thanks for the quick reply. Yes, updating the pam_radius worked.