Pyrad

Latest version: v2.4

Safety actively analyzes 630656 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 2 of 3

1.1

Not secure
------------------------

* Add the 'octets' datatype from FreeRADIUS. This is treated just like string;
the only difference is how FreeRADIUS prints it.

* Check against unimplemented datatypes in EncodeData and DecodeData instead
of assuming an identity transform works.

* Make Packet.has_key and __contains__ gracefully handle unknown attributes.
Based on a patch from Alexey V Michurun <amrol.ru>.

* Add a __delitem__ implementation to Packet. Based on a patch from
Alexey V Michurun <amrol.ru>.

1.0

Not secure
------------------------

* Add unit tests. Pyrad now has 100% test coverage!

* Moved the proxy server has been out of the server module to a new
proxy module.

* Fix several errors that prevented the proxy code from working.

* Use the standard logging module instead of printing to stdout.

* The default dictionary for Server instances was shared between all
instances, possibly leading to unwanted data pollution. Each Server now
gets its own dict instance if none is passed in to the constructor.

* Fixed a timeout handling problem in the client: after receiving an
invalid reply the current time was not updated, possibly leading to
the client blocking forever.

* Switch to setuptools, allowing pyrad to be distributed as an egg
via the python package index.

* Use absolute instead of relative imports.

* Sockets are now opened with SO_REUSEADDR enabled to allow for faster
restarts.

0.9

------------------------

* Start using trac to manage the project: http://code.wiggy.net/tracker/pyrad/

* [bug 3] Fix handling of packets with an id of 0

* [bug 2] Fix handling of file descriptor parameters in the server
code and example.

* [bug 4] Fix wrong variable name in exception raised when encountering
an overly long packet.

* [bug 5] Fix error message in parse error for dictionaries.

* [bug 8] Packet.CreateAuthenticator is now a static method.

0.8

---

* Fix time-handling in the client packet sending code: it would loop
forever since the now time was updated at the wrong moment. Fix from
Michael Mitchell <Michael.Mitchellteam.telstra.com>

* Fix passing of dict parameter when creating reply packets

0.7

---

* add HandleAuthPacket and HandleAcctPacket hooks to Server class.
Request from Thomas Boettcher.

* Pass on dict attribute when creating a reply packet. Requested by
Thomas Boettcher.

* Allow specififying new attributes when using
Server.CreateReplyPacket. Requested by Thomas Boettcher.

0.6

---

* packet.VerifyReply() had a syntax error when not called with a raw packet.

* Add bind() method to the Client class.

* [SECURITY] Fix handling of timeouts in client module: when a bad
packet was received pyrad immediately started the next retry instead of
discarding it and waiting for a timeout. This could be exploited by
sending a number of bogus responses before a correct reply to make pyrad
not see the real response.

* correctly set Acct-Delay-Time when resending accounting requests packets.

* verify account request packages as well (from Farshad Khoshkhui).

* protect against packets with bogus lengths (from Farshad Khoshkhui).

Page 2 of 3

© 2024 Safety CLI Cybersecurity Inc. All Rights Reserved.