libauthen-radius-perl (0.37-1) unstable; urgency=medium

  From upstream Changes for 0.37:  

  - Enable Rfc3579MessageAuth by default and emit
    Message-Authenticator as the first attribute in Access-Request
    packets (RFC 9716 section 4.2), mitigating the Blast-RADIUS
    protocol vulnerability. Callers that need the previous
    behaviour can pass Rfc3579MessageAuth => 0 explicitly.

 -- gregor herrmann <gregoa@debian.org>  Tue, 26 May 2026 19:39:37 +0200
