On Jul 16, 2024, at 9:47 AM, Nechev, Kaloyan <kaloyan.nechev-ext@solvay.com> wrote:

We are currently running FreeRADIUS version 3.0.26. According to the upgrade guide on the FreeRADIUS security page (https://www.freeradius.org/security/), it is suggested to change certain security flags in the `radiusd.conf` file.

We would like to know if making these changes to the security flags in `radiusd.conf` is sufficient, or if it is still necessary to upgrade to version 3.0.27 to ensure optimal security.

The flags don't exist in 3.0.26. All of the documentation and security notifications say that the flags were added in 3.0.27, and that you have to set them after upgrading. Alan DeKok.