Enterprise Linux Security Advisory ELSA-2007-0338

https://access.redhat.com/errata/RHSA-2007:0338.html

The following updated rpms for Enterprise Linux 3 have been uploaded to the Unbreakable Linux Network:

i386:
freeradius-1.0.1-2.RHEL3.4.i386.rpm
 
x86_64:
freeradius-1.0.1-2.RHEL3.4.x86_64.rpm 


SRPMS:

https://oss.oracle.com:443/el3/SRPMS-updates/freeradius-1.0.1-2.RHEL3.4.src.rpm


Description of changes:

[1.0.1-2.RHEL3.4]
- fixed CVE-2007-2028: EAP-TTLS denial of service
  Resolves: rhbz#236247

[1.0.1-2.RHEL3.3]
- fixed rlm_sql patch which partly reverted ltdl_no_la patch (#161907)
- fixed missing initialisation of flags for dict_addattr call in rlm_ldap.c
  (#136468)