The following defect(s) have been fixed in this cumulative patch for the Wind River pam:
WIND00234644 Security Advisory - Pam - CVE-2010-3435
WIND00254774 Security Advisory - pam - CVE-2010-4707
WIND00237564 Security Advisory - pam - CVE-2010-3853
WIND00366802 Security Advisory - pam - CVE-2011-3148
------------------------------------------------------------------------
Change List:
/wrlinux/dist/pam/Makefile
/wrlinux/dist/pam/patches/rpm_patches.list
/wrlinux/dist/pam/patches/pam-wr-integration.patch
/wrlinux/dist/pam/patches/pam-0.99.6.2-drop-privs-CVE-2010-4707.patch
/wrlinux/dist/pam/patches/pam-0.99.6.2-drop-privs-CVE-2010-3435.patch
/wrlinux/dist/pam/patches/pam-0.99.6.2-3.16.fc6-fix-CVE-2011-3148.patch
/wrlinux/dist/pam/patches/pam-0.99.6.2-CVE-2010-3853.patch
Requires Wind River Linux 2.0 Update Pack 4 (2.0.4) to be installed
1. Unzip this patch under [install_dir]/updates
2. From the [install_dir]/updates directory, run the command "../maintenance/mtool/mtool_linux"
3. Follow the instructions for installing the point patch.
4. This is a source only patch so you will have to rebuild the pam package. This can be done by executing the command "make -C build pam.distclean" followed by "make -C build pam.rebuild"
5. Run "make fs" next
6. Upload the kernel and rootfs into the target and boot it up.
DATE: 21 Nov 2012
REVISION: file WRL_2_0_4-base-tgt-pam-20110323-spin1.zip replaced with WRL_2_0_4-base-tgt-pam-20121107-spin1.zip and includes defect WIND00366802
DATE: 29 March 2011
REVISION: Add file WRL_2_0_4-base-tgt-pam-20110323-spin1.zip and includes defect WIND00237564
DATE: 11 March 2011
REVISION: Add file WRL_2_0_4-base-tgt-pam-20110309-spin3.zip and includes defect WIND00234644 WIND00254774
