The following defect(s) have been fixed in this cumulative patch for the Wind River openssl:
WIND00337491 Security Advisory - openssl - CVE-2006-7250
WIND00327991 Security Advisory - openssl - CVE-2011-4108
WIND00330866 Security Advisory - openssl - CVE-2012-0050
WIND00339930 Security Advisory - openssl - CVE-2012-0884
WIND00343415 Security Advisory - openssl - CVE-2012-1165
WIND00347671 Security Advisory - openssl - CVE-2012-2110
WIND00347673 Security Advisory - openssl - CVE-2012-2131
----------------------------------------------------------------------------------------
Change List:
/layers/wrll-wrlinux/dist/openssl/Makefile
/layers/wrll-wrlinux/dist/openssl/patches/openssl-CVE-2012-0050.patch
/layers/wrll-wrlinux/dist/openssl/patches/openssl-CVE-2006-7250.patch
/layers/wrll-wrlinux/dist/openssl/patches/rpm_patches.list
/layers/wrll-wrlinux/dist/openssl/patches/openssl-wr-integration.patch
/layers/wrll-wrlinux/dist/openssl/patches/openssl-CVE-2012-0884.patch
/layers/wrll-wrlinux/dist/openssl/patches/openssl-CVE-2012-2110.patch
/layers/wrll-wrlinux/dist/openssl/patches/openssl-CVE-2012-2131.patch
/layers/wrll-wrlinux/dist/openssl/patches/openssl-CVE-2011-4108.patch
/layers/wrll-wrlinux/dist/openssl/patches/openssl-CVE-2012-1165.patch
Requires Wind River Linux Secure 1.0 to be installed
1. Unzip this patch under [install_dir]/updates
2. From the [install_dir]/updates directory, run the command "../maintenance/wrInstaller/x86-linux2/wrInstaller"
3. Follow the instructions for installing the point patch.
4. This is a source only patch so you will have to rebuild the openssl package. This can be done by executing the command "make -C build openssl.distclean" followed by "make -C build openssl.rebuild"
5. Run "make fs" next
6. Upload the kernel and rootfs into the target and boot it up.
DATE: 23 May 2012
REVISION: file WRLS_1_0-base-tgt-openssl-20120328-spin1.zip replaced with WRLS_1_0-base-tgt-openssl-20120509-spin1.zip and includes fix to defect WIND00343415 WIND00347671 WIND00347673
DATE: 09 Apr 2012
REVISION: Add file WRLS_1_0-base-tgt-openssl-20120328-spin1.zip and includes fix to defect WIND00337491 WIND00327991 WIND00330866 WIND00339930
