The following defect(s) have been fixed in this cumulative patch for the Wind River openssh:
WIND00197099 chroot not working with openssh delivered with SP3
WIND00262183 Security Advisory - openssh - CVE-2010-4755
WIND00319164 Security Advisory - openssh - CVE-2011-4327
WIND00345312 Security Advisory - openssh - CVE-2011-5000
WIND00332174 Security Advisory - openssh - CVE-2012-0814
----------------------------------------------------------------------------------------
Change List:
/wrlinux/dist/openssh/Makefile
/wrlinux/dist/openssh/patches/sshpty.patch
/wrlinux/dist/openssh/patches/openssh-4.3p2-CVE-2012-0814.patch
/wrlinux/dist/openssh/patches/rpm_patches.list
/wrlinux/dist/openssh/patches/openssh-wr-integration.patch
/wrlinux/dist/openssh/patches/sshpty_wr.patch
/wrlinux/dist/openssh/patches/openssh-CVE-2011-4327.patch
/wrlinux/dist/openssh/patches/openssh-4.3p2-CVE-2010-4755.patch
/wrlinux/dist/openssh/patches/openssh-4.3p2-CVE-2011-5000.patch
/wrlinux/dist/openssh/patches/patches.list
Requires Wind River Linux 2.0 Update Pack 4 (2.0.4) to be installed.
1. Unzip this patch under [install_dir]/updates
2. From the [install_dir]/updates directory, run the command "../maintenance/mtool/mtool_linux"
3. Follow the instructions for installing the point patch.
4. This is a source only patch so you will have to rebuild the openssh package.
This can be done by executing the command "make -C build openssh
.distclean"followed by "make -C build openssh.rebuild"
5. Run "make fs" next
6. Upload the kernel and rootfs into the target and boot it up
DATE: 19 Apr 2012
REVISION: file WRL_2_0_4-base-tgt-openssh-20120319-spin1.zip replaced with WRL_2_0_4-base-tgt-openssh-20120417-spin2.zip and includes fix to defect WIND00345312 WIND00332174
DATE: 05 Apr 2012
REVISION: file WRL_2_0_4-base-tgt-openssh-20110626-spin1.zip replaced with WRL_2_0_4-base-tgt-openssh-20120319-spin1.zip and includes fix to defect WIND00319164
DATE: 08 Nov 2011
REVISION: Update "Change List" section
DATE: 28 Jun 2011
REVISION: Add file WRL_2_0_4-base-tgt-openssh-20110626-spin1.zip and includes fix to defect WIND00262183
