The following defect(s) have been fixed in this cumulative patch for the Wind River libxml2:
WIND00237797 Security Advisory - libxml - CVE-2010-4008
WIND00291241 Security Advisory - libxml2 - CVE-2011-1944
WIND00316312 Security Advisory - libxml2 - CVE-2011-2821 CVE-2011-2834
WIND00325460 Security Advisory - libxml2 - CVE-2011-3905
WIND00327989 Security Advisory - libxml2 - CVE-2011-3919
WIND00359309 Security Advisory - libxml2 - CVE-2012-2807
WIND00376779 Security Advisory - libxml2 - CVE-2012-2871
-----------------------------------------------------------------------------------------------
Change List:
/wrlinux/dist/libxml2/Makefile
/wrlinux/dist/libxml2/patches/rpm_patches.list
/wrlinux/dist/libxml2/patches/libxml2-CVE-2011-2821-2834.patch
/wrlinux/dist/libxml2/patches/libxml2-fix-CVE-2011-1944.patch
/wrlinux/dist/libxml2/patches/libxml2-fix-CVE-2011-3919.patch
/wrlinux/dist/libxml2/patches/libxml2-fix-CVE-2011-3905.patch
/wrlinux/dist/libxml2/patches/libxml2-wr-integration.patch
/wrlinux/dist/libxml2/patches/libxml2-CVE-2012-2807.patch
/wrlinux/dist/libxml2/patches/libxml2-fix-CVE-2010-4008.patch
/wrlinux/dist/libxml2/patches/libxml2-CVE-2012-2871.patch
Requires Wind River Linux 2.0 Update Pack 4 (2.0.4) to be installed
1. Unzip this patch under [install_dir]/updates
2. From the [install_dir]/updates directory, run the command "../maintenance/mtool/mtool_linux"
3. Follow the instructions for installing the point patch.
4. This is a source only patch so you will have to rebuild the libxml2 package. This can be done by executing the command "make -C build libxml2.distclean" followed by "make -C build libxml2.rebuild"
5. Run "make fs" next
6. Upload the kernel and rootfs into the target and boot it up.
DATE: 21 Nov 2012
REVISION: file WRL_2_0_4-base-tgt-libxml2-20120725-spin1.zip replaced with WRL_2_0_4-base-tgt-libxml2-20121115-spin1.zip and includes fix to defect WIND00376779
DATE: 05 Sep 2012
REVISION: file WRL_2_0_4-base-tgt-libxml2-20120118-spin1.zip replaced with WRL_2_0_4-base-tgt-libxml2-20120725-spin1.zip and includes fix to defect WIND00359309
DATE: 29 Jan 2012
REVISION: file WRL_2_0_4-base-tgt-libxml2-20111114-spin1.zip replaced with WRL_2_0_4-base-tgt-libxml2-20120118-spin1.zip and includes fix to defect WIND00325460 WIND00327989
DATE: 16 Nov 2011
REVISION: file WRL_2_0_4-base-tgt-libxml2-20110925-spin1.zip replaced with WRL_2_0_4-base-tgt-libxml2-20111114-spin1.zip and includes fix to defect WIND00316312
DATE: 27 Sep 2011
REVISION: file WRL_2_0_4-base-tgt-libxml2-20101222-spin1.zip replaced with WRL_2_0_4-base-tgt-libxml2-20110925-spin1.zip and includes fix to defect WIND00291241
