The following defect(s) have been fixed in this cumulative patch for the Wind River logrotate:
WIND00266141 Security Advisory - logrotate - CVE-2011-1155
WIND00266143 Security Advisory - logrotate - CVE-2011-1098
WIND00281162 wrl 2.0.4 : logrotate crashes on startup with default parameters
WIND00292940 wrlinux logrotate LFS bug
WIND00266144 Security Advisory - logrotate - CVE-2011-1548
--------------------------------------------------------------------------------------------
Change List:
/wrlinux/dist/logrotate/Makefile
/wrlinux/dist/logrotate/patches/logrotate-fix-CVE-2011-1155.patch
/wrlinux/dist/logrotate/patches/logrotate-wr-integration.patch
/wrlinux/dist/logrotate/patches/rpm_patches.list
/wrlinux/dist/logrotate/patches/logrotate-fix-CVE-2011-1098.patch
/wrlinux/dist/logrotate/patches/logrotate-CVE-2011-1155-omitted-codes.patch
/wrlinux/dist/logrotate/patches/logrotate-fix-CVE-2011-1548.patch
Requires Wind River Linux 2.0 Update Pack 4 (2.0.4) to be installed
1. Unzip this patch under [install_dir]/updates
2. From the [install_dir]/updates directory, run the command "../maintenance/mtool/mtool_linux"
3. Follow the instructions for installing the point patch.
4. This is a source only patch so you will have to rebuild the logrotate package. This can be done by executing the command "make -C build logrotate.distclean" followed by "make -C build logrotate.rebuild"
5. Run "make fs" next
6. Upload the kernel and rootfs into the target and boot it up.
DATE: 16 Dec 2011
REVISION: file WRL_2_0_4-base-tgt-logrotate-20111017-spin1.zip replaced with WRL_2_0_4-base-tgt-logrotate-20111213-spin1.zip and includes fix to defect WIND00266144
DATE: 20 Oct 2011
REVISION: file WRL_2_0_4-base-tgt-logrotate-20110612-spin1.zip replaced with WRL_2_0_4-base-tgt-logrotate-20111017-spin1.zip and includes fix to defect WIND00292940
DATE: 14 Jun 2011
REVISION: Add file WRL_2_0_4-base-tgt-logrotate-20110612-spin1.zip and includes fix to defect WIND00281162
DATE: 18 April 2011
REVISION: Add file WRL_2_0_4-base-tgt-logrotate-20110415-spin1.zip and includes fix to defect WIND00266141 WIND00266143
