The following defect(s) have been fixed in this cumulative patch for the Wind River dhcp:
WIND00266989 Security Advisory - DHCP - CVE-2011-0997
WIND00294088 Security Advisory - DHCP - CVE-2011-2748
WIND00366779 Security Advisory - dhcp - CVE-2012-3571
----------------------------------------------------------------------------------------
Change List:
/wrlinux/dist/dhcp/Makefile
/wrlinux/dist/dhcp/patches/rpm_patches.list
/wrlinux/dist/dhcp/patches/dhcp-fix-CVE-2011-0997.patch
/wrlinux/dist/dhcp/patches/dhcp-Fix-CVE-2012-3571.patch
/wrlinux/dist/dhcp/patches/dhcp-fix-CVE-2011-2748-2749.patch
/wrlinux/dist/dhcp/patches/dhcp-wr-integration.patch
Requires Wind River Linux 2.0 Update Pack 4 (2.0.4) to be installed
1. Unzip this patch under [install_dir]/updates
2. From the [install_dir]/updates directory, run the command "../maintenance/mtool/mtool_linux"
3. Follow the instructions for installing the point patch.
4. This is a source only patch so you will have to rebuild the dhcp package. This can be done by executing the command "make -C build dhcp.distclean" followed by "make -C build dhcp.rebuild"
5. Run "make fs" next
6. Upload the kernel and rootfs into the target and boot it up.
DATE: 11 Oct 2012
REVISION: file WRL_2_0_4-base-tgt-dhcp-20110919-spin1.zip replaced with WRL_2_0_4-base-tgt-dhcp-20121008-spin1.zip and includes fix to defect WIND00366779
DATE: 20 Sep 2011
REVISION: file WRL_2_0_4-base-tgt-dhcp-20110418-spin1.zip replaced with WRL_2_0_4-base-tgt-dhcp-20110919-spin1.zip and includes fix to defect WIND00294088
DATE: 19 April 2011
REVISION: Add file WRL_2_0_4-base-tgt-dhcp-20110418-spin1.zip and includes fix to defect WIND00266989
