1.0 ROLLING CUMULATIVE PATCH LAYER OVERVIEW This is a Rolling Cumulative Patch Layer for the base Wind River Linux - CGP 5.0.1 release. This RCPL provides fixes for known problems found in the base release. The initial release for the CGP profile was 5.0.1.1. Using any RCPL version earlier than 5.0.1.1 is unsupported. You can control which RCPL layer to use for a specific build via the "--with-rcpl-version" option of the configure command. The "--with-rcpl-version" value applies to both the base Wind River Linux product and any add-on product. The default value for "--with-rcpl-version" is "auto" which will automatically select the newest RCPL installed on the host machine. You can also specifically select an RCPL by setting the "--with-rcpl-version" value to the RCPL number that you wish to use. So, if you wanted to select RCPL 0003 for the project build you could specify that at configure time using "--with-rcpl-version=0003". $ /wrlinux-5/wrlinux/configure --enable-board=qemux86 \ --enable-kernel=cgl --enable-rootfs=glibc_cgl \ --with-rcpl-version=0003 This will force this project build to use RCPL 0003 even if an RCPL 0004 or RCPL 0005 has been installed on the host machine. Once a newer RCPL has been added to the installation, existing projects that have been using the default "--with-rcpl-version=auto" can pick up the new fixes by doing a "make upgrade". This will bring the project up to the newest RCPL on the host: $ make upgrade Any project that had specifically specified an RCPL, say with "--with-rcpl-version=0003", will be unaffected by the installation of a newer RCPL. It will continue to use the one previously specified. This allows a particular project to remain on a specific RCPL. It is also possible to override the "--with-rcpl-version" setting when you do a reconfig by setting the environment variable ENV_RCPL_VERSION . This will override any previous setting from the "--with-rcpl-version" configure option. 2.0 RCPL Update Implementation The distribution is a set of git repositories that are used to generate project directories at configure time. An RCPL appends new fixes to these repositories and so the git repositories can grow with each new RCPL. The original distribution for any of the git repositories is identified by the branch name LB34_5.0.1. That is the branch name that corresponds to the original distribution. As fixes are added to a git repository via an RCPL the git repository tree grows and is marked with a branch name of the form LB34_5.0.1_RCPL000X, where X is the RCPL number. If there were no fixes in a particular repository for a particular RCPL then the new branch would coincide with the previous RCPL branch name. 3.0 TOOLS The product is comprised of various git repositories that get checked out during the configure step of the build. These repositories contain a complete history of what has changed since the base product was shipped. 3.1 A command line tool - rcpl-rcl.sh This command line tool has been provided to help correlate the various patches to the defects they fixed. It is located here: /wrlinux-5/scripts/rcpl/rcpl-cl.sh You can run this script and provide the defect id to see the patch file, package and files affected by the change to fix the defect. Run the tool's help option for more information. Here is a quick guide: Help : 'rcpl-cl.sh --help' All patches : 'rcpl-cl.sh -p wr-cgp all' All Linux patches : 'rcpl-cl.sh -p wr-cgp -r linux' All Toolchain patches : 'rcpl-cl.sh -p wr-cgp -r toolchain' All CVE patches : 'rcpl-cl.sh -p wr-cgp -c all' Single Defect : 'rcpl-cl.sh -p wr-cgp WIND00389708' Just show the Defect #: 'rcpl-cl.sh -p wr-cgp all -D' 3.2 A gui tool - rcpl-gui.sh This GUI line tool has been provided to help provide advanced functions om addition to the features of the command line tool, including: * Explore the content of the git repositories * Compare one RCPL with another * Compare an existing wrlinux project against an RCPL * Export the data to a Text, CSV, or HTML file. The GUI tool is located here: /wrlinux-4/scripts/rcpl/rcpl-gui.(sh|bat) * On Linux, start the tool with: $ cd $ ./wrlinux-5/scripts/rcpl/rcpl-gui.sh * On Windows, start the tool with: > cd > wrlinux-5\scripts\rcpl\rcpl-gui.bat You can open "Help > Help" for detailed information and examples. 4.0 List of defects fixed since initial distribution Defect List: WIND00389708: [Feature Testing][networking]zebra router table is not sync with kernel main router table WIND00399160: lksctp-tools: sctp_xconnect: memory leak when malloc big buffer WIND00401682: [Feature Testing] nfs-utils tests failed WIND00404148: Security Advisory - postgresql - CVE-2013-0255 WIND00407591: [Feature Testing][networking]: test case openais in CUT failed on intel-atom WIND00407624: [Feature Testing][Networking]kdump does not work when selinux in enforcing mode WIND00407810: [Feature Testing][multilib]certain recipes still use PN instead on BPN in do_install tasks WIND00408286: [Feature Testing] multilib: Some run time failures on cav-octeon2 lib64 rootfs WIND00408664: [Feature Testing][Networking]on cgl image, crash-lib64/crash failed with "crash-lib64: /dev/mem: Permission denied" when selinux enforcing mode WIND00409926: CGP layer README not Yocto Compliant WIND00410562: audit: do_compile failed (error: conflicting types for 'recvmmsg') on OpenSuSE 12.3 WIND00411111: building rrdtool package in WRLx5.0.1.1 CGP platform project blocked by build error. WIND00411125: building iscsi-initiator-utils in WRLx5.0.1.1 CGP platform project blocked by build error. WIND00412904: Create local version of the image recipes for modification in layers/local WIND00413441: 1iblockfile_1.09 failed (do_install) of ti-am335x_world WIND00413544: Security Advisory - krb5 - CVE-2012-1014 WIND00413546: Security Advisory - postgresql - CVE-2013-1899 WIND00413548: Security Advisory - postgresql - CVE-2013-1900 WIND00413555: Security Advisory - krb5 - CVE-2013-1415 WIND00413560: Security Advisory - krb5 - CVE-2012-1015 WIND00413562: Security Advisory - libgssglue - CVE-2011-2709 WIND00413565: Security Advisory - postgresql - CVE-2013-1901 WIND00413574: Security Advisory - krb5 - CVE-2012-1016 WIND00413583: Security Advisory - krb5 - CVE-2012-1013 WIND00414715: Do not include cgp default template unless using --enable-rootfs=glibc-cgl WIND00415127: strongswan fails to build on Ubuntu machine WIND00415916: Security Advisory - krb5 - CVE-2013-1416 WIND00416684: ntpd running as root and other issues WIND00417428: ecryptfs-utils_100 failed (do_c0mpile) of ti-am335x_world. WIND00417547: Security Advisory - strongswan - CVE-2013-2944 WIND00417925: [Feature Testing][networking]: /usb/bin/expect does not work on cav-octeon2+glbc_cgl+cgl WIND00417983: Build fail for xilinx-zynq+glibc_cgl+cgl on wrlinux-5.0.1.4 lx04 WIND00417995: /usr/lib64/ssl/openssl.cnf not installed on target WIND00418028: telnetd using /usr/bin/login instead of /bin/login WIND00418029: Inconsistent use of "alternatives" in inetutils packages WIND00418463: [Feature Testing][networking]: sec.3.4 in CUT failed on BSP: cav-octeon2 WIND00418464: [Feature Testing][networking]: prf.14.0 in CUT failed on BSP: cav-octeon2 WIND00418469: [Feature Testing][networking]: avl.22.0 in CUT failed on BSP: cav-octeon2 WIND00418474: [Feature Testing][networking]: bonding.sh in CUT failed on BSP: cav-octeon2 WIND00418476: [Feature Testing][networking]: std.8.8 in CUT failed on BSP: cav-octeon2 WIND00418656: [Feature Testing][networking]: 32bit gradm does not work with 64bit kernel on BSP: cav-octeon2 & fsl_p50xx on wrlinux-5.0.1.4 lx05 WIND00418799: nc6-1.0 build error on wrl501 LX05 for intel-xeoon-core-32 cgl+glibc_cgl WIND00419342: [Feature Testing][networking]: saftest.sh in cut failed on xilinx on wrlinux-5.0.1.4 lx05 WIND00419450: build system has issues with fs-local-pkg WIND00419898: Security Advisory - krb5 - CVE-2002-2443 WIND00420189: Shared library version of libipsec not being built WIND00420192: tnftp command has no alternates link WIND00421119: Package RDEPENDS variables missing package name component WIND00421121: vsftpd config files are world-readable WIND00421279: error in vsftpd do_install WIND00424312: freeglut building error for haswell WIND00425101: [WRlinux 6.0 ][ USERSPACE] Failed to build radvd on cgl WIND00425134: wrlinux 5.0.1 - syslog-ng build without ssl support WIND00425714: Some warnings during make fs WIND00428495: After Installing 5.0.1.6, can't build with old RCPL WIND00428535: In WRL-3.0.2, syslog-ng memory leak when server is down. WIND00428541: [RCPL0006]ocfs2-tools do_compile failed WIND00429672: CGP fs fails to build on RedHat 6.3 WIND00432478: problems with bind dir ownerships WIND00433019: Security Advisory - strongswan - CVE-2013-5018 WIND00433344: vsftpd /var/share/empty dir creation issue WIND00434120: INSTALLER : wrl 5017 CGP is not downloadable via ESD WIND00434674: openipmi fails during build of CGTS WIND00434811: rcpl7 broken with cgl, enable ccache WIND00435052: request net-snmp config file support WIND00436744: WRL5: In some of the rpms sometimes the gid of the user building is picked up. WIND00436927: wrlinux 5.0.1 - syslog-ng build with implicit options WIND00439690: wrlinux 5.0.1. - services missing status property - CGL rootfs WIND00442232: Security Advisory - strongswan - CVE-2013-6075 WIND00443090: syslog-ng 3.3.5 removed in RCPL 8 WIND00443117: alternatives option missing for /usr/sbin/in.rlogind WIND00445846: Security Advisory - krb5 - CVE-2013-1418 WIND00445874: Security Advisory - nss - CVE-2013-5605 WIND00445876: Security Advisory - nss - CVE-2013-1741 WIND00446957: [CGP][WRL5] Monit's recipe have the wrong recipe.