Updated Anti-Trojan kernel patches incorporating the fdalloc2 Security Fix.
"Michael A. Williams" <[email protected]>
| Newsgroups | gmane.os.openbsd.security.announce |
|---|---|
| Message-ID | <[email protected]> |
Hi, Updated signed_exec kernel option patches for OpenBSD 3.1 Release and OpenBSD 3.0 Release incorporating the fdalloc2 Security Fix are available from: http://www.trojanproof.org/sigexec-obsd3.1r-0.2.tgz http://www.trojanproof.org/sigexec-obsd3.0r-0.4.tgz For details on the fdalloc2 Security Fix see: http://www.openbsd.org/errata.html#fdalloc2 and http://www.openbsd.org/errata30.html#fdalloc2 respectively. Note that the reason we have issued these updates is that the fdalloc2 Security Fix patches the kern_exec.c file which is also patched by the signed_exec kernel option patches with a result that if either the official OpenBSD fdalloc2 Security Fix patch or our signed_exec kernel option patch is applied first then the other will fail to apply hence we have incorporated both for those that want to use the signed_exec kernel option. Regards, -- Michael A. Williams Security Software Engineering and InfoSec Manager NetXSecure NZ Limited, http://www.nxs.co.nz Ph: +64.3.318.2973 Fax: +64.3.318.2975 Mob: +64.21.995.914