Updated Anti-Trojan kernel patches incorporating the fdalloc2 Security Fix.

"Michael A. Williams" <[email protected]>
Newsgroups gmane.os.openbsd.security.announce
Message-ID <[email protected]>
Hi,

Updated signed_exec kernel option patches for OpenBSD 3.1 Release and
OpenBSD 3.0 Release incorporating the fdalloc2 Security Fix are
available from:

http://www.trojanproof.org/sigexec-obsd3.1r-0.2.tgz

http://www.trojanproof.org/sigexec-obsd3.0r-0.4.tgz

For details on the fdalloc2 Security Fix see:

http://www.openbsd.org/errata.html#fdalloc2 and
http://www.openbsd.org/errata30.html#fdalloc2 respectively.

Note that the reason we have issued these updates is that the fdalloc2
Security Fix patches the kern_exec.c file which is also patched by the
signed_exec kernel option patches with a result that if either the
official OpenBSD fdalloc2 Security Fix patch or our signed_exec kernel
option patch is applied first then the other will fail to apply hence we
have incorporated both for those that want to use the signed_exec kernel
option.

Regards,
-- 
Michael A. Williams
Security Software Engineering and InfoSec Manager
NetXSecure NZ Limited, http://www.nxs.co.nz
Ph: +64.3.318.2973 Fax: +64.3.318.2975 Mob: +64.21.995.914
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.