Apply by doing:
cd /usr/src
patch -p0 < 010_exec.patch
And then rebuild your kernel.
Index: sys/compat/ibcs2/ibcs2_exec.c
===================================================================
RCS file: /cvs/src/sys/compat/ibcs2/ibcs2_exec.c,v
retrieving revision 1.14
diff -u -r1.14 ibcs2_exec.c
--- sys/compat/ibcs2/ibcs2_exec.c 2002/08/22 22:04:42 1.14
+++ sys/compat/ibcs2/ibcs2_exec.c 2003/11/03 22:02:04
@@ -616,6 +616,8 @@
struct xseg *xs;
/* read in segment table */
+ if (xep->xe_segsize > 16 * sizeof(*xs))
+ return (ENOEXEC);
xs = (struct xseg *)malloc(xep->xe_segsize, M_TEMP, M_WAITOK);
error = vn_rdwr(UIO_READ, epp->ep_vp, (caddr_t)xs,
xep->xe_segsize, xep->xe_segpos,
Index: sys/kern/exec_elf.c
===================================================================
RCS file: /cvs/src/sys/kern/exec_elf.c,v
retrieving revision 1.44
diff -u -r1.44 exec_elf.c
--- sys/kern/exec_elf.c 2003/02/18 03:54:40 1.44
+++ sys/kern/exec_elf.c 2003/11/03 22:02:05
@@ -786,6 +786,7 @@
for (ph = hph; ph < &hph[eh->e_phnum]; ph++) {
if (ph->p_type != PT_NOTE ||
+ ph->p_filesz > 1024 ||
ph->p_filesz < sizeof(Elf_Note) + name_size)
continue;