[src/netbsd-6-1]: src/doc ticket #1041

[bouyer <bouyer%NetBSD.org@localhost>]

details:   https://anonhg.NetBSD.org/src/rev/852a4bb24b21
branches:  netbsd-6-1
changeset: 775926:852a4bb24b21
user:      bouyer <bouyer%NetBSD.org@localhost>
date:      Thu Apr 03 19:03:28 2014 +0000

description:
ticket #1041

diffstat:

 doc/CHANGES-6.1.4 |  13 ++++++++++++-
 1 files changed, 12 insertions(+), 1 deletions(-)

diffs (24 lines):

diff -r b5a34fcff04a -r 852a4bb24b21 doc/CHANGES-6.1.4
--- a/doc/CHANGES-6.1.4 Thu Apr 03 19:03:09 2014 +0000
+++ b/doc/CHANGES-6.1.4 Thu Apr 03 19:03:28 2014 +0000
@@ -1,4 +1,4 @@
-# $NetBSD: CHANGES-6.1.4,v 1.1.2.5 2014/03/18 09:44:25 msaitoh Exp $
+# $NetBSD: CHANGES-6.1.4,v 1.1.2.6 2014/04/03 19:03:28 bouyer Exp $
 
 A complete list of changes from the NetBSD 6.1.3 release to the NetBSD 6.1.4
 release:
@@ -39,3 +39,14 @@
 
        Reorder code to avoid use-after-free on error.
        [maxv, ticket #1034]
+crypto/external/bsd/openssl/dist/crypto/bn/bn.h        1.2
+crypto/external/bsd/openssl/dist/crypto/bn/bn_lib.c 1.2
+crypto/external/bsd/openssl/dist/crypto/ec/ec2_mult.c 1.2
+
+       Add fix for CVE-2014-0076 taken from OpenSSL GIT repository:
+       Fix for the attack described in the paper "Recovering OpenSSL
+       ECDSA Nonces Using the FLUSH+RELOAD Cache Side-channel Attack"
+       by Yuval Yarom and Naomi Benger. Details can be obtained from:
+       http://eprint.iacr.org/2014/140
+       [tron, ticket #1041]
+