[src/netbsd-6]: src/doc ticket #1041

[bouyer <bouyer%NetBSD.org@localhost>]

details:   https://anonhg.NetBSD.org/src/rev/659ec282c078
branches:  netbsd-6
changeset: 776595:659ec282c078
user:      bouyer <bouyer%NetBSD.org@localhost>
date:      Thu Apr 03 19:02:27 2014 +0000

description:
ticket #1041

diffstat:

 doc/CHANGES-6.2 |  13 ++++++++++++-
 1 files changed, 12 insertions(+), 1 deletions(-)

diffs (24 lines):

diff -r 53cd159c3248 -r 659ec282c078 doc/CHANGES-6.2
--- a/doc/CHANGES-6.2   Thu Apr 03 19:01:50 2014 +0000
+++ b/doc/CHANGES-6.2   Thu Apr 03 19:02:27 2014 +0000
@@ -1,4 +1,4 @@
-# $NetBSD: CHANGES-6.2,v 1.1.2.99 2014/03/21 14:45:54 sborrill Exp $
+# $NetBSD: CHANGES-6.2,v 1.1.2.100 2014/04/03 19:02:27 bouyer Exp $
 
 A complete list of changes from the 6.1 release until the 6.2 release:
 
@@ -1394,3 +1394,14 @@
        DTLSv1_method. Addresses asterisk build problems.
        [wiz, ticket #1038]
 
+crypto/external/bsd/openssl/dist/crypto/bn/bn.h        1.2
+crypto/external/bsd/openssl/dist/crypto/bn/bn_lib.c 1.2
+crypto/external/bsd/openssl/dist/crypto/ec/ec2_mult.c 1.2
+
+       Add fix for CVE-2014-0076 taken from OpenSSL GIT repository:
+       Fix for the attack described in the paper "Recovering OpenSSL
+       ECDSA Nonces Using the FLUSH+RELOAD Cache Side-channel Attack"
+       by Yuval Yarom and Naomi Benger. Details can be obtained from:
+       http://eprint.iacr.org/2014/140
+       [tron, ticket #1041]
+