[src/netbsd-6-0]: src/doc ticket #1041

[bouyer <bouyer%NetBSD.org@localhost>]

details:   https://anonhg.NetBSD.org/src/rev/e288dbb370e0
branches:  netbsd-6-0
changeset: 774924:e288dbb370e0
user:      bouyer <bouyer%NetBSD.org@localhost>
date:      Thu Apr 03 19:02:39 2014 +0000

description:
ticket #1041

diffstat:

 doc/CHANGES-6.0.5 |  13 ++++++++++++-
 1 files changed, 12 insertions(+), 1 deletions(-)

diffs (24 lines):

diff -r 96a856f561c1 -r e288dbb370e0 doc/CHANGES-6.0.5
--- a/doc/CHANGES-6.0.5 Thu Apr 03 19:02:00 2014 +0000
+++ b/doc/CHANGES-6.0.5 Thu Apr 03 19:02:39 2014 +0000
@@ -1,4 +1,4 @@
-# $NetBSD: CHANGES-6.0.5,v 1.1.2.5 2014/03/18 09:44:51 msaitoh Exp $
+# $NetBSD: CHANGES-6.0.5,v 1.1.2.6 2014/04/03 19:02:39 bouyer Exp $
 
 A complete list of changes from the NetBSD 6.0.4 release to the NetBSD 6.0.5
 release:
@@ -39,3 +39,14 @@
 
        Reorder code to avoid use-after-free on error.
        [maxv, ticket #1034]
+crypto/external/bsd/openssl/dist/crypto/bn/bn.h        1.2
+crypto/external/bsd/openssl/dist/crypto/bn/bn_lib.c 1.2
+crypto/external/bsd/openssl/dist/crypto/ec/ec2_mult.c 1.2
+
+       Add fix for CVE-2014-0076 taken from OpenSSL GIT repository:
+       Fix for the attack described in the paper "Recovering OpenSSL
+       ECDSA Nonces Using the FLUSH+RELOAD Cache Side-channel Attack"
+       by Yuval Yarom and Naomi Benger. Details can be obtained from:
+       http://eprint.iacr.org/2014/140
+       [tron, ticket #1041]
+