Module Name:    src
Committed By:   bouyer
Date:           Thu Apr  3 19:02:27 UTC 2014

Modified Files:
        src/doc [netbsd-6]: CHANGES-6.2

Log Message:
ticket #1041


To generate a diff of this commit:
cvs rdiff -u -r1.1.2.99 -r1.1.2.100 src/doc/CHANGES-6.2

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: src/doc/CHANGES-6.2
diff -u src/doc/CHANGES-6.2:1.1.2.99 src/doc/CHANGES-6.2:1.1.2.100
--- src/doc/CHANGES-6.2:1.1.2.99	Fri Mar 21 14:45:54 2014
+++ src/doc/CHANGES-6.2	Thu Apr  3 19:02:27 2014
@@ -1,4 +1,4 @@
-# $NetBSD: CHANGES-6.2,v 1.1.2.99 2014/03/21 14:45:54 sborrill Exp $
+# $NetBSD: CHANGES-6.2,v 1.1.2.100 2014/04/03 19:02:27 bouyer Exp $
 
 A complete list of changes from the 6.1 release until the 6.2 release:
 
@@ -1394,3 +1394,14 @@ crypto/external/bsd/openssl/lib/libssl/s
 	DTLSv1_method. Addresses asterisk build problems.
 	[wiz, ticket #1038]
 
+crypto/external/bsd/openssl/dist/crypto/bn/bn.h	1.2
+crypto/external/bsd/openssl/dist/crypto/bn/bn_lib.c 1.2
+crypto/external/bsd/openssl/dist/crypto/ec/ec2_mult.c 1.2
+
+	Add fix for CVE-2014-0076 taken from OpenSSL GIT repository:
+	Fix for the attack described in the paper "Recovering OpenSSL
+	ECDSA Nonces Using the FLUSH+RELOAD Cache Side-channel Attack"
+	by Yuval Yarom and Naomi Benger. Details can be obtained from:
+	http://eprint.iacr.org/2014/140
+	[tron, ticket #1041]
+

Reply via email to