commit b0034327cbbb0015c7ba4408705c4a886e810d85
author Gilles Peskine <Gilles.Peskine@arm.com> Wed Oct 03 13:40:16 2018 +0200
committer Gilles Peskine <Gilles.Peskine@arm.com> Mon Oct 08 11:38:50 2018 +0200
tree aff190f1baa260571112d37af4ee068752a3ba44
parent f50ee60ff3d42043d1ba9a4e6d6687cb91be315c

Add ChangeLog entry

ChangeLog

diff --git a/ChangeLog b/ChangeLog
index 8c82d08..652f013 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -2,6 +2,12 @@
 
 = mbed TLS x.x.x branch released xxxx-xx-xx
 
+Security
+   * Fix a timing variation in RSA PKCS#1 v1.5 decryption that could
+     lead to a Bleichenbacher-style attack. In TLS, this affects
+     RSA-based ciphersuites without DHE or ECDHE. Reported by Yuval Yarom,
+     Eyal Ronen, Adi Shamir, David Wong and Daniel Genkin.
+
 Bugfix
     * Fix failure in hmac_drbg in the benchmark sample application, when
       MBEDTLS_THREADING_C is defined. Found by TrinityTonic, #1095