[openssl/openssl] 5b139f: poly1305-ppc.pl: Fix vector register clobbering

[Tomáš Mráz]

  Branch: refs/heads/openssl-3.2
  Home:   https://github.com/openssl/openssl
  Commit: 5b139f95c9a47a55a0c54100f3837b1eee942b04
      https://github.com/openssl/openssl/commit/5b139f95c9a47a55a0c54100f3837b1eee942b04
  Author: Rohan McLure <rmclure at linux.ibm.com>
  Date:   2024-01-09 (Tue, 09 Jan 2024)

  Changed paths:
    M crypto/poly1305/asm/poly1305-ppc.pl

  Log Message:
  -----------
  poly1305-ppc.pl: Fix vector register clobbering

Fixes CVE-2023-6129

The POLY1305 MAC (message authentication code) implementation in OpenSSL for
PowerPC CPUs saves the the contents of vector registers in different order
than they are restored. Thus the contents of some of these vector registers
is corrupted when returning to the caller. The vulnerable code is used only
on newer PowerPC processors supporting the PowerISA 2.07 instructions.

Reviewed-by: Matt Caswell <matt at openssl.org>
Reviewed-by: Richard Levitte <levitte at openssl.org>
Reviewed-by: Tomas Mraz <tomas at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/23200)

(cherry picked from commit 8d847a3ffd4f0b17ee33962cf69c36224925b34f)


  Commit: 5def27cc65224447d6f2c7c164201634406a4dc8
      https://github.com/openssl/openssl/commit/5def27cc65224447d6f2c7c164201634406a4dc8
  Author: Tomas Mraz <tomas at openssl.org>
  Date:   2024-01-09 (Tue, 09 Jan 2024)

  Changed paths:
    M CHANGES.md
    M NEWS.md

  Log Message:
  -----------
  Add CHANGES.md and NEWS.md entries for CVE-2023-6129

Reviewed-by: Matt Caswell <matt at openssl.org>
Reviewed-by: Richard Levitte <levitte at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/23200)

(cherry picked from commit 858c7bc210a406cc7f891ac2aed78692d2e02937)


Compare: https://github.com/openssl/openssl/compare/4001226834c5...5def27cc6522