[openssl/openssl] 050d26: poly1305-ppc.pl: Fix vector register clobbering

[Tomáš Mráz]

  Branch: refs/heads/openssl-3.0
  Home:   https://github.com/openssl/openssl
  Commit: 050d26383d4e264966fb83428e72d5d48f402d35
      https://github.com/openssl/openssl/commit/050d26383d4e264966fb83428e72d5d48f402d35
  Author: Rohan McLure <rmclure at linux.ibm.com>
  Date:   2024-01-09 (Tue, 09 Jan 2024)

  Changed paths:
    M crypto/poly1305/asm/poly1305-ppc.pl

  Log Message:
  -----------
  poly1305-ppc.pl: Fix vector register clobbering

Fixes CVE-2023-6129

The POLY1305 MAC (message authentication code) implementation in OpenSSL for
PowerPC CPUs saves the the contents of vector registers in different order
than they are restored. Thus the contents of some of these vector registers
is corrupted when returning to the caller. The vulnerable code is used only
on newer PowerPC processors supporting the PowerISA 2.07 instructions.

Reviewed-by: Matt Caswell <matt at openssl.org>
Reviewed-by: Richard Levitte <levitte at openssl.org>
Reviewed-by: Tomas Mraz <tomas at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/23200)

(cherry picked from commit 8d847a3ffd4f0b17ee33962cf69c36224925b34f)


  Commit: 99cbe4e599825b9d953770fbf55955fd3cfc2384
      https://github.com/openssl/openssl/commit/99cbe4e599825b9d953770fbf55955fd3cfc2384
  Author: Tomas Mraz <tomas at openssl.org>
  Date:   2024-01-09 (Tue, 09 Jan 2024)

  Changed paths:
    M CHANGES.md
    M NEWS.md

  Log Message:
  -----------
  Add CHANGES.md and NEWS.md entries for CVE-2023-6129

Reviewed-by: Matt Caswell <matt at openssl.org>
Reviewed-by: Richard Levitte <levitte at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/23200)

(cherry picked from commit 858c7bc210a406cc7f891ac2aed78692d2e02937)


Compare: https://github.com/openssl/openssl/compare/1c75ba909967...99cbe4e59982