Add Changelog for the Marvin attack fix

Signed-off-by: Janos Follath <[email protected]>
2026-08-10 21:47:47 +00:00 · 2024-01-22 15:58:57 +00:00
parent eaeff5b75a
commit f10bfbbe74
1 changed files with 6 additions and 0 deletions
@@ -0,0 +1,6 @@
+Security
+   * Fix a timing side channel in RSA private operations. This side channel
+     could be sufficient for a local attacker to recover the plaintext. It
+     requires the attacker to send a large number of messages for decryption.
+     For details, see "Everlasting ROBOT: the Marvin Attack", Hubert Kario.
+     Reported by Hubert Kario, Red Hat.