Launchpad.net

CVE 2016-7056

A timing attack flaw was found in OpenSSL 1.0.1u and before that could allow a malicious user with local access to recover ECDSA P-256 private keys.

See the CVE page on Mitre.org for more details.