nettle-2.7.1-9.0.1.el7.AXS7

Nettle is a cryptographic library that is designed to fit easily in more
or less any context: In crypto toolkits for object-oriented languages
(C++, Python, Pike, ...), in applications like LSH or GNUPG, or even in
kernel space.

Security Fix:

- Port side-channel silent functions from 3.4.1. Partially fix for CVE-2018-16869
- CVE-2018-16869: Add side-channel silent memory, math, PKCS1, RSA functions
- Added tests for side-channel silent implementations

CVE(s):
CVE-2018-16869
A Bleichenbacher type side-channel based padding oracle attack was found in the way nettle handles endian conversion of RSA decrypted PKCS#1 v1.5 data. An attacker who is able to run a process on the same physical core as the victim process, could use this flaw extract plaintext or in some cases downgrade any TLS connections to a vulnerable server.