nettle-2.7.1-8.el7

Nettle is a cryptographic library that is designed to fit easily in more
or less any context: In crypto toolkits for object-oriented languages
(C , Python, Pike, ...), in applications like LSH or GNUPG, or even in
kernel space.

Security issues fixed with this release:

CVE-2015-8803
The ecc_256_modp function in ecc-256.c in Nettle before 3.2 does not
properly handle carry propagation and produces incorrect output in its
implementation of the P-256 NIST elliptic curve, which allows
attackers to have unspecified impact via unknown vectors, a different
vulnerability than CVE-2015-8805.
CVE-2015-8804
x86_64/ecc-384-modp.asm in Nettle before 3.2 does not properly handle
carry propagation and produces incorrect output in its implementation
of the P-384 NIST elliptic curve, which allows attackers to have
unspecified impact via unknown vectors.
CVE-2015-8805
The ecc_256_modq function in ecc-256.c in Nettle before 3.2 does not
properly handle carry propagation and produces incorrect output in its
implementation of the P-256 NIST elliptic curve, which allows
attackers to have unspecified impact via unknown vectors, a different
vulnerability than CVE-2015-8803.
CVE-2016-6489
** RESERVED **
This candidate has been reserved by an organization or individual that
will use it when announcing a new security problem. When the
candidate has been publicized, the details for this candidate will be
provided.

Nettle is a cryptographic library that is designed to fit easily in almost any context: In cryptographic toolkits for object-oriented languages, such as C , Python, or Pike, in applications like lsh or GnuPG, or even in kernel space.
Additional Changes: