GNUTLS PKCS RSA Signature Forgery Vulnerability

GNUTLS PKCS RSA Signature Forgery Vulnerability

Solution:
The vendor has addressed this issue in version 1.4.3 and later.

Please see the referenced advisories for more information.

GNU GnuTLS 1.0

GNU gnutls-1.4.4.tar.bz2
ftp://ftp.gnutls.org/pub/gnutls/devel/gnutls-1.4.4.tar.bz2

GNU GnuTLS 1.0.1

GNU gnutls-1.4.4.tar.bz2
ftp://ftp.gnutls.org/pub/gnutls/devel/gnutls-1.4.4.tar.bz2

GNU GnuTLS 1.0.14

GNU gnutls-1.4.4.tar.bz2
ftp://ftp.gnutls.org/pub/gnutls/devel/gnutls-1.4.4.tar.bz2

GNU GnuTLS 1.0.15

GNU gnutls-1.4.4.tar.bz2
ftp://ftp.gnutls.org/pub/gnutls/devel/gnutls-1.4.4.tar.bz2

GNU GnuTLS 1.0.16

GNU gnutls-1.4.4.tar.bz2
ftp://ftp.gnutls.org/pub/gnutls/devel/gnutls-1.4.4.tar.bz2

Ubuntu gnutls-bin_1.0.16-13.1ubuntu1.2_amd64.deb
Ubuntu 5.10:
http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls11/gnutls-bin_ 1.0.16-13.1ubuntu1.2_amd64.deb

Ubuntu gnutls-bin_1.0.16-13.1ubuntu1.2_i386.deb
Ubuntu 5.10:
http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls11/gnutls-bin_ 1.0.16-13.1ubuntu1.2_i386.deb

Ubuntu gnutls-bin_1.0.16-13.1ubuntu1.2_powerpc.deb
Ubuntu 5.10:
http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls11/gnutls-bin_ 1.0.16-13.1ubuntu1.2_powerpc.deb

Ubuntu gnutls-bin_1.0.16-13.1ubuntu1.2_sparc.deb
Ubuntu 5.10:
http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls11/gnutls-bin_ 1.0.16-13.1ubuntu1.2_sparc.deb

Ubuntu gnutls-bin_1.0.16-13ubuntu0.3_amd64.deb
Ubuntu 5.04:
http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls11/gnutls-bin_ 1.0.16-13ubuntu0.3_amd64.deb

Ubuntu gnutls-bin_1.0.16-13ubuntu0.3_i386.deb
Ubuntu 5.04:
http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls11/gnutls-bin_ 1.0.16-13ubuntu0.3_i386.deb

Ubuntu gnutls-bin_1.0.16-13ubuntu0.3_powerpc.deb
Ubuntu 5.04:
http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls11/gnutls-bin_ 1.0.16-13ubuntu0.3_powerpc.deb

Ubuntu libgnutls11-dbg_1.0.16-13.1ubuntu1.2_amd64.deb
Ubuntu 5.10:
http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls11/libgnutls11 -dbg_1.0.16-13.1ubuntu1.2_amd64.deb

Ubuntu libgnutls11-dbg_1.0.16-13.1ubuntu1.2_i386.deb
Ubuntu 5.10:
http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls11/libgnutls11 -dbg_1.0.16-13.1ubuntu1.2_i386.deb

Ubuntu libgnutls11-dbg_1.0.16-13.1ubuntu1.2_powerpc.deb
Ubuntu 5.10:
http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls11/libgnutls11 -dbg_1.0.16-13.1ubuntu1.2_powerpc.deb

Ubuntu libgnutls11-dbg_1.0.16-13.1ubuntu1.2_sparc.deb
Ubuntu 5.10:
http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls11/libgnutls11 -dbg_1.0.16-13.1ubuntu1.2_sparc.deb

Ubuntu libgnutls11-dbg_1.0.16-13ubuntu0.3_amd64.deb
Ubuntu 5.04:
http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls11/libgnutls11 -dbg_1.0.16-13ubuntu0.3_amd64.deb

Ubuntu libgnutls11-dbg_1.0.16-13ubuntu0.3_i386.deb
Ubuntu 5.04:
http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls11/libgnutls11 -dbg_1.0.16-13ubuntu0.3_i386.deb

Ubuntu libgnutls11-dbg_1.0.16-13ubuntu0.3_powerpc.deb
Ubuntu 5.04:
http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls11/libgnutls11 -dbg_1.0.16-13ubuntu0.3_powerpc.deb

Ubuntu libgnutls11-dbg_1.0.16-14ubuntu1.1_sparc.deb
Ubuntu 6.06 LTS:
http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls11/libgnutls11 -dbg_1.0.16-14ubuntu1.1_sparc.deb

Ubuntu libgnutls11-dev_1.0.16-13.1ubuntu1.2_amd64.deb
Ubuntu 5.10:
http://security.ubuntu.com/ubuntu/pool/main/g/gnutls11/libgnutls11-dev _1.0.16-13.1ubuntu1.2_amd64.deb

Ubuntu libgnutls11-dev_1.0.16-13.1ubuntu1.2_i386.deb
Ubuntu 5.10:
http://security.ubuntu.com/ubuntu/pool/main/g/gnutls11/libgnutls11-dev _1.0.16-13.1ubuntu1.2_i386.deb

Ubuntu libgnutls11-dev_1.0.16-13.1ubuntu1.2_powerpc.deb
Ubuntu 5.10:
http://security.ubuntu.com/ubuntu/pool/main/g/gnutls11/libgnutls11-dev _1.0.16-13.1ubuntu1.2_powerpc.deb

Ubuntu libgnutls11-dev_1.0.16-13.1ubuntu1.2_sparc.deb
Ubuntu 5.10:
http://security.ubuntu.com/ubuntu/pool/main/g/gnutls11/libgnutls11-dev _1.0.16-13.1ubuntu1.2_sparc.deb

Ubuntu libgnutls11-dev_1.0.16-13ubuntu0.3_amd64.deb
Ubuntu 5.04:
http://security.ubuntu.com/ubuntu/pool/main/g/gnutls11/libgnutls11-dev _1.0.16-13ubuntu0.3_amd64.deb

Ubuntu libgnutls11-dev_1.0.16-13ubuntu0.3_i386.deb
Ubuntu 5.04:
http://security.ubuntu.com/ubuntu/pool/main/g/gnutls11/libgnutls11-dev _1.0.16-13ubuntu0.3_i386.deb

Ubuntu libgnutls11-dev_1.0.16-13ubuntu0.3_powerpc.deb
Ubuntu 5.04:
http://security.ubuntu.com/ubuntu/pool/main/g/gnutls11/libgnutls11-dev _1.0.16-13ubuntu0.3_powerpc.deb

Ubuntu libgnutls11-dev_1.0.16-14ubuntu1.1_sparc.deb
Ubuntu 6.06 LTS:
http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls11/libgnutls11 -dev_1.0.16-14ubuntu1.1_sparc.deb

Ubuntu libgnutls11_1.0.16-13.1ubuntu1.2_amd64.deb
Ubuntu 5.10:
http://security.ubuntu.com/ubuntu/pool/main/g/gnutls11/libgnutls11_1.0 .16-13.1ubuntu1.2_amd64.deb

Ubuntu libgnutls11_1.0.16-13.1ubuntu1.2_i386.deb
Ubuntu 5.10:
http://security.ubuntu.com/ubuntu/pool/main/g/gnutls11/libgnutls11_1.0 .16-13.1ubuntu1.2_i386.deb

Ubuntu libgnutls11_1.0.16-13.1ubuntu1.2_powerpc.deb
Ubuntu 5.10:
http://security.ubuntu.com/ubuntu/pool/main/g/gnutls11/libgnutls11_1.0 .16-13.1ubuntu1.2_powerpc.deb

Ubuntu libgnutls11_1.0.16-13.1ubuntu1.2_sparc.deb
Ubuntu 5.10:
http://security.ubuntu.com/ubuntu/pool/main/g/gnutls11/libgnutls11_1.0 .16-13.1ubuntu1.2_sparc.deb

Ubuntu libgnutls11_1.0.16-13ubuntu0.3_amd64.deb
Ubuntu 5.04:
http://security.ubuntu.com/ubuntu/pool/main/g/gnutls11/libgnutls11_1.0 .16-13ubuntu0.3_amd64.deb

Ubuntu libgnutls11_1.0.16-13ubuntu0.3_i386.deb
Ubuntu 5.04:
http://security.ubuntu.com/ubuntu/pool/main/g/gnutls11/libgnutls11_1.0 .16-13ubuntu0.3_i386.deb

Ubuntu libgnutls11_1.0.16-14ubuntu1.1_i386.deb
Ubuntu 6.06 LTS:
http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls11/libgnutls11 _1.0.16-14ubuntu1.1_i386.deb

Ubuntu libgnutls11_1.0.16-14ubuntu1.1_sparc.deb
Ubuntu 6.06 LTS:
http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls11/libgnutls11 _1.0.16-14ubuntu1.1_sparc.deb

GNU GnuTLS 1.0.17

GNU gnutls-1.4.4.tar.bz2
ftp://ftp.gnutls.org/pub/gnutls/devel/gnutls-1.4.4.tar.bz2

GNU GnuTLS 1.0.2

GNU gnutls-1.4.4.tar.bz2
ftp://ftp.gnutls.org/pub/gnutls/devel/gnutls-1.4.4.tar.bz2

GNU GnuTLS 1.0.25

GNU gnutls-1.4.4.tar.bz2
ftp://ftp.gnutls.org/pub/gnutls/devel/gnutls-1.4.4.tar.bz2

GNU GnuTLS 1.0.3

GNU gnutls-1.4.4.tar.bz2
ftp://ftp.gnutls.org/pub/gnutls/devel/gnutls-1.4.4.tar.bz2

GNU GnuTLS 1.0.4

GNU gnutls-1.4.4.tar.bz2
ftp://ftp.gnutls.org/pub/gnutls/devel/gnutls-1.4.4.tar.bz2

GNU GnuTLS 1.0.6

GNU gnutls-1.4.4.tar.bz2
ftp://ftp.gnutls.org/pub/gnutls/devel/gnutls-1.4.4.tar.bz2

GNU GnuTLS 1.0.7

GNU gnutls-1.4.4.tar.bz2
ftp://ftp.gnutls.org/pub/gnutls/devel/gnutls-1.4.4.tar.bz2

GNU GnuTLS 1.0.8

GNU gnutls-1.4.4.tar.bz2
ftp://ftp.gnutls.org/pub/gnutls/devel/gnutls-1.4.4.tar.bz2

GNU GnuTLS 1.2

GNU gnutls-1.4.4.tar.bz2
ftp://ftp.gnutls.org/pub/gnutls/devel/gnutls-1.4.4.tar.bz2

GNU GnuTLS 1.2.1

GNU gnutls-1.4.4.tar.bz2
ftp://ftp.gnutls.org/pub/gnutls/devel/gnutls-1.4.4.tar.bz2

GNU GnuTLS 1.2.10

GNU gnutls-1.4.4.tar.bz2
ftp://ftp.gnutls.org/pub/gnutls/devel/gnutls-1.4.4.tar.bz2

GNU GnuTLS 1.2.2

GNU gnutls-1.4.4.tar.bz2
ftp://ftp.gnutls.org/pub/gnutls/devel/gnutls-1.4.4.tar.bz2

GNU GnuTLS 1.2.3

GNU gnutls-1.4.4.tar.bz2
ftp://ftp.gnutls.org/pub/gnutls/devel/gnutls-1.4.4.tar.bz2

GNU GnuTLS 1.2.4

GNU gnutls-1.4.4.tar.bz2
ftp://ftp.gnutls.org/pub/gnutls/devel/gnutls-1.4.4.tar.bz2

Trustix gnutls-1.2.4-4tr.i586.rpm
Trustix Secure Linux 3.0
ftp://ftp.trustix.org/pub/trustix/updates

Trustix gnutls-devel-1.2.4-4tr.i586.rpm
Trustix Secure Linux 3.0
ftp://ftp.trustix.org/pub/trustix/updates

GNU GnuTLS 1.2.5

GNU gnutls-1.4.4.tar.bz2
ftp://ftp.gnutls.org/pub/gnutls/devel/gnutls-1.4.4.tar.bz2

GNU GnuTLS 1.2.9

GNU gnutls-1.4.4.tar.bz2
ftp://ftp.gnutls.org/pub/gnutls/devel/gnutls-1.4.4.tar.bz2

Ubuntu gnutls-bin_1.2.9-2ubuntu1.1_amd64.deb
Ubuntu 6.06 LTS:
http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls12/gnutls-bin_ 1.2.9-2ubuntu1.1_amd64.deb

Ubuntu gnutls-bin_1.2.9-2ubuntu1.1_i386.deb
Ubuntu 6.06 LTS:
http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls12/gnutls-bin_ 1.2.9-2ubuntu1.1_i386.deb

Ubuntu gnutls-bin_1.2.9-2ubuntu1.1_powerpc.deb
Ubuntu 6.06 LTS:
http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls12/gnutls-bin_ 1.2.9-2ubuntu1.1_powerpc.deb

Ubuntu gnutls-bin_1.2.9-2ubuntu1.1_sparc.deb
Ubuntu 6.06 LTS:
http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls12/gnutls-bin_ 1.2.9-2ubuntu1.1_sparc.deb

Ubuntu libgnutls-dev_1.2.9-2ubuntu1.1_amd64.deb
Ubuntu 6.06 LTS:
http://security.ubuntu.com/ubuntu/pool/main/g/gnutls12/libgnutls-dev_1 .2.9-2ubuntu1.1_amd64.deb

Ubuntu libgnutls-dev_1.2.9-2ubuntu1.1_i386.deb
Ubuntu 6.06 LTS:
http://security.ubuntu.com/ubuntu/pool/main/g/gnutls12/libgnutls-dev_1 .2.9-2ubuntu1.1_i386.deb

Ubuntu libgnutls-dev_1.2.9-2ubuntu1.1_powerpc.deb
Ubuntu 6.06 LTS:
http://security.ubuntu.com/ubuntu/pool/main/g/gnutls12/libgnutls-dev_1 .2.9-2ubuntu1.1_powerpc.deb

Ubuntu libgnutls-dev_1.2.9-2ubuntu1.1_sparc.deb
Ubuntu 6.06 LTS:
http://security.ubuntu.com/ubuntu/pool/main/g/gnutls12/libgnutls-dev_1 .2.9-2ubuntu1.1_sparc.deb

Ubuntu libgnutls11-dbg_1.0.16-14ubuntu1.1_amd64.deb
Ubuntu 6.06 LTS:
http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls11/libgnutls11 -dbg_1.0.16-14ubuntu1.1_amd64.deb

Ubuntu libgnutls11-dbg_1.0.16-14ubuntu1.1_i386.deb
Ubuntu 6.06 LTS:
http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls11/libgnutls11 -dbg_1.0.16-14ubuntu1.1_i386.deb

Ubuntu libgnutls11-dbg_1.0.16-14ubuntu1.1_sparc.deb
Ubuntu 6.06 LTS:
http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls11/libgnutls11 -dbg_1.0.16-14ubuntu1.1_sparc.deb

Ubuntu libgnutls11-dev_1.0.16-14ubuntu1.1_amd64.deb
Ubuntu 6.06 LTS:
http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls11/libgnutls11 -dev_1.0.16-14ubuntu1.1_amd64.deb

Ubuntu libgnutls11-dev_1.0.16-14ubuntu1.1_i386.deb
Ubuntu 6.06 LTS:
http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls11/libgnutls11 -dev_1.0.16-14ubuntu1.1_i386.deb

Ubuntu libgnutls11_1.0.16-14ubuntu1.1_amd64.deb
Ubuntu 6.06 LTS:
http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls11/libgnutls11 _1.0.16-14ubuntu1.1_amd64.deb

Ubuntu libgnutls12-dbg_1.2.9-2ubuntu1.1_amd64.deb
Ubuntu 6.06 LTS:
http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls12/libgnutls12 -dbg_1.2.9-2ubuntu1.1_amd64.deb

Ubuntu libgnutls12-dbg_1.2.9-2ubuntu1.1_i386.deb
Ubuntu 6.06 LTS:
http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls12/libgnutls12 -dbg_1.2.9-2ubuntu1.1_i386.deb

Ubuntu libgnutls12-dbg_1.2.9-2ubuntu1.1_powerpc.deb
Ubuntu 6.06 LTS:
http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls12/libgnutls12 -dbg_1.2.9-2ubuntu1.1_powerpc.deb

Ubuntu libgnutls12-dbg_1.2.9-2ubuntu1.1_sparc.deb
Ubuntu 6.06 LTS:
http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls12/libgnutls12 -dbg_1.2.9-2ubuntu1.1_sparc.deb

Ubuntu libgnutls12_1.2.9-2ubuntu1.1_amd64.deb
Ubuntu 6.06 LTS:
http://security.ubuntu.com/ubuntu/pool/main/g/gnutls12/libgnutls12_1.2 .9-2ubuntu1.1_amd64.deb

Ubuntu libgnutls12_1.2.9-2ubuntu1.1_i386.deb
Ubuntu 6.06 LTS:
http://security.ubuntu.com/ubuntu/pool/main/g/gnutls12/libgnutls12_1.2 .9-2ubuntu1.1_i386.deb

Ubuntu libgnutls12_1.2.9-2ubuntu1.1_powerpc.deb
Ubuntu 6.06 LTS:
http://security.ubuntu.com/ubuntu/pool/main/g/gnutls12/libgnutls12_1.2 .9-2ubuntu1.1_powerpc.deb

Ubuntu libgnutls12_1.2.9-2ubuntu1.1_sparc.deb
Ubuntu 6.06 LTS:
http://security.ubuntu.com/ubuntu/pool/main/g/gnutls12/libgnutls12_1.2 .9-2ubuntu1.1_sparc.deb

GNU GnuTLS 1.3

GNU gnutls-1.4.4.tar.bz2
ftp://ftp.gnutls.org/pub/gnutls/devel/gnutls-1.4.4.tar.bz2

GNU GnuTLS 1.3.1

GNU gnutls-1.4.4.tar.bz2
ftp://ftp.gnutls.org/pub/gnutls/devel/gnutls-1.4.4.tar.bz2

GNU GnuTLS 1.3.3

GNU gnutls-1.4.4.tar.bz2
ftp://ftp.gnutls.org/pub/gnutls/devel/gnutls-1.4.4.tar.bz2

GNU GnuTLS 1.3.4

GNU gnutls-1.4.4.tar.bz2
ftp://ftp.gnutls.org/pub/gnutls/devel/gnutls-1.4.4.tar.bz2

GNU GnuTLS 1.4

GNU gnutls-1.4.4.tar.bz2
ftp://ftp.gnutls.org/pub/gnutls/devel/gnutls-1.4.4.tar.bz2

GNU GnuTLS 1.4.2

GNU gnutls-1.4.4.tar.bz2
ftp://ftp.gnutls.org/pub/gnutls/devel/gnutls-1.4.4.tar.bz2