GnuTLS NULL Character CA SSL Certificate Validation Security Bypass Vulnerability

Bugtraq ID:	35952
Class:	Design Error
CVE:	CVE-2009-2730
Remote:	Yes
Local:	No
Published:	Aug 04 2009 12:00AM
Updated:	Apr 13 2015 09:13PM
Credit:	Tomas Hoger
Vulnerable:	Ubuntu Ubuntu Linux 9.04 sparc Ubuntu Ubuntu Linux 9.04 powerpc Ubuntu Ubuntu Linux 9.04 lpia Ubuntu Ubuntu Linux 9.04 i386 Ubuntu Ubuntu Linux 9.04 amd64 Ubuntu Ubuntu Linux 8.10 sparc Ubuntu Ubuntu Linux 8.10 powerpc Ubuntu Ubuntu Linux 8.10 lpia Ubuntu Ubuntu Linux 8.10 i386 Ubuntu Ubuntu Linux 8.10 amd64 Ubuntu Ubuntu Linux 8.04 LTS sparc Ubuntu Ubuntu Linux 8.04 LTS powerpc Ubuntu Ubuntu Linux 8.04 LTS lpia Ubuntu Ubuntu Linux 8.04 LTS i386 Ubuntu Ubuntu Linux 8.04 LTS amd64 Ubuntu Ubuntu Linux 6.06 LTS sparc Ubuntu Ubuntu Linux 6.06 LTS powerpc Ubuntu Ubuntu Linux 6.06 LTS i386 Ubuntu Ubuntu Linux 6.06 LTS amd64 SuSE SUSE Linux Enterprise 11 SuSE SUSE Linux Enterprise 10 Slackware Linux x86_64 -current Slackware Linux 13.0 x86_64 Slackware Linux 13.0 Slackware Linux 12.2 Slackware Linux 12.1 Slackware Linux -current S.u.S.E. openSUSE 11.2 S.u.S.E. openSUSE 11.1 S.u.S.E. openSUSE 11.0 S.u.S.E. openSUSE 10.3 Redhat Enterprise Linux WS 4 Redhat Enterprise Linux ES 4 Redhat Enterprise Linux Desktop Workstation 5 client Redhat Enterprise Linux Desktop 5 client Redhat Enterprise Linux AS 4 Redhat Enterprise Linux Desktop version 4 Redhat Enterprise Linux 5 Server Pardus Linux 2009 0 Mandriva Linux Mandrake 2009.1 x86_64 Mandriva Linux Mandrake 2009.1 Mandriva Linux Mandrake 2009.0 x86_64 Mandriva Linux Mandrake 2009.0 Mandriva Linux Mandrake 2008.1 x86_64 Mandriva Linux Mandrake 2008.1 Mandriva Linux Mandrake 2008.0 x86_64 Mandriva Linux Mandrake 2008.0 MandrakeSoft Enterprise Server 5 x86_64 MandrakeSoft Enterprise Server 5 MandrakeSoft Corporate Server 4.0 x86_64 MandrakeSoft Corporate Server 4.0 GNU GnuTLS 2.8.1 GNU GnuTLS 2.6.6 GNU GnuTLS 2.6.5 GNU GnuTLS 2.6.4 GNU GnuTLS 2.6.3 GNU GnuTLS 2.6.2 GNU GnuTLS 2.6.1 GNU GnuTLS 2.6 GNU GnuTLS 2.4.1 GNU GnuTLS 2.4 GNU GnuTLS 2.2.5 GNU GnuTLS 2.2.4 GNU GnuTLS 2.2.3 GNU GnuTLS 2.2.2 GNU GnuTLS 2.2.1 GNU GnuTLS 2.2 GNU GnuTLS 2.0 Gentoo Linux Debian Linux 5.0 sparc Debian Linux 5.0 s/390 Debian Linux 5.0 powerpc Debian Linux 5.0 mipsel Debian Linux 5.0 mips Debian Linux 5.0 m68k Debian Linux 5.0 ia-64 Debian Linux 5.0 ia-32 Debian Linux 5.0 hppa Debian Linux 5.0 armel Debian Linux 5.0 arm Debian Linux 5.0 amd64 Debian Linux 5.0 alpha Debian Linux 5.0 Debian Linux 4.0 sparc Debian Linux 4.0 s/390 Debian Linux 4.0 powerpc Debian Linux 4.0 mipsel Debian Linux 4.0 mips Debian Linux 4.0 m68k Debian Linux 4.0 ia-64 Debian Linux 4.0 ia-32 Debian Linux 4.0 hppa Debian Linux 4.0 armel Debian Linux 4.0 arm Debian Linux 4.0 amd64 Debian Linux 4.0 alpha Debian Linux 4.0 Avaya Proactive Contact 4.1 Avaya Messaging Storage Server MM3.0 Avaya Messaging Storage Server 5.0 Avaya Messaging Storage Server 4.0 Avaya Messaging Storage Server 3.1 Avaya Message Networking MN 3.1 Avaya Meeting Exchange 5.2 Avaya Meeting Exchange 5.1 SP1 Avaya Meeting Exchange 5.1 Avaya Meeting Exchange 5.0 SP2 Avaya Meeting Exchange 5.0 SP1 Avaya Meeting Exchange 5.0 Avaya Intuity AUDIX LX 2.0 SP2 Avaya Intuity AUDIX LX 2.0 SP1 Avaya Intuity AUDIX LX 2.0 Avaya Communication Manager 3.1 + Avaya Communication Manager Server DEFINITY Server SI/CS + Avaya Communication Manager Server S8100 + Avaya Communication Manager Server S8300 + Avaya Communication Manager Server S8500 + Avaya Communication Manager Server S8700 Avaya Aura SIP Enablement Services 3.1.1 Avaya Aura SIP Enablement Services 5.2 Avaya Aura SIP Enablement Services 5.1 Avaya Aura SIP Enablement Services 5.0 Avaya Aura SIP Enablement Services 3.1
Not Vulnerable:	GNU GnuTLS 2.8.2

GnuTLS NULL Character CA SSL Certificate Validation Security Bypass Vulnerability

GnuTLS is prone to a security-bypass vulnerability because it fails to properly validate the domain name in a signed CA certificate, allowing attackers to substitute malicious SSL certificates for trusted ones.

Successfully exploiting this issue allows attackers to perform man-in-the-middle attacks or impersonate trusted servers, which will aid in further attacks.

Versions prior to GnuTLS 2.8.2 are vulnerable.

GnuTLS NULL Character CA SSL Certificate Validation Security Bypass Vulnerability

Attackers use man-in-the-middle attacks to exploit this issue.

GnuTLS NULL Character CA SSL Certificate Validation Security Bypass Vulnerability

Solution:
Updates are available. Please see the references for more information.


Debian Linux 5.0 ia-64

• Debian gnutls-bin_2.4.2-6+lenny2_ia64.deb
  http://security.debian.org/pool/updates/main/g/gnutls26/gnutls-bin_2.4 .2-6+lenny2_ia64.deb


• Debian gnutls-doc_2.4.2-6+lenny2_all.deb
  http://security.debian.org/pool/updates/main/g/gnutls26/gnutls-doc_2.4 .2-6+lenny2_all.deb


• Debian libgnutls-dev_2.4.2-6+lenny2_ia64.deb
  http://security.debian.org/pool/updates/main/g/gnutls26/libgnutls-dev_ 2.4.2-6+lenny2_ia64.deb


• Debian libgnutls26-dbg_2.4.2-6+lenny2_ia64.deb
  http://security.debian.org/pool/updates/main/g/gnutls26/libgnutls26-db g_2.4.2-6+lenny2_ia64.deb


• Debian libgnutls26_2.4.2-6+lenny2_ia64.deb
  http://security.debian.org/pool/updates/main/g/gnutls26/libgnutls26_2. 4.2-6+lenny2_ia64.deb

Slackware Linux -current

• Slackware gnutls-2.8.4-i486-1.txz
  ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/n/gn utls-2.8.4-i486-1.txz

Ubuntu Ubuntu Linux 8.04 LTS powerpc

• Ubuntu gnutls-bin_2.0.4-1ubuntu2.6_powerpc.deb
  http://ports.ubuntu.com/pool/universe/g/gnutls13/gnutls-bin_2.0.4-1ubu ntu2.6_powerpc.deb


• Ubuntu gnutls-doc_2.0.4-1ubuntu2.6_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gnutls13/gnutls-doc_2.0. 4-1ubuntu2.6_all.deb


• Ubuntu libgnutls-dev_2.0.4-1ubuntu2.6_powerpc.deb
  http://ports.ubuntu.com/pool/main/g/gnutls13/libgnutls-dev_2.0.4-1ubun tu2.6_powerpc.deb


• Ubuntu libgnutls13-dbg_2.0.4-1ubuntu2.6_powerpc.deb
  http://ports.ubuntu.com/pool/main/g/gnutls13/libgnutls13-dbg_2.0.4-1ub untu2.6_powerpc.deb


• Ubuntu libgnutls13_2.0.4-1ubuntu2.6_powerpc.deb
  http://ports.ubuntu.com/pool/main/g/gnutls13/libgnutls13_2.0.4-1ubuntu 2.6_powerpc.deb


• Ubuntu libgnutlsxx13_2.0.4-1ubuntu2.6_powerpc.deb
  http://ports.ubuntu.com/pool/main/g/gnutls13/libgnutlsxx13_2.0.4-1ubun tu2.6_powerpc.deb

Ubuntu Ubuntu Linux 8.10 powerpc

• Ubuntu gnutls-bin_2.4.1-1ubuntu0.4_powerpc.deb
  http://ports.ubuntu.com/pool/universe/g/gnutls26/gnutls-bin_2.4.1-1ubu ntu0.4_powerpc.deb


• Ubuntu gnutls-doc_2.4.1-1ubuntu0.4_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gnutls26/gnutls-doc_2.4. 1-1ubuntu0.4_all.deb


• Ubuntu guile-gnutls_2.4.1-1ubuntu0.4_powerpc.deb
  http://ports.ubuntu.com/pool/universe/g/gnutls26/guile-gnutls_2.4.1-1u buntu0.4_powerpc.deb


• Ubuntu libgnutls-dev_2.4.1-1ubuntu0.4_powerpc.deb
  http://ports.ubuntu.com/pool/main/g/gnutls26/libgnutls-dev_2.4.1-1ubun tu0.4_powerpc.deb


• Ubuntu libgnutls26-dbg_2.4.1-1ubuntu0.4_powerpc.deb
  http://ports.ubuntu.com/pool/main/g/gnutls26/libgnutls26-dbg_2.4.1-1ub untu0.4_powerpc.deb


• Ubuntu libgnutls26_2.4.1-1ubuntu0.4_powerpc.deb
  http://ports.ubuntu.com/pool/main/g/gnutls26/libgnutls26_2.4.1-1ubuntu 0.4_powerpc.deb

Ubuntu Ubuntu Linux 8.04 LTS sparc

• Ubuntu gnutls-bin_2.0.4-1ubuntu2.6_sparc.deb
  http://ports.ubuntu.com/pool/universe/g/gnutls13/gnutls-bin_2.0.4-1ubu ntu2.6_sparc.deb


• Ubuntu gnutls-doc_2.0.4-1ubuntu2.6_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gnutls13/gnutls-doc_2.0. 4-1ubuntu2.6_all.deb


• Ubuntu libgnutls-dev_2.0.4-1ubuntu2.6_sparc.deb
  http://ports.ubuntu.com/pool/main/g/gnutls13/libgnutls-dev_2.0.4-1ubun tu2.6_sparc.deb


• Ubuntu libgnutls13-dbg_2.0.4-1ubuntu2.6_sparc.deb
  http://ports.ubuntu.com/pool/main/g/gnutls13/libgnutls13-dbg_2.0.4-1ub untu2.6_sparc.deb


• Ubuntu libgnutls13_2.0.4-1ubuntu2.6_sparc.deb
  http://ports.ubuntu.com/pool/main/g/gnutls13/libgnutls13_2.0.4-1ubuntu 2.6_sparc.deb


• Ubuntu libgnutlsxx13_2.0.4-1ubuntu2.6_sparc.deb
  http://ports.ubuntu.com/pool/main/g/gnutls13/libgnutlsxx13_2.0.4-1ubun tu2.6_sparc.deb

Slackware Linux 12.2

• Slackware gnutls-2.8.4-i486-1_slack12.2.tgz
  ftp://ftp.slackware.com/pub/slackware/slackware-12.2/patches/packages/ gnutls-2.8.4-i486-1_slack12.2.tgz

Ubuntu Ubuntu Linux 6.06 LTS sparc

• Ubuntu gnutls-bin_1.2.9-2ubuntu1.7_sparc.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls12/gnutls-bin_ 1.2.9-2ubuntu1.7_sparc.deb


• Ubuntu libgnutls-dev_1.2.9-2ubuntu1.7_sparc.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gnutls12/libgnutls-dev_1 .2.9-2ubuntu1.7_sparc.deb


• Ubuntu libgnutls12-dbg_1.2.9-2ubuntu1.7_sparc.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls12/libgnutls12 -dbg_1.2.9-2ubuntu1.7_sparc.deb


• Ubuntu libgnutls12_1.2.9-2ubuntu1.7_sparc.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gnutls12/libgnutls12_1.2 .9-2ubuntu1.7_sparc.deb

Debian Linux 5.0 alpha

• Debian gnutls-bin_2.4.2-6+lenny2_alpha.deb
  http://security.debian.org/pool/updates/main/g/gnutls26/gnutls-bin_2.4 .2-6+lenny2_alpha.deb


• Debian gnutls-doc_2.4.2-6+lenny2_all.deb
  http://security.debian.org/pool/updates/main/g/gnutls26/gnutls-doc_2.4 .2-6+lenny2_all.deb


• Debian guile-gnutls_2.4.2-6+lenny2_alpha.deb
  http://security.debian.org/pool/updates/main/g/gnutls26/guile-gnutls_2 .4.2-6+lenny2_alpha.deb


• Debian libgnutls-dev_2.4.2-6+lenny2_alpha.deb
  http://security.debian.org/pool/updates/main/g/gnutls26/libgnutls-dev_ 2.4.2-6+lenny2_alpha.deb


• Debian libgnutls26-dbg_2.4.2-6+lenny2_alpha.deb
  http://security.debian.org/pool/updates/main/g/gnutls26/libgnutls26-db g_2.4.2-6+lenny2_alpha.deb


• Debian libgnutls26_2.4.2-6+lenny2_alpha.deb
  http://security.debian.org/pool/updates/main/g/gnutls26/libgnutls26_2. 4.2-6+lenny2_alpha.deb

Mandriva Linux Mandrake 2008.0 x86_64

• Mandriva gnutls-2.0.0-2.4mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64gnutls-devel-2.0.0-2.4mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64gnutls13-2.0.0-2.4mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/

Ubuntu Ubuntu Linux 8.04 LTS amd64

• Ubuntu gnutls-bin_2.0.4-1ubuntu2.6_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls13/gnutls-bin_ 2.0.4-1ubuntu2.6_amd64.deb


• Ubuntu gnutls-doc_2.0.4-1ubuntu2.6_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gnutls13/gnutls-doc_2.0. 4-1ubuntu2.6_all.deb


• Ubuntu libgnutls-dev_2.0.4-1ubuntu2.6_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gnutls13/libgnutls-dev_2 .0.4-1ubuntu2.6_amd64.deb


• Ubuntu libgnutls13-dbg_2.0.4-1ubuntu2.6_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gnutls13/libgnutls13-dbg _2.0.4-1ubuntu2.6_amd64.deb


• Ubuntu libgnutls13_2.0.4-1ubuntu2.6_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gnutls13/libgnutls13_2.0 .4-1ubuntu2.6_amd64.deb


• Ubuntu libgnutlsxx13_2.0.4-1ubuntu2.6_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gnutls13/libgnutlsxx13_2 .0.4-1ubuntu2.6_amd64.deb

Mandriva Linux Mandrake 2008.0

• Mandriva gnutls-2.0.0-2.4mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libgnutls-devel-2.0.0-2.4mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libgnutls13-2.0.0-2.4mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/

Debian Linux 5.0 mipsel

• Debian gnutls-bin_2.4.2-6+lenny2_mipsel.deb
  http://security.debian.org/pool/updates/main/g/gnutls26/gnutls-bin_2.4 .2-6+lenny2_mipsel.deb


• Debian gnutls-doc_2.4.2-6+lenny2_all.deb
  http://security.debian.org/pool/updates/main/g/gnutls26/gnutls-doc_2.4 .2-6+lenny2_all.deb


• Debian guile-gnutls_2.4.2-6+lenny2_mipsel.deb
  http://security.debian.org/pool/updates/main/g/gnutls26/guile-gnutls_2 .4.2-6+lenny2_mipsel.deb


• Debian libgnutls-dev_2.4.2-6+lenny2_mipsel.deb
  http://security.debian.org/pool/updates/main/g/gnutls26/libgnutls-dev_ 2.4.2-6+lenny2_mipsel.deb


• Debian libgnutls26-dbg_2.4.2-6+lenny2_mipsel.deb
  http://security.debian.org/pool/updates/main/g/gnutls26/libgnutls26-db g_2.4.2-6+lenny2_mipsel.deb


• Debian libgnutls26_2.4.2-6+lenny2_mipsel.deb
  http://security.debian.org/pool/updates/main/g/gnutls26/libgnutls26_2. 4.2-6+lenny2_mipsel.deb

Ubuntu Ubuntu Linux 9.04 sparc

• Ubuntu gnutls-bin_2.4.2-6ubuntu0.1_sparc.deb
  http://ports.ubuntu.com/pool/universe/g/gnutls26/gnutls-bin_2.4.2-6ubu ntu0.1_sparc.deb


• Ubuntu gnutls-doc_2.4.2-6ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gnutls26/gnutls-doc_2.4. 2-6ubuntu0.1_all.deb


• Ubuntu guile-gnutls_2.4.2-6ubuntu0.1_sparc.deb
  http://ports.ubuntu.com/pool/universe/g/gnutls26/guile-gnutls_2.4.2-6u buntu0.1_sparc.deb


• Ubuntu libgnutls-dev_2.4.2-6ubuntu0.1_sparc.deb
  http://ports.ubuntu.com/pool/main/g/gnutls26/libgnutls-dev_2.4.2-6ubun tu0.1_sparc.deb


• Ubuntu libgnutls26-dbg_2.4.2-6ubuntu0.1_sparc.deb
  http://ports.ubuntu.com/pool/main/g/gnutls26/libgnutls26-dbg_2.4.2-6ub untu0.1_sparc.deb


• Ubuntu libgnutls26_2.4.2-6ubuntu0.1_sparc.deb
  http://ports.ubuntu.com/pool/main/g/gnutls26/libgnutls26_2.4.2-6ubuntu 0.1_sparc.deb

Ubuntu Ubuntu Linux 9.04 powerpc

• Ubuntu gnutls-bin_2.4.2-6ubuntu0.1_powerpc.deb
  http://ports.ubuntu.com/pool/universe/g/gnutls26/gnutls-bin_2.4.2-6ubu ntu0.1_powerpc.deb


• Ubuntu gnutls-doc_2.4.2-6ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gnutls26/gnutls-doc_2.4. 2-6ubuntu0.1_all.deb


• Ubuntu guile-gnutls_2.4.2-6ubuntu0.1_powerpc.deb
  http://ports.ubuntu.com/pool/universe/g/gnutls26/guile-gnutls_2.4.2-6u buntu0.1_powerpc.deb


• Ubuntu libgnutls-dev_2.4.2-6ubuntu0.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/g/gnutls26/libgnutls-dev_2.4.2-6ubun tu0.1_powerpc.deb


• Ubuntu libgnutls26-dbg_2.4.2-6ubuntu0.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/g/gnutls26/libgnutls26-dbg_2.4.2-6ub untu0.1_powerpc.deb


• Ubuntu libgnutls26_2.4.2-6ubuntu0.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/g/gnutls26/libgnutls26_2.4.2-6ubuntu 0.1_powerpc.deb

Debian Linux 4.0 amd64

• Debian gnutls-bin_1.4.4-3+etch5_amd64.deb
  http://security.debian.org/pool/updates/main/g/gnutls13/gnutls-bin_1.4 .4-3+etch5_amd64.deb


• Debian gnutls-doc_1.4.4-3+etch5_all.deb
  http://security.debian.org/pool/updates/main/g/gnutls13/gnutls-doc_1.4 .4-3+etch5_all.deb


• Debian libgnutls-dev_1.4.4-3+etch5_amd64.deb
  http://security.debian.org/pool/updates/main/g/gnutls13/libgnutls-dev_ 1.4.4-3+etch5_amd64.deb


• Debian libgnutls13-dbg_1.4.4-3+etch5_amd64.deb
  http://security.debian.org/pool/updates/main/g/gnutls13/libgnutls13-db g_1.4.4-3+etch5_amd64.deb


• Debian libgnutls13_1.4.4-3+etch5_amd64.deb
  http://security.debian.org/pool/updates/main/g/gnutls13/libgnutls13_1. 4.4-3+etch5_amd64.deb

Slackware Linux 12.1

• Slackware gnutls-2.8.4-i486-1_slack12.1.tgz
  ftp://ftp.slackware.com/pub/slackware/slackware-12.1/patches/packages/ gnutls-2.8.4-i486-1_slack12.1.tgz

Debian Linux 4.0 ia-32

• Debian gnutls-bin_1.4.4-3+etch5_i386.deb
  http://security.debian.org/pool/updates/main/g/gnutls13/gnutls-bin_1.4 .4-3+etch5_i386.deb


• Debian gnutls-doc_1.4.4-3+etch5_all.deb
  http://security.debian.org/pool/updates/main/g/gnutls13/gnutls-doc_1.4 .4-3+etch5_all.deb


• Debian libgnutls-dev_1.4.4-3+etch5_i386.deb
  http://security.debian.org/pool/updates/main/g/gnutls13/libgnutls-dev_ 1.4.4-3+etch5_i386.deb


• Debian libgnutls13-dbg_1.4.4-3+etch5_i386.deb
  http://security.debian.org/pool/updates/main/g/gnutls13/libgnutls13-db g_1.4.4-3+etch5_i386.deb


• Debian libgnutls13_1.4.4-3+etch5_i386.deb
  http://security.debian.org/pool/updates/main/g/gnutls13/libgnutls13_1. 4.4-3+etch5_i386.deb

Debian Linux 4.0 hppa

• Debian gnutls-bin_1.4.4-3+etch5_hppa.deb
  http://security.debian.org/pool/updates/main/g/gnutls13/gnutls-bin_1.4 .4-3+etch5_hppa.deb


• Debian gnutls-doc_1.4.4-3+etch5_all.deb
  http://security.debian.org/pool/updates/main/g/gnutls13/gnutls-doc_1.4 .4-3+etch5_all.deb


• Debian libgnutls-dev_1.4.4-3+etch5_hppa.deb
  http://security.debian.org/pool/updates/main/g/gnutls13/libgnutls-dev_ 1.4.4-3+etch5_hppa.deb


• Debian libgnutls13-dbg_1.4.4-3+etch5_hppa.deb
  http://security.debian.org/pool/updates/main/g/gnutls13/libgnutls13-db g_1.4.4-3+etch5_hppa.deb


• Debian libgnutls13_1.4.4-3+etch5_hppa.deb
  http://security.debian.org/pool/updates/main/g/gnutls13/libgnutls13_1. 4.4-3+etch5_hppa.deb

Ubuntu Ubuntu Linux 9.04 i386

• Ubuntu gnutls-bin_2.4.2-6ubuntu0.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls26/gnutls-bin_ 2.4.2-6ubuntu0.1_i386.deb


• Ubuntu gnutls-doc_2.4.2-6ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gnutls26/gnutls-doc_2.4. 2-6ubuntu0.1_all.deb


• Ubuntu guile-gnutls_2.4.2-6ubuntu0.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls26/guile-gnutl s_2.4.2-6ubuntu0.1_i386.deb


• Ubuntu libgnutls-dev_2.4.2-6ubuntu0.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gnutls26/libgnutls-dev_2 .4.2-6ubuntu0.1_i386.deb


• Ubuntu libgnutls26-dbg_2.4.2-6ubuntu0.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gnutls26/libgnutls26-dbg _2.4.2-6ubuntu0.1_i386.deb


• Ubuntu libgnutls26_2.4.2-6ubuntu0.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gnutls26/libgnutls26_2.4 .2-6ubuntu0.1_i386.deb

Ubuntu Ubuntu Linux 8.10 sparc

• Ubuntu gnutls-bin_2.4.1-1ubuntu0.4_sparc.deb
  http://ports.ubuntu.com/pool/universe/g/gnutls26/gnutls-bin_2.4.1-1ubu ntu0.4_sparc.deb


• Ubuntu gnutls-doc_2.4.1-1ubuntu0.4_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gnutls26/gnutls-doc_2.4. 1-1ubuntu0.4_all.deb


• Ubuntu guile-gnutls_2.4.1-1ubuntu0.4_sparc.deb
  http://ports.ubuntu.com/pool/universe/g/gnutls26/guile-gnutls_2.4.1-1u buntu0.4_sparc.deb


• Ubuntu libgnutls-dev_2.4.1-1ubuntu0.4_sparc.deb
  http://ports.ubuntu.com/pool/main/g/gnutls26/libgnutls-dev_2.4.1-1ubun tu0.4_sparc.deb


• Ubuntu libgnutls26-dbg_2.4.1-1ubuntu0.4_sparc.deb
  http://ports.ubuntu.com/pool/main/g/gnutls26/libgnutls26-dbg_2.4.1-1ub untu0.4_sparc.deb


• Ubuntu libgnutls26_2.4.1-1ubuntu0.4_sparc.deb
  http://ports.ubuntu.com/pool/main/g/gnutls26/libgnutls26_2.4.1-1ubuntu 0.4_sparc.deb

Ubuntu Ubuntu Linux 9.04 lpia

• Ubuntu gnutls-bin_2.4.2-6ubuntu0.1_lpia.deb
  http://ports.ubuntu.com/pool/universe/g/gnutls26/gnutls-bin_2.4.2-6ubu ntu0.1_lpia.deb


• Ubuntu gnutls-doc_2.4.2-6ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gnutls26/gnutls-doc_2.4. 2-6ubuntu0.1_all.deb


• Ubuntu libgnutls-dev_2.4.2-6ubuntu0.1_lpia.deb
  http://ports.ubuntu.com/pool/main/g/gnutls26/libgnutls-dev_2.4.2-6ubun tu0.1_lpia.deb


• Ubuntu libgnutls26-dbg_2.4.2-6ubuntu0.1_lpia.deb
  http://ports.ubuntu.com/pool/main/g/gnutls26/libgnutls26-dbg_2.4.2-6ub untu0.1_lpia.deb


• Ubuntu libgnutls26_2.4.2-6ubuntu0.1_lpia.deb
  http://ports.ubuntu.com/pool/main/g/gnutls26/libgnutls26_2.4.2-6ubuntu 0.1_lpia.deb

Debian Linux 4.0 armel

• Debian gnutls-doc_1.4.4-3+etch5_all.deb
  http://security.debian.org/pool/updates/main/g/gnutls13/gnutls-doc_1.4 .4-3+etch5_all.deb

Debian Linux 5.0 armel

• Debian gnutls-bin_2.4.2-6+lenny2_armel.deb
  http://security.debian.org/pool/updates/main/g/gnutls26/gnutls-bin_2.4 .2-6+lenny2_armel.deb


• Debian gnutls-doc_2.4.2-6+lenny2_all.deb
  http://security.debian.org/pool/updates/main/g/gnutls26/gnutls-doc_2.4 .2-6+lenny2_all.deb


• Debian guile-gnutls_2.4.2-6+lenny2_armel.deb
  http://security.debian.org/pool/updates/main/g/gnutls26/guile-gnutls_2 .4.2-6+lenny2_armel.deb


• Debian libgnutls-dev_2.4.2-6+lenny2_armel.deb
  http://security.debian.org/pool/updates/main/g/gnutls26/libgnutls-dev_ 2.4.2-6+lenny2_armel.deb


• Debian libgnutls26-dbg_2.4.2-6+lenny2_armel.deb
  http://security.debian.org/pool/updates/main/g/gnutls26/libgnutls26-db g_2.4.2-6+lenny2_armel.deb


• Debian libgnutls26_2.4.2-6+lenny2_armel.deb
  http://security.debian.org/pool/updates/main/g/gnutls26/libgnutls26_2. 4.2-6+lenny2_armel.deb

Debian Linux 5.0

• Debian gnutls-doc_2.4.2-6+lenny2_all.deb
  http://security.debian.org/pool/updates/main/g/gnutls26/gnutls-doc_2.4 .2-6+lenny2_all.deb

Debian Linux 4.0 mipsel

• Debian gnutls-bin_1.4.4-3+etch5_mipsel.deb
  http://security.debian.org/pool/updates/main/g/gnutls13/gnutls-bin_1.4 .4-3+etch5_mipsel.deb


• Debian gnutls-doc_1.4.4-3+etch5_all.deb
  http://security.debian.org/pool/updates/main/g/gnutls13/gnutls-doc_1.4 .4-3+etch5_all.deb


• Debian libgnutls-dev_1.4.4-3+etch5_mipsel.deb
  http://security.debian.org/pool/updates/main/g/gnutls13/libgnutls-dev_ 1.4.4-3+etch5_mipsel.deb


• Debian libgnutls13-dbg_1.4.4-3+etch5_mipsel.deb
  http://security.debian.org/pool/updates/main/g/gnutls13/libgnutls13-db g_1.4.4-3+etch5_mipsel.deb


• Debian libgnutls13_1.4.4-3+etch5_mipsel.deb
  http://security.debian.org/pool/updates/main/g/gnutls13/libgnutls13_1. 4.4-3+etch5_mipsel.deb

Mandriva Linux Mandrake 2009.0 x86_64

• Mandriva gnutls-2.4.1-2.5mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64gnutls-devel-2.4.1-2.5mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64gnutls26-2.4.1-2.5mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/

Debian Linux 5.0 mips

• Debian gnutls-bin_2.4.2-6+lenny2_mips.deb
  http://security.debian.org/pool/updates/main/g/gnutls26/gnutls-bin_2.4 .2-6+lenny2_mips.deb


• Debian gnutls-doc_2.4.2-6+lenny2_all.deb
  http://security.debian.org/pool/updates/main/g/gnutls26/gnutls-doc_2.4 .2-6+lenny2_all.deb


• Debian guile-gnutls_2.4.2-6+lenny2_mips.deb
  http://security.debian.org/pool/updates/main/g/gnutls26/guile-gnutls_2 .4.2-6+lenny2_mips.deb


• Debian libgnutls-dev_2.4.2-6+lenny2_mips.deb
  http://security.debian.org/pool/updates/main/g/gnutls26/libgnutls-dev_ 2.4.2-6+lenny2_mips.deb


• Debian libgnutls26-dbg_2.4.2-6+lenny2_mips.deb
  http://security.debian.org/pool/updates/main/g/gnutls26/libgnutls26-db g_2.4.2-6+lenny2_mips.deb


• Debian libgnutls26_2.4.2-6+lenny2_mips.deb
  http://security.debian.org/pool/updates/main/g/gnutls26/libgnutls26_2. 4.2-6+lenny2_mips.deb

Ubuntu Ubuntu Linux 9.04 amd64

• Ubuntu gnutls-bin_2.4.2-6ubuntu0.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls26/gnutls-bin_ 2.4.2-6ubuntu0.1_amd64.deb


• Ubuntu gnutls-doc_2.4.2-6ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gnutls26/gnutls-doc_2.4. 2-6ubuntu0.1_all.deb


• Ubuntu guile-gnutls_2.4.2-6ubuntu0.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls26/guile-gnutl s_2.4.2-6ubuntu0.1_amd64.deb


• Ubuntu libgnutls-dev_2.4.2-6ubuntu0.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gnutls26/libgnutls-dev_2 .4.2-6ubuntu0.1_amd64.deb


• Ubuntu libgnutls26-dbg_2.4.2-6ubuntu0.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gnutls26/libgnutls26-dbg _2.4.2-6ubuntu0.1_amd64.deb


• Ubuntu libgnutls26_2.4.2-6ubuntu0.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gnutls26/libgnutls26_2.4 .2-6ubuntu0.1_amd64.deb

Mandriva Linux Mandrake 2009.1

• Mandriva gnutls-2.6.4-1.3mdv2009.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libgnutls-devel-2.6.4-1.3mdv2009.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libgnutls26-2.6.4-1.3mdv2009.1.i586.rpm
  http://www.mandriva.com/en/download/

Ubuntu Ubuntu Linux 8.10 amd64

• Ubuntu gnutls-bin_2.4.1-1ubuntu0.4_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls26/gnutls-bin_ 2.4.1-1ubuntu0.4_amd64.deb


• Ubuntu gnutls-doc_2.4.1-1ubuntu0.4_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gnutls26/gnutls-doc_2.4. 1-1ubuntu0.4_all.deb


• Ubuntu guile-gnutls_2.4.1-1ubuntu0.4_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls26/guile-gnutl s_2.4.1-1ubuntu0.4_amd64.deb


• Ubuntu libgnutls-dev_2.4.1-1ubuntu0.4_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gnutls26/libgnutls-dev_2 .4.1-1ubuntu0.4_amd64.deb


• Ubuntu libgnutls26-dbg_2.4.1-1ubuntu0.4_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gnutls26/libgnutls26-dbg _2.4.1-1ubuntu0.4_amd64.deb


• Ubuntu libgnutls26_2.4.1-1ubuntu0.4_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gnutls26/libgnutls26_2.4 .1-1ubuntu0.4_amd64.deb

Debian Linux 4.0 ia-64

• Debian gnutls-bin_1.4.4-3+etch5_ia64.deb
  http://security.debian.org/pool/updates/main/g/gnutls13/gnutls-bin_1.4 .4-3+etch5_ia64.deb


• Debian gnutls-doc_1.4.4-3+etch5_all.deb
  http://security.debian.org/pool/updates/main/g/gnutls13/gnutls-doc_1.4 .4-3+etch5_all.deb


• Debian libgnutls-dev_1.4.4-3+etch5_ia64.deb
  http://security.debian.org/pool/updates/main/g/gnutls13/libgnutls-dev_ 1.4.4-3+etch5_ia64.deb


• Debian libgnutls13-dbg_1.4.4-3+etch5_ia64.deb
  http://security.debian.org/pool/updates/main/g/gnutls13/libgnutls13-db g_1.4.4-3+etch5_ia64.deb


• Debian libgnutls13_1.4.4-3+etch5_ia64.deb
  http://security.debian.org/pool/updates/main/g/gnutls13/libgnutls13_1. 4.4-3+etch5_ia64.deb

Debian Linux 4.0 mips

• Debian gnutls-bin_1.4.4-3+etch5_mips.deb
  http://security.debian.org/pool/updates/main/g/gnutls13/gnutls-bin_1.4 .4-3+etch5_mips.deb


• Debian gnutls-doc_1.4.4-3+etch5_all.deb
  http://security.debian.org/pool/updates/main/g/gnutls13/gnutls-doc_1.4 .4-3+etch5_all.deb


• Debian libgnutls-dev_1.4.4-3+etch5_mips.deb
  http://security.debian.org/pool/updates/main/g/gnutls13/libgnutls-dev_ 1.4.4-3+etch5_mips.deb


• Debian libgnutls13-dbg_1.4.4-3+etch5_mips.deb
  http://security.debian.org/pool/updates/main/g/gnutls13/libgnutls13-db g_1.4.4-3+etch5_mips.deb


• Debian libgnutls13_1.4.4-3+etch5_mips.deb
  http://security.debian.org/pool/updates/main/g/gnutls13/libgnutls13_1. 4.4-3+etch5_mips.deb

Debian Linux 5.0 sparc

• Debian gnutls-bin_2.4.2-6+lenny2_sparc.deb
  http://security.debian.org/pool/updates/main/g/gnutls26/gnutls-bin_2.4 .2-6+lenny2_sparc.deb


• Debian gnutls-doc_2.4.2-6+lenny2_all.deb
  http://security.debian.org/pool/updates/main/g/gnutls26/gnutls-doc_2.4 .2-6+lenny2_all.deb


• Debian guile-gnutls_2.4.2-6+lenny2_sparc.deb
  http://security.debian.org/pool/updates/main/g/gnutls26/guile-gnutls_2 .4.2-6+lenny2_sparc.deb


• Debian libgnutls-dev_2.4.2-6+lenny2_sparc.deb
  http://security.debian.org/pool/updates/main/g/gnutls26/libgnutls-dev_ 2.4.2-6+lenny2_sparc.deb


• Debian libgnutls26-dbg_2.4.2-6+lenny2_sparc.deb
  http://security.debian.org/pool/updates/main/g/gnutls26/libgnutls26-db g_2.4.2-6+lenny2_sparc.deb


• Debian libgnutls26_2.4.2-6+lenny2_sparc.deb
  http://security.debian.org/pool/updates/main/g/gnutls26/libgnutls26_2. 4.2-6+lenny2_sparc.deb

Slackware Linux x86_64 -current

• Slackware gnutls-2.8.4-x86_64-1.txz
  ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/ n/gnutls-2.8.4-x86_64-1.txz

Mandriva Linux Mandrake 2008.1 x86_64

• Mandriva gnutls-2.3.0-3.5mdv2008.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64gnutls-devel-2.3.0-3.5mdv2008.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64gnutls26-2.3.0-3.5mdv2008.1.x86_64.rpm
  http://www.mandriva.com/en/download/

Debian Linux 4.0 arm

• Debian gnutls-bin_1.4.4-3+etch5_arm.deb
  http://security.debian.org/pool/updates/main/g/gnutls13/gnutls-bin_1.4 .4-3+etch5_arm.deb


• Debian gnutls-doc_1.4.4-3+etch5_all.deb
  http://security.debian.org/pool/updates/main/g/gnutls13/gnutls-doc_1.4 .4-3+etch5_all.deb


• Debian libgnutls-dev_1.4.4-3+etch5_arm.deb
  http://security.debian.org/pool/updates/main/g/gnutls13/libgnutls-dev_ 1.4.4-3+etch5_arm.deb


• Debian libgnutls13-dbg_1.4.4-3+etch5_arm.deb
  http://security.debian.org/pool/updates/main/g/gnutls13/libgnutls13-db g_1.4.4-3+etch5_arm.deb


• Debian libgnutls13_1.4.4-3+etch5_arm.deb
  http://security.debian.org/pool/updates/main/g/gnutls13/libgnutls13_1. 4.4-3+etch5_arm.deb

Mandriva Linux Mandrake 2008.1

• Mandriva gnutls-2.3.0-3.5mdv2008.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libgnutls-devel-2.3.0-3.5mdv2008.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libgnutls26-2.3.0-3.5mdv2008.1.i586.rpm
  http://www.mandriva.com/en/download/

Mandriva Linux Mandrake 2009.1 x86_64

• Mandriva gnutls-2.6.4-1.3mdv2009.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64gnutls-devel-2.6.4-1.3mdv2009.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64gnutls26-2.6.4-1.3mdv2009.1.x86_64.rpm
  http://www.mandriva.com/en/download/

Debian Linux 4.0 powerpc

• Debian gnutls-bin_1.4.4-3+etch5_powerpc.deb
  http://security.debian.org/pool/updates/main/g/gnutls13/gnutls-bin_1.4 .4-3+etch5_powerpc.deb


• Debian gnutls-doc_1.4.4-3+etch5_all.deb
  http://security.debian.org/pool/updates/main/g/gnutls13/gnutls-doc_1.4 .4-3+etch5_all.deb


• Debian libgnutls-dev_1.4.4-3+etch5_powerpc.deb
  http://security.debian.org/pool/updates/main/g/gnutls13/libgnutls-dev_ 1.4.4-3+etch5_powerpc.deb


• Debian libgnutls13-dbg_1.4.4-3+etch5_powerpc.deb
  http://security.debian.org/pool/updates/main/g/gnutls13/libgnutls13-db g_1.4.4-3+etch5_powerpc.deb


• Debian libgnutls13_1.4.4-3+etch5_powerpc.deb
  http://security.debian.org/pool/updates/main/g/gnutls13/libgnutls13_1. 4.4-3+etch5_powerpc.deb

Ubuntu Ubuntu Linux 8.10 i386

• Ubuntu gnutls-bin_2.4.1-1ubuntu0.4_i386.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls26/gnutls-bin_ 2.4.1-1ubuntu0.4_i386.deb


• Ubuntu gnutls-doc_2.4.1-1ubuntu0.4_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gnutls26/gnutls-doc_2.4. 1-1ubuntu0.4_all.deb


• Ubuntu guile-gnutls_2.4.1-1ubuntu0.4_i386.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls26/guile-gnutl s_2.4.1-1ubuntu0.4_i386.deb


• Ubuntu libgnutls-dev_2.4.1-1ubuntu0.4_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gnutls26/libgnutls-dev_2 .4.1-1ubuntu0.4_i386.deb


• Ubuntu libgnutls26-dbg_2.4.1-1ubuntu0.4_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gnutls26/libgnutls26-dbg _2.4.1-1ubuntu0.4_i386.deb


• Ubuntu libgnutls26_2.4.1-1ubuntu0.4_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gnutls26/libgnutls26_2.4 .1-1ubuntu0.4_i386.deb

MandrakeSoft Enterprise Server 5 x86_64

• Mandriva gnutls-2.4.1-2.5mdvmes5.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64gnutls-devel-2.4.1-2.5mdvmes5.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64gnutls26-2.4.1-2.5mdvmes5.x86_64.rpm
  http://www.mandriva.com/en/download/

Debian Linux 4.0 m68k

• Debian gnutls-doc_1.4.4-3+etch5_all.deb
  http://security.debian.org/pool/updates/main/g/gnutls13/gnutls-doc_1.4 .4-3+etch5_all.deb

Debian Linux 5.0 ia-32

• Debian gnutls-bin_2.4.2-6+lenny2_i386.deb
  http://security.debian.org/pool/updates/main/g/gnutls26/gnutls-bin_2.4 .2-6+lenny2_i386.deb


• Debian gnutls-doc_2.4.2-6+lenny2_all.deb
  http://security.debian.org/pool/updates/main/g/gnutls26/gnutls-doc_2.4 .2-6+lenny2_all.deb


• Debian guile-gnutls_2.4.2-6+lenny2_i386.deb
  http://security.debian.org/pool/updates/main/g/gnutls26/guile-gnutls_2 .4.2-6+lenny2_i386.deb


• Debian libgnutls-dev_2.4.2-6+lenny2_i386.deb
  http://security.debian.org/pool/updates/main/g/gnutls26/libgnutls-dev_ 2.4.2-6+lenny2_i386.deb


• Debian libgnutls26-dbg_2.4.2-6+lenny2_i386.deb
  http://security.debian.org/pool/updates/main/g/gnutls26/libgnutls26-db g_2.4.2-6+lenny2_i386.deb


• Debian libgnutls26_2.4.2-6+lenny2_i386.deb
  http://security.debian.org/pool/updates/main/g/gnutls26/libgnutls26_2. 4.2-6+lenny2_i386.deb

Ubuntu Ubuntu Linux 6.06 LTS powerpc

• Ubuntu gnutls-bin_1.2.9-2ubuntu1.7_powerpc.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls12/gnutls-bin_ 1.2.9-2ubuntu1.7_powerpc.deb


• Ubuntu libgnutls-dev_1.2.9-2ubuntu1.7_powerpc.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gnutls12/libgnutls-dev_1 .2.9-2ubuntu1.7_powerpc.deb


• Ubuntu libgnutls12-dbg_1.2.9-2ubuntu1.7_powerpc.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls12/libgnutls12 -dbg_1.2.9-2ubuntu1.7_powerpc.deb


• Ubuntu libgnutls12_1.2.9-2ubuntu1.7_powerpc.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gnutls12/libgnutls12_1.2 .9-2ubuntu1.7_powerpc.deb

MandrakeSoft Enterprise Server 5

• Mandriva gnutls-2.4.1-2.5mdvmes5.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libgnutls-devel-2.4.1-2.5mdvmes5.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libgnutls26-2.4.1-2.5mdvmes5.i586.rpm
  http://www.mandriva.com/en/download/

Debian Linux 5.0 s/390

• Debian gnutls-bin_2.4.2-6+lenny2_s390.deb
  http://security.debian.org/pool/updates/main/g/gnutls26/gnutls-bin_2.4 .2-6+lenny2_s390.deb


• Debian gnutls-doc_2.4.2-6+lenny2_all.deb
  http://security.debian.org/pool/updates/main/g/gnutls26/gnutls-doc_2.4 .2-6+lenny2_all.deb


• Debian guile-gnutls_2.4.2-6+lenny2_s390.deb
  http://security.debian.org/pool/updates/main/g/gnutls26/guile-gnutls_2 .4.2-6+lenny2_s390.deb


• Debian libgnutls-dev_2.4.2-6+lenny2_s390.deb
  http://security.debian.org/pool/updates/main/g/gnutls26/libgnutls-dev_ 2.4.2-6+lenny2_s390.deb


• Debian libgnutls26-dbg_2.4.2-6+lenny2_s390.deb
  http://security.debian.org/pool/updates/main/g/gnutls26/libgnutls26-db g_2.4.2-6+lenny2_s390.deb


• Debian libgnutls26_2.4.2-6+lenny2_s390.deb
  http://security.debian.org/pool/updates/main/g/gnutls26/libgnutls26_2. 4.2-6+lenny2_s390.deb

Ubuntu Ubuntu Linux 8.04 LTS lpia

• Ubuntu gnutls-bin_2.0.4-1ubuntu2.6_lpia.deb
  http://ports.ubuntu.com/pool/universe/g/gnutls13/gnutls-bin_2.0.4-1ubu ntu2.6_lpia.deb


• Ubuntu gnutls-doc_2.0.4-1ubuntu2.6_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gnutls13/gnutls-doc_2.0. 4-1ubuntu2.6_all.deb


• Ubuntu libgnutls-dev_2.0.4-1ubuntu2.6_lpia.deb
  http://ports.ubuntu.com/pool/main/g/gnutls13/libgnutls-dev_2.0.4-1ubun tu2.6_lpia.deb


• Ubuntu libgnutls13-dbg_2.0.4-1ubuntu2.6_lpia.deb
  http://ports.ubuntu.com/pool/main/g/gnutls13/libgnutls13-dbg_2.0.4-1ub untu2.6_lpia.deb


• Ubuntu libgnutls13_2.0.4-1ubuntu2.6_lpia.deb
  http://ports.ubuntu.com/pool/main/g/gnutls13/libgnutls13_2.0.4-1ubuntu 2.6_lpia.deb


• Ubuntu libgnutlsxx13_2.0.4-1ubuntu2.6_lpia.deb
  http://ports.ubuntu.com/pool/main/g/gnutls13/libgnutlsxx13_2.0.4-1ubun tu2.6_lpia.deb

GNU GnuTLS 2.0

• GNU gnutls-2.8.2.tar.bz2
  http://ftp.gnu.org/pub/gnu/gnutls/gnutls-2.8.2.tar.bz2

GNU GnuTLS 2.2

• GNU gnutls-2.8.2.tar.bz2
  http://ftp.gnu.org/pub/gnu/gnutls/gnutls-2.8.2.tar.bz2

GNU GnuTLS 2.2.2

• GNU gnutls-2.8.2.tar.bz2
  http://ftp.gnu.org/pub/gnu/gnutls/gnutls-2.8.2.tar.bz2

GNU GnuTLS 2.2.3

• GNU gnutls-2.8.2.tar.bz2
  http://ftp.gnu.org/pub/gnu/gnutls/gnutls-2.8.2.tar.bz2

GNU GnuTLS 2.2.5

• GNU gnutls-2.8.2.tar.bz2
  http://ftp.gnu.org/pub/gnu/gnutls/gnutls-2.8.2.tar.bz2

GNU GnuTLS 2.4

• GNU gnutls-2.8.2.tar.bz2
  http://ftp.gnu.org/pub/gnu/gnutls/gnutls-2.8.2.tar.bz2

GNU GnuTLS 2.4.1

• GNU gnutls-2.8.2.tar.bz2
  http://ftp.gnu.org/pub/gnu/gnutls/gnutls-2.8.2.tar.bz2

GNU GnuTLS 2.6

• GNU gnutls-2.8.2.tar.bz2
  http://ftp.gnu.org/pub/gnu/gnutls/gnutls-2.8.2.tar.bz2

GNU GnuTLS 2.6.2

• GNU gnutls-2.8.2.tar.bz2
  http://ftp.gnu.org/pub/gnu/gnutls/gnutls-2.8.2.tar.bz2

GNU GnuTLS 2.6.4

• GNU gnutls-2.8.2.tar.bz2
  http://ftp.gnu.org/pub/gnu/gnutls/gnutls-2.8.2.tar.bz2

GNU GnuTLS 2.6.5

• GNU gnutls-2.8.2.tar.bz2
  http://ftp.gnu.org/pub/gnu/gnutls/gnutls-2.8.2.tar.bz2

GNU GnuTLS 2.6.6

• GNU gnutls-2.8.2.tar.bz2
  http://ftp.gnu.org/pub/gnu/gnutls/gnutls-2.8.2.tar.bz2

GnuTLS NULL Character CA SSL Certificate Validation Security Bypass Vulnerability

References:

• [Help-gnutls] NUL bytes in X.509 CN/SAN fields [GNUTLS-SA-2009-4] [CVE-2009-2730 (Simon Josefsson)
  
• ASA-2009-385 (Avaya)
  
• GnuTLS 2.8.2 (Simon Josefsson)
  
• GnuTLS CVE-2009-2730 Patches (Was Re: GnuTLS 2.8.2) (Jamie Strandboge)
  
• GnuTLS Homepage (GNU)
  
• GnuTLS vs. NULL chars in CNs (Tomas Hoger)
  
• How to check if your GnuTLS is vulnerable to NUL-in-CN/SAN issue (Simon Josefsson)
  
• Re: CVE request: fetchmail <= 6.3.10 SSL certificate NUL prefix verification byp (Tomas Hoger)