-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

===========================================================================
             AUSCERT External Security Bulletin Redistribution

                         ESB-2008.1114 -- [Ubuntu]
                             GnuTLS regression
                             11 December 2008

===========================================================================

        AusCERT Security Bulletin Summary
        ---------------------------------

Product:              gnutls
Publisher:            Ubuntu
Operating System:     Ubuntu
Impact:               Provide Misleading Information
Access:               Remote/Unauthenticated
CVE Names:            CVE-2008-4989

Ref:                  ESB-2008.1037

Original Bulletin:    http://www.ubuntu.com/usn/usn-678-2

- --------------------------BEGIN INCLUDED TEXT--------------------

===========================================================
Ubuntu Security Notice USN-678-2          December 10, 2008
gnutls12, gnutls13, gnutls26 regression
https://launchpad.net/bugs/305264
===========================================================

A security issue affects the following Ubuntu releases:

Ubuntu 6.06 LTS
Ubuntu 7.10
Ubuntu 8.04 LTS
Ubuntu 8.10

This advisory also applies to the corresponding versions of
Kubuntu, Edubuntu, and Xubuntu.

The problem can be corrected by upgrading your system to the
following package versions:

Ubuntu 6.06 LTS:
  libgnutls12                     1.2.9-2ubuntu1.4

Ubuntu 7.10:
  libgnutls13                     1.6.3-1ubuntu0.3

Ubuntu 8.04 LTS:
  libgnutls13                     2.0.4-1ubuntu2.3

Ubuntu 8.10:
  libgnutls26                     2.4.1-1ubuntu0.2

In general, a standard system upgrade is sufficient to effect the
necessary changes.

Details follow:

USN-678-1 fixed a vulnerability in GnuTLS. The upstream patch introduced a
regression when validating certain certificate chains that would report valid
certificates as untrusted. This update fixes the problem.

We apologize for the inconvenience.

Original advisory details:

 Martin von Gagern discovered that GnuTLS did not properly verify certificate
 chains when the last certificate in the chain was self-signed. If a remote
 attacker were able to perform a man-in-the-middle attack, this flaw could be
 exploited to view sensitive information. (CVE-2008-4989)


Updated packages for Ubuntu 6.06 LTS:

  Source archives:

    http://security.ubuntu.com/ubuntu/pool/main/g/gnutls12/gnutls12_1.2.9-2ubuntu1.4.diff.gz
      Size/MD5:   556906 d30915f7729fc62b2dc9e18f11bbd9ca
    http://security.ubuntu.com/ubuntu/pool/main/g/gnutls12/gnutls12_1.2.9-2ubuntu1.4.dsc
      Size/MD5:      826 2f90c70890556d8537bad57d2af984d5
    http://security.ubuntu.com/ubuntu/pool/main/g/gnutls12/gnutls12_1.2.9.orig.tar.gz
      Size/MD5:  3305475 4e1a2e9c22c7d6459d5eb5e6484a19c4

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

    http://security.ubuntu.com/ubuntu/pool/main/g/gnutls12/libgnutls-dev_1.2.9-2ubuntu1.4_amd64.deb
      Size/MD5:   491584 f080a2b1d0162c4848c80082369c1d0e
    http://security.ubuntu.com/ubuntu/pool/main/g/gnutls12/libgnutls12_1.2.9-2ubuntu1.4_amd64.deb
      Size/MD5:   420530 859d4e5b2f0ea619de927ae3ebdac2d9
    http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls12/gnutls-bin_1.2.9-2ubuntu1.4_amd64.deb
      Size/MD5:   288478 8721ecb45c85211b413f3f55db189265
    http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls12/libgnutls12-dbg_1.2.9-2ubuntu1.4_amd64.deb
      Size/MD5:   642746 a2fb622e1fd472f5856792647812b5de

  i386 architecture (x86 compatible Intel/AMD):

    http://security.ubuntu.com/ubuntu/pool/main/g/gnutls12/libgnutls-dev_1.2.9-2ubuntu1.4_i386.deb
      Size/MD5:   445446 a2233ae9617e97184cc78c29bba04388
    http://security.ubuntu.com/ubuntu/pool/main/g/gnutls12/libgnutls12_1.2.9-2ubuntu1.4_i386.deb
      Size/MD5:   373336 15c0881eea619fdeec7312a8dc6cda67
    http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls12/gnutls-bin_1.2.9-2ubuntu1.4_i386.deb
      Size/MD5:   272300 8ee7889a3c52ccc29696c3c1c5af0472
    http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls12/libgnutls12-dbg_1.2.9-2ubuntu1.4_i386.deb
      Size/MD5:   578356 b546c227e8aa440c0d59ff39ec7fd733

  powerpc architecture (Apple Macintosh G3/G4/G5):

    http://security.ubuntu.com/ubuntu/pool/main/g/gnutls12/libgnutls-dev_1.2.9-2ubuntu1.4_powerpc.deb
      Size/MD5:   484478 9e2523fc761d553016680751cdc59c20
    http://security.ubuntu.com/ubuntu/pool/main/g/gnutls12/libgnutls12_1.2.9-2ubuntu1.4_powerpc.deb
      Size/MD5:   391206 04b64b12bd67a68cdf72c4338d47517d
    http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls12/gnutls-bin_1.2.9-2ubuntu1.4_powerpc.deb
      Size/MD5:   288706 7a85df43f84200cddb587eca35320f52
    http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls12/libgnutls12-dbg_1.2.9-2ubuntu1.4_powerpc.deb
      Size/MD5:   635658 a89beac04eaf587d351ac3e7d9b52ec0

  sparc architecture (Sun SPARC/UltraSPARC):

    http://security.ubuntu.com/ubuntu/pool/main/g/gnutls12/libgnutls-dev_1.2.9-2ubuntu1.4_sparc.deb
      Size/MD5:   480744 e214369aa3693fedeb43e97a826c2a9b
    http://security.ubuntu.com/ubuntu/pool/main/g/gnutls12/libgnutls12_1.2.9-2ubuntu1.4_sparc.deb
      Size/MD5:   376502 2863082e27ef2867b08d885fb5947340
    http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls12/gnutls-bin_1.2.9-2ubuntu1.4_sparc.deb
      Size/MD5:   273448 24f1ba21858df2e308352a653b11325f
    http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls12/libgnutls12-dbg_1.2.9-2ubuntu1.4_sparc.deb
      Size/MD5:   570516 36300bb36a04d9d7b333444ac7c7a0c9

Updated packages for Ubuntu 7.10:

  Source archives:

    http://security.ubuntu.com/ubuntu/pool/main/g/gnutls13/gnutls13_1.6.3-1ubuntu0.3.diff.gz
      Size/MD5:    19676 a9e0bb97ba3dd2bb9e4e249c9bb93d30
    http://security.ubuntu.com/ubuntu/pool/main/g/gnutls13/gnutls13_1.6.3-1ubuntu0.3.dsc
      Size/MD5:     1075 618e1af7a442de17a69520155c7cdaea
    http://security.ubuntu.com/ubuntu/pool/main/g/gnutls13/gnutls13_1.6.3.orig.tar.gz
      Size/MD5:  5071704 3c71020126ac827319183268c97336fe

  Architecture independent packages:

    http://security.ubuntu.com/ubuntu/pool/main/g/gnutls13/gnutls-doc_1.6.3-1ubuntu0.3_all.deb
      Size/MD5:  2406138 640b41eb8726f06e4142f6f901e63670

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

    http://security.ubuntu.com/ubuntu/pool/main/g/gnutls13/libgnutls-dev_1.6.3-1ubuntu0.3_amd64.deb
      Size/MD5:   437652 597dae1f81df60d04f5cdc2d82736673
    http://security.ubuntu.com/ubuntu/pool/main/g/gnutls13/libgnutls13-dbg_1.6.3-1ubuntu0.3_amd64.deb
      Size/MD5:   792214 40081b8ad67fbb382eaa95f28657de84
    http://security.ubuntu.com/ubuntu/pool/main/g/gnutls13/libgnutls13_1.6.3-1ubuntu0.3_amd64.deb
      Size/MD5:   346730 8de9e8dfbd35bf05edf2159e11475288
    http://security.ubuntu.com/ubuntu/pool/main/g/gnutls13/libgnutlsxx13_1.6.3-1ubuntu0.3_amd64.deb
      Size/MD5:   104924 fc581446ffd4d64c00c70d4356d19efa
    http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls13/gnutls-bin_1.6.3-1ubuntu0.3_amd64.deb
      Size/MD5:   212466 32f7c43ce97d0b1818cde6e9c2d0ec4f

  i386 architecture (x86 compatible Intel/AMD):

    http://security.ubuntu.com/ubuntu/pool/main/g/gnutls13/libgnutls-dev_1.6.3-1ubuntu0.3_i386.deb
      Size/MD5:   400132 ceec09fb16de53f0b6559af59e34c5cc
    http://security.ubuntu.com/ubuntu/pool/main/g/gnutls13/libgnutls13-dbg_1.6.3-1ubuntu0.3_i386.deb
      Size/MD5:   764516 876111ada7897abd2a252d55300a542d
    http://security.ubuntu.com/ubuntu/pool/main/g/gnutls13/libgnutls13_1.6.3-1ubuntu0.3_i386.deb
      Size/MD5:   314740 5248256fff3c64c0b4fd4ce065850973
    http://security.ubuntu.com/ubuntu/pool/main/g/gnutls13/libgnutlsxx13_1.6.3-1ubuntu0.3_i386.deb
      Size/MD5:   105558 d69fcb5e0433bed12ccd98bd1e17095c
    http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls13/gnutls-bin_1.6.3-1ubuntu0.3_i386.deb
      Size/MD5:   198772 78cc43faaee3b2f638d6db0d59fa7415

  lpia architecture (Low Power Intel Architecture):

    http://ports.ubuntu.com/pool/main/g/gnutls13/libgnutls-dev_1.6.3-1ubuntu0.3_lpia.deb
      Size/MD5:   392688 fc52d29f4fa8200bc768470233e18ae6
    http://ports.ubuntu.com/pool/main/g/gnutls13/libgnutls13-dbg_1.6.3-1ubuntu0.3_lpia.deb
      Size/MD5:   777498 f9426b1bf371893358917d0404fb571f
    http://ports.ubuntu.com/pool/main/g/gnutls13/libgnutls13_1.6.3-1ubuntu0.3_lpia.deb
      Size/MD5:   309018 60292dfdfef62c0effd53ac2d9891368
    http://ports.ubuntu.com/pool/main/g/gnutls13/libgnutlsxx13_1.6.3-1ubuntu0.3_lpia.deb
      Size/MD5:   104984 017286ea84acc45f699db768ce204e03
    http://ports.ubuntu.com/pool/universe/g/gnutls13/gnutls-bin_1.6.3-1ubuntu0.3_lpia.deb
      Size/MD5:   199452 7867ac8747c3bd4b4cbbae37fabb3ad1

  powerpc architecture (Apple Macintosh G3/G4/G5):

    http://security.ubuntu.com/ubuntu/pool/main/g/gnutls13/libgnutls-dev_1.6.3-1ubuntu0.3_powerpc.deb
      Size/MD5:   439114 34b86a38343045b79a9934314ac8860d
    http://security.ubuntu.com/ubuntu/pool/main/g/gnutls13/libgnutls13-dbg_1.6.3-1ubuntu0.3_powerpc.deb
      Size/MD5:   791948 767fecaf8c5be29e1741dd83a875403e
    http://security.ubuntu.com/ubuntu/pool/main/g/gnutls13/libgnutls13_1.6.3-1ubuntu0.3_powerpc.deb
      Size/MD5:   336502 68ff53c18b7772836682ccbdd400111c
    http://security.ubuntu.com/ubuntu/pool/main/g/gnutls13/libgnutlsxx13_1.6.3-1ubuntu0.3_powerpc.deb
      Size/MD5:   105172 168344d4638ded1f0d4ddbacd8c87d41
    http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls13/gnutls-bin_1.6.3-1ubuntu0.3_powerpc.deb
      Size/MD5:   231062 d90bf95b8913b9e17635baa57b12b47d

  sparc architecture (Sun SPARC/UltraSPARC):

    http://security.ubuntu.com/ubuntu/pool/main/g/gnutls13/libgnutls-dev_1.6.3-1ubuntu0.3_sparc.deb
      Size/MD5:   424858 5ec445d7bae4e547f74e6a1b1ef4529a
    http://security.ubuntu.com/ubuntu/pool/main/g/gnutls13/libgnutls13-dbg_1.6.3-1ubuntu0.3_sparc.deb
      Size/MD5:   715856 7bce67700fae978f5ff7e750a57b92d7
    http://security.ubuntu.com/ubuntu/pool/main/g/gnutls13/libgnutls13_1.6.3-1ubuntu0.3_sparc.deb
      Size/MD5:   304700 3186ceebd9d4a977513cae845c0cbd09
    http://security.ubuntu.com/ubuntu/pool/main/g/gnutls13/libgnutlsxx13_1.6.3-1ubuntu0.3_sparc.deb
      Size/MD5:   103564 6e5db7597ce1e60c9550552df8be4b81
    http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls13/gnutls-bin_1.6.3-1ubuntu0.3_sparc.deb
      Size/MD5:   202438 19bbf682b326e7a301150925ab9ce9fc

Updated packages for Ubuntu 8.04 LTS:

  Source archives:

    http://security.ubuntu.com/ubuntu/pool/main/g/gnutls13/gnutls13_2.0.4-1ubuntu2.3.diff.gz
      Size/MD5:    24930 fe82edc9b32717b00674ebf02d19c607
    http://security.ubuntu.com/ubuntu/pool/main/g/gnutls13/gnutls13_2.0.4-1ubuntu2.3.dsc
      Size/MD5:     1082 281c7670e4555c71b8cd69699356bd6d
    http://security.ubuntu.com/ubuntu/pool/main/g/gnutls13/gnutls13_2.0.4.orig.tar.gz
      Size/MD5:  5906571 bd783a052b892620534ecfbc4a9bfede

  Architecture independent packages:

    http://security.ubuntu.com/ubuntu/pool/main/g/gnutls13/gnutls-doc_2.0.4-1ubuntu2.3_all.deb
      Size/MD5:  2506836 9c0128eb53990938ba79504ea646e9af

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

    http://security.ubuntu.com/ubuntu/pool/main/g/gnutls13/libgnutls-dev_2.0.4-1ubuntu2.3_amd64.deb
      Size/MD5:   384392 8adab7c03333dbaa8f35ed6d58c472fc
    http://security.ubuntu.com/ubuntu/pool/main/g/gnutls13/libgnutls13-dbg_2.0.4-1ubuntu2.3_amd64.deb
      Size/MD5:   743586 ac7f45a1de731a23ae1e8433e0c2f936
    http://security.ubuntu.com/ubuntu/pool/main/g/gnutls13/libgnutls13_2.0.4-1ubuntu2.3_amd64.deb
      Size/MD5:   343780 246f2437e76e14903ea66aefd8cec5d1
    http://security.ubuntu.com/ubuntu/pool/main/g/gnutls13/libgnutlsxx13_2.0.4-1ubuntu2.3_amd64.deb
      Size/MD5:    30764 1774884a878b16ad9933a8ea4f5695e6
    http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls13/gnutls-bin_2.0.4-1ubuntu2.3_amd64.deb
      Size/MD5:   140228 94c91b1c0a7b2ba6c8da8edeb41002a1

  i386 architecture (x86 compatible Intel/AMD):

    http://security.ubuntu.com/ubuntu/pool/main/g/gnutls13/libgnutls-dev_2.0.4-1ubuntu2.3_i386.deb
      Size/MD5:   344788 1df5e27f34038d12427b5cd36a7eed66
    http://security.ubuntu.com/ubuntu/pool/main/g/gnutls13/libgnutls13-dbg_2.0.4-1ubuntu2.3_i386.deb
      Size/MD5:   709732 5194fddbe1511c59a35f8dff6036f9ca
    http://security.ubuntu.com/ubuntu/pool/main/g/gnutls13/libgnutls13_2.0.4-1ubuntu2.3_i386.deb
      Size/MD5:   306746 939b0498a737c1677585c4bafe09a987
    http://security.ubuntu.com/ubuntu/pool/main/g/gnutls13/libgnutlsxx13_2.0.4-1ubuntu2.3_i386.deb
      Size/MD5:    31380 0d262cd301b43505f6efec95f8f83214
    http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls13/gnutls-bin_2.0.4-1ubuntu2.3_i386.deb
      Size/MD5:   126498 6be6cf25a8610689f038484cd427a826

  lpia architecture (Low Power Intel Architecture):

    http://ports.ubuntu.com/pool/main/g/gnutls13/libgnutls-dev_2.0.4-1ubuntu2.3_lpia.deb
      Size/MD5:   335792 203c8184f71d03d9e1b5fe3bbfbdabc4
    http://ports.ubuntu.com/pool/main/g/gnutls13/libgnutls13-dbg_2.0.4-1ubuntu2.3_lpia.deb
      Size/MD5:   724018 6bdccee800dcf4802533b4c6381902ab
    http://ports.ubuntu.com/pool/main/g/gnutls13/libgnutls13_2.0.4-1ubuntu2.3_lpia.deb
      Size/MD5:   300928 e7fb9bdd9d20d6d332bb324eeb60c696
    http://ports.ubuntu.com/pool/main/g/gnutls13/libgnutlsxx13_2.0.4-1ubuntu2.3_lpia.deb
      Size/MD5:    30784 1c139033c50ab74fa6c55c0d6813d91c
    http://ports.ubuntu.com/pool/universe/g/gnutls13/gnutls-bin_2.0.4-1ubuntu2.3_lpia.deb
      Size/MD5:   127146 c9faab1291116fc6de9883f638240bba

  powerpc architecture (Apple Macintosh G3/G4/G5):

    http://ports.ubuntu.com/pool/main/g/gnutls13/libgnutls-dev_2.0.4-1ubuntu2.3_powerpc.deb
      Size/MD5:   383370 f33f257ec75fbe76d268b1b8cd463cad
    http://ports.ubuntu.com/pool/main/g/gnutls13/libgnutls13-dbg_2.0.4-1ubuntu2.3_powerpc.deb
      Size/MD5:   735682 2babff43d7157c4baa38b7dcc1a189f8
    http://ports.ubuntu.com/pool/main/g/gnutls13/libgnutls13_2.0.4-1ubuntu2.3_powerpc.deb
      Size/MD5:   324940 51bf657ef14b2035a5c2c61f614eace4
    http://ports.ubuntu.com/pool/main/g/gnutls13/libgnutlsxx13_2.0.4-1ubuntu2.3_powerpc.deb
      Size/MD5:    30972 3f690269ad38ef94afc41e2a16e09498
    http://ports.ubuntu.com/pool/universe/g/gnutls13/gnutls-bin_2.0.4-1ubuntu2.3_powerpc.deb
      Size/MD5:   159478 f3ebc4a1444778e804cd6daa7bf5cec9

  sparc architecture (Sun SPARC/UltraSPARC):

    http://ports.ubuntu.com/pool/main/g/gnutls13/libgnutls-dev_2.0.4-1ubuntu2.3_sparc.deb
      Size/MD5:   370252 592021e54bd152ab56cd81d8f416b4a6
    http://ports.ubuntu.com/pool/main/g/gnutls13/libgnutls13-dbg_2.0.4-1ubuntu2.3_sparc.deb
      Size/MD5:   659774 fcbc1da13fc9d19e33750533e474b08d
    http://ports.ubuntu.com/pool/main/g/gnutls13/libgnutls13_2.0.4-1ubuntu2.3_sparc.deb
      Size/MD5:   294520 3d6ead20710fb7329b5aab66dbb4f183
    http://ports.ubuntu.com/pool/main/g/gnutls13/libgnutlsxx13_2.0.4-1ubuntu2.3_sparc.deb
      Size/MD5:    29458 11a097c53a4456c38b625314963040c9
    http://ports.ubuntu.com/pool/universe/g/gnutls13/gnutls-bin_2.0.4-1ubuntu2.3_sparc.deb
      Size/MD5:   129504 3205d78e1123313e45c35564034df75b

Updated packages for Ubuntu 8.10:

  Source archives:

    http://security.ubuntu.com/ubuntu/pool/main/g/gnutls26/gnutls26_2.4.1-1ubuntu0.2.diff.gz
      Size/MD5:    15589 0c7bd1dbf1a858fd82b272bc1d0af97a
    http://security.ubuntu.com/ubuntu/pool/main/g/gnutls26/gnutls26_2.4.1-1ubuntu0.2.dsc
      Size/MD5:     1581 43dbdabadd56aed24740b512bc09d5c2
    http://security.ubuntu.com/ubuntu/pool/main/g/gnutls26/gnutls26_2.4.1.orig.tar.gz
      Size/MD5:  6059231 1eeaf1539ab42cf677df9035ab4b8db5

  Architecture independent packages:

    http://security.ubuntu.com/ubuntu/pool/main/g/gnutls26/gnutls-doc_2.4.1-1ubuntu0.2_all.deb
      Size/MD5:  2688376 4095be9abd3dd75b90a7e32b56c4979a

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

    http://security.ubuntu.com/ubuntu/pool/main/g/gnutls26/libgnutls-dev_2.4.1-1ubuntu0.2_amd64.deb
      Size/MD5:   449330 6f993a2edcd63f5803a0332de35db604
    http://security.ubuntu.com/ubuntu/pool/main/g/gnutls26/libgnutls26-dbg_2.4.1-1ubuntu0.2_amd64.deb
      Size/MD5:  1041146 3175bef95a0773f5db8a4f26f3d609f2
    http://security.ubuntu.com/ubuntu/pool/main/g/gnutls26/libgnutls26_2.4.1-1ubuntu0.2_amd64.deb
      Size/MD5:   411266 067187d488e8fe3a4ca4e86570db1c46
    http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls26/gnutls-bin_2.4.1-1ubuntu0.2_amd64.deb
      Size/MD5:   144694 9c2cb89a6f281fa062f3917d5745d0aa
    http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls26/guile-gnutls_2.4.1-1ubuntu0.2_amd64.deb
      Size/MD5:    77294 b42e5ef6a262456705d04477f8dc2297

  i386 architecture (x86 compatible Intel/AMD):

    http://security.ubuntu.com/ubuntu/pool/main/g/gnutls26/libgnutls-dev_2.4.1-1ubuntu0.2_i386.deb
      Size/MD5:   401536 bfb44a3c97bfa4b80e0f56ad26dbe749
    http://security.ubuntu.com/ubuntu/pool/main/g/gnutls26/libgnutls26-dbg_2.4.1-1ubuntu0.2_i386.deb
      Size/MD5:   998232 9fc6ecbc31fe3fec3f15d2b478877cf0
    http://security.ubuntu.com/ubuntu/pool/main/g/gnutls26/libgnutls26_2.4.1-1ubuntu0.2_i386.deb
      Size/MD5:   367956 b56651442a35a14c6823e6693f70153a
    http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls26/gnutls-bin_2.4.1-1ubuntu0.2_i386.deb
      Size/MD5:   130612 ef878b2bf791c1c15edba8e9d8e98676
    http://security.ubuntu.com/ubuntu/pool/universe/g/gnutls26/guile-gnutls_2.4.1-1ubuntu0.2_i386.deb
      Size/MD5:    71518 77c50ad9ce6ee9281f13ac2eed0ce21d

  lpia architecture (Low Power Intel Architecture):

    http://ports.ubuntu.com/pool/main/g/gnutls26/libgnutls-dev_2.4.1-1ubuntu0.2_lpia.deb
      Size/MD5:   390616 edfb2881368bfe271faa6348f913c5e4
    http://ports.ubuntu.com/pool/main/g/gnutls26/libgnutls26-dbg_2.4.1-1ubuntu0.2_lpia.deb
      Size/MD5:   874424 2cfe71fb1444f3540e154c4a5eed48a9
    http://ports.ubuntu.com/pool/main/g/gnutls26/libgnutls26_2.4.1-1ubuntu0.2_lpia.deb
      Size/MD5:   360418 8b6d7eb8aa622f15297a6854fdca1ecd
    http://ports.ubuntu.com/pool/universe/g/gnutls26/gnutls-bin_2.4.1-1ubuntu0.2_lpia.deb
      Size/MD5:   130274 ab41a1eeb6f812ea59479794c086fa2f

  powerpc architecture (Apple Macintosh G3/G4/G5):

    http://ports.ubuntu.com/pool/main/g/gnutls26/libgnutls-dev_2.4.1-1ubuntu0.2_powerpc.deb
      Size/MD5:   440040 4a4d25cbd88729d2ecf555b31d084629
    http://ports.ubuntu.com/pool/main/g/gnutls26/libgnutls26-dbg_2.4.1-1ubuntu0.2_powerpc.deb
      Size/MD5:  1041822 2a4ced7c3aff7a4a52f91c36e9bc006e
    http://ports.ubuntu.com/pool/main/g/gnutls26/libgnutls26_2.4.1-1ubuntu0.2_powerpc.deb
      Size/MD5:   388262 2495aeea6a88bc6c661f8dc873400bdd
    http://ports.ubuntu.com/pool/universe/g/gnutls26/gnutls-bin_2.4.1-1ubuntu0.2_powerpc.deb
      Size/MD5:   160048 077224c8dc45da6d56597e42c5f9e211
    http://ports.ubuntu.com/pool/universe/g/gnutls26/guile-gnutls_2.4.1-1ubuntu0.2_powerpc.deb
      Size/MD5:    77530 748c28138fd637f422ceb33b643df1e5

  sparc architecture (Sun SPARC/UltraSPARC):

    http://ports.ubuntu.com/pool/main/g/gnutls26/libgnutls-dev_2.4.1-1ubuntu0.2_sparc.deb
      Size/MD5:   419710 45a7ce12eadabcee8b87f2f5ac848db0
    http://ports.ubuntu.com/pool/main/g/gnutls26/libgnutls26-dbg_2.4.1-1ubuntu0.2_sparc.deb
      Size/MD5:   930478 3145cdb60c3bf645743d10d6dcd970b2
    http://ports.ubuntu.com/pool/main/g/gnutls26/libgnutls26_2.4.1-1ubuntu0.2_sparc.deb
      Size/MD5:   348228 43c4703e52da7ea0302088f76d187b22
    http://ports.ubuntu.com/pool/universe/g/gnutls26/gnutls-bin_2.4.1-1ubuntu0.2_sparc.deb
      Size/MD5:   133208 f26988143146890dc32459324cff5c26
    http://ports.ubuntu.com/pool/universe/g/gnutls26/guile-gnutls_2.4.1-1ubuntu0.2_sparc.deb
      Size/MD5:    69066 57f6d959a719e6b500f1a0ce095226b7

- --------------------------END INCLUDED TEXT--------------------

You have received this e-mail bulletin as a result of your organisation's
registration with AusCERT. The mailing list you are subscribed to is
maintained within your organisation, so if you do not wish to continue
receiving these bulletins you should contact your local IT manager. If
you do not know who that is, please send an email to auscert@auscert.org.au
and we will forward your request to the appropriate person.

NOTE: Third Party Rights
This security bulletin is provided as a service to AusCERT's members.  As
AusCERT did not write the document quoted above, AusCERT has had no control
over its content. The decision to follow or act on information or advice
contained in this security bulletin is the responsibility of each user or
organisation, and should be considered in accordance with your organisation's
site policies and procedures. AusCERT takes no responsibility for consequences
which may arise from following or acting on information or advice contained in
this security bulletin.

NOTE: This is only the original release of the security bulletin.  It may
not be updated when updates to the original are made.  If downloading at
a later date, it is recommended that the bulletin is retrieved directly
from the author's website to ensure that the information is still current.

Contact information for the authors of the original document is included
in the Security Bulletin above.  If you have any questions or need further
information, please contact them directly.

Previous advisories and external security bulletins can be retrieved from:

        http://www.auscert.org.au/render.html?cid=1980

If you believe that your computer system has been compromised or attacked in 
any way, we encourage you to let us know by completing the secure National IT 
Incident Reporting Form at:

        http://www.auscert.org.au/render.html?it=3192

===========================================================================
Australian Computer Emergency Response Team
The University of Queensland
Brisbane
Qld 4072

Internet Email: auscert@auscert.org.au
Facsimile:      (07) 3365 7031
Telephone:      (07) 3365 4417 (International: +61 7 3365 4417)
                AusCERT personnel answer during Queensland business hours
                which are GMT+10:00 (AEST).
                On call after hours for member emergencies only.
===========================================================================

-----BEGIN PGP SIGNATURE-----
Comment: http://www.auscert.org.au/render.html?it=1967

iQCVAwUBSUCJ6Ch9+71yA2DNAQIJrAQAl64VoJ/1esfOVwIOJgc31gST4ae968Pz
s42G4eiQsyelmQbxOlmUJ5Mwz1mM+0oZFZOyxBTBekGkI7P3q0fAS3LD3PTk798N
K8RRatcupfzhXhZ00AOEki7UIeXtITEwI8w0aVQqtxotJHwSA+1PYs5KTnydTxAY
Pwcu+TQBTcw=
=ePDj
-----END PGP SIGNATURE-----