USN-4233-2
gnutls28 update
USN-4233-1 disabled SHA1 being used for digital signature operations in GnuTLS. In certain network environments, certificates using SHA1 may still be in use. This update adds the %VERIFY_ALLOW_BROKEN and %VERIFY_ALLOW_SIGN_WITH_SHA1 priority strings that can be used to temporarily re-enable SHA1 until certificates can be replaced with a stronger algorithm.
Original advisory details:
As a security improvement, this update marks SHA1 as being untrusted for digital signature operations.
What each source reports
OSV No score
gnutls28 update
USN-4233-1 disabled SHA1 being used for digital signature operations in GnuTLS. In certain network environments, certificates using SHA1 may still be in use. This update adds the %VERIFY_ALLOW_BROKEN and %VERIFY_ALLOW_SIGN_WITH_SHA1 priority strings that can be used to temporarily re-enable SHA1 until certificates can be replaced with a stronger algorithm.
Original advisory details:
As a security improvement, this update marks SHA1 as being untrusted for digital signature operations.
- Record
USN-4233-2- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
gnutls28Ubuntu:16.04:LTS |
before 3.4.10-4ubuntu1.7, plus listed versions 3.3.15-5ubuntu23.3.18-1ubuntu13.3.20-1ubuntu13.4.9-2ubuntu13.4.10-4ubuntu1 Show 6 moreShow less3.4.10-4ubuntu1.13.4.10-4ubuntu1.23.4.10-4ubuntu1.33.4.10-4ubuntu1.43.4.10-4ubuntu1.53.4.10-4ubuntu1.6 |
3.4.10-4ubuntu1.7 |
gnutls28Ubuntu:18.04:LTS |
before 3.5.18-1ubuntu1.3, plus listed versions 3.5.8-6ubuntu33.5.17-1ubuntu13.5.17-1ubuntu33.5.18-1ubuntu13.5.18-1ubuntu1.13.5.18-1ubuntu1.2 |
3.5.18-1ubuntu1.3 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
USN-4233-2 is a vulnerability with no CVSS score yet in gnutls28, published January 23, 2020. No source lists public exploit code. Fixed in gnutls28 3.4.10-4ubuntu1.7.