GnuTLS before 3.1.0 does not verify that the RSA PKCS #1 signature algorithm matches the signature algorithm in the certificate, which allows remote attackers to conduct downgrade attacks via unspecified vectors. http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-0282