I'm running Ubuntu 14.04LTS with libgnutls26 and libgnutls28. gnutls26 is at 2.2.23 and 28 is on 3.2.11. According to the security advisory CVE-2014-0092, I need to patch gnutls26 2.2.23 and update gnutls28 to 3.2.12. When I ran an apt-get upgrade libgnutls28 it ran but I'm still at 3.2.11. How can I force apt-get to pull the most up to date version?

I can go to ftp://ftp.gnutls.org/gcrypt/gnutls/v3.2 and I see 3.2.12 but its an RPM. Should I just do that then convert the rpm? What's the command for that and how do I upgrade the existing package already on there without creating a duplicate package? I've always used apt-get or dpkg so manually downloading the updating an existing package is not really my bag.

Actually there not RPM's there tar.xz and a smaller file with an tar.xz.sig extention. The 2 files seem to be related so I suppose I would need them both if I go this route. Any guideance on this is much appreciated.