Date: 03/11/06 (Security)    Keywords: software

Two flaws in open-source cryptography software could allow an attacker to add content to a digitally signed message or forge signatures.

Source: http://news.zdnet.com/2100-1009_22-6048612.html