Open-source bugs undermine digital signatures

A pair of security bugs in cryptography software could allow an attacker to insert content into a digitally signed message or forge signatures on files.