Debian Security Advisory 1701-1 – It was discovered that OpenSSL does not properly verify DSA signatures on X.509 certificates due to an API misuse, potentially leading to the acceptance of incorrect X.509 certificates as genuine (CVE-2008-5077).
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/73756/dsa-1701-1.txt
Source: https://packetstormsecurity.com/files/73756/Debian-Linux-Security-Advisory-1701-1.html