Ubuntu Security Notice 859-1 – Dan Kaminsky discovered that SSL certificates signed with MD2 could be spoofed given enough time. It was discovered that ICC profiles could be identified with “..” pathnames. Peter Vreugdenhil discovered multiple flaws in the processing of graphics in the AWT library. Multiple flaws were discovered in JPEG and BMP image handling. Multiple flaws were discovered in ASN.1 parsing. It was discovered that the graphics configuration subsystem did not correctly handle arrays.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/82718/USN-859-1.txt
Source: https://packetstormsecurity.com/files/82718/Ubuntu-Security-Notice-859-1.html