DSA-2824-1 curl - unchecked tls/ssl certificate host name
Description:
Marc Deslauriers discovered that curl, a file retrieval tool, would mistakenly skip verifying the CN and SAN name fields when digital signature verification was disabled in the libcurl GnuTLS backend.