Ubuntu Security Notice USN-818-1 - Scott Cantor discovered that Curl did not correctly handle SSL certificates with zero bytes in the Common Name. A remote attacker could exploit this to perform a man in the middle attack to view sensitive information or alter encrypted communications.
87d7384d403bedb921aab72dddaf26c450c38d3b491ce5ce3c4a0d3c673b2369