AVG-1756 log

Package lib32-libcurl-compat
Status Fixed
Severity High
Type multiple issues
Affected 7.75.0-1
Fixed 7.76.0-1
Current 8.11.1-3 [multilib-testing]
8.11.1-2 [multilib]
Ticket None
Created Wed Mar 31 08:16:23 2021
Issue Severity Remote Type Description
CVE-2021-22890 High Yes Authentication bypass
Enabled by default, libcurl supports the use of TLS 1.3 session tickets to resume previous TLS sessions to speed up subsequent TLS handshakes.  When using a...
CVE-2021-22876 Medium Yes Information disclosure
libcurl does not strip off user credentials from the URL when automatically populating the Referer: HTTP request header field in outgoing HTTP requests, and...