AZL-6361 CVE-2021-22922 affecting package curl for versions less than 7.76.0-5
When curl is instructed to download content using the metalink feature, thecontents is verified against a hash provided in the metalink XML file.The metalink XML file points out to the client how to get the same contentfrom a set of different URLs, potentially hosted by different servers and...