curl: TLS 1.3 session ticket mix-up with HTTPS proxy host

A flaw was found in the way libcurl handled TLS 1.3 session tickets. A malicious HTTPS proxy could possibly use this flaw to make libcurl resume a TLS session it previously had with the proxy while intending to resume a TLS session with a target server, making it possible for the proxy to perform...

OpenSSL 'ssl3_get_new_session_ticket()' memory misreference vulnerability

OpenSSL is an open source SSL implementation used to implement strong encryption for network communications. A two-time memory misreference error vulnerability in OpenSSL ssl3getnewsessionticket allows a remote server to return a specially crafted NewSessionTicket message to connect to a...