AZL-34910 CVE-2022-40320 affecting package libconfuse for versions less than 3.3-2

cfgtildeexpand in confuse.c in libConfuse 3.3 has a heap-based buffer over-read...