re-disable HSTS in libcurl as an experimental feature (#2005874)

disable more protocols and features in libcurl-minimal (#2005874)

fix STARTTLS protocol injection via MITM (CVE-2021-22947)
fix protocol downgrade required TLS bypass (CVE-2021-22946)
fix use-after-free and double-free in MQTT sending (CVE-2021-22945)

Rebuilt for IMA sigs, glibc 2.34, aarch64 flags

Rebuild to pick up OpenSSL 3.0 Beta ABI (#1984097)

make explicit dependency on openssl work with alpha/beta builds of openssl

fix TELNET stack contents disclosure again (CVE-2021-22925)
fix bad connection reuse due to flawed path name checks (CVE-2021-22924)

Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065

build the curl tool without metalink support (#1967213)

fix SIGSEGV upon disconnect of a ldaps:// transfer (#1941925)

fix TLS session caching disaster (CVE-2021-22901)
fix TELNET stack contents disclosure (CVE-2021-22898)

http2: fix resource leaks detected by Coverity

new upstream release

new upstream release, which fixes the following vulnerabilities
2021-22890 - TLS 1.3 session ticket proxy host mixup
2021-22876 - Automatic referer leaks credentials

Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937

fix SIGSEGV upon disconnect of a ldaps:// transfer (#1941925)