fix cookie injection with none file (CVE-2023-38546)
fix SOCKS5 heap buffer overflow (CVE-2023-38545)

fix HTTP headers eat all memory (CVE-2023-38039)
temporarily disable test 678 on aarch64 (it suddently started crashing without any change in curl)

fix fopen race condition (CVE-2023-32001)

fix more POST-after-PUT confusion (CVE-2023-28322)
fix IDN wildcard match (CVE-2023-28321)

fix SSH connection too eager reuse still (CVE-2023-27538)
fix HSTS double-free (CVE-2023-27537)
fix GSS delegation too eager connection re-use (CVE-2023-27536)
fix FTP too eager connection reuse (CVE-2023-27535)
fix SFTP path ~ resolving discrepancy (CVE-2023-27534)
fix TELNET option IAC injection (CVE-2023-27533)

header: define public API functions as extern C (#2173299)

fix HTTP multi-header compression denial of service (CVE-2023-23916)
share HSTS between handles (CVE-2023-23915 CVE-2023-23914)

smb/telnet: fix use-after-free when HTTP proxy denies tunnel (CVE-2022-43552)
http: use the IDN decoded name in HSTS checks (CVE-2022-43551)

enforce versioned libnghttp2 dependency for libcurl (#2144277)

http2: make nghttp2 less picky about field whitespace (#2144277)

url: use IDN decoded names for HSTS checks (CVE-2022-42916)
http_proxy: restore the protocol pointer on error (CVE-2022-42915)
netrc: replace fgets with Curl_get_line (CVE-2022-35260)
fix POST following PUT confusion (CVE-2022-32221)

new upstream release, which fixes the following vulnerability
2022-35252 - control code in cookie denial of service

tests: fix http2 tests to use CRLF headers to make it work with nghttp2-1.49.0

Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild

new upstream release, which fixes the following vulnerabilities
2022-32207 - Unpreserved file permissions
2022-32205 - Set-Cookie denial of service
2022-32206 - HTTP compression denial of service
2022-32208 - FTP-KRB bad message verification

new upstream release, which fixes the following vulnerabilities
2022-27782 - fix too eager reuse of TLS and SSH connections
2022-27779 - do not accept cookies for TLD with trailing dot
2022-27778 - do not remove wrong file on error
2022-30115 - hsts: ignore trailing dots when comparing hosts names
2022-27780 - reject percent-encoded path separator in URL host