fix HSTS long file name clears contents (CVE-2023-46219)
fix cookie mixed case PSL bypass (CVE-2023-46218)

fix cookie injection with none file (CVE-2023-38546)
fix SOCKS5 heap buffer overflow (CVE-2023-38545)

fix HTTP headers eat all memory (CVE-2023-38039)

fix fopen race condition (CVE-2023-32001)

fix more POST-after-PUT confusion (CVE-2023-28322)
fix IDN wildcard match (CVE-2023-28321)

tests: re-enable temporarily disabled test-cases
tests: attempt to fix a conflict on port numbers
apply patches automatically
rebase to latest upstream release (#2192665)

http_proxy: fix memory corruption with http proxy tunneling (#2192665)

vtls: fix hostname handling in filters (#2192665)

cfilters: use the first non-connected filter (#2185433)

fix SSH connection too eager reuse still (CVE-2023-27538)
fix HSTS double-free (CVE-2023-27537)
fix GSS delegation too eager connection re-use (CVE-2023-27536)
fix FTP too eager connection reuse (CVE-2023-27535)
fix SFTP path ~ resolving discrepancy (CVE-2023-27534)
fix TELNET option IAC injection (CVE-2023-27533)

tests: make sure gnuserv-tls has SRP support before using it

fix HTTP multi-header compression denial of service (CVE-2023-23916)
share HSTS between handles (CVE-2023-23915 CVE-2023-23914)

fix regression in a public header file (#2162716)

Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild

test3012: temporarily disable valgrind (#2143040)

new upstream release, which fixes the following vulnerabilities
2022-43552 - HTTP Proxy deny use-after-free
2022-43551 - Another HSTS bypass via IDN