fix Usage of disabled protocol (CVE-2024-2004)
fix HTTP/2 push headers memory-leak (CVE-2024-2398)

fix HSTS long file name clears contents (CVE-2023-46219)
fix cookie mixed case PSL bypass (CVE-2023-46218)

fix cookie injection with none file (CVE-2023-38546)
fix SOCKS5 heap buffer overflow (CVE-2023-38545)

fix HTTP headers eat all memory (CVE-2023-38039)

new upstream release (rhbz#2226659)

new upstream release, which fixes the following vulnerabilities
2023-32001 - fopen race condition

new upstream release, with small bugfixes and improvements

new upstream release, with small bugfixes and improvements

new upstream release, which fixes the following vulnerabilities
2023-28321 - IDN wildcard match
2023-28322 - more POST-after-PUT confusion

tests: re-enable temporarily disabled test-cases
tests: attempt to fix a conflict on port numbers
apply patches automatically

migrated to SPDX license

new upstream release

new upstream release, which fixes the following vulnerabilities
2023-27538 - SSH connection too eager reuse still
2023-27537 - HSTS double-free
2023-27536 - GSS delegation too eager connection re-use
2023-27535 - FTP too eager connection reuse
2023-27534 - SFTP path ~ resolving discrepancy
2023-27533 - TELNET option IAC injection

new upstream release

http2: set drain on stream end

new upstream release, which fixes the following vulnerabilities
2023-23916 - HTTP multi-header compression denial of service
2023-23915 - HSTS amnesia with --parallel
2023-23914 - HSTS ignored on multiple requests