Debian DSA-2271-1：curl - 不当委派客户端凭据

* Changelogs are generally available for changes made after Nov 1, 2022