main/curl: security fix (CVE-2021-22876, CVE-2021-22890)

Closed Kevin Daudt requested to merge kdaudt/aports:3.13/curl-cves into 3.13-stable

See #12568

Merge request reports