This version contains patches for five new CVEs:
- [CVE-2022-32205: Set-Cookie denial of service](https://curl.se/docs/CVE-2022-32205.html)
- [CVE-2022-32206: HTTP compression denial of service](https://curl.se/docs/CVE-2022-32206.html)
- [CVE-2022-32207: Unpreserved file permissions](https://curl.se/docs/CVE-2022-32207.html)
- [CVE-2022-32208: FTP-KRB bad message verification](https://curl.se/docs/CVE-2022-32208.html)
- [CVE-2022-35252: control code in cookie denial of service](https://curl.se/docs/CVE-2022-35252.html)
Fixes #457.