[staging-23.05] curl: apply patch for CVE-2023-38039

[yayayayaka]

Description of changes

• Adds a patch to fix CVE-2023-38039
• Fixes the github src url

Things done

• Built on platform(s)
  • x86_64-linux
  • aarch64-linux
  • x86_64-darwin
  • aarch64-darwin
• For non-Linux: Is sandbox = true set in nix.conf? (See Nix manual)
• Tested, as applicable:
  • NixOS test(s) (look inside nixos/tests)
  • and/or package tests
  • or, for functions and "core" functionality, tests in lib/tests or pkgs/test
  • made sure NixOS tests are linked to the relevant packages
• Tested compilation of all packages that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD". Note: all changes have to be committed, also see nixpkgs-review usage
• Tested basic functionality of all binary files (usually in ./result/bin/)
• 23.11 Release Notes (or backporting 23.05 Release notes)
  • (Package updates) Added a release notes entry if the change is major or breaking
  • (Module updates) Added a release notes entry if the change is significant
  • (Module addition) Added a release notes entry if adding a new NixOS module
• Fits CONTRIBUTING.md.

[mweinelt]

Built curl.tests on aarch64-linux and x86_64-linux and up to curl on aarch64-darwin and x86_64-darwin.

Couldn't reach curlFull on darwin because openldap tests fail. Could be a problem with the builder I'm using, not sure.

>>>>> 00:00:03 Starting test000-rootdse for mdb...
running defines.sh
Starting slapd on TCP/IP port 9011...
Using ldapsearch to retrieve the root DSE...
Waiting 5 seconds for slapd to start...
Waiting 5 seconds for slapd to start...
Waiting 5 seconds for slapd to start...
Waiting 5 seconds for slapd to start...
Waiting 5 seconds for slapd to start...
Waiting 5 seconds for slapd to start...
./scripts/test000-rootdse: line 61: kill: (23329) - No such process
ldap_sasl_bind(SIMPLE): Can't contact LDAP server (-1)
>>>>> Test failed
>>>>> 00:00:39 Failed   test000-rootdse for mdb after 36 seconds
(exit 255)
make[2]: *** [Makefile:320: mdb-yes] Error 255
make[2]: Leaving directory '/private/tmp/nix-build-openldap-2.6.4.drv-0/openldap-2.6.4/tests'
make[1]: *** [Makefile:287: test] Error 2
make[1]: Leaving directory '/private/tmp/nix-build-openldap-2.6.4.drv-0/openldap-2.6.4/tests'
make: *** [Makefile:298: test] Error 2

Can repro on release-23.05, but hydra apparently can build it.