being based on curl 0.70.0 gnurl is affected by
CVE-2015-3144
CVE-2015-3145
CVE-2015-3153
CVE-2015-3236

Import patches from curl package to fix that.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>