Update PSF-2023-1

[benja-M-1]

PSF-2023-1 references two commits that points to the same issue.
But, it appears they didn't fix the CVE, as stated in python/cpython#102153.
The real fix is actually in:

• 3.9: [3.9] gh-102153: Start stripping C0 control and space chars in urlsplit (GH-102508) (GH-104575) (GH-104592) python/cpython#104593
• 3.10: [3.10] [3.11] gh-102153: Start stripping C0 control and space chars in urlsplit (GH-102508) (GH-104575) python/cpython#104592
• 3.11: [3.11] gh-102153: Start stripping C0 control and space chars in urlsplit (GH-102508) python/cpython#104575

• =3.12: gh-102153: Start stripping C0 control and space chars in urlsplit python/cpython#102508

So I updated the PSF to point to the corresponding commits.