There's a big difference between a bump to the latest curl version and a jump between two major versions of a language runtime. The Python 2->3 transition took years and many distros kept both versions.
Most dependencies get updated much more quickly. It wouldn't even shock me if this change got picked up mid-cycle.
Unhappily RedHat won't. Heck, RedHat has gone well out of their way to backport updated TLS handshakes (1.2 at least) to their 2013 version (7.29.0) of curl.
Most dependencies get updated much more quickly. It wouldn't even shock me if this change got picked up mid-cycle.