This update for curl fixes the following issues: Security issues fixed: - CVE-2019-3822: Fixed a NTLMv2 type-3 header stack buffer overflow . - CVE-2019-3823: Fixed an out-of-bounds read in the SMTP end-of-response . - CVE-2018-16890: Fixed an out-of-bounds buffer read in NTLM type2 . - CVE-2018-16842: Fixed an out-of-bounds read in tool_msgs.c . - CVE-2018-16840: Fixed a use-after-free in handle close . - CVE-2018-16839: Fixed an SASL password overflow caused by an integer overflow .