This update for curl fixes the following security issues: - CVE-2016-8624: invalid URL parsing with "#" - CVE-2016-8623: Use-after-free via shared cookies - CVE-2016-8621: curl_getdate read out of bounds - CVE-2016-8619: double-free in krb5 code - CVE-2016-8618: double-free in curl_maprintf - CVE-2016-8617: OOB write via unchecked multiplication - CVE-2016-8616: case insensitive password comparison - CVE-2016-8615: cookie injection for other servers - CVE-2016-7167: escape and unescape integer overflows