libcurl contains a buffer overrun flaw in the NTLM authentication code (CVE-2017-8816).
libcurl contains a read out of bounds flaw in the FTP wildcard function (CVE-2017-8817).
libcurl may read outside of a heap allocated buffer when doing FTP (CVE-2017-1000254).
libcurl contains a buffer overrun flaw in the IMAP handler (CVE-2017-1000257).