Multiple vulnerabilities in curl affecting various Ubuntu LTS and interim releases were addressed in update USN-8487-2. These include issues with connection reuse during STARTTLS upgrades, incorrect connection reuse for Negotiate authentication, improper cookie parsing, double-free leading to potential code execution, .netrc password selection errors, proxy authentication state leaks, use-after-free in event callbacks, early TLS data transmission without certificate verification, and SSH host key type mismatches. The update fixes an incomplete prior patch for CVE-2026-8927. These issues could allow remote attackers to cause denial of service, access sensitive information, or impersonate trusted servers.