Multiple security vulnerabilities were discovered in curl affecting various Ubuntu LTS releases. These include improper clearing of AWS SigV4 authentication state, HTTP proxy authentication challenges leading to credential exposure, incorrect handling of HSTS entries causing potential downgrade to unencrypted connections, denial of service via malformed HSTS max-age values, IMAP command injection, use-after-free in FTP wildcard matching, TFTP transfer direction validation flaws, stack overflow in MIME processing, and exposure of credentials via CURLINFO_EFFECTIVE_URL. These issues could lead to information disclosure, denial of service, or arbitrary code execution. Fixes have been released for affected Ubuntu versions.