curl security fixes