> You’ll also need to ensure that the version of libcurl you want to compile against is installed in your production servers, which makes server setups (containers or not) more cumbersome to maintain: installing curl, or libcurl, is usually something left for the system package manager to handle (aptget, yum, brew…), but these tend to take years to adopt the “latest greatest” version of libcurl, in this case the one containing that security fix you so desperately need.
Come one, any respectable Linux distribution delivers security fixes. Take for example Red Hat Enterprise Linux [1][2].
[1]: https://access.redhat.com/security/cve/cve-2023-38545
[2]: https://access.redhat.com/errata/RHSA-2023:5700