curl: apply CVE 2017-8816 and 2017-8817 security patches