Updated curl packages are available for Debian GNU/Linux LTS 7, 8, and 9:
DLA 1379-1: curl security updateCurl Security Updates for Debian
DSA 4202-1: curl security update