The following two updates has been released for both Debian GNU/Linux 8 and 9:
DSA 4136-1: curl security updateCurl / Libvirt Updates for Debian
DSA 4137-1: libvirt security update