A new Debian Linux update has been published: DLA 2664-1: curl security update
A curl security update has been released for Debian GNU/Linux 9 LTS to address an issue where sensitive authentication data may leak to the server that is the target of the second HTTP request.Read more @ Linux Compatible