OS-2156 handle curl CVE-2013-1944