libav: update all branches, probably with security fixes

(cherry picked from commit ead6603b6037a8ea6d6898241c7ae50888288bd3)
curl: update to 7.38.0, including security (#4161)

Fixes CVE-2014-3620 and CVE-2014-3613.