curl: Update to 7.38.0.  (Fixes two CVEs.)

Fixes CVE-2014-3620 and CVE-2014-3613.

Caused a bunch of rebuilds on my system, but things seem to still work.

If anyone wants to update the release branches without switching to a new version, it looks like there are patches at http://curl.haxx.se/docs/security.html