3rdparty: update curl to 7.38.0