Curl released a new version 7.53.0 fixing one vulnerability [1].
Airlock WAF is not affected.
Details:
CVE-2017-2629: The vulnerability affects the OCSP stapling implementation in libcurl. Airlock WAF does not use this feature in libcurl.
no action required