@Michael Brinschwitz - You marked my reply for moderation as not answering the question. I re-approved it (as moderator) because it did answer the question. My answer may not have matched what you want, but please understand that Broadcom doesn't comment publicly on security issues until they release a patch for it. They also don't comment on content and timing of future releases.
That's not saying that you won't get a more complete answer to your question. (never say never...). But given Broadcom policy and their past interactions here in the forum, it's highly unlikely.
We don't even know for sure if Workstation is vulnerable to this exploit. We don't know how Broadcom built and uses libcurl within Workstation and if that matches the configuration that exposed the vulnerability.
The additional comments I made are based on what I found reading the CVE and libcurl developer's response for it, and my experience as a former CISSP certified security professional.