diff --git a/debian/control b/debian/control
index e442c8ccb9cc7dbe42c0498ea39846f11add155e..5b9146a8abae2e160d72e58a75e0221922325502 100644
--- a/debian/control
+++ b/debian/control
@@ -18,7 +18,7 @@ Build-Depends: cdbs (>= 0.4.100), debhelper (>= 9), dpkg-dev (>= 1.16.1~),
 # make package manager seek for cmake3 package at first and use it
 # if found or fallback to cmake package (that provides CMake 3+
 # for modern distributions) otherwise.
- cmake3 (>= 3.3) | cmake (>= 3.3),
+ cmake3 (>= 3.3) | cmake (>= 3.7),
  libreadline-dev,
  libncurses5-dev,
  libssl-dev,
diff --git a/debian/prebuild.sh b/debian/prebuild.sh
new file mode 100755
index 0000000000000000000000000000000000000000..03b61badcb5a0418ea8d9f5e6faf800a3143220e
--- /dev/null
+++ b/debian/prebuild.sh
@@ -0,0 +1,11 @@
+#!/bin/bash
+
+set -exu
+
+# Ubuntu Xenial has a CMake version that doesn't support
+# keywords used in curl's CMake.
+if [[ $DIST == "xenial" ]]; then
+  wget -O - https://apt.kitware.com/keys/kitware-archive-latest.asc 2>/dev/null | gpg --dearmor - | sudo tee /usr/share/keyrings/kitware-archive-keyring.gpg >/dev/null
+  echo 'deb [signed-by=/usr/share/keyrings/kitware-archive-keyring.gpg] https://apt.kitware.com/ubuntu/ xenial main' | sudo tee /etc/apt/sources.list.d/kitware.list >/dev/null
+  sudo apt-get update
+fi