debootstrap (called by grml-debootstrap pulls pinentry-curses during Whonix build process.
+ debootstrap --arch amd64 --verbose --include=initramfs-tools,grub-pc,eatmydata,apt-transport-tor,python stretch /mnt/debootstrap.21865 http://ftp.us.debian.org/debian
I: Found additional base dependencies: dmsetup gettext-base gnupg-agent grub-common grub-pc-bin grub2-common initramfs-tools-core klibc-utils libapparmor1 libassuan0 libbsd0 libcap2 libcryptsetup4 libdevmapper1.02.1 libdns-export162 libeatmydata1 libelf1 libexpat1 libfastjson4 libffi6 libfreetype6 libfuse2 libgmp10 libgnutls30 libhogweed4 libidn11 libidn2-0 libip4tc0 libip6tc0 libiptc0 libisc-export160 libklibc libksba8 liblocale-gettext-perl liblognorm5 libmnl0 libncurses5 libnetfilter-conntrack3 libnettle6 libnfnetlink0 libnpth0 libp11-kit0 libpng16-16 libpsl5 libpython-stdlib libpython2.7-minimal libpython2.7-stdlib libseccomp2 libsqlite3-0 libtasn1-6 libtext-charwidth-perl libtext-iconv-perl libtext-wrapi18n-perl libunistring0 libxtables12 linux-base mime-support pinentry-curses python-minimal python2.7 python2.7-minimal ucf xxd
But I now have an idea how to fix it even for users who upgrade.