Hash: SHA256

Package        : apr-util
Version        : 1.4.1-3+deb7u1
CVE ID         : CVE-2017-12618
Debian Bug     : #879996

It was discovered that there was an out-of-bounds read access in
apr-util, a support/portability library used by many applications.

A local user with write access to the database could have made a process
using these functions crash and thus cause a denial-of-service.

For Debian 7 "Wheezy", this issue has been fixed in apr-util version
1.4.1-3+deb7u1.

We recommend that you upgrade your apr-util packages.


Regards,

- -- 
      ,''`.
     : :'  :     Chris Lamb
     `. `'`      lamby@debian.org / chris-lamb.co.uk
       `-