Package        : curl
Version        : 7.26.0-1+wheezy25+deb7u1
CVE ID         : CVE-2018-1000301
Debian Bug     : #898856

It was discovered that there was an issue in the curl a command-line tool
for downloading (eg.) data over HTTP.

curl could have be tricked into reading data beyond the end of a heap
based buffer used to store downloaded content.

For more information, please see upstream's advisory at:

  https://curl.se/docs/CVE-2018-1000301.html

For Debian 7 "Wheezy", this issue has been fixed in curl version
7.26.0-1+wheezy25+deb7u1.

We recommend that you upgrade your curl packages.


Regards,

- -- 
      ,''`.
     : :'  :     Chris Lamb
     `. `'`      lamby@debian.org / chris-lamb.co.uk
       `-