A new Debian Linux update has been published: ELA-982-1 curl security update
A curl security update has been released for Debian GNU/Linux 8 and 9 Extended LTS to address an issue that could lead to cookie injection from a file named none under certain circumstances.Read more @ Linux Compatible