Updated Drupal7 packages has been released for Debian GNU/Linux 8 LTS

Package : drupal7
Version : 7.32-1+deb8u13
Debian Bugs : #911336 #911337

It was discovered that there was a remote code execution and an
external URL injection vulnerability in the Drupal content
management framework.

For more information, please see:

https://www.drupal.org/sa-core-2018-006

For Debian 8 "Jessie", these issues have been fixed in drupal7
version 7.32-1+deb8u13.

We recommend that you upgrade your drupal7 packages.

  Drupal7 Security Update for Debian 8 LTS