A new Debian Linux update has been published: DLA 2284-1: ksh security update
A ksh security update has been released for Debian GNU/Linux 9 LTS to address a flaw in the way it evaluates certain environment variables.Read more @ Linux Compatible