A new Debian Linux update has been published: DLA 2397-1: php7.0 security update
A php7.0 security update has been released for Debian GNU/Linux 9 LTS to address an issue where an attacker can forge a cookie.Read more @ Linux Compatible