A new Debian Linux update has been published: DLA 2403-1: rails security update
A rails security update has been released for Debian GNU/Linux 9 LTS to address a potential Cross-Site Scripting (XSS) vulnerability was found in rails, a ruby based MVC framework.Read more @ Linux Compatible