A new Debian Linux update has been published: DLA 2467-1: lxml security update
A lxml security update has been released for Debian GNU/Linux 9 LTS to address a XSS injection vulnerability.Read more @ Linux Compatible