A new Debian Linux update has been published: DLA 2493-1: openssl1.0 security update
An openssl1.0 security update has been released for Debian GNU/Linux 9 LTS to address a flaw in the GENERAL_NAME_cmp() function which could cause a NULL dereference, resulting in denial of service.Read more @ Linux Compatible