A new Debian Linux update has been published: DLA 2506-1: awstats security update
An awstats security update has been released for Debian GNU/Linux 9 LTS to address an issue with path traversal attacks.Read more @ Linux Compatible