A new Debian Linux update has been published: DLA 2606-1: lxml security update
A lxml security update has been released for Debian GNU/Linux 9 LTS to address a XSS issue.Read more @ Linux Compatible