A new Debian Linux update has been published: DLA 2671-1: rxvt-unicode security update
A rxvt-unicode security update has been released for Debian GNU/Linux 9 LTS to address an improper handling of certain escape sequences.Read more @ Linux Compatible