A new Debian Linux update has been published: DLA 2683-1: rxvt security update
A rxvt security update has been released for Debian GNU/Linux 9 LTS to address a potentially remote code execution.Read more @ Linux Compatible