A new Debian Linux update has been published: DLA 2693-1: xmlbeans security update
A xmlbeans security update has been released for Debian GNU/Linux 9 LTS to address an issue where the XML parsers used by XMLBeans did not set the properties needed to protect the user from malicious XML input.Read more @ Linux Compatible