A new Debian Linux update has been published: DLA 2738-1: c-ares security update
A c-ares security update has been released for Debian GNU/Linux 9 LTS to address a missing input validation of host names.Read more @ Linux Compatible