A new Debian Linux update has been published: DLA 2752-1: squashfs-tools security update
A squashfs-tools security update has been released for Debian GNU/Linux 9 LTS to address an issue where unsquashfs did not validate all filepaths.Read more @ Linux Compatible