A new Debian Linux update has been published: DLA 2754-1: pywps security update
A pywps security update has been released for Debian GNU/Linux 9 LTS to address an XML external entity (XXE) injection.Read more @ Linux Compatible