A new Debian Linux update has been published: DLA 2867-1: spip security update
A spip security update has been released for Debian GNU/Linux 9 LTS to address an issue that could result in cross-site scripting and SQL injection attacks.Read more @ Linux Compatible