A new Debian Linux update has been published: DLA 2871-1: lxml security update
A lxml security update has been released for Debian GNU/Linux 9 LTS to address an issue where the HTML Cleaner in lxml.html lets certain crafted script content pass through.Read more @ Linux Compatible