A new Debian Linux update has been published: DLA 2926-1: zsh security update
A zsh security update has been released for Debian GNU/Linux 9 LTS to address an issue where an attacker can execute arbitrary commands into a user's shell.Read more @ Linux Compatible