A new Debian Linux update has been published: DLA 3008-1: openssl security update
An openssl security update has been released for Debian GNU/Linux 9 LTS to address an issue where the c_rehash script does not properly sanitize shell meta characters to prevent command injection.Read more @ Linux Compatible