A new Debian Linux update has been published: DLA 3028-1: atftp security update
An atftp security update has been released for Debian GNU/Linux 9 LTS to address missing bound checks.Read more @ Linux Compatible