A new Debian Linux update has been published: DLA-2637-1: drupal7 security update
A drupal7 security update has been released for Debian GNU/Linux 9 LTS to address a vulnerability in the sanitization performed in the _filter_xss_arttributes function.Read more @ Linux Compatible