A new Debian Linux update has been published: ELA-921-1: unrar-nonfree security update
A unrar-nonfree security update has been released for Debian GNU/Linux 9 Extended LTS to address an issue that allowed the extraction of files outside of the destination folder via symlink chains.Read more @ Linux Compatible