A new Debian Linux update has been published: DLA 2654-1: composer security update
A composer security update has been released for Debian GNU/Linux 9 LTSto address an issue where composer did not properly sanitize Mercurial URLs.Read more @ Linux Compatible
