A new Debian Linux update has been published: DLA 2995-1: smarty3 security update
A smarty3 security update has been released for Debian GNU/Linux 9 LTS to address an issue where remote users were able to run arbitrary PHP code.Read more @ Linux Compatible
