A new Debian Linux update has been published: DLA 2331-1: posgresql-9.6 security update
A: posgresql-9.6 security update has been released for Debian GNU/Linux 9 LTS to address an issue where an uncontrolled search path could allow users to run arbitrary SQL functions with elevated priviledges when a superuser runs certain `CREATE EXTENSION' statements.Read more @ Linux Compatible