A new Debian Linux update has been published: DLA 2434-1: gdm3 security update
A gdm3 security update has been released for Debian GNU/Linux 9 LTS to address an issue where GNOME Display Manager not detecting any users may make GDM launch initial system setup and thereby permitting the creation of new users with sudo capabilities.Read more @ Linux Compatible