A new Debian Linux update has been published: DLA 2912-1: libphp-adodb security update
A libphp-adodb security update has been released for Debian GNU/Linux 9 LTS to address an issue where an attacker can inject values into the PostgreSQL connection string by bypassing adodb_addslashes().Read more @ Linux Compatible