A new Debian Linux update has been published: DLA 2922-1: pgbouncer security update
A pgbouncer security update has been released for Debian GNU/Linux 9 LTS to address an issue where PgBouncer was susceptible to an arbitrary SQL injection attack if a man-in-the-middle could inject data when a connection using certificate authentication is established.Read more @ Linux Compatible