A postgresql-9.4 security update has been released for Debian GNU/Linux 8 Extended LTS to address an issue where an uncontrolled search path could allow users to run arbitrary SQL functions with elevated priviledges when a superuser runs certain `CREATE EXTENSION’ statements.