Users are advised to upgrade to the latest 4.9.148 kernel since it adds more protection from spectre/meltdown and the 64 bit version fixes a regression when using (g)ufw firewall.
4.9.148-486, 4.9.148-pae-686, 4.9.148-amd
32 and 64 bit versions for stretch, testing and sid.