apticron report [Fri, 12 Aug 2016 10:48:22 +0200]
========================================================================
apticron has detected that some packages need upgrading on:
hexagon.federez.net
[ 5.39.82.35 2001:41d0:8:9423::1 5.39.82.35 2001:41d0:8:9423::1 ]
The following packages are currently pending an upgrade:
libpq5 9.4.9-0+deb8u1
========================================================================
Package Details:
Lecture des fichiers de modifications (« changelog »)...
--- Modifications pour postgresql-9.4 (libpq5) ---
postgresql-9.4 (9.4.9-0+deb8u1) jessie-security; urgency=medium
* New upstream security release.
+ Fix possible mis-evaluation of nested CASE-WHEN expressions
(Heikki Linnakangas, Michael Paquier, Tom Lane)
A CASE expression appearing within the test value subexpression of
another CASE could become confused about whether its own test value was
null or not. Also, inlining of a SQL function implementing the equality
operator used by a CASE expression could result in passing the wrong
test value to functions called within a CASE expression in the SQL
function's body. If the test values were of different data types, a
crash might result; moreover such situations could be abused to allow
disclosure of portions of server memory. (CVE-2016-5423)
+ Fix client programs' handling of special characters in database and role
names (Noah Misch, Nathan Bossart, Michael Paquier)
Numerous places in vacuumdb and other client programs could become
confused by database and role names containing double quotes or
backslashes. Tighten up quoting rules to make that safe. Also, ensure
that when a conninfo string is used as a database name parameter to
these programs, it is correctly treated as such throughout.
Fix handling of paired double quotes in psql's \connect and \password
commands to match the documentation.
Introduce a new -reuse-previous option in psql's \connect command to
allow explicit control of whether to re-use connection parameters from a
previous connection. (Without this, the choice is based on whether the
database name looks like a conninfo string, as before.) This allows
secure handling of database names containing special characters in
pg_dumpall scripts.
pg_dumpall now refuses to deal with database and role names containing
carriage returns or newlines, as it seems impractical to quote those
characters safely on Windows. In future we may reject such names on the
server side, but that step has not been taken yet.
These are considered security fixes because crafted object names
containing special characters could have been used to execute commands
with superuser privileges the next time a superuser executes pg_dumpall
or other routine maintenance operations. (CVE-2016-5424)
-- Christoph Berg <christoph.berg(a)credativ.de> Wed, 10 Aug 2016 13:36:18 +0200
========================================================================
You can perform the upgrade by issuing the command:
apt-get dist-upgrade
as root on hexagon.federez.net
--
apticron
apticron report [Tue, 09 Aug 2016 10:48:23 +0200]
========================================================================
apticron has detected that some packages need upgrading on:
hexagon.federez.net
[ 5.39.82.35 2001:41d0:8:9423::1 5.39.82.35 2001:41d0:8:9423::1 ]
The following packages are currently pending an upgrade:
fontconfig 2.11.0-6.3+deb8u1
fontconfig-config 2.11.0-6.3+deb8u1
libfontconfig1 2.11.0-6.3+deb8u1
========================================================================
Package Details:
Lecture des fichiers de modifications (« changelog »)...
--- Modifications pour fontconfig (fontconfig fontconfig-config libfontconfig1) ---
fontconfig (2.11.0-6.3+deb8u1) jessie-security; urgency=high
* Non-maintainer upload by the Security Team.
* CVE-2016-5384: Possible double free due to insufficiently validated cache
files (Closes: #833570)
-- Salvatore Bonaccorso <carnil(a)debian.org> Sat, 06 Aug 2016 10:15:01 +0200
========================================================================
You can perform the upgrade by issuing the command:
apt-get dist-upgrade
as root on hexagon.federez.net
--
apticron
apticron report [Tue, 09 Aug 2016 00:38:17 +0200]
========================================================================
apticron has detected that some packages need upgrading on:
quigon.federez.net
[ 160.228.155.65 ]
The following packages are currently pending an upgrade:
fontconfig 2.11.0-6.3+deb8u1
fontconfig-config 2.11.0-6.3+deb8u1
libfontconfig1 2.11.0-6.3+deb8u1
========================================================================
Package Details:
Lecture des fichiers de modifications (« changelog »)...
--- Modifications pour fontconfig (fontconfig fontconfig-config libfontconfig1) ---
fontconfig (2.11.0-6.3+deb8u1) jessie-security; urgency=high
* Non-maintainer upload by the Security Team.
* CVE-2016-5384: Possible double free due to insufficiently validated cache
files (Closes: #833570)
-- Salvatore Bonaccorso <carnil(a)debian.org> Sat, 06 Aug 2016 10:15:01 +0200
========================================================================
You can perform the upgrade by issuing the command:
apt-get dist-upgrade
as root on quigon.federez.net
--
apticron
apticron report [Sun, 07 Aug 2016 00:38:17 +0200]
========================================================================
apticron has detected that some packages need upgrading on:
quigon.federez.net
[ 160.228.155.65 ]
The following packages are currently pending an upgrade:
python-pbr 1.8.0-4.1~bpo8+1
========================================================================
Package Details:
Lecture des fichiers de modifications (« changelog »)...
--- Modifications pour python-pbr ---
python-pbr (1.8.0-4.1~bpo8+1) jessie-backports; urgency=medium
* Rebuild for jessie-backports.
*
-- Stefano Rivera <stefanor(a)debian.org> Fri, 05 Aug 2016 10:29:55 +0000
python-pbr (1.8.0-4.1) unstable; urgency=medium
* Non-maintainer upload.
* Depend on python{3,}-pkg-resources (Closes: #823071)
-- Stefano Rivera <stefanor(a)debian.org> Fri, 06 May 2016 23:41:16 +0200
python-pbr (1.8.0-4) unstable; urgency=medium
* override_dh_python3 to fix Py3 shebang.
-- Thomas Goirand <zigo(a)debian.org> Fri, 23 Oct 2015 23:36:27 +0000
========================================================================
You can perform the upgrade by issuing the command:
apt-get dist-upgrade
as root on quigon.federez.net
--
apticron
apticron report [Sat, 06 Aug 2016 00:38:16 +0200]
========================================================================
apticron has detected that some packages need upgrading on:
quigon.federez.net
[ 160.228.155.65 ]
The following packages are currently pending an upgrade:
python-pbr 1.8.0-4.1~bpo8+1
========================================================================
Package Details:
Lecture des fichiers de modifications (« changelog »)...
--- Modifications pour python-pbr ---
python-pbr (1.8.0-4.1~bpo8+1) jessie-backports; urgency=medium
* Rebuild for jessie-backports.
*
-- Stefano Rivera <stefanor(a)debian.org> Fri, 05 Aug 2016 10:29:55 +0000
python-pbr (1.8.0-4.1) unstable; urgency=medium
* Non-maintainer upload.
* Depend on python{3,}-pkg-resources (Closes: #823071)
-- Stefano Rivera <stefanor(a)debian.org> Fri, 06 May 2016 23:41:16 +0200
python-pbr (1.8.0-4) unstable; urgency=medium
* override_dh_python3 to fix Py3 shebang.
-- Thomas Goirand <zigo(a)debian.org> Fri, 23 Oct 2015 23:36:27 +0000
========================================================================
You can perform the upgrade by issuing the command:
apt-get dist-upgrade
as root on quigon.federez.net
--
apticron
ssh: connect to host kdell.federez.net port 22: Network is unreachable
Traceback (most recent call last):
File "/usr/lib/python2.7/dist-packages/cliapp/app.py", line 190, in _run
self.process_args(args)
File "/usr/lib/python2.7/dist-packages/obnamlib/app.py", line 207, in process_args
cliapp.Application.process_args(self, args)
File "/usr/lib/python2.7/dist-packages/cliapp/app.py", line 567, in process_args
method(args[1:])
File "/usr/lib/python2.7/dist-packages/obnamlib/plugins/backup_plugin.py", line 163, in backup
self.start_backup()
File "/usr/lib/python2.7/dist-packages/obnamlib/plugins/backup_plugin.py", line 200, in start_backup
self.repo = self.open_repository()
File "/usr/lib/python2.7/dist-packages/obnamlib/plugins/backup_plugin.py", line 225, in open_repository
return self.app.get_repository_object(create=True)
File "/usr/lib/python2.7/dist-packages/obnamlib/app.py", line 243, in get_repository_object
repofs.connect()
File "/usr/lib/python2.7/dist-packages/obnamlib/plugins/sftp_plugin.py", line 199, in connect
if not try_openssh or not self._connect_openssh():
File "/usr/lib/python2.7/dist-packages/obnamlib/plugins/sftp_plugin.py", line 243, in _connect_openssh
self.sftp = paramiko.SFTPClient(SSHChannelAdapter(proc))
File "/usr/lib/python2.7/dist-packages/paramiko/sftp_client.py", line 101, in __init__
raise SSHException('EOF during negotiation')
SSHException: EOF during negotiation