5 Nov
2018
5 Nov
'18
21:38
apticron report [Mon, 05 Nov 2018 21:38:08 +0100]
========================================================================
apticron has detected that some packages need upgrading on:
quigon.federez.net
[ 160.228.155.65 ]
The following packages are currently pending an upgrade:
curl 7.52.1-5+deb9u8
libcurl3 7.52.1-5+deb9u8
libcurl3-gnutls 7.52.1-5+deb9u8
libdatetime-timezone-perl 1:2.09-1+2018g
libruby2.3 2.3.3-1+deb9u4
ruby2.3 2.3.3-1+deb9u4
tzdata 2018g-0+deb9u1
========================================================================
Package Details:
apt-listchanges : Lecture des fichiers de modifications (« changelog »)...
apt-listchanges : journaux des modifications (« changelogs »)
-------------------------------------------------------------
--- Modifications pour curl (curl libcurl3 libcurl3-gnutls) ---
curl (7.52.1-5+deb9u8) stretch-security; urgency=high
* Fix SASL password overflow via integer overflow as per CVE-2018-16839
https://curl.haxx.se/docs/CVE-2018-16839.html
* Fix warning message out-of-buffer read as per CVE-2018-16842
https://curl.haxx.se/docs/CVE-2018-16842.html
-- Alessandro Ghedini <ghedo(a)debian.org> Tue, 30 Oct 2018 21:39:11 +0000
--- Modifications pour ruby2.3 (libruby2.3 ruby2.3) ---
ruby2.3 (2.3.3-1+deb9u4) stretch-security; urgency=high
* Non-maintainer upload by the Security Team.
* OpenSSL::X509::Name equality check does not work correctly
(CVE-2018-16395)
* pack.c: avoid returning uninitialized String
* Tainted flags are not propagated in Array#pack and String#unpack with some
directives (CVE-2018-16396)
-- Salvatore Bonaccorso <carnil(a)debian.org> Sun, 28 Oct 2018 21:49:57 +0100
--- Modifications pour libdatetime-timezone-perl ---
libdatetime-timezone-perl (1:2.09-1+2018g) stretch; urgency=medium
* Update to Olson database version 2018g.
This update contains contemporary changes for Morocco.
-- gregor herrmann <gregoa(a)debian.org> Sat, 27 Oct 2018 15:44:52 +0200
--- Modifications pour tzdata ---
tzdata (2018g-0+deb9u1) stretch; urgency=medium
* New upstream version, affecting the following future timestamp:
- Morocco switches to permanent +01 on 2018-10-27.
-- Aurelien Jarno <aurel32(a)debian.org> Sat, 27 Oct 2018 15:20:17 +0200
========================================================================
You can perform the upgrade by issuing the command:
apt-get dist-upgrade
as root on quigon.federez.net
--
apticron