apticron report [Fri, 28 Sep 2018 22:38:05 +0200] ======================================================================== apticron has detected that some packages need upgrading on: quigon.federez.net [ 160.228.155.65 ] The following packages are currently pending an upgrade: libarchive-zip-perl 1.59-1+deb9u1 libpython2.7 2.7.13-2+deb9u3 libpython2.7-dev 2.7.13-2+deb9u3 libpython2.7-minimal 2.7.13-2+deb9u3 libpython2.7-stdlib 2.7.13-2+deb9u3 libpython3.5 3.5.3-1+deb9u1 libpython3.5-minimal 3.5.3-1+deb9u1 libpython3.5-stdlib 3.5.3-1+deb9u1 python2.7 2.7.13-2+deb9u3 python2.7-dev 2.7.13-2+deb9u3 python2.7-minimal 2.7.13-2+deb9u3 python3.5 3.5.3-1+deb9u1 python3.5-minimal 3.5.3-1+deb9u1 ======================================================================== Package Details: apt-listchanges : Lecture des fichiers de modifications (« changelog »)... apt-listchanges : journaux des modifications (« changelogs ») ------------------------------------------------------------- --- Modifications pour libarchive-zip-perl --- libarchive-zip-perl (1.59-1+deb9u1) stretch-security; urgency=high * Non-maintainer upload by the Security Team. * Prevent from traversing symlinks and parent directories when extracting (CVE-2018-10860) (Closes: #902882) * Extract test files needed for t/25_traversal.t test. Add zip files to debian/t/data directory and add them to debian/sorce/include-binaries to include those in the debian tarball. Add an override for dh_auto_test to copy debian/t/data/*.zip testfiles to test directory prior to running the testsuite. Clean test files needed for t/25_traversal.t in dh_clean -- Salvatore Bonaccorso <carnil(a)debian.org> Fri, 21 Sep 2018 17:17:23 +0200 --- Modifications pour python2.7 (libpython2.7 libpython2.7-dev libpython2.7-minimal libpython2.7-stdlib python2.7 python2.7-dev python2.7-minimal) --- python2.7 (2.7.13-2+deb9u3) stretch-security; urgency=medium * CVE-2018-1000802, CVE-2018-1060, CVE-2018-1061, CVE-2018-14647 -- Moritz Mühlenhoff <jmm(a)debian.org> Wed, 26 Sep 2018 20:42:22 +0200 --- Modifications pour python3.5 (libpython3.5 libpython3.5-minimal libpython3.5-stdlib python3.5 python3.5-minimal) --- python3.5 (3.5.3-1+deb9u1) stretch-security; urgency=medium * CVE-2017-1000158 CVE-2018-1060 CVE-2018-1061 CVE-2018-14647 -- Moritz Mühlenhoff <jmm(a)debian.org> Thu, 27 Sep 2018 19:25:39 +0200 ======================================================================== You can perform the upgrade by issuing the command: apt-get dist-upgrade as root on quigon.federez.net -- apticron