apticron report [Tue, 14 May 2019 18:49:12 +0200] ======================================================================== apticron has detected that some packages need upgrading on: nonagon.federez.net [ 185.230.78.42 2a0c:700:0:23:67:e5ff:fee9:3 ] The following packages are currently pending an upgrade: bind9-host 1:9.10.3.dfsg.P4-12.3+deb9u5 dnsutils 1:9.10.3.dfsg.P4-12.3+deb9u5 host 1:9.10.3.dfsg.P4-12.3+deb9u5 libbind9-140 1:9.10.3.dfsg.P4-12.3+deb9u5 libdns162 1:9.10.3.dfsg.P4-12.3+deb9u5 libdns-export162 1:9.10.3.dfsg.P4-12.3+deb9u5 libisc160 1:9.10.3.dfsg.P4-12.3+deb9u5 libisccc140 1:9.10.3.dfsg.P4-12.3+deb9u5 libisccfg140 1:9.10.3.dfsg.P4-12.3+deb9u5 libisc-export160 1:9.10.3.dfsg.P4-12.3+deb9u5 liblwres141 1:9.10.3.dfsg.P4-12.3+deb9u5 ======================================================================== Package Details: apt-listchanges : Lecture des fichiers de modifications (« changelog »)... apt-listchanges : journaux des modifications (« changelogs ») ------------------------------------------------------------- --- Modifications pour bind9 (bind9-host dnsutils host libbind9-140 libdns162 libdns-export162 libisc160 libisccc140 libisccfg140 libisc-export160 liblwres141) --- bind9 (1:9.10.3.dfsg.P4-12.3+deb9u5) stretch-security; urgency=high [ Marc Deslauriers (Ubuntu) ] * CVE-2018-5743: limiting simultaneous TCP clients is ineffective. Thanks to Marc Deslauriers of Ubuntu (Closes: #927932) [ Ondřej Surý ] * Sync Maintainer and Uploaders with unstable * [CVE-2019-6465]: Zone transfer for DLZs are executed though not permitted by ACLs. (Closes: #922955) * [CVE-2018-5745]: Avoid assertion and thus causing named to deliberately exit when a trust anchor's key is replaced with a key which uses an unsupported algorithm. (Closes: #922954) -- Bernhard Schmidt <berni(a)debian.org> Fri, 03 May 2019 22:34:35 +0200 ======================================================================== You can perform the upgrade by issuing the command: apt-get dist-upgrade as root on nonagon.federez.net -- apticron