Debian published Debian Security Advisory about apt. https://www.debian.org/security/2019/dsa-4371 Do check your system has updated Code: apt:amd64 1.4.8 => 1.4.9 I'm running unattended-upgrades, so I got that update last night automatically.
Taleman, You mentioned running unattended-upgrades, do you have a script that does that and notifies of the result? I was wondering how often to run upgrades. I was using ispconfig do os-update of all servers but had an upgrade fail and now just manually do the updates so I can see if there are any failures, but its getting tedious and time consuming. Was wondering if you use something other than 'aptitude -y upgrade' in your script. Thanks!
unattended-upgrades in a package in Debian. It is Code: apt install unattended-upgrades dpkg-reconfigure -plow unattended-upgrades away from working on your Debian. Default setting is it runs every night. You can setup it to mail you when updates happen on only for errors. And it is not my script. https://packages.debian.org/stretch/unattended-upgrades Also available for Ubuntu.
