Debain9.9 修复漏洞遇到的问题以及解决方法 -- CVE-2018-1000802:Python shutil模块中的命令注入

1.
修复命令： sudo apt-get install dirmngr sudo gcc
错误信息：
Executing: /tmp/apt-key-gpghome.9nsQzgbYKL/gpg.1.sh --keyserver keyserver.ubuntu.com --recv-keys 648ACFD622F3D138
gpg: failed to start the dirmngr '/usr/bin/dirmngr': No such file or directory
gpg: connecting dirmngr at '/run/user/0/gnupg/d.8xpm5dxs3idaqqiwb7wtpfuc/S.dirmngr' failed: No such file or directory
gpg: keyserver receive failed: No dirmngr


2.
错误信息：
E: The value 'stable' is invalid for APT::Default-Release as such a release is not available in the sources
步骤：
1. 找到错误原因：grep -ri stable /etc
会有以下类似信息：
/etc/apt/apt.conf.d/71distro:APT::Default-Release "stable";
/etc/apt/apt.conf.d/71distro:APT::Default-Release "stable";
/etc/apt/apt.conf.d/71distro:APT::Default-Release "stable";
/etc/apt/apt.conf.d/71distro:APT::Default-Release "stable";
/etc/apt/apt.conf.d/71distro:APT::Default-Release "stable";
清空文件中内容保存，并继续后面操作即可：
nano /etc/apt/apt.conf.d/71distro



3.
修复命令：将错误信息中的秘钥替换上去就可以
sudo apt-key adv --keyserver keyserver.ubuntu.com --recv-keys 648ACFD622F3D138
错误信息：
Err:3 http://mirrors.cloud.aliyuncs.com/debian stretch-proposed-updates InRelease
  The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 648ACFD622F3D138 NO_PUBKEY 0E98404D386FA1D9
Err:4 http://mirrors.cloud.aliyuncs.com/debian stretch-backports InRelease
  The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 648ACFD622F3D138 NO_PUBKEY 0E98404D386FA1D9
Reading package lists... Done
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://mirrors.cloud.aliyuncs.com/debian stretch-proposed-updates InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 648ACFD622F3D138 NO_PUBKEY 0E98404D386FA1D9
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://mirrors.cloud.aliyuncs.com/debian stretch-backports InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 648ACFD622F3D138 NO_PUBKEY 0E98404D386FA1D9
W: Failed to fetch http://mirrors.cloud.aliyuncs.com/debian/dists/stretch-proposed-updates/InRelease  The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 648ACFD622F3D138 NO_PUBKEY 0E98404D386FA1D9
W: Failed to fetch http://mirrors.cloud.aliyuncs.com/debian/dists/stretch-backports/InRelease  The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 648ACFD622F3D138 NO_PUBKEY 0E98404D386FA1D9
W: Some index files failed to download. They have been ignored, or old ones used instead.
Reading package lists... Done
Building dependency tree
Reading state information... Done
python2.7-minimal is already the newest version (2.7.13-2+deb9u5).
The following package was automatically installed and is no longer required:
  libopts25
Use 'apt autoremove' to remove it.
0 upgraded, 0 newly installed, 0 to remove and 141 not upgraded.