TST: work around outdated travis boxes

run manual apt-get update to pick up the latest py3 security update
Merge pull request #4510 from charris/Backport-1.8-gh-4456

Backport-1.8-gh-4456.