APT flaw (CVE-2026-109518) lets MitM swap packages, run as root
A network attacker can make Debian/Ubuntu's APT accept a swapped package after verification and run it as root, abusing download retries. Fixed Nov 4 in trixie 3.0.4, bookworm 2.6.2.
A network attacker can make Debian/Ubuntu's APT accept a swapped package after verification and run it as root, abusing download retries. Fixed Nov 4 in trixie 3.0.4, bookworm 2.6.2.