As cited
Copy frozen at (site build).
threat intel
Debian and Ubuntu APT Flaw Lets MitM Attackers Swap Verified Packages and Run Code as Root
A vulnerability in APT, the package manager for Debian and Ubuntu, permits an attacker positioned to intercept package downloads to substitute a verified package with malicious code that executes with root privileges. The flaw is triggered when APT retries failed downloads, a default behavior in Debian 12 and later. Debian, Ubuntu, and APT developers disclosed the issue on November 4.
Why it matters: Debian and Ubuntu users running Debian 12 or later are at risk of remote code execution as root during package updates if their network traffic can be intercepted; patch availability and deployment urgency should be checked immediately.
- Source published
- First seen by Cybersecurity Tracker