Debian and Ubuntu APT flaw lets attackers swap verified packages and run code as root
VULNERABILITYAPTredteam/daily · 1 source
- Severity
- High
- Sources
- 1
What happened
A flaw in APT, the package manager used by Debian and Ubuntu, allows a man-in-the-middle attacker who can modify package downloads to substitute a package that has passed verification with a malicious one. The injected code runs as root. The attack depends on APT retrying failed downloads, which the article says it does by default from Debian 12, and advisories from Debian, Ubuntu and the APT developers were published on 4 November.
For IT people · Written by AI from 1 source · Wrong?
What to do
- Check which Debian and Ubuntu hosts use APT's retry behaviour for package downloads, starting with Debian 12.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
The Hacker News