Debian and Ubuntu APT flaw lets attackers swap verified packages and run code as root
VULNERABILITYAPTredteam/daily · 1 source
- Severity
- High
- Sources
- 1
What happened
A weakness in the software tool that installs updates on Debian and Ubuntu systems can let an attacker who controls the network connection replace a trusted software package with their own. That malicious code then runs with full administrator rights. Debian, Ubuntu and the APT developers published advisories on 4 November.
Like I’m new · Written by AI from 1 source · Wrong?
What to do
- Check which Debian and Ubuntu hosts use APT's retry behaviour for package downloads, starting with Debian 12.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
The Hacker News