Debian issues update for APT flaw allowing root code execution via man-in-the-middle attack
VULNERABILITYAPTredteam/daily · 1 source
- Severity
- High
- Sources
- 1
What happened
Debian has published security update DSA-6607-1 for the apt package manager. Improper file handling when resuming an HTTP download, combined with merged downloads after an HTTP redirect, lets a man-in-the-middle attacker replace a package after verification, resulting in arbitrary code execution as root. The vulnerability was discovered by Max Justicz.
For IT people · Written by AI from 1 source · Wrong?
What to do
- Install the Debian security update for apt published as DSA-6607-1.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
Debian Security Advisories
Who and what is in it
Products