Ubuntu warns of APT flaw that could allow root code execution via hard links
VULNERABILITYAPTredteam/daily · 1 source
- Severity
- High
- Sources
- 1
What happened
Ubuntu Security Notice USN-8996-1 describes a flaw in APT's handling of hard links when it encounters redirects and retries package downloads. A remote on-path attacker could possibly exploit it to install an unverified package and achieve remote code execution with root privileges. The notice text provided does not give a CVE ID or the affected and fixed versions.
For IT people · Written by AI from 1 source · Wrong?
What to do
- Install the APT security update referenced in Ubuntu notice USN-8996-1 on Ubuntu systems.
- Check the Ubuntu notice for the affected and fixed APT versions before deciding which systems to prioritise.
Written by AI from the sources, checked against them
Full story timeline · 1 update
- Wed 4 NovemberUSN-8996-1: APT vulnerabilityUbuntu Security Notices
Who reported · 1 outlet
Ubuntu Security Notices