Debian and Ubuntu APT flaw enables root code execution in package retries
A flaw in APT affects Debian and Ubuntu package downloads when an attacker can alter traffic between the package manager and the package server. The issue lets a checked package be replaced during a retry, and the attacker’s code can run as root. Advisories from Debian, Ubuntu, and APT’s developers were published on November 4. APT retries failed downloads by default from Debian 12 and Ubuntu 22.04 onward, which creates…