A flaw in APT, the package manager for Debian and Ubuntu, allows an attacker who can modify package downloads to swap a checked package for their own. The attacker's code then runs as root, according to advisories that Debian, Ubuntu, and APT's developers published on November 4. The attack needs APT to retry failed downloads, which it does by... Weiterlesen: Debian and Ubuntu APT Flaw Lets MitM Attackers Swap Verified Packages…
Intelligence View
⚡ tsecurity.de Intelligence
Debian and Ubuntu APT Flaw Lets MitM Attackers Swap Verified Packages and Run Code as Root
A flaw in APT, the package manager for Debian and Ubuntu, allows an attacker who can modify package downloads to swap a checked package for their own. The…
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest — free The top security news daily · unsubscribe anytime
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
No reader ratings yet
Was this page helpful?
0
Powered by tsecurity.de
tsecurity.de Hub
This story across other sources
Related story clusters & sources (vector AI)
8 sources
Google Fixes 216 Android Vulnerabilities: What Users Should Know
7 more sources
TTechRepublic6 hours agoGoogle Rolls Out Android Auto Fix for Samsung Galaxy Phones TTechRepublic3 hours agoMicrosoft Authenticator’s Android Backup Switch Is Coming in January — Google One Takes Over TTechRepublic3 hours agoGoogle Meet Adds Custom Policy Notices Before Users Join Calls TTechRepublic2 hours agoGoogle Confirms Android Family Hub — What’s Inside the New Settings Menu? Nnetzwelt.de5 hours agoCloud ohne Mitleser: Gratis-Tool Cryptomator verschlüsselt Dropbox- und Google-Drive-Dateien - neue Android Beta ist da VVulDB Updates4 hours agoCVE-2026-28586 | Google Android 14/15/16/16-qpr2 AppOpsService.java permission
+1
7 sources
Best early Black Friday MacBook deals: 5 I’d recommend shopping now
6 more sources
ZZDNET2 hours agoBest early Black Friday MacBook deals: 5 I’d recommend shopping now CCNET1 hour agoDreame’s Aero Pro Wet-Dry Vac Is Down to $314 Ahead of Black Friday With CNET’s Exclusive Code Nnetzwelt.de4 hours agoBlack Friday kann warten: Peugeots fettes E-SUV mit sieben Sitzen kostet im Leasing unter 280 Euro ZZDNET2 hours agoBest early Black Friday MacBook deals: 5 I’d recommend shopping now ZZDNET2 hours agoBest early Black Friday MacBook deals: 5 I’d recommend shopping now AAppleInsider News2 hours agoBest early Black Friday MacBook deals start at $1,099
6 sources
GitHub Release: mastodon/mastodon v5.0.0-beta.1 (04.11.2026)
5 more sources
GGitHub1 hour agoGitHub Release: google/clusterfuzz v2.47.0 (04.11.2026) GGitHub22 min. agoGitHub Release: openai/codex vrust-v0.167.0-alpha.3.1 (04.11.2026) GGitHub48 min. agoGitHub Release: matomo-org/matomo v6.1.0-alpha.20261104180410 (04.11.2026) GGitHub2 hours agoGitHub Release: dbeaver/dbeaver v26.2.0.1 (04.11.2026) GGitHub40 min. agoGitHub Release: openclaw/openclaw vrelease-publish/0fa486c39fba-1793818311 (04.11.2026)
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/en/4320014/linux-security-tips/debian-and-ubuntu-apt-flaw-lets-mitm-attackers-swap-verified-packages-and-run-code-as-root/