Debian and Ubuntu APT Flaw Lets MitM Attackers Swap Verified Packages and Run Code as Root
A flaw in APT, the package manager for Debian and Ubuntu, allows an attacker who can modify package downloads to swap a checked package for their own. The attacker's code then runs as root, according to advisories thatΒ
A flaw in APT, the package manager for Debian and Ubuntu, allows an attacker who can modify package downloads to swap a checked package for their own.
The attacker's code then runs as root, according to advisories thatΒ Debian,Β Ubuntu, andΒ APT's developersΒ published on November 4. The attack needs APT to retry failed downloads, which it does by default from Debian 12 and
π° Read the original article on The Hacker News
Originally published by The Hacker News. Aggregated on AIWithGhost for educational purposes β full credit and traffic to the original publisher.