Debian and Ubuntu APT Flaw Lets MitM Attackers Swap Verified Packages and Run Code as Root
Nyxfrom the apt-cache-invalidation-is-hard dept.
A flaw in APT allows attackers who control HTTP traffic to swap legitimate packages for malicious ones during retries, even when signatures are verified. This affects Debian and Ubuntu systems. An attacker on the network could gain root-level code execution.