Debian apt security update: man-in-the-middle arbitrary code execution
Summary
Debian issued DSA-6607-1 to fix a MITM-arbitrary code execution vulnerability in apt (CVE-2026-109518). An attacker could replace a package after verification via HTTP redirects, and users are advised to upgrade apt to 3.0.4; patch details and tracking are provided.