Debian apt security update (DSA-6607-1) fixes MITM vulnerability (CVE-2026-109518)

November 4, 2026 at 15:04

Quality: 9/10 Relevance: 9/10

Summary

Debian Security Advisory DSA-6607-1 discloses a vulnerability in apt (CVE-2026-109518) allowing a MITM attacker to replace a package after an HTTP redirect, potentially executing code as root. The issue is fixed in apt 3.0.4 for the stable 'trixie' release; users should upgrade and consult the Debian security tracker for details.

Security Vulnerability & CVE Linux

Read Original Article