Debian and Ubuntu APT Flaw Lets MitM Attackers Swap Verified Packages and Run Code as Root

November 4, 2026 · 5:00 pm 1 sources

Image: The Hacker News

Coverage

More coverage

• Debian and Ubuntu APT Flaw Lets MitM Attackers Swap Verified Packages and Run Code as Root
  The Hacker News · November 4, 2026 17:00
  A flaw in APT, the package manager for Debian and Ubuntu, allows an attacker who can modify package downloads to swap a checked package for their own. The attacker's code then runs as root, according to advisories that Debian, Ubuntu, and APT's developers published on November 4. The attack needs…