Debian and Ubuntu APT Flaw Lets MitM Attackers Swap Verified Packages and Run Code as Root
A flaw in APT, the package manager for Debian and Ubuntu, lets an attacker who can modify package downloads swap a checked package for their own, and the attacker's code then runs as root, according to advisories Debian, Ubuntu, and APT's developers...