A newly disclosed vulnerability in the APT package manager used by Debian and Ubuntu enables MitM attackers to substitute verified packages with malicious ones. Exploiting the automatic download retry mechanism, attackers can execute arbitrary code with root privileges on affected systems.
READ THE ORIGINAL ARTICLE AT THEHACKERNEWS.COM →