Debian and Ubuntu APT Flaw Lets MitM Attackers Swap Verified Packages and Run Code as Root
APT package manager flaw (CVE in Debian 12+) allows MitM attackers to replace verified packages with malicious code executing as root on retry.
Read original coverage