[SECURITY] [DSA 6607-1] apt security update

Max Justicz discovered a vulnerability in the APT package manager where an HTTP redirect can cause APT to merge two different package downloads, allowing a man-in-the-middle attacker to replace a package after verification and execute arbitrary code as root. Debian has released security update version 3.0.4 for the stable distribution to fix this issue alongside several out-of-bounds access issues, and recommends users upgrade their apt packages. Open article →