Debian apt security update (man-in-the-middle)

3 comments

• 8organicbits 59 minutes ago
  I feel like they should release manual update instructions since the update mechanism is vulnerable. Although I see my systems already updated via unattended upgrades.

  edit: On lobste.rs I see a recommendation for `apt download`: https://lobste.rs/s/h7bvma/man_middle_arbitrary_code_executi...
• thewisenerd 58 minutes ago
  dupe (2h ago): https://news.ycombinator.com/item?id=50364814
• opengrass 46 minutes ago
  [flagged]
  [-]
  • klez 11 minutes ago
    I'm pretty sure apt is written in C++. Am I remembering wrong?
    [-]
    • Palomides 6 minutes ago
      parts of apt are being redone in rust, but anyway this seems to be a logic bug (in c++ code)