Debian and Ubuntu APT Flaw Lets MitM Attackers Swap Verified Packages and Run Code as Root
Source: The Hacker News ·
A flaw in APT, the package manager for Debian and Ubuntu, allows an attacker who can modify package downloads to swap a checked package for their own. The attacker's code then runs as root, according to advisories that Debian, Ubuntu, and APT's developers published on November 4. The attack needs APT to retry failed downloads, which it does by default from Debian 12 and
Frequently Asked Questions
What is Debian and Ubuntu APT Flaw Lets MitM Attackers Swap Verified Packages and Run Code as Root?
Debian and Ubuntu APT Flaw Lets MitM Attackers Swap Verified Packages and Run Code as Root is a article discovery curated from The Hacker News. A flaw in APT, the package manager for Debian and Ubuntu, allows an attacker who can modify package downloads to swap a checked package for their own. The attacker's code then runs
How can I access or experience this?
You can experience this content directly on its original host (The Hacker News) by clicking the "Open Original" button.
Where does this content come from?
Curated from The Hacker News by the OnSuggest team to surface the most interesting and serendipitous content on the web.
More like this
All Technology discoveries →Doubling down on solar power density with the Arduino® GIGA R1™ WiFi board
As global adoption of solar energy continues to accelerate, researchers and engineers face a fundamental spatial challenge: how do you generate more electricity without consuming more land? Cosimo Borrello and Ferdinando Gioia – co-founders of the Italian photovoltaic technology startup A.M.P.S. – together with a team of researchers from the “Mediterranea” University of Reggio Calabria […] The post Doubling down on solar power density with the Arduino® GIGA R1™ WiFi board appeared first on Arduino Blog .
Unveiled at ROSCon: the easiest way to bring Arduino I/O into ROS 2
If you’ve ever built a robot with ROS 2, you know the classic architectural split: a powerful computer running Linux handles high-level navigation, mapping, and planning, while an external microcontroller handles the deterministic, real-time job of toggling GPIOs, reading sensors, and driving motors. Getting those two worlds to talk to each other usually means wrestling […] The post Unveiled at ROSCon: the easiest way to bring Arduino I/O into ROS 2 appeared first on Arduino Blog .
iroh comes to our RP2350 microcontroller
Clever software that allows your devices, apps, and cloud instances to form a secure and reliable mesh network. The post iroh comes to our RP2350 microcontroller appeared first on Raspberry Pi .
The Python on Microcontrollers Newsletter: subscribe for free
The Python for Microcontrollers Newsletter is the place for the latest news involving Python on hardware (microcontrollers AND single board computers like Raspberry Pi). This ad-free, spam-free weekly email is filled with CircuitPython, MicroPython, and Python information that you may have missed, all in one place! You get a summary of all the software, events, projects, and the latest hardware worldwide once a week, no […]
The Raspberry Pi cinema camera
Raspberry Pi Official Magazine covered a modular cinema camera built on Raspberry Pi hardware, inspired by the CinePi project. The body comes as either a 3D print or aluminium, so you can build the version that fits your budget. It records HD, FHD, 4K and open gate, which keeps the field of view instead of […]
The Python on Microcontrollers Newsletter: subscribe for free
The Python for Microcontrollers Newsletter is the place for the latest news involving Python on hardware (microcontrollers AND single board computers like Raspberry Pi). This ad-free, spam-free weekly email is filled with CircuitPython, MicroPython, and Python information that you may have missed, all in one place! You get a summary of all the software, events, projects, and the latest hardware worldwide once a week, no […]