Debian Fixes Software Installer Flaw That Let Hackers Swap Programs

Debian has released fix DSA-6607-1, published November 4, 2026, for a flaw in apt, its software installer. Max Justicz found it. A hacker positioned between a computer and a download server could swap in a different program after the safety check, then run code with full control of the machine. Debian urges upgrades; the trixie fix is apt 3.0.4.