cybercrime.clubhttps://cybercrime.club/tags/debian/Infrastructure security news for people who build infrastructure.Hugo -- gohugo.ioen-usFri, 06 Nov 2026 11:04:01 -0400CVE-2026-109518: APT Retry Logic Lets On-Path Attackers Swap a Verified Package and Run Code as Roothttps://cybercrime.club/posts/apt-cve-2026-109518-retry-hard-link-verified-package-swap-root/Fri, 06 Nov 2026 11:04:01 -0400https://cybercrime.club/posts/apt-cve-2026-109518-retry-hard-link-verified-package-swap-root/A flaw in APT's download retry and hard-link handling lets a network attacker replace a package after signature verification, yielding root code execution on Debian and Ubuntu. Patches are out.vulnerabilities