Debian patches APT flaw that let network attackers swap verified packages for root code

Researcher Max Justicz, now Charge Robotics cofounder and CTO, found CVE-2026-109518 in APT; Debian fixed trixie in apt 3.0.4.

RuntimeWire · 2026-11-04T13:29:24.994Z