#package-managers

Debian patches apt RCE that let MITM swap verified packages

A man-in-the-middle attacker could replace a package after verification and run code as root when HTTP retries were enabled.