Debian apt security update (man-in-the-middle)

3 comments

• opengrass 45 minutes ago
  Congrats on the Rust rewrite I guess.
  [-]
  • klez 9 minutes ago
    I'm pretty sure apt is written in C++. Am I remembering wrong?
    [-]
    • Palomides 5 minutes ago
      parts of apt are being redone in rust, but anyway this seems to be a logic bug (in c++ code)
• 8organicbits 58 minutes ago
  I feel like they should release manual update instructions since the update mechanism is vulnerable. Although I see my systems already updated via unattended upgrades.

  edit: On lobste.rs I see a recommendation for `apt download`: https://lobste.rs/s/h7bvma/man_middle_arbitrary_code_executi...
• thewisenerd 56 minutes ago
  dupe (2h ago): https://news.ycombinator.com/item?id=50364814