1152704

CVE-2026-109518: APT Download Verification Bypass Explained

CVE-2026-109518 lets an on-path attacker overwrite a verified .deb via hard links, redirects, and retries. Fixed in apt 3.0.4. Patch steps and more