Debian apt security update (man-in-the-middle) (lists.debian.org)
52 points by SG- an hour ago
opengrass an hour ago
Congrats on the Rust rewrite I guess.
klez 11 minutes ago
I'm pretty sure apt is written in C++. Am I remembering wrong?
Palomides 6 minutes ago
parts of apt are being redone in rust, but anyway this seems to be a logic bug (in c++ code)
8organicbits an hour ago
I feel like they should release manual update instructions since the update mechanism is vulnerable. Although I see my systems already updated via unattended upgrades.
edit: On lobste.rs I see a recommendation for `apt download`: https://lobste.rs/s/h7bvma/man_middle_arbitrary_code_executi...
thewisenerd an hour ago
dupe (2h ago): https://news.ycombinator.com/item?id=50364814