Articles about web development, AI, and technology
Debian published DSA-6607-1 for apt, covering CVE-2026-109518. A man-in-the-middle attacker could replace a verified package after an HTTP redirect and run code as root. The stable trixie release is fixed in apt 3.0.4.
