Debian and Ubuntu APT flaw enables root code execution

A vulnerability in APT package manager allows man-in-the-middle attackers to swap verified packages with malicious ones that execute as root. Affecting Debian and Ubuntu systems with default retry behavior, the flaw exploits failed download retries. APT developers have released patches. Users should update APT immediately and ensure secure network configurations.