The Debian Project has patched a security flaw in its software manager Apt that can be exploited by miscreants to execute commands as root on victims’ boxes as they update or install packages. The Linux distro’s curators have pushed out an fix to address CVE-2019-3462, a vulnerability uncovered and reported by researcher Max Justicz.

Read full news article on The Register