Man-in-the-middle arbitrary code execution in Debian’s apt
Man-in-the-middle arbitrary code execution in Debian’s apt
Max Justicz discovered a vulnerability in the APT package manager. APT can merge two different package downloads after an HTTP redirect gives them the same URI. Improper file handling when resuming an HTTP download allows a man-in-the-middle attacker to replace a package after verification, resulting in the execution of arbitrary code as root.
Max Justicz 在 APT 软件包管理器中发现了一个漏洞。当 HTTP 重定向导致两个不同的软件包下载具有相同的 URI 时，APT 可能会将它们合并。在恢复 HTTP 下载时，不当的文件处理方式允许中间人攻击者在验证后替换软件包，从而导致以 root 权限执行任意代码。
For the stable distribution (trixie), this problem has been fixed in version 3.0.4. Additionally this update addresses several out-of-bounds access issues. We recommend that you upgrade your apt packages.
对于稳定版发行版（trixie），此问题已在 3.0.4 版本中得到修复。此外，本次更新还解决了若干越界访问问题。我们建议您升级您的 apt 软件包。
For the detailed security status of apt please refer to its security tracker page at: https://security-tracker.debian.org/tracker/apt Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/
有关 apt 安全状态的详细信息，请参阅其安全追踪页面：https://security-tracker.debian.org/tracker/apt。关于 Debian 安全公告、如何将这些更新应用到您的系统以及常见问题的更多信息，请访问：https://www.debian.org/security/