Debian apt security update (man-in-the-middle)

Re:Debian apt security update (man-in-the-middle) by 8organicbits on Wednesday November 04, 2026 @10:17AM (#50366797)

I feel like they should release manual update instructions since the update mechanism is vulnerable. Although I see my systems already updated via unattended upgrades.

[ Parent | on HN ]

Re:Debian apt security update (man-in-the-middle) by xeyownt on Wednesday November 04, 2026 @03:22PM (#50370974)

CVE says you need a non zero retries, so you can use Acquire::Retries=0 to avoid the issue completely (unless your packages were modified already of course).

[ Parent | on HN ]