Debian apt security update (man-in-the-middle)

Re:Debian apt security update (man-in-the-middle) by justicz on Wednesday November 04, 2026 @01:16PM (#50369413)

That sounds right to me, but FYI the APT maintainers themselves are recommending Acquire::Retries=0 as the mitigation since some mirrors might actually have redirects.

[ Parent | on HN ]

Re:Debian apt security update (man-in-the-middle) by winny314 on Wednesday November 04, 2026 @08:42PM (#50373995)

I saw the ubuntu announcement also defers to the `apt upgrade -o Acquire::Retries=0` recommendation

https://ubuntu.com/blog/apt-vulnerability-fixes-available

[ Parent | on HN ]