Debian Ubuntu patch APT flaw allowing root via redirects
CVE-2026-109518 in APT lets MITM attackers install packages with root privileges using HTTP redirects and retries.
Stories per day · 30 days
2 RSS
6 stories, newest first · one card per story
Stories tagged #package-manager
Hex 2.5.2 released with security fixes
Hex 2.5.2 ships security fixes for the Elixir package manager, with advisories posted on GitHub.
USN-8773-1: GNU Guix vulnerability
Ubuntu issued USN-8773-1 fixing a GNU Guix flaw that exposed build outputs to local users before metadata finalization, enabling possible privilege escalation.
Homebrew 7.0.0 Adds Built-In Vulnerability Scanner and Stronger Package Sandboxing
Homebrew 7.0.0 ships a native brew vulns scanner, OSV-backed advisory database, stronger sandboxing, and fixes a sandbox-escape issue.
Homebrew 7.0.0 is out, here’s what changed for security
Homebrew 7.0.0 closes eight security advisories, including a High sudo execution bug fixed in 6.0.12, and ships brew vulns vulnerability scanning.
Homebrew 7.0.0 gets built-in GUI, better security controls
Homebrew 7.0.0 adds a built-in vulnerability scanner (brew vulns), a Homebrew advisory database, stronger sandboxing, and the BrewUI GUI.