USN-8996-1: APT vulnerability

Max Justicz discovered that APT incorrectly handled hard links when encountering redirects and retrying package downloads. A remote on-path attacker could possibly use this issue to trick APT into installing an unverified package and achieve remote code execution with root privileges.

Attributed to Ubuntu Security Notices · Limited verification; verify facts against the linked source. Read the full article on ubuntu.com.

Source published: 04 Nov 2026, 07:07 PM IST. Source facts take precedence over AI interpretation.