Ubuntu LTS point releases proposed over critical APT flaw
A community proposal seeks 22.04.6 and 24.04.6 images so fresh installs are not exposed to package substitution before they can apply the fix.
By chroot#apt
Debian patches apt RCE that let MITM swap verified packages
A man-in-the-middle attacker could replace a package after verification and run code as root when HTTP retries were enabled.
By tarpit