APT Package Manager Vulnerability Affects Ubuntu and Debian – Update Required

CVE-2026-109518 hits APT package manager on Ubuntu and Debian systems. If you're running HTTP sources with retry enabled, a network attacker could slip unverified packages past your verification checks. Yeah, that's bad. Canonical and Debian have dropped patches (USN-8996-1 and DSA-6607-1), so grab the updates for your LTS versions ASAP—especially if you're running EC2 instances or containers.