NEW → Critical RCE flaw (CVE-2019-3462) found in #Linux apt/apt-get, which could allow remote MiTM hackers to trick systems into installing altered or malicious packages as #root

https://thehackernews.com/2019/01/linux-apt-http-hacking.html …

Exploitation of such flaw could have been mitigated if APT was using HTTPS