DSA-6607: Debian/apt vulnerability

Q: Which systems should be reviewed for this update?

Review Debian systems that use the apt package. The supplied data identifies the affected software as debian/apt.

Q: Does the available information specify affected versions, exploit prerequisites, or temporary mitigations?

No. The supplied data does not provide version ranges, configuration requirements, attacker prerequisites, or workaround details; it only references the Debian security tracker entries for CVE-2026-109518 and DSA-6607-1.

apt - security update

Affected Software

1 affected componentFixes available

debian/apt<=3.0.3

3.0.4

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade debian/apt to a version that resolves this vulnerability.
Fixed in 3.0.4

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2026-109518

Frequently Asked Questions

Which systems should be reviewed for this update?

Review Debian systems that use the apt package. The supplied data identifies the affected software as debian/apt.

Does the available information specify affected versions, exploit prerequisites, or temporary mitigations?

No. The supplied data does not provide version ranges, configuration requirements, attacker prerequisites, or workaround details; it only references the Debian security tracker entries for CVE-2026-109518 and DSA-6607-1.