{"id":184170,"date":"2026-11-06T23:40:44","date_gmt":"2026-11-06T21:40:44","guid":{"rendered":"https:\/\/prohoster.info\/blog\/news\/uyazvimost-v-paketnom-menedzhere-apt-pozvolyayushhaya-sovershit-mitm-ataku-dlya-polucheniya-prav-root"},"modified":"2026-11-06T23:40:54","modified_gmt":"2026-11-06T21:40:54","slug":"apt-package-manager-vulnerability-allows-attackers-to-gain-root-privileges-via-mitm-attacks","status":"publish","type":"post","link":"https:\/\/prohoster.info\/lv\/blog\/news\/apt-package-manager-vulnerability-allows-attackers-to-gain-root-privileges-via-mitm-attacks","title":{"rendered":"Vulnerability in the APT package manager that allows a MITM attack to obtain root privileges","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Irlaista labojumus APT pakot\u0146u p\u0101rvald\u012bbas r\u012bkam, kuros nov\u0113rsta ievainojam\u012bba (CVE-2026-109518), kas \u013cauj apiet p\u0101rbaudi, lejupiel\u0101d\u0113jot failus, un ieg\u016bt iesp\u0113ju izpild\u012bt savu kodu ar root ties\u012bb\u0101m. Kopum\u0101 ir izveidoti 13 laidieni, kas aptver visus izlaistos p\u0113d\u0113jo 10 gadu laik\u0101 APT l\u012bnij\u0101s, s\u0101kot no 1.2.x. Atjaunin\u0101jumi, kas nov\u0113r\u0161 \u0161o ievainojam\u012bbu, jau ir sagatavoti da\u017e\u0101d\u0101m Debian, Ubuntu un Deepin versij\u0101m. Noklus\u0113juma konfigur\u0101cij\u0101 probl\u0113ma skar visus laidienus, s\u0101kot no Debian 12 un Ubuntu 22.04. Vec\u0101ku versiju izmanto\u0161ana ir iesp\u0113jama, ja parametram Acquire::Retries ir iestat\u012bta v\u0113rt\u012bba, kas p\u0101rsniedz 0.<\/p>\n

Uzbruc\u0113js, kur\u0161 instal\u0101cijas laik\u0101 var\u0113tu iejaukties HTTP satiksm\u0113 starp lietot\u0101ju un pakot\u0146u repozit\u0101ru, var pan\u0101kt aizst\u0101tas, nev\u0113rt\u0113tas pakotnes instal\u0113\u0161anu, kas \u013cauj ieg\u016bt root ties\u012bbas sist\u0113m\u0101. Uzbrukumu var veikt, piem\u0113ram, caur spogu\u013ciem, starpniekserveriem, bezvadu piek\u013cuves punktiem vai pakalpojumu sniedz\u0113ju v\u0101rtiem. Ievainojam\u012bbas zi\u0146ojum\u0101 deta\u013cas netiek piemin\u0113tas, tikai nor\u0101d\u012bts, ka probl\u0113mu izrais\u012bjusi nepareiza darbs ar cietaj\u0101m sait\u0113m. P\u0113c pla\u0161\u0101ka labojuma, kur\u0101 faila atv\u0113r\u0161ana ar flagu FileFd::Empty (O_TRUNC) tika aizst\u0101ta ar FileFd::Exclusive (O_EXCL), attiec\u012bb\u0101 uz p\u0101rtraukto lejupiel\u0101des atjauno\u0161anu uzbruc\u0113js var\u0113tu pan\u0101kt datu p\u0101rrakst\u012b\u0161anu, par kuriem jau iepriek\u0161\u0113jo lejupiel\u0101des laik\u0101 tika veikta hash\u0113\u0161ana.
\n
Avots: opennet.lv<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u044f \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0430\u043a\u0435\u0442\u0430\u043c\u0438 APT, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2026-109518), \u0434\u0430\u044e\u0449\u0430\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043e\u0431\u043e\u0439\u0442\u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u0440\u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0435 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0441\u0432\u043e\u0435\u0433\u043e \u043a\u043e\u0434\u0430 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root. \u0412\u0441\u0435\u0433\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043e 13 \u0432\u044b\u043f\u0443\u0441\u043a\u043e\u0432, \u043e\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u044e\u0449\u0438\u0445 \u0432\u0441\u0435 \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 10 \u043b\u0435\u0442 \u0432\u0435\u0442\u043a\u0438 APT, \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 1.2.x. \u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0441 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0442\u0430\u043a\u0436\u0435 \u0443\u0436\u0435 \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":10,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-184170","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Ievainojam\u012bba APT pakot\u0146u p\u0101rvaldniek\u0101, kas \u013cauj veikt MITM uzbrukumu, lai ieg\u016btu root ties\u012bbas | ProHoster","description":"Irlaista labojumus APT pakot\u0146u p\u0101rvald\u012bbas r\u012bkam, kuros nov\u0113rsta ievainojam\u012bba (CVE-2026-109518), kas \u013cauj apiet p\u0101rbaudi, lejupiel\u0101d\u0113jot failus, un ieg\u016bt iesp\u0113ju izpild\u012bt savu.","canonical_url":"https:\/\/prohoster.info\/lv\/blog\/news\/apt-package-manager-vulnerability-allows-attackers-to-gain-root-privileges-via-mitm-attacks","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"lv_LV","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u0430\u043a\u0435\u0442\u043d\u043e\u043c \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440\u0435 APT, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0441\u043e\u0432\u0435\u0440\u0448\u0438\u0442\u044c MITM-\u0430\u0442\u0430\u043a\u0443 \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u0430\u0432 root | ProHoster","og:description":"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u044f \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0430\u043a\u0435\u0442\u0430\u043c\u0438 APT, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2026-109518), \u0434\u0430\u044e\u0449\u0430\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043e\u0431\u043e\u0439\u0442\u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u0440\u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0435 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0441\u0432\u043e\u0435\u0433\u043e.","og:url":"https:\/\/prohoster.info\/lv\/blog\/news\/apt-package-manager-vulnerability-allows-attackers-to-gain-root-privileges-via-mitm-attacks","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-11-06T21:40:44+00:00","article:modified_time":"2026-11-06T21:40:54+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts\/184170","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/comments?post=184170"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts\/184170\/revisions"}],"predecessor-version":[{"id":184171,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts\/184170\/revisions\/184171"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/media?parent=184170"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/categories?post=184170"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/tags?post=184170"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}