Dear deepin users and community members, A vulnerability has been discovered in APT, the package manager, that allows package integrity verification to be bypassed. Under specific conditions, an attacker positioned on the network path can substitute a package of their own making for one that has already passed verification, and have it executed with root privileges. Since APT is the component through which every system update passes, the impact of exploitation would be substantial. All users are advised to update as soon as possible.   Vulnerability details CVE ID: CVE-2026-109518 Description: When following an HTTP redirect, APT can merge two ...Read more