special instructions required to securely update because of apt security update [DSA 4371-1]

[Patrick]

@Goldi

Now I run dpkg -l | grep “commandline package manager”. and get reply: ii apt 1.4.9 amd64 commandline package manager.
Does this mean all is well?

Means you probably made the upgrade without the special instructions and the system might have been compromised during the upgrade.

If you want have higher certainty you’d have to apply disaster recovery steps but we don’t have that documented yet.

Document recovery procedure after compromise

@Segalla

Naive question: how do we mere mortal end users check that our Whonix installs weren’t already rooted by NSA using this apt vulnerability?

You don’t.

Frequently Asked Questions - Whonix FAQ