Whonix 18.2.4.2 - Point Release!

[Patrick]

[SECURITY] [DSA 6607-1] [CVE-2026-109518] apt security update - man-in-the-middle arbitrary code execution

Was Whonix affected? Relays? I would post links to release notes but the forum won’t let me. Max Justicz discovered a vulnerability in the APT package manager. APT can merge two different package downloads after an HTTP redirect gives them the same URI. Improper file handling when resuming an HTTP download allows a man-in-the-middle attacker to replace a package after verification, resulting in the execution of arbitrary code as root. For the stable distribution (trixie), this problem has been…

[SECURITY] [DSA 6607-1] [CVE-2026-109518] apt security update - man-in-the-middle arbitrary code execution

Non-Qubes version 18.2.4.3 has the fix included, uploaded and download links updated.