Debian's apt can be tricked into swapping a package after it has been verified
DSA-6607-1 fixes CVE-2026-109518, found by Max Justicz: an HTTP redirect can leave two package downloads sharing a URI, and resume handling then lets a man-in-the-middle replace a package after verification, running code as root. Debian's tracker lists trixie fixed at 3.0.4 and bookworm at 2.6.2, with forky and sid at 3.3.5 in the package table and 3.3.6 listed only in the fixed-versions table. The same update also addresses out-of-bounds access issues in apt, and neither document carries a severity score.