Debian apt security update: man-in-the-middle arbitrary code execution