Recently, a vulnerability has been found in apt that allows arbitrary code execution, see here.
Is it reasonable just to update the system? Or we should be worried that this has been used and so probably reinstall?
Note that debian suggest to update doing
sudo apt update -o Acquire::http::AllowRedirect=false
sudo apt upgrade -o Acquire::http::AllowRedirect=false
Is it dangerous to update normally, doing (as I have already done being unaware of the problem...)
sudo apt update
sudo apt upgrade