Debian has just released a special point release specifically to address a vulnerability in apt.
More details:
https://forums.scotsnewsletter.com/index.php?showtopic=22937&st=1500#entry458542
https://forums.scotsnewsletter.com/index.php?showtopic=22937&st=1500#entry458531