I'm half tempted to downvote this post, but I'll hold off because I'm going to assume you're just acting out of concern and not trying to clickbait.

I've reviewed the CVE you linked. There is absolutely no evidence apt was compromised. The only thing the bug report is saying is that apt was failing to check signatures properly on packages installed by it.

That is a WORLD away from what you're saying which was that apt itself had somehow been compromised.

Here's how to deal with this problem if you're on an APT based distro.
Open a command line and type

sudo apt update && sudo apt upgrade -y && reboot now

It'll update apt to one that's checking signatures properly and reboot your computer.