Fedora reboots updates after hack

The Red Hat-supported Fedora Project has started issuing updates to its Linux distribution again, after a hiatus of several weeks caused by a hacker break-in.

US-based Red Hat, which in Australia has customers such as the National Australia Bank, warned in mid-August that hackers had broken into some of its servers that were involved with both its Red Hat Linux Enterprise offering and the Fedora Project.

Red Hat had already provided security check tools for its corporate customers, however it has taken several weeks for the Fedora Project to get back on its feet. ZDNet.com.au understands a number of smaller Australian businesses use Fedora, which is based on Red Hat code, in preference to paying support for Red Hat's corporate version of Linux.

Late yesterday, Fedora emailed its users to let them know that it would soon issue updates for its most recent Fedora 8 and 9 operating systems.

The updates were designed to switch users to a new, secure set of update servers so that they could start using a new set of encryption keys to verify downloads, wrote Red Hat engineer and Fedora project release coordinator Jesse Keating.

"Most users will simply need to apply the offered updates, and later apply any further updates, and verify/import the new [GNU Privacy Guard] key," he wrote.

The engineer said users should apply the first set of updates as soon as possible; then their systems would pick up a larger set of updates that they could download. Further steps would in future see the old encryption keys removed from use.

Advertisement

Talkback 2 comments

    Red Hat will still not say exactly what happenedAnonymous -- 12/09/08

    They simply say we saw it and we fixed it.
    This is not a FOSS atttitude.

    Red Hat will still not say exactly what happenedLeslie Satenstein -- 13/09/08 (in reply to #320111787)

    Bravo to RH for not disclosing to the world of FOSS and the world of HACKERS, what they discovered. Imagine if they had done so. Then how long would it be before debian type systems and others would have their packages compromised.

    If the problem was a SSH problem as discovered in Debian, then yes, the packages would not be comprimised and the problem would be in the world outside of the Linux developers from all distributions. .

Add your opinion


Latest Videos

Blogs

  • Chris Duckett PayPal launches Aussie developer program
    PayPal announced the opening of its certification program for Australian developers today, making Australia the first country outside of the US to offer certification.
  • Array Cash cow in a BigTinCan?
    Around one third of Australia's telcos have shut their doors over time, but that isn't stopping new ventures hoping to chip away at carriers' mobile call bonanza. By fighting carriers at the smartphone rather than the home phone, could the latest two contenders be onto something big?
  • Array A third of the way to a zettabyte
    This week on Twisted Wire we look at how internet usage is changing in Australia and around the world. How are we meeting this demand and how is the cost structure changing for the service provider?
  • More blogs »

Tags

Back to top

Featured