Fedora reboots updates after hack

By Renai LeMay, ZDNet.com.au
11 September 2008 11:35 AM
Tags: attack, compromised, fedora, hacker, linux, nab, red hat, update

The Red Hat-supported Fedora Project has started issuing updates to its Linux distribution again, after a hiatus of several weeks caused by a hacker break-in.

US-based Red Hat, which in Australia has customers such as the National Australia Bank, warned in mid-August that hackers had broken into some of its servers that were involved with both its Red Hat Linux Enterprise offering and the Fedora Project.

Red Hat had already provided security check tools for its corporate customers, however it has taken several weeks for the Fedora Project to get back on its feet. ZDNet.com.au understands a number of smaller Australian businesses use Fedora, which is based on Red Hat code, in preference to paying support for Red Hat's corporate version of Linux.

Late yesterday, Fedora emailed its users to let them know that it would soon issue updates for its most recent Fedora 8 and 9 operating systems.

The updates were designed to switch users to a new, secure set of update servers so that they could start using a new set of encryption keys to verify downloads, wrote Red Hat engineer and Fedora project release coordinator Jesse Keating.

"Most users will simply need to apply the offered updates, and later apply any further updates, and verify/import the new [GNU Privacy Guard] key," he wrote.

The engineer said users should apply the first set of updates as soon as possible; then their systems would pick up a larger set of updates that they could download. Further steps would in future see the old encryption keys removed from use.

Advertisement

Talkback 2 comments

    Red Hat will still not say exactly what happened Anonymous -- 12/09/08

    They simply say we saw it and we fixed it.
    This is not a FOSS atttitude.

    Red Hat will still not say exactly what happened Leslie Satenstein -- 13/09/08 (in reply to #320111787)

    Bravo to RH for not disclosing to the world of FOSS and the world of HACKERS, what they discovered. Imagine if they had done so. Then how long would it be before debian type systems and others would have their packages compromised.

    If the problem was a SSH problem as discovered in Debian, then yes, the packages would not be comprimised and the problem would be in the world outside of the Linux developers from all distributions. .

Add your opinion

Latest Videos

Sponsored content

Power Centre - Content from our premier sponsors

Blogs

  • Suzanne Tindal Love me, tender
    Considering how expensive and drawn-out tender processes can be to solve problems that might be very immediate, it's little wonder that the Victorian Police IT department tried to work the tender exemptions system.
  • Array 2009 funding drought rolls on
    For Australian start-ups looking for venture capital, 2009 was a very bad year. 2010 may be no better.
  • Array Can not-so-smart meters help the NBN?
    It was interesting to witness Conroy's recent enthusiasm to spruik the NBN's role in supporting the Smart Grid, Smart City initiative. What a pity that Conroy hadn't yet seen the damning report from the Victorian auditor-general about that state's smart-meter roll-out.
  • More blogs »

Tags

Back to top

Featured