Fedora reboots updates after hack

By Renai LeMay, ZDNet.com.au
11 September 2008 11:35 AM
Tags: attack, compromised, fedora, hacker, linux, nab, red hat, update

The Red Hat-supported Fedora Project has started issuing updates to its Linux distribution again, after a hiatus of several weeks caused by a hacker break-in.

US-based Red Hat, which in Australia has customers such as the National Australia Bank, warned in mid-August that hackers had broken into some of its servers that were involved with both its Red Hat Linux Enterprise offering and the Fedora Project.

Red Hat had already provided security check tools for its corporate customers, however it has taken several weeks for the Fedora Project to get back on its feet. ZDNet.com.au understands a number of smaller Australian businesses use Fedora, which is based on Red Hat code, in preference to paying support for Red Hat's corporate version of Linux.

Late yesterday, Fedora emailed its users to let them know that it would soon issue updates for its most recent Fedora 8 and 9 operating systems.

The updates were designed to switch users to a new, secure set of update servers so that they could start using a new set of encryption keys to verify downloads, wrote Red Hat engineer and Fedora project release coordinator Jesse Keating.

"Most users will simply need to apply the offered updates, and later apply any further updates, and verify/import the new [GNU Privacy Guard] key," he wrote.

The engineer said users should apply the first set of updates as soon as possible; then their systems would pick up a larger set of updates that they could download. Further steps would in future see the old encryption keys removed from use.

Advertisement

Talkback 2 comments

    Red Hat will still not say exactly what happened Anonymous -- 12/09/08

    They simply say we saw it and we fixed it.
    This is not a FOSS atttitude.

    Red Hat will still not say exactly what happened Leslie Satenstein -- 13/09/08 (in reply to #320111787)

    Bravo to RH for not disclosing to the world of FOSS and the world of HACKERS, what they discovered. Imagine if they had done so. Then how long would it be before debian type systems and others would have their packages compromised.

    If the problem was a SSH problem as discovered in Debian, then yes, the packages would not be comprimised and the problem would be in the world outside of the Linux developers from all distributions. .

Add your opinion

Latest Videos

Blogs

  • Darren Greenwood Telecom NZ savings damage prospects
    If Telecom NZ wants to have any of the NZ$1.5 billion the government intends to spend on its new broadband network, it had better think long and hard before offshoring 1500 jobs.
  • Array iiNet: The whys and what nows
    Last week the Federal Court ruled that internet service providers are not responsible for copyright violation by their customers. This is an important decision not just for iiNet, which spent around $4 million defending the case, but for all ISPs in Australia and, indeed, globally.
  • Array Govt, hurry up with releasing data
    A programmer scraped data from the My School website to make some really cool heat maps showing regions of smart schools — no thanks to the government, which didn't supply the data in any useful kind of format.
  • More blogs »

Tags

Back to top

Featured