Fedora reboots updates after hack

By Renai LeMay, ZDNet.com.au
11 September 2008 11:35 AM
Tags: attack, compromised, fedora, hacker, linux, nab, red hat, update

The Red Hat-supported Fedora Project has started issuing updates to its Linux distribution again, after a hiatus of several weeks caused by a hacker break-in.

US-based Red Hat, which in Australia has customers such as the National Australia Bank, warned in mid-August that hackers had broken into some of its servers that were involved with both its Red Hat Linux Enterprise offering and the Fedora Project.

Red Hat had already provided security check tools for its corporate customers, however it has taken several weeks for the Fedora Project to get back on its feet. ZDNet.com.au understands a number of smaller Australian businesses use Fedora, which is based on Red Hat code, in preference to paying support for Red Hat's corporate version of Linux.

Late yesterday, Fedora emailed its users to let them know that it would soon issue updates for its most recent Fedora 8 and 9 operating systems.

The updates were designed to switch users to a new, secure set of update servers so that they could start using a new set of encryption keys to verify downloads, wrote Red Hat engineer and Fedora project release coordinator Jesse Keating.

"Most users will simply need to apply the offered updates, and later apply any further updates, and verify/import the new [GNU Privacy Guard] key," he wrote.

The engineer said users should apply the first set of updates as soon as possible; then their systems would pick up a larger set of updates that they could download. Further steps would in future see the old encryption keys removed from use.

Advertisement

Talkback 2 comments

    Red Hat will still not say exactly what happened Anonymous -- 12/09/08

    They simply say we saw it and we fixed it.
    This is not a FOSS atttitude.

    Red Hat will still not say exactly what happened Leslie Satenstein -- 13/09/08 (in reply to #320111787)

    Bravo to RH for not disclosing to the world of FOSS and the world of HACKERS, what they discovered. Imagine if they had done so. Then how long would it be before debian type systems and others would have their packages compromised.

    If the problem was a SSH problem as discovered in Debian, then yes, the packages would not be comprimised and the problem would be in the world outside of the Linux developers from all distributions. .

Add your opinion

Latest Videos

Sponsored content

Power Centre - Content from our premier sponsors

Blogs

  • Renai LeMay How reliable is IP telephony?
    Have you ever heard a weird kind of hissing, crackling or popping noise when calling someone on an IP telephony line? How rare is the phenomenon these days?
  • Array Forget the NBN, 100Mbps is already here
    Telstra and TransACT will shortly begin offering 100Mbps broadband to many customers. By moving early, the companies have not only raised the bar for Australia's broadband services, but thrown down a challenge to a government that now faces increased pressure to deliver the NBN as promised.
  • Array IT: Govt's cost-cutting bitch
    The government needs to stop looking at IT as a necessary evil or the place to remove costs when the Treasurer comes calling.
  • More blogs »

Tags

Back to top

Featured