« Your Treacherous Clipboard | Main | Behavioral Credit Scoring Opens New Vistas in Niche Cards »
August 22, 2008
Fedora's "Illegally Accessed" Servers
From the Fedora announcement list:
“Last week we discovered that some Fedora servers were illegally accessed. The intrusion into the servers was quickly discovered, and the servers were taken offline.
“Security specialists and administrators have been working since then to analyze the intrusion and the extent of the compromise as well as reinstall Fedora systems. We are using the requisite outages as an opportunity to do other upgrades for the sake of functionality as well as security. Work is ongoing, so please be patient. Anyone with pertinent information relating to this event is asked to contact fedora-legal redhat com
“One of the compromised Fedora servers was a system used for signing Fedora packages. However, based on our efforts, we have high confidence that the intruder was not able to capture the passphrase used to secure the Fedora package signing key. Based on our review to date, the passphrase was not used during the time of the intrusion on the system and the passphrase is not stored on any of the Fedora servers.
The message is titled “Infrastructure report, 2008-08-22 UTC 1200.”
I like “illegally accessed.” That way it sounds like something besides “compromised,” which is what most people say when an intruder manages to get into a server he or she shouldn’t.
The subject of the mail is hardly begging to be read, either.
(Link)
Update: Red Hat’s critical ssh update is worth noting here, too.
Posted by mhall at 12:50 PM | Add Comment
Leave a comment