Fedora converts package keys
After discovering that some Fedora servers have been illegally accessed, the Fedora Project is, as of today, converting the signing keys for Linux distribution packages.
The Red Hat sponsored Linux distribution became aware of the intrusion at the end of August. One of the servers compromised was a server used for signing Fedora packages and as a result, the project has decided to change the key. Project leader Paul Frields writes: "While there is no definitive evidence that the Fedora key has been compromised, because Fedora packages are distributed via multiple
third-party mirrors and repositories, we have decided to convert to new Fedora signing keys."
The project developers will use the so called Phase 1 to initiate updates for Fedora 8 and 9, which will begin the conversion. From today the new packages are available on the mirror servers. Among others, the packages 'fedora-release', 'package-kit' and 'gnome-package kit' are being re-vamped.
The user will have to verify and import the updates with the new GPG key. The software guides the user through the download process but instructions are also available at Fedora-Wiki. After that, the package management receives updates as newly signed packages from a new repository.
In Phase 2, Fedora developers will not only update, but will assign new keys to all Fedora 8 and 9 releases.
Issue 244/2021
Buy this issue as a PDF
News
-
Another New Linux Laptop has Arrived
Slimbook has released a monster of a Linux gaming laptop.
-
Mozilla VPN Now Available for Linux
The promised subscription-based VPN service from Mozilla is now available for the Linux platform.
-
Wayland and New App Menu Coming to KDE
The 2021 roadmap for the KDE desktop environment includes some exciting features and improvements.
-
Deepin 20.1 has Arrived
Debian-based Deepin 20.1 has been released with some interesting new features.
-
CloudLinux Commits Over 1 Million Dollars to CentOS Replacement
An open source, drop-in replacement for CentOS is on its way.
-
Linux Mint 20.1 Beta has Been Released
The first beta of Linux Mint, Ulyssa, is now available for downloading.
-
Manjaro Linux 20.2 has Been Unleashed
The latest iteration of Manjaro Linux has been released with a few interesting new features.
-
Patreon Project Looks to Bring Linux to Apple Silicon
Developer Hector Martin has created a patreon page to fund his work on developing a port of Linux for Apple Silicon Macs.
-
A New Chrome OS-Like Ubuntu Remix is Now Available
Ubuntu Web looks to be your Chrome OS alternative.
-
System76 Refreshes the Galago Pro Laptop
Linux hardware maker has revamped one of their most popular laptops.