FAKE: Fedora Extras shipped popular package with rootkit and more than ten thousands systems were infected (was Re: Summary from last weeks FESCo meeting)

Jose' Matos jamatos at fc.up.pt
Thu Jun 1 15:07:27 UTC 2006


On Thursday 01 June 2006 16:00, Thorsten Leemhuis wrote:
> I would even sleep really good if there would be a mechanism that checks
> md5sum's against upstream packages. But that's quite complicated to
> implement and might be to much overhead.

  Then change that from md5 to sha1 if you want to be in the safe side. :-)

-- 
José Abílio




More information about the fedora-extras-list mailing list