I'm completely new to Linux, so please bear with me. I heard that some Fedora source files may have been compromised and I'm trying to understand what actually happened. Is it safe to download a Fedora ISO from the official download servers, and what kind of compromise were people referring to?
2 Answers
Yes, downloading Fedora from its official servers is considered safe. The backdoor was found before it could affect stable Fedora releases, so normal users should be fine installing the current official ISO.
For extra assurance, verify the ISO after downloading it. Compare its checksum with the value published by Fedora, and verify the accompanying GPG signature if possible. That confirms both that the file wasn’t corrupted or altered and that the checksum came from a trusted source.
Thanks, that clears things up. I’ll make sure to verify the checksum before installing.