I'm completely new to Linux and wanted to check something before installing Fedora. I heard that Fedora's source files may have been compromised and I'm not sure what incident people were referring to. Is it currently safe to download a Fedora ISO from an official or otherwise trusted source, and how can I verify that the file hasn't been tampered with?
4 Answers
You should be fine. Download Fedora from its official website or a trusted mirror, then verify the ISO before installing it.
The incident people are usually referring to was an older backdoor issue and isn’t considered a problem with current Fedora releases.
The backdoor was found by an engineer before it could make it into the stable Fedora releases, so downloading the current official ISO is considered safe.
For extra assurance, compare the downloaded ISO with Fedora’s published checksum. You can also verify the checksum file’s GPG signature, which confirms that the checksum itself came from Fedora and wasn’t altered.
Related Questions
Can't Load PhpMyadmin On After Server Update
Redirect www to non-www in Apache Conf
How To Check If Your SSL Cert Is SHA 1
Windows TrackPad Gestures