Is It Safe to Download Fedora Right Now?
Asked by
MellowCedar42
I'm completely new to Linux and wanted to check something before installing Fedora. I heard that Fedora's source files may have been compromised and I'm not sure what incident people were referring to. Is it currently safe to download a Fedora ISO from an official or otherwise trusted source, and how can I verify that the file hasn't been tampered with?
Answers
For extra assurance, compare the downloaded ISO with Fedoraโs published checksum. You can also verify the checksum fileโs GPG signature, which confirms that the checksum itself came from Fedora and wasnโt altered.
Reply to this answer
The backdoor was found by an engineer before it could make it into the stable Fedora releases, so downloading the current official ISO is considered safe.
Reply to this answer
The incident people are usually referring to was an older backdoor issue and isnโt considered a problem with current Fedora releases.
Reply to this answer
You should be fine. Download Fedora from its official website or a trusted mirror, then verify the ISO before installing it.
Reply to this answer
Add your answer
Answers are reviewed before publication.
Related Discussions