Rappel de l'intrusion des serveurs Fedora et Red Hat :
http://linuxfr.org/~patrick_g/27082.html
Les détails de l'intrusion sur les serveurs Fedora :
http://www.redhat.com/archives/fedora-announce-list/2009-Mar(...)
"Bonne nouvelle", ce n'était pas l'exploitation d'une faille de sécurité :
The compromise was not the result of a software vulnerability, and as we have previously stated, our investigation has revealed no such vulnerabilities. Instead, the intruder took a copy of a SSH private key which was not secured with a passphrase from a system outside the Fedora infrastructure.
(…)
Journal (Enfin) les détails sur l'intrusion des serveurs Fedora
31
mar.
2009



