On 12/17/20 1:41 PM, stan via users wrote:
The deeper issue is that this illustrates how easy it is for skilled
programmers to insert malicious code into software so that it does
nefarious things while not being detected. That certainly affects
Fedora because it affects any system using complex software.
Yes... and how the malicious bits were delivered thru the update
mechanism...a nice reminder for us on how careful we need to be when
adding 3rd-party repos be it yum repos, flatpak repos, container repos
and so on.
--
Jorge