Editing Fedora Project (section)

=== Security intrusion ===
In August 2008, several Fedora servers were compromised. Upon investigation it was found that one of the compromised servers was used for signing Fedora update [[Software package (installation)|packages]]. The Fedora Project stated that the attacker(s) did not get the package [[Digital signature#Authentication|signing key]] which could be used to introduce malicious software onto Fedora users' systems through the update process. Project administrators performed checks on the software and did not find anything to suggest that a [[Trojan horse (computing)|Trojan horse]] had been introduced into the software. As a precaution the project converted to new package signing keys.<ref>{{cite web|url=http://www.securityfocus.com/news/11532 |title=Security Breach—securityfocus.com}}</ref><ref>{{cite web|url=https://www.redhat.com/archives/fedora-announce-list/2008-August/msg00012.html |title=Security Breach—Red Hat Mailing list}}</ref> Fedora published the full details on March 30, 2009.<ref>{{cite web|url=https://www.redhat.com/archives/fedora-announce-list/2009-March/msg00010.html |title=Update and Report on Fedora August 2008 Intrusion—Red Hat Mailing list}}</ref>