Fedora In the News
In this section, we cover news from the trade press and elsewhere that is re-posted to the Fedora Marketing list[1]
http://fedoraproject.org/wiki/Marketing
Contributing Writer: Pascal Calarco
Root privileges through vulnerability in GNU C loader - (The H)
Jonathan Nalley forwarded[1] a brief article on security vulnerabilities found recently in the GNU C loader, which affect Fedora and other distributions:
"According to the developer's tests, at least glibc versions 2.12.1 under Fedora 13 and 2.5 under Red Hat Enterprise Linux (RHEL) 5 are vulnerable."
The full article is available[2]
Fedora Uses YubiKey for Strong Two-Factor Authentication - (IT News Online)
Jonathan Nalley forwarded[1] a posting on YubiKey authentication in Fedora:
"The Fedora Project, a Red Hat sponsored and community-supported open source collaboration, has integrated support into its infrastructure services for YubiKey, the open source authentication key by Yubico. The YubiKeys are also used by Fedora’s core team members for securing access to high security hosts....One of the fundamental principles of the Fedora Infrastructure team is their dedication to Fedora's stance on freedom. In short, the team only uses, produces, and deploys 100% free and open source software for these services. Fedora contributors are thus able not only to have immediate access to free software services, but are also able to contribute to their continual improvement.
'The YubiKey is backed by a free software stack and can be used agnostically with other free software, making it well-suited for the rest of the Fedora team's processes,' says Mike McGrath, Red Hat engineer and leader of the Fedora Infrastructure team."
The full article is available[2]