Xubuntu ISO compromissed?
Posted by HerrOge@reddit | linux | View on Reddit | 11 comments
I downloaded an Xubuntu ISO (xubuntu-24.04.3-desktop-amd64.iso) recently at Samstag, 27. September 2025 15:41:15 CEST is this compromissed because i read that Xunbutu website has been hacked. Idk the date when the hack happend so im curios if mine is compromissed. Is it safe if i use it?
BH-Playz@reddit
Oh I don't know maybe CHECK THE MD5SUMS??
MassiveProblem156@reddit
I don't think so. I believe it was a zip. You should check the checksum from the website matches anyway
absolutecinemalol@reddit
If the hackers managed to compromise the website enough to change the files it was serving, it would be too easy for them to also just change the checksum.
Dry_Cryptographer285@reddit
The checksum should be pgp signed
HerrOge@reddit (OP)
but the website is the down so i couldnt do this
No-Highlight-653@reddit
this.
bje332013@reddit
I can't answer your question, but my advice is that it's better to be safe than sorry. If you haven't yet installed Xubuntu, my advice is to delete the ISO file and, if applicable, format / erase any USB drive you may have 'burned' it onto.
If you actually installed Xubuntu, back up your important data, download a new ISO (of a newer version of Xubuntu or a different distro), and then format your internal storage device while reinstalling Linux.
penjaminfedington@reddit
So adding a best buy gift wasn’t apart of the installer?
Irsu85@reddit
Checksums please
CackleRooster@reddit
Only the torrent download link on the Xubuntu.org website was affected, and that happened on October 18-19, 2025. You should be fine.
hieroschemonach@reddit
No. The compromised site was serving .exe