Fedora Server Image Virus Warning

When downloading Fedora Server 33 from the official webpage (“https://getfedora.org/en/server/download/”), Firefox states the following:
Fedora Server Virus Warning

Right-clicking it and choosing “Copy Download Link” returns the following link:
http://laotzu.ftp.acc.umu.se/mirror/fedora/linux/releases/33/Server/x86_64/iso/Fedora-Server-dvd-x86_64-33-1.2.iso

Unfortunately I cannot freely choose a mirror to download the image from. Is there a solution to this? Does someone has a virus-free direct link not changing mirror to this site?

1 Like

You can find the list of mirrors here: https://mirrors.fedoraproject.org

However it is very unlikely that you have downloaded an ISO containing a virus. Like suggested by @vgaetera it is a false positive. Which operating system are you using? Which version of Firefox?

1 Like

@alciregi, I found that equally hard to believe, but did not find any option for mirrors to cross-check whether this is a false-positive or not. I am also not too familiar with checking GPGs and was not thinking of it.

Thanks to you for providing me the link to the mirrors. Having now tried it with the “next” server, I did not get this warning. While I have not checked further, Firefox at least thinks that both are different, as in I did not get any virus warning. With the seemingly clean version, I am now able to clean-install my system.

Thanks again and of course also thanks to @vgaetera! I possibly need to get a bit more familiar with the whole GPG checksum verification in the future. :wink:

FYI, Chrome has had false positives like this in the past:

1 Like

However, for the records, I downloaded the ISO from such mirror, and following the steps to verify it for security and integrity, as documented on https://getfedora.org/en/security, the result is

Fedora-Server-dvd-x86_64-33-1.2.iso: OK

1 Like