So what's the right process to avoid this when performing new Linux installations?
Image the machine, quarantine it for a few weeks, wait for news of attacks - if you hear nothing, dequarantine the system and proceed with normal use?
Image the machine, quarantine it for a few weeks, wait for news of attacks - if you hear nothing, dequarantine the system and proceed with normal use?
Some links for Debian:
https://www.debian.org/CD/faq/#verify https://www.debian.org/CD/verify https://wiki.debian.org/Hardening/Goals https://wiki.debian.org/Hardening/RepoAndImages https://security-tracker.debian.org/tracker/data/report https://www.debian.org/doc/manuals/developers-reference/pkgs... http://security-team.debian.org/