I'm not really sure what the older stuff was, but not older than FC27, that's for sure, and probably a lot younger. Involved, or possibly involved, Packages are: To be clear It IS possible to log in to the root account with a password when it should not be possible and the 'root attacks' are crackers trying to do just that. I did upgrade on a Fedora Server and was SHOCKED to discover thousands of root attacks on my publicly facing servers and I can't seem to figure out how to stop them!