Mozilla Revokes Firefox and Thunderbird Linux Signing Key After Key Lands in Private Repo

Summary

Mozilla has revoked a cryptographic signing key used for Firefox and Thunderbird downloads on Linux after an unencrypted copy was mistakenly committed to a private code repository. Although no external access is suspected, the revocation means older downloads signed with the compromised key will no longer verify, impacting users who manually check signatures or use Mozilla's RPM packages. A new subkey has been issued with a validity until August 2028.

Full text

Mozilla Revokes Firefox and Thunderbird Linux Signing Key After Key Lands in Private Repo Swati KhandelwalAug 11, 2026Cryptography / Software Supply Chain Mozilla has scrapped the cryptographic key behind Firefox and Thunderbird downloads for Linux after an unencrypted copy of it was committed by mistake to one of the company's own private code repositories. That key is how a user, or a Linux distribution packaging the browser, confirms a downloaded Firefox tarball came from Mozilla and was not tampered with. That decision carries a cost for anyone who checks what they download: files signed with the old key stop verifying once a user imports the revocation. That covers older Firefox and Thunderbird downloads, not just future ones. Nothing so far points to anyone outside the company getting hold of the key. The repository was private, the browser maker says a review of available audit records turned up no sign of unauthorized access, and everyone who could see it already had legitimate access anyway. Mozilla revoked it regardless. Most Firefox and Thunderbird users need to do nothing. Two groups do. Anyone who checks signatures by hand must import the new key plus the revocation for the old one. Anyone installing Firefox from Mozilla's RPM packages may hit a failed update and have to swap the key manually. The replacement subkey, published Monday, has the fingerprint 827E 6586 0867 9618 CD34 9F93 678E 455D 7676 7AA3 and is valid until August 5, 2028. OpenPGP lets a key's owner attach a machine-readable reason for pulling it, and RFC 4880 spells out why that matters: a key that is superseded or retired leaves its past signatures valid, while a key revoked because of compromise makes every signature it ever produced suspect. The Hacker News decoded the revocation certificate published alongside the new key and found reason code 2, "key material has been compromised," generated on August 6, 2026 at 11:14 UTC with the note "We no longer trust this key." Mozilla's own account of the incident stops short of saying the key was taken. It is a subkey revocation, signed by the primary key 14F26682D0916CDD81E37B6D61B7B526D98F0353, which stays in place. Reason code 2, rather than the rotation itself, is what stops older downloads verifying, an effect Mozilla's post describes but attributes only to the nature of GPG signing. The swap is also about seven months early. The company rotates this subkey roughly every two years, guarding against a leak it never learns about. The revoked subkey, 09BE ED63 F346 2A2D FFAB 3B87 5ECB 6497 C1A2 0256, announced in April 2025, had until March 2027 to run. We also examined the full public key kept in Mozilla's own signing repository and found five earlier signing subkeys going back to 2015, every one retired by expiry. This is the first revocation on the key. On the RPM side, dnf on some distributions handles the change itself, fetching the updated key at the next update and asking the user to confirm the fingerprint. Elsewhere it fails outright, reporting that importing the key did not help, or that the installed repository keys are wrong for the package. The old key has to come off first, because rpm --import can report success while leaving the stale key in place: sudo rpm -e --allmatches gpg-pubkey-14f26682d0916cdd81e37b6d61b7b526d98f0353 sudo rpm --import https://packages.mozilla.org/rpm/firefox/signing-key.gpg sudo dnf clean all Thunderbird publishes no official RPM packages, so that step does not apply. openSUSE users run the same two rpm commands, then zypper refresh. Mozilla has not said which repository held the key, how long it sat there, or how it came to light, and does not describe the safeguards it says it added. It says nothing either way about the APT repository serving Debian and Ubuntu users, which uses a different key, and .deb is not among the affected formats. The disclosure lands a week after attackers hijacked the GitHub account behind the keyv and cacheable npm packages and published a worm built to harvest repository, registry, cloud and private-key material from developer machines and CI pipelines. Found this article interesting? Follow us on Google News, Twitter and LinkedIn to read more exclusive content we post. SHARE     Tweet Share Share Share SHARE  Application Security, browser security, cryptography, DevSecOps, Linux security, Mozilla, Open Source Security, Package Security, Software Security, Software Supply Chain ⚡ Top Stories This Week Azure Cosmos DB Flaw Exposed Platform-Wide Key That Could Access Any Database Anthropic Says Claude Mistook the Open Internet for a CTF and Breached Three Organizations Researchers Report 84 Flaws in 4G and 5G Cores, Including a Session Hijacking Flaw Cheap Android TV Boxes Pose as Phones and Turn Owners’ Broadband Into Proxies N-able Says Attackers Take Over N-central Servers After Initial Fix Proves Incomplete Google Password Manager Attacks Could Let Malware Hijack Passkey-Protected Accounts New cPanel Critical Flaw Could Let Hosting Customers Run SQL as Database Root Keyv-Linked npm Worm Poisons Hundreds of Packages, Plants Claude Code and VS Code Hooks Claude Mythos 5 Tried to Backdoor a Real Open-Source Project in Testing, Then Vouched for Itself Critical Gitea Flaw Let Unauthenticated Attackers Read Server Files via Org-Mode Markup Poison Claude Sells Discounted Claude Access While Its Operator Sees Every Customer Prompt Over 250 ClickFix Domains Use Browser Fingerprinting to Hide macOS Malware Lures Chinese-Made Zbtlink Routers Ship With Backdoor That Opens Unauthenticated Root Shells Apple iCloud Private Relay Can Expose Real IPs Through WebKit Proxy Bypasses ThreatsDay: Odysseus RCE, Samsung One-Click Takeover, iCloud Backdoor Fight + 27 More Stories New Interrupt Injection Attack Can Bypass Spectre v2 Defenses on Intel and AMD CPUs New Zapscape KVM Flaw Could Let Privileged L1 Guest Code Escape to Linux Hosts New NatJack Attacks Hijack TCP Sessions and Spoof DNS by Manipulating NAT Tables 18-Year-Old Linux SCTP Flaw Could Let Local Users Gain Root and Escape Containers New WordPress Pre-Auth XSS Could Lead to PHP Code Execution - Patch ASAP Metabase Zero-Day Exploited in Wild Allows Admin Access Without Authentication Atlassian Rovo Can Be Tricked Into Sending Jira and Confluence Data to Attackers ⭐ Featured Resources [Webinar] How Militaries Can Trust the Data Behind Autonomous Missions Download the 5-Step Action Plan for AI-Speed Exploitation Get the Checklist for Gaining Control of AI Use Across Your Organization Get the 2026 CISO Benchmark Report Based on 600 Security Leaders

Entities