Developing2 outlets · over 1 hour
Mozilla revokes Firefox GPG key after GitHub leak
Mozilla revoked the GPG signing key for Firefox and Thunderbird Linux artifacts after an unencrypted copy was committed to a private GitHub repository. No unauthorized access was found. Users manually verifying signatures must import the new key and revocation; RPM users may need manual updates.
The story so far2 updates, latest first.
Tracked by ByteBrief