1. Forum
  2. USENET
  3. alt.os.linux.mint

  • Mozilla revokes Linux signing key

    From Axel@none@not.here to alt.os.linux.mint,alt.os.linux.ubuntu on Wed Aug 12 10:39:30 2026
    From Newsgroup: alt.os.linux.mint


    "Mozilla has scrapped the cryptographic key behind Firefox and
    Thunderbird downloads for Linux after an unencrypted copy of it was
    committed by mistake to one of the company's own private code repositories"

    https://thehackernews.com/2026/08/mozilla-revokes-firefox-and-thunderbird.html --
    Linux Mint 22.3

    --- Synchronet 3.22a-Linux NewsLink 1.2
  • From german newsgroups@usualsuspectrider@gmail.com to alt.os.linux.mint,alt.os.linux.ubuntu on Wed Aug 12 07:26:48 2026
    From Newsgroup: alt.os.linux.mint

    Le 12/08/2026 |a 02:39, Axel a |-crit-a:
    "Mozilla has scrapped the cryptographic key behind Firefox and
    Thunderbird downloads for Linux after an unencrypted copy of it was committed by mistake to one of the company's own private code repositories"

    https://releases.mozilla.org/pub/firefox/releases/153.0esr/linux-x86_64/fr/
    --
    Amicalement,

    Frenchy Friendly, & French touch !

    german
    --- Synchronet 3.22a-Linux NewsLink 1.2
  • From Lawrence =?iso-8859-13?q?D=FFOliveiro?=@ldo@nz.invalid to alt.os.linux.mint,alt.os.linux.ubuntu on Fri Aug 14 10:01:14 2026
    From Newsgroup: alt.os.linux.mint

    On Wed, 12 Aug 2026 10:39:30 +1000, Axel wrote:

    "Mozilla has scrapped the cryptographic key behind Firefox and
    Thunderbird downloads for Linux after an unencrypted copy of it was
    committed by mistake to one of the company's own private code
    repositories"

    https://thehackernews.com/2026/08/mozilla-revokes-firefox-and-thunderbird.html

    The key needs to be in somebodyrCOs copy of the source-code repo in
    order to sign release builds.

    But this is why you have a .gitignore file in Git, so you list the
    name of sensitive/private items like the key file so they never get automatically included in any commits.
    --- Synchronet 3.22a-Linux NewsLink 1.2
  • From Richard Kettlewell@invalid@invalid.invalid to alt.os.linux.mint,alt.os.linux.ubuntu on Fri Aug 14 16:38:32 2026
    From Newsgroup: alt.os.linux.mint

    Lawrence DrCOOliveiro <ldo@nz.invalid> writes:
    Axel wrote:

    "Mozilla has scrapped the cryptographic key behind Firefox and
    Thunderbird downloads for Linux after an unencrypted copy of it was
    committed by mistake to one of the company's own private code
    repositories"

    https://thehackernews.com/2026/08/mozilla-revokes-firefox-and-thunderbird.html

    The key needs to be in somebodyrCOs copy of the source-code repo in
    order to sign release builds.

    No, it doesnrCOt.
    --
    https://www.greenend.org.uk/rjk/
    --- Synchronet 3.22a-Linux NewsLink 1.2