proomt

Search

Search posts, papers, and topics

All posts

Mozilla Automation TeamBen Hearsum4 min readintro

Updated GPG key for signing Firefox and Thunderbird Releases

Read on mozilla.orgHN 56·21 comments

Summary

Mozilla rotated its GPG signing subkey for Firefox and Thunderbird after the previous subkey was accidentally exposed. Users must import the new key (and revocation) and, on older RPM‑based systems, manually replace the old key to keep updates working.

  • New signing subkey fingerprint is 827E658608679618CD349F93678E455D7676AA3, expires 2028‑08‑05; old key revoked.
  • If you verify signatures, import the new public key and the revocation for the old key.
  • RPM users on Fedora 42/RHEL/AlmaLinux/Rocky and openSUSE must manually remove the old gpg‑pubkey and import the new one before updates succeed.
  • Fedora 43+ will auto‑import the new key on the next dnf update; no manual steps required.

Package maintainers and security‑conscious users need to update the GPG key to verify Firefox/Thunderbird releases and avoid broken updates.

5/10
securityfirefoxgpgrpmlinux

Related reading

  1. Firefox WebDriver Newsletter 154

    Firefox 154 adds the emulation.setLocaleOverride command to WebDriver BiDi, letting tests override the Accept-Language header for fetch and WebSocket requests in workers. The newsletter also lists how to contribute to the multi-language WebDriver codebase and points to setup guides and community channels.

    Mozilla Automation Teamfxdx.dev1 min

  3. Inertia DevTools Now Available for Firefox

    Inertia DevTools now has an official Firefox extension matching the Chrome version, adding an Inertia panel to DevTools that logs visits, props (with badges), request/response data, route info, and links to source files, with redaction of secrets.

    Laravellaravel-news.com1 minrelease

  4. Icons! Lots of them! – These Weeks in Firefox: Issue 206

    Firefox 154 adds a Windows‑only UI to change the default browser icon, exposes a new Picture‑in‑Picture WebAPI, and ships a raft of small but concrete improvements across Add‑ons, DevTools, WebExtensions, WebDriver and the Rust‑based login storage component. Most changes are toggles or bug‑fixes (e.g., CSS handling in the Debugger, startup‑performance regression fix, storage.local auto‑reset, and…

    Mozilla Automation Teammozilla.org13 min