{"id":182862,"date":"2026-08-11T16:54:42","date_gmt":"2026-08-11T14:54:42","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/sotrudniki-mozilla-sluchajno-razmestili-na-github-zakrytyj-gpg-klyuch-firefox-i-thunderbird"},"modified":"2026-08-11T16:54:42","modified_gmt":"2026-08-11T14:54:42","slug":"sotrudniki-mozilla-sluchajno-razmestili-na-github-zakrytyj-gpg-klyuch-firefox-i-thunderbird","status":"publish","type":"post","link":"https:\/\/prohoster.info\/it\/blog\/news\/sotrudniki-mozilla-sluchajno-razmestili-na-github-zakrytyj-gpg-klyuch-firefox-i-thunderbird","title":{"rendered":"I dipendenti di Mozilla hanno accidentalmente caricato su GitHub una chiave GPG riservata di Firefox e Thunderbird","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

L'azienda Mozilla ha annunciato la sostituzione della chiave GPG utilizzata per firmare digitalmente gli artefatti delle versioni di Firefox e Thunderbird, come archivi tar, pacchetti RPM e file con somme di controllo. La sostituzione \u00e8 avvenuta in seguito a un incidente in cui una copia non crittografata della chiave \u00e8 stata accidentalmente aggiunta a un repository privato dell'azienda su GitHub, accessibile a un numero limitato di partecipanti al progetto che avevano accesso all'utilizzo della chiave tramite servizi interni. <\/p>\n

L'analisi dei log di audit non ha rivelato prove di accesso da parte di terzi alla chiave durante il suo soggiorno nel repository su GitHub. Per la maggior parte degli utenti, la sostituzione della chiave non richieder\u00e0 alcuna azione. Le eccezioni riguardano solo gli utenti che verificano manualmente le firme digitali o installano pacchetti RPM con build ufficiali di Firefox da Mozilla. In questi casi sar\u00e0 necessario importare esplicitamente la nuova chiave pubblica e revocare quella vecchia. <\/p>\n

Gli utenti di Fedora fino alla versione 42 inclusa (in Fedora 43 la chiave verr\u00e0 sostituita automaticamente) e RHEL\/Rocky\/Almalinux devono eseguire: sudo rpm -e --allmatches gpg-pubkey-14f26682d0916cdd81e37b6d61b7b526d98f0353 sudo rpm --import https:\/\/packages.mozilla.org\/rpm\/firefox\/signing-key.gpg sudo dnf clean all <\/p>\n

In openSUSE e SUSE: sudo rpm -e --allmatches gpg-pubkey-14f26682d0916cdd81e37b6d61b7b526d98f0353 sudo rpm --import https:\/\/packages.mozilla.org\/rpm\/firefox\/signing-key.gpg sudo zypper refresh
\n
Fonte: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Mozilla \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0437\u0430\u043c\u0435\u043d\u0435 GPG-\u043a\u043b\u044e\u0447\u0430, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u043e\u0433\u043e \u0434\u043b\u044f \u0437\u0430\u0432\u0435\u0440\u0435\u043d\u0438\u044f \u0446\u0438\u0444\u0440\u043e\u0432\u043e\u0439 \u043f\u043e\u0434\u043f\u0438\u0441\u044c\u044e \u0430\u0440\u0442\u0435\u0444\u0430\u043a\u0442\u043e\u0432 \u0440\u0435\u043b\u0438\u0437\u043e\u0432 Firefox \u0438 Thunderbird, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a tar-\u0430\u0440\u0445\u0438\u0432\u044b, RPM-\u043f\u0430\u043a\u0435\u0442\u044b \u0438 \u0444\u0430\u0439\u043b\u044b \u0441 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u044b\u043c\u0438 \u0441\u0443\u043c\u043c\u0430\u043c\u0438. \u0417\u0430\u043c\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u0435\u0434\u0435\u043d\u0430 \u0432 \u0441\u0432\u044f\u0437\u0438 \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u043e\u043c, \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u043d\u0430\u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u043a\u043e\u043f\u0438\u044f \u043a\u043b\u044e\u0447\u0430 \u0431\u044b\u043b\u0430 \u043f\u043e \u043d\u0435\u0434\u043e\u0441\u043c\u043e\u0442\u0440\u0443 \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u043f\u0440\u0438\u0432\u0430\u0442\u043d\u044b\u0439 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0439 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u043d\u0430 GitHub, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0439 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u043e\u043c\u0443 \u0447\u0438\u0441\u043b\u0443 \u0443\u0447\u0430\u0441\u0442\u043d\u0438\u043a\u043e\u0432 \u043f\u0440\u043e\u0435\u043a\u0442\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u043c\u0435\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":10,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-182862","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47I dipendenti di Mozilla hanno accidentalmente pubblicato su GitHub una chiave GPG segreta di Firefox e Thunderbird | ProHoster","description":"L'azienda Mozilla ha annunciato la sostituzione della chiave GPG utilizzata per firmare digitalmente gli artefatti delle versioni di Firefox e Thunderbird, come archivi tar, pacchetti RPM e file con somme di controllo.","canonical_url":"https:\/\/prohoster.info\/it\/blog\/news\/sotrudniki-mozilla-sluchajno-razmestili-na-github-zakrytyj-gpg-klyuch-firefox-i-thunderbird","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"it_IT","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0421\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a\u0438 Mozilla \u0441\u043b\u0443\u0447\u0430\u0439\u043d\u043e \u0440\u0430\u0437\u043c\u0435\u0441\u0442\u0438\u043b\u0438 \u043d\u0430 GitHub \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u0439 GPG-\u043a\u043b\u044e\u0447 Firefox \u0438 Thunderbird | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Mozilla \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0437\u0430\u043c\u0435\u043d\u0435 GPG-\u043a\u043b\u044e\u0447\u0430, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u043e\u0433\u043e \u0434\u043b\u044f \u0437\u0430\u0432\u0435\u0440\u0435\u043d\u0438\u044f \u0446\u0438\u0444\u0440\u043e\u0432\u043e\u0439 \u043f\u043e\u0434\u043f\u0438\u0441\u044c\u044e \u0430\u0440\u0442\u0435\u0444\u0430\u043a\u0442\u043e\u0432 \u0440\u0435\u043b\u0438\u0437\u043e\u0432 Firefox \u0438 Thunderbird, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a tar-\u0430\u0440\u0445\u0438\u0432\u044b, RPM-\u043f\u0430\u043a\u0435\u0442\u044b \u0438 \u0444\u0430\u0439\u043b\u044b \u0441 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u044b\u043c\u0438 \u0441\u0443\u043c\u043c\u0430\u043c\u0438.","og:url":"https:\/\/prohoster.info\/it\/blog\/news\/sotrudniki-mozilla-sluchajno-razmestili-na-github-zakrytyj-gpg-klyuch-firefox-i-thunderbird","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-08-11T14:54:42+00:00","article:modified_time":"2026-08-11T14:54:42+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"182862","title":null,"description":null,"keywords":null,"keyphrases":{"focus":[],"additional":[]},"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-08-12 10:05:18","updated":"2026-08-12 10:05:18","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/182862","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/comments?post=182862"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/182862\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/media?parent=182862"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/categories?post=182862"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/tags?post=182862"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}