{"id":182862,"date":"2026-08-11T16:54:42","date_gmt":"2026-08-11T14:54:42","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/sotrudniki-mozilla-sluchajno-razmestili-na-github-zakrytyj-gpg-klyuch-firefox-i-thunderbird"},"modified":"2026-08-11T16:54:42","modified_gmt":"2026-08-11T14:54:42","slug":"sotrudniki-mozilla-sluchajno-razmestili-na-github-zakrytyj-gpg-klyuch-firefox-i-thunderbird","status":"publish","type":"post","link":"https:\/\/prohoster.info\/pt\/blog\/news\/sotrudniki-mozilla-sluchajno-razmestili-na-github-zakrytyj-gpg-klyuch-firefox-i-thunderbird","title":{"rendered":"Funcion\u00e1rios da Mozilla acidentalmente publicaram uma chave GPG fechada do Firefox e Thunderbird no GitHub","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

A Mozilla anunciou a substitui\u00e7\u00e3o da chave GPG usada para assinar digitalmente artefatos das vers\u00f5es do Firefox e Thunderbird, como arquivos tar, pacotes RPM e arquivos de somas de verifica\u00e7\u00e3o. A substitui\u00e7\u00e3o foi feita devido a um incidente em que uma c\u00f3pia n\u00e3o criptografada da chave foi inadvertidamente adicionada a um reposit\u00f3rio privado da empresa no GitHub, acess\u00edvel a um n\u00famero limitado de participantes do projeto que tinham acesso ao uso da chave atrav\u00e9s de servi\u00e7os internos. <\/p>\n

A an\u00e1lise dos logs de auditoria n\u00e3o revelou evid\u00eancias de acesso de terceiros \u00e0 chave enquanto ela estava no reposit\u00f3rio do GitHub. Para a maioria dos usu\u00e1rios, a substitui\u00e7\u00e3o da chave n\u00e3o exigir\u00e1 a realiza\u00e7\u00e3o de quaisquer a\u00e7\u00f5es. As exce\u00e7\u00f5es s\u00e3o apenas os usu\u00e1rios que verificam manualmente as assinaturas digitais ou instalam pacotes RPM com as compila\u00e7\u00f5es oficiais do Firefox da Mozilla. Nestes casos, ser\u00e1 necess\u00e1rio importar explicitamente a nova chave p\u00fablica e revogar a antiga. <\/p>\n

Para usu\u00e1rios do Fedora at\u00e9 a vers\u00e3o 42 (na vers\u00e3o 43 do Fedora, a chave ser\u00e1 substitu\u00edda automaticamente) e RHEL\/Rocky\/Almalinux, \u00e9 necess\u00e1rio executar: sudo rpm -e --allmatches gpg-pubkey-14f26682d0916cdd81e37b6d61b7b526d98f0353 sudo rpm --import https:\/\/packages.mozilla.org\/rpm\/firefox\/signing-key.gpg sudo dnf clean all <\/p>\n

Em openSUSE e SUSE: sudo rpm -e --allmatches gpg-pubkey-14f26682d0916cdd81e37b6d61b7b526d98f0353 sudo rpm --import https:\/\/packages.mozilla.org\/rpm\/firefox\/signing-key.gpg sudo zypper refresh
\n
Fonte: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Mozilla \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0437\u0430\u043c\u0435\u043d\u0435 GPG-\u043a\u043b\u044e\u0447\u0430, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u043e\u0433\u043e \u0434\u043b\u044f \u0437\u0430\u0432\u0435\u0440\u0435\u043d\u0438\u044f \u0446\u0438\u0444\u0440\u043e\u0432\u043e\u0439 \u043f\u043e\u0434\u043f\u0438\u0441\u044c\u044e \u0430\u0440\u0442\u0435\u0444\u0430\u043a\u0442\u043e\u0432 \u0440\u0435\u043b\u0438\u0437\u043e\u0432 Firefox \u0438 Thunderbird, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a tar-\u0430\u0440\u0445\u0438\u0432\u044b, RPM-\u043f\u0430\u043a\u0435\u0442\u044b \u0438 \u0444\u0430\u0439\u043b\u044b \u0441 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u044b\u043c\u0438 \u0441\u0443\u043c\u043c\u0430\u043c\u0438. \u0417\u0430\u043c\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u0435\u0434\u0435\u043d\u0430 \u0432 \u0441\u0432\u044f\u0437\u0438 \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u043e\u043c, \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u043d\u0430\u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u043a\u043e\u043f\u0438\u044f \u043a\u043b\u044e\u0447\u0430 \u0431\u044b\u043b\u0430 \u043f\u043e \u043d\u0435\u0434\u043e\u0441\u043c\u043e\u0442\u0440\u0443 \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u043f\u0440\u0438\u0432\u0430\u0442\u043d\u044b\u0439 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0439 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u043d\u0430 GitHub, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0439 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u043e\u043c\u0443 \u0447\u0438\u0441\u043b\u0443 \u0443\u0447\u0430\u0441\u0442\u043d\u0438\u043a\u043e\u0432 \u043f\u0440\u043e\u0435\u043a\u0442\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u043c\u0435\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":10,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-182862","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Funcion\u00e1rios da Mozilla acidentalmente publicaram uma chave GPG fechada do Firefox e Thunderbird no GitHub | ProHoster","description":"A Mozilla anunciou a substitui\u00e7\u00e3o da chave GPG usada para assinar digitalmente artefatos das vers\u00f5es do Firefox e Thunderbird, como arquivos tar, pacotes RPM e arquivos de somas de verifica\u00e7\u00e3o.","canonical_url":"https:\/\/prohoster.info\/pt\/blog\/news\/sotrudniki-mozilla-sluchajno-razmestili-na-github-zakrytyj-gpg-klyuch-firefox-i-thunderbird","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"pt_PT","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0421\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a\u0438 Mozilla \u0441\u043b\u0443\u0447\u0430\u0439\u043d\u043e \u0440\u0430\u0437\u043c\u0435\u0441\u0442\u0438\u043b\u0438 \u043d\u0430 GitHub \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u0439 GPG-\u043a\u043b\u044e\u0447 Firefox \u0438 Thunderbird | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Mozilla \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0437\u0430\u043c\u0435\u043d\u0435 GPG-\u043a\u043b\u044e\u0447\u0430, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u043e\u0433\u043e \u0434\u043b\u044f \u0437\u0430\u0432\u0435\u0440\u0435\u043d\u0438\u044f \u0446\u0438\u0444\u0440\u043e\u0432\u043e\u0439 \u043f\u043e\u0434\u043f\u0438\u0441\u044c\u044e \u0430\u0440\u0442\u0435\u0444\u0430\u043a\u0442\u043e\u0432 \u0440\u0435\u043b\u0438\u0437\u043e\u0432 Firefox \u0438 Thunderbird, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a tar-\u0430\u0440\u0445\u0438\u0432\u044b, RPM-\u043f\u0430\u043a\u0435\u0442\u044b \u0438 \u0444\u0430\u0439\u043b\u044b \u0441 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u044b\u043c\u0438 \u0441\u0443\u043c\u043c\u0430\u043c\u0438.","og:url":"https:\/\/prohoster.info\/pt\/blog\/news\/sotrudniki-mozilla-sluchajno-razmestili-na-github-zakrytyj-gpg-klyuch-firefox-i-thunderbird","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-08-11T14:54:42+00:00","article:modified_time":"2026-08-11T14:54:42+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"182862","title":null,"description":null,"keywords":null,"keyphrases":{"focus":[],"additional":[]},"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-08-12 10:05:18","updated":"2026-08-12 10:05:18","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/182862","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/comments?post=182862"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/182862\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/media?parent=182862"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/categories?post=182862"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/tags?post=182862"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}