Firefox & Thunderbird Users on Linux: Rotate Revoked Signing Key
NEOSEC enrichment — no mirror of the original source
On Monday, August 10, 2026, Mozilla announced an early transition to a new GPG signing subkey for Linux tarballs, RPM packages, and checksums files for Firefox and Thunderbird, because an unencrypted copy of the existing subkey had been add
Source: SANS NewsBites. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Editorial context in the original issue
The SANS NewsBites issue carries commentary by: Dukes, Neely, Ullrich.
Linked advisories
- CVE-2026-53413Zoom Clients: Schreiben außerhalb des zugewiesenen Speichers (Out-of-bounds Write)
- CVE-2026-53414Zoom Clients: Lesezugriff außerhalb des Puffers
- CVE-2026-53413Zoom Clients: Schreiben außerhalb des zugewiesenen Speichers (Out-of-bounds Write)
- CVE-2026-53415Zoom Video Communications Rooms: Use-After-Free
- CVE-2026-55040Microsoft SharePoint Server Security Feature Bypass Vulnerability
- CVE-2026-53414Zoom Clients: Lesezugriff außerhalb des Puffers
- CVE-2026-55040Microsoft SharePoint Enterprise Server 2016: Umgehung einer Sicherheitsfunktion
- CVE-2026-55040Microsoft Office Produkte: Mehrere Schwachstellen
- CVE-2026-53415Zoom Video Communications Rooms: Use-After-Free
- CVE-2026-55040Microsoft SharePoint — Microsoft SharePoint Weak Authentication Vulnerability
- CVE-2026-53414Zoom Video Communications Workplace und Rooms: Mehrere Schwachstellen
Affected vendors and products
- Microsoft Microsoft Sharepoint Enterprise Server 2016
- Microsoft Microsoft Sharepoint Server 2019
- Microsoft Microsoft Sharepoint Server Subscription Edition
- Microsoft Microsoft SharePoint Server Subscription Edition
- Zoom Communications Zoom Clients
- Zoom Video Communications Rooms
- Zoom Video Communications Workplace
- Zoom Video Communications Workplace Vdi Client Windows
More on Thunderbird
Other advisories
- Not ratedosv:CLEANSTART-2024-XP94439Mozilla developers reported memory safety bugs present in code shared between Firefox and Thunderbird
- Not ratedosv:CLEANSTART-2024-YK50354Security fix for CVE-2022-22764 applied in: thunderbird 91.6.0-r0, librewolf 97.0-r0
- Not ratedosv:CLEANSTART-2024-WL41729Mozilla Fuzzing Team reported potential vulnerabilities present in Thunderbird 91
- Not ratedosv:CLEANSTART-2024-BR87657By encoding Unicode whitespace characters within the From email header, an attacker can spoof the sender email address that Thunderbird displays
- Not ratedosv:CLEANSTART-2024-AH41436Thunderbird ignored the configuration to require STARTTLS security for an SMTP connection
- Not ratedosv:CLEANSTART-2024-BT13857Mozilla developers reported memory safety bugs present in Thunderbird 78
- Not ratedosv:CLEANSTART-2024-RQ35637If Thunderbird was configured to use STARTTLS for an IMAP connection, and an attacker injected IMAP server responses prior to the completion of the STARTTLS handshake, then Thunderbird didn't ignor...
- Not ratedosv:CLEANSTART-2024-ZQ38077When receiving an OpenPGP/MIME signed email message that contains an additional outer MIME message layer, for example a message footer added by a mailing list gateway, Thunderbird only considered t...
Other news entries
- Mozilla Firefox, Firefox ESR, und Thunderbird: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- Mozilla Firefox, Firefox ESR, und Thunderbird: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- Mozilla Produkte (Thunderbird, Firefox ESR und Firefox): Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- Mozilla Produkte (Thunderbird, Firefox ESR und Firefox): Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- Mozilla Firefox, Firefox ESR und Thunderbird: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- Multiples vulnérabilités dans Mozilla Thunderbird (01 octobre 2026)NewsCERT-FR (ANSSI)
- Mozilla Firefox und Thunderbird: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- Mozilla Firefox und Thunderbird: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
ID