Mozilla has revoked the cryptographic signing key for Firefox and Thunderbird Linux downloads after an unencrypted copy was accidentally committed to a private code repository. This key is vital for users and distributions to verify the authenticity and integrity of downloaded software. While no evidence of compromise was found, the revocation necessitates updates for Linux users to ensure continued secure software verification.