-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 14 Jan 2026 08:04:40 +0900 Source: firefox-esr Binary: firefox-esr firefox-esr-dbgsym Architecture: i386 Version: 140.7.0esr-1~deb12u1 Distribution: bookworm-security Urgency: medium Maintainer: i386 Build Daemon (x86-grnet-01) Changed-By: Mike Hommey Description: firefox-esr - Mozilla Firefox web browser - Extended Support Release (ESR) Changes: firefox-esr (140.7.0esr-1~deb12u1) bookworm-security; urgency=medium . * New upstream release. * Fixes for mfsa2026-03, also known as: CVE-2026-0877, CVE-2026-0878, CVE-2026-0879, CVE-2026-0880, CVE-2026-0882, CVE-2025-14327, CVE-2026-0883, CVE-2026-0884, CVE-2026-0885, CVE-2026-0886, CVE-2026-0887, CVE-2026-0890, CVE-2026-0891. Checksums-Sha1: cac2c77ab7498448c5f0c57c7c7d297b9c79fc91 9601792 firefox-esr-dbgsym_140.7.0esr-1~deb12u1_i386.deb c6dcbf77a40778de6e0dfd6e7b01adf5473399b4 18893 firefox-esr_140.7.0esr-1~deb12u1_i386-buildd.buildinfo c04b9978b01ae04166df55be587c9d87e4cb7530 80920532 firefox-esr_140.7.0esr-1~deb12u1_i386.deb Checksums-Sha256: a64aa0b5e87094f1e022e6a1bfb8a8c978c5e2cd2ccce50e4ec4936da0f313c3 9601792 firefox-esr-dbgsym_140.7.0esr-1~deb12u1_i386.deb 8e6cf09c6fff35395e517e1df498da93c8784075c054cd0a5b10a93c8d4e74cc 18893 firefox-esr_140.7.0esr-1~deb12u1_i386-buildd.buildinfo 3df3052929c972c46005896dee95369917c08e918810ba485ead38bb57ca8d59 80920532 firefox-esr_140.7.0esr-1~deb12u1_i386.deb Files: 93938a9451a6e05122947925833e7bf1 9601792 debug optional firefox-esr-dbgsym_140.7.0esr-1~deb12u1_i386.deb a1f4300972623431278963a016016017 18893 web optional firefox-esr_140.7.0esr-1~deb12u1_i386-buildd.buildinfo 5a60ab338c457c1762d64e87dbaf6251 80920532 web optional firefox-esr_140.7.0esr-1~deb12u1_i386.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEv2qEY4xQXyY/2dWIvGw9w6VrLCcFAmloTN0ACgkQvGw9w6Vr LCdcpA/9Egv4KZfTZflTP2H/5XnPtaYCZCw+OGcLQCSY1qciF0Byz88QLGkf4Dnw Z7X9rxouxqN5g4MBPbXaDBpnVR6JFL+rzHOR755Q84SgiM4bwWseyhxNxDs3mMwi XPXp0CMuuRlMA4XcbH5vTGV/zeNEUxKUBPDUd6vrjtTVf88tARGDSXVk0wleQiUc mgs6zFmVouGHcISIFk3y/M6Cghsd5UtZZYietv0MnjIHPLPHDiPpgWy8sY6KfD/3 wKE67AdKb5qFml16wP4X0wzpaVOsznZ+n/63TsrFh76fdOuwNHhOupg0o2tU7Pys BK/pdI9i3/dyErAuwVo0eE5FtW4Al/t0PHIT4PsQ2MBszV3pzR5hN8iR+nO8Em7l TK0qSrR0NZL6XvZc+bBkfkm1aCeV5UxMnav7iFOsoGHnxzS4zQ0aDCV32vCj4yJK 8y13qrw18Rtd3/PDFdFm4In2cYSDSGNOz43i8YxsTQhMrImX98VmRvuIsUdhRngS LjMFmUa5xw5u28h8iUocWFPwI7oYPAgHh8LJ3bB+nMM/gbBmt3fKIpLYyPlYs0zw H5OZSuwaNFuqrqmDroXkOnEiS/T3O3uns1oBZrBR6quS02wqxuf8ID26/WWr9mlt O68KP1j1oS8fjMexyAha1VABoL3/9yL6vdsCC+JacK3Kj+IiMks= =3ReH -----END PGP SIGNATURE-----