-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 14 Jan 2026 08:04:40 +0900
Source: firefox-esr
Binary: firefox-esr firefox-esr-dbgsym
Architecture: amd64
Version: 140.7.0esr-1~deb12u1
Distribution: bookworm-security
Urgency: medium
Maintainer: amd64 / i386 Build Daemon (x86-ubc-01) <buildd_amd64-x86-ubc-01@buildd.debian.org>
Changed-By: Mike Hommey <glandium@debian.org>
Description:
 firefox-esr - Mozilla Firefox web browser - Extended Support Release (ESR)
Changes:
 firefox-esr (140.7.0esr-1~deb12u1) bookworm-security; urgency=medium
 .
   * New upstream release.
   * Fixes for mfsa2026-03, also known as:
     CVE-2026-0877, CVE-2026-0878, CVE-2026-0879, CVE-2026-0880,
     CVE-2026-0882, CVE-2025-14327, CVE-2026-0883, CVE-2026-0884,
     CVE-2026-0885, CVE-2026-0886, CVE-2026-0887, CVE-2026-0890,
     CVE-2026-0891.
Checksums-Sha1:
 5bb90c662d153511d0412c48517239fb6b973245 1345790636 firefox-esr-dbgsym_140.7.0esr-1~deb12u1_amd64.deb
 97b69434de7e8ae5915abbd1c8433377b7f9a5f1 18940 firefox-esr_140.7.0esr-1~deb12u1_amd64-buildd.buildinfo
 f53ab36c05c008b31ee2034ed29b946bc3e2553d 76119480 firefox-esr_140.7.0esr-1~deb12u1_amd64.deb
Checksums-Sha256:
 52e39e67de5f122fea255000b7fe93a33856c0c1d7afe9e3ba7330ec8d9a7b2d 1345790636 firefox-esr-dbgsym_140.7.0esr-1~deb12u1_amd64.deb
 139195e15ceca07d947f6872802499c65d71998b58af1f1673fb2bceea9eab5c 18940 firefox-esr_140.7.0esr-1~deb12u1_amd64-buildd.buildinfo
 87f77efb111b09409d75bc09f9cef12420d9b0018efa87836bfd730096afa00b 76119480 firefox-esr_140.7.0esr-1~deb12u1_amd64.deb
Files:
 6fba085a76add7efec813bc7a43832f9 1345790636 debug optional firefox-esr-dbgsym_140.7.0esr-1~deb12u1_amd64.deb
 d7fe8cdc4c2fe0ebe6bb51103fe64a65 18940 web optional firefox-esr_140.7.0esr-1~deb12u1_amd64-buildd.buildinfo
 aaca99044591bd93565dc4f1b7a14996 76119480 web optional firefox-esr_140.7.0esr-1~deb12u1_amd64.deb

-----BEGIN PGP SIGNATURE-----
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=UIcz
-----END PGP SIGNATURE-----