-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 14 Jan 2026 08:04:40 +0900
Source: firefox-esr
Binary: firefox-esr firefox-esr-dbgsym
Architecture: arm64
Version: 140.7.0esr-1~deb12u1
Distribution: bookworm-security
Urgency: medium
Maintainer: arm Build Daemon (arm-conova-04) <buildd_arm64-arm-conova-04@buildd.debian.org>
Changed-By: Mike Hommey <glandium@debian.org>
Description:
 firefox-esr - Mozilla Firefox web browser - Extended Support Release (ESR)
Changes:
 firefox-esr (140.7.0esr-1~deb12u1) bookworm-security; urgency=medium
 .
   * New upstream release.
   * Fixes for mfsa2026-03, also known as:
     CVE-2026-0877, CVE-2026-0878, CVE-2026-0879, CVE-2026-0880,
     CVE-2026-0882, CVE-2025-14327, CVE-2026-0883, CVE-2026-0884,
     CVE-2026-0885, CVE-2026-0886, CVE-2026-0887, CVE-2026-0890,
     CVE-2026-0891.
Checksums-Sha1:
 1feb170acf42c392a05d31278ec8262e9230c589 1324193820 firefox-esr-dbgsym_140.7.0esr-1~deb12u1_arm64.deb
 09442cfc810e196816fa00779cfc48f314e7f74a 18990 firefox-esr_140.7.0esr-1~deb12u1_arm64-buildd.buildinfo
 fd14a9dc0142c4d94f633bd7feb1d23e5d122934 69519152 firefox-esr_140.7.0esr-1~deb12u1_arm64.deb
Checksums-Sha256:
 19fcf8c1bfd79c5fc34e2f794522a0d40a9eb1e1fa81e2e161577e4ba432848c 1324193820 firefox-esr-dbgsym_140.7.0esr-1~deb12u1_arm64.deb
 0ecde65c3df9fd23dc7fb2ddfe69baf230689cb378ebd54da56021f71a852bda 18990 firefox-esr_140.7.0esr-1~deb12u1_arm64-buildd.buildinfo
 8a22798e0ac10dbd8b885a4e729a5dabe9d7f8a6b75810d88d363592e233ccd8 69519152 firefox-esr_140.7.0esr-1~deb12u1_arm64.deb
Files:
 805869ce398abb8a4516c957bd8d5b2a 1324193820 debug optional firefox-esr-dbgsym_140.7.0esr-1~deb12u1_arm64.deb
 e8eeff851fb3054034bdaa1e6a856294 18990 web optional firefox-esr_140.7.0esr-1~deb12u1_arm64-buildd.buildinfo
 e3bbebd8f828a617acb450a0020bbab8 69519152 web optional firefox-esr_140.7.0esr-1~deb12u1_arm64.deb

-----BEGIN PGP SIGNATURE-----
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=nezJ
-----END PGP SIGNATURE-----