-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 14 Jan 2026 08:04:40 +0900
Source: firefox-esr
Binary: firefox-esr firefox-esr-dbgsym
Architecture: armhf
Version: 140.7.0esr-1~deb12u1
Distribution: bookworm-security
Urgency: medium
Maintainer: arm Build Daemon (arm-ubc-05) <buildd_arm64-arm-ubc-05@buildd.debian.org>
Changed-By: Mike Hommey <glandium@debian.org>
Description:
 firefox-esr - Mozilla Firefox web browser - Extended Support Release (ESR)
Changes:
 firefox-esr (140.7.0esr-1~deb12u1) bookworm-security; urgency=medium
 .
   * New upstream release.
   * Fixes for mfsa2026-03, also known as:
     CVE-2026-0877, CVE-2026-0878, CVE-2026-0879, CVE-2026-0880,
     CVE-2026-0882, CVE-2025-14327, CVE-2026-0883, CVE-2026-0884,
     CVE-2026-0885, CVE-2026-0886, CVE-2026-0887, CVE-2026-0890,
     CVE-2026-0891.
Checksums-Sha1:
 c45b436a08545db7af63bbe0ac071ab7ac3ce2a9 12550924 firefox-esr-dbgsym_140.7.0esr-1~deb12u1_armhf.deb
 577e06334fb4b5f4405d1a625c48284329964e35 18869 firefox-esr_140.7.0esr-1~deb12u1_armhf-buildd.buildinfo
 03a1d1f120a9ad8f390b429fdb0d93f4134a71fd 70806676 firefox-esr_140.7.0esr-1~deb12u1_armhf.deb
Checksums-Sha256:
 48fbf3fe810c21954719614eaf6ccbbe0f380df43342cfc2a0dbf4875fc09265 12550924 firefox-esr-dbgsym_140.7.0esr-1~deb12u1_armhf.deb
 b6d50f4003c17034e526c9458916cbcf384008ebe5222181f57a9a802345a2ca 18869 firefox-esr_140.7.0esr-1~deb12u1_armhf-buildd.buildinfo
 355ee827fcafd17292e3d3748f351eea103c76d4fe35df6bfad60eef79547a18 70806676 firefox-esr_140.7.0esr-1~deb12u1_armhf.deb
Files:
 d097444c92e56657fb9d3130610b8304 12550924 debug optional firefox-esr-dbgsym_140.7.0esr-1~deb12u1_armhf.deb
 1e0fb9dc431d612b301947c38f5c2f91 18869 web optional firefox-esr_140.7.0esr-1~deb12u1_armhf-buildd.buildinfo
 bb75282233011cf353b33d1251117e9b 70806676 web optional firefox-esr_140.7.0esr-1~deb12u1_armhf.deb

-----BEGIN PGP SIGNATURE-----
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=/pzQ
-----END PGP SIGNATURE-----