-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 08 Apr 2026 07:01:40 +0900
Source: firefox-esr
Binary: firefox-esr firefox-esr-dbgsym
Architecture: amd64
Version: 140.9.1esr-1~deb12u1
Distribution: bookworm-security
Urgency: medium
Maintainer: all / amd64 / i386 Build Daemon (x86-grnet-03) <buildd_amd64-x86-grnet-03@buildd.debian.org>
Changed-By: Mike Hommey <glandium@debian.org>
Description:
 firefox-esr - Mozilla Firefox web browser - Extended Support Release (ESR)
Changes:
 firefox-esr (140.9.1esr-1~deb12u1) bookworm-security; urgency=medium
 .
   * New upstream release.
   * Fixes for mfsa2026-27, also known as:
     CVE-2026-5732, CVE-2026-5731, CVE-2026-5734.
Checksums-Sha1:
 6dc76b6a0a905ba9aa5e133382f245298cf313e6 1346890272 firefox-esr-dbgsym_140.9.1esr-1~deb12u1_amd64.deb
 025739a908f40dada984870172cc1e30a8d2db53 18940 firefox-esr_140.9.1esr-1~deb12u1_amd64-buildd.buildinfo
 c7e6a14756a95c1e9d1b90bf688f3fc74a4ec822 76149096 firefox-esr_140.9.1esr-1~deb12u1_amd64.deb
Checksums-Sha256:
 d37cbfd89dc34329f4f0ec835c24a7b1bc45a031d6ce61ba12862f0079ba3361 1346890272 firefox-esr-dbgsym_140.9.1esr-1~deb12u1_amd64.deb
 e8d6949e16cc6d9f84b31d554d7deba0dd8debb89dece3e0a64d86f49c472acd 18940 firefox-esr_140.9.1esr-1~deb12u1_amd64-buildd.buildinfo
 cbb205ddf649372d3f3d1685ffde69183af839eb91898edce6cd6d374887f93c 76149096 firefox-esr_140.9.1esr-1~deb12u1_amd64.deb
Files:
 75c27c4573a71c64c5f373d929b250f7 1346890272 debug optional firefox-esr-dbgsym_140.9.1esr-1~deb12u1_amd64.deb
 7ed1c63741e9f13b5287d270a8daaec7 18940 web optional firefox-esr_140.9.1esr-1~deb12u1_amd64-buildd.buildinfo
 c36aa394d1143352b3347cf465bdea13 76149096 web optional firefox-esr_140.9.1esr-1~deb12u1_amd64.deb

-----BEGIN PGP SIGNATURE-----
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=pZ+t
-----END PGP SIGNATURE-----