-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 20 May 2026 07:48:20 +0900
Source: firefox-esr
Binary: firefox-esr firefox-esr-dbgsym
Architecture: amd64
Version: 140.11.0esr-1~deb13u1
Distribution: trixie-security
Urgency: medium
Maintainer: amd64 / i386 Build Daemon (x86-csail-01) <buildd_amd64-x86-csail-01@buildd.debian.org>
Changed-By: Mike Hommey <glandium@debian.org>
Description:
 firefox-esr - Mozilla Firefox web browser - Extended Support Release (ESR)
Changes:
 firefox-esr (140.11.0esr-1~deb13u1) trixie-security; urgency=medium
 .
   * New upstream release.
   * Fixes for mfsa2026-48, also known as:
     CVE-2026-8946, CVE-2026-8388, CVE-2026-8947, CVE-2026-8391,
     CVE-2026-8401, CVE-2026-8950, CVE-2026-8953, CVE-2026-8954,
     CVE-2026-8955, CVE-2026-8956, CVE-2026-8957, CVE-2026-8958,
     CVE-2026-8961, CVE-2026-8962, CVE-2026-8968, CVE-2026-8970,
     CVE-2026-8974, CVE-2026-8975.
Checksums-Sha1:
 767dac8f3380a806761ea6ecf52763c83b2b67ba 592099320 firefox-esr-dbgsym_140.11.0esr-1~deb13u1_amd64.deb
 a7cf053de4e0bd9b017d216e9c16e442f1e06225 18769 firefox-esr_140.11.0esr-1~deb13u1_amd64-buildd.buildinfo
 1d1d0910719e1c4f0f6ba42abee4fcda0ed393cc 71878056 firefox-esr_140.11.0esr-1~deb13u1_amd64.deb
Checksums-Sha256:
 68f47afd725249503881bb086681599674c44116e2309c4b2d5a0b9527249827 592099320 firefox-esr-dbgsym_140.11.0esr-1~deb13u1_amd64.deb
 629a2d08ee99a70a1ddb67ec87a00bc6a6e62faeee9ccb1025eed4fed31c4d0b 18769 firefox-esr_140.11.0esr-1~deb13u1_amd64-buildd.buildinfo
 7f444d7e2c9fc4b98c81262250d7aa58fbb2cf58eb1d85d7f27a059aa30f7964 71878056 firefox-esr_140.11.0esr-1~deb13u1_amd64.deb
Files:
 1925c7e4a6b01ee9f357c99fcbfc28be 592099320 debug optional firefox-esr-dbgsym_140.11.0esr-1~deb13u1_amd64.deb
 a7caae7c8ef614410292f8165d425e81 18769 web optional firefox-esr_140.11.0esr-1~deb13u1_amd64-buildd.buildinfo
 8807f03d4f3805893961c48008780acc 71878056 web optional firefox-esr_140.11.0esr-1~deb13u1_amd64.deb

-----BEGIN PGP SIGNATURE-----
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=h9VB
-----END PGP SIGNATURE-----