-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 08 May 2026 08:22:51 +0900
Source: firefox-esr
Binary: firefox-esr firefox-esr-dbgsym
Architecture: arm64
Version: 140.10.2esr-1~deb12u1
Distribution: bookworm-security
Urgency: medium
Maintainer: arm64 Build Daemon (arm-conova-04) <buildd_arm64-arm-conova-04@buildd.debian.org>
Changed-By: Mike Hommey <glandium@debian.org>
Description:
 firefox-esr - Mozilla Firefox web browser - Extended Support Release (ESR)
Changes:
 firefox-esr (140.10.2esr-1~deb12u1) bookworm-security; urgency=medium
 .
   * New upstream release.
   * Fixes for mfsa2026-41, also known as:
     CVE-2026-8090, CVE-2026-8094, CVE-2026-8092.
Checksums-Sha1:
 a5d26d3e9b111bfb9be6b690d2a6f69ed50758cd 1326074856 firefox-esr-dbgsym_140.10.2esr-1~deb12u1_arm64.deb
 81ced66e4376739aff1090fe5c7ccbfe6062cb16 19022 firefox-esr_140.10.2esr-1~deb12u1_arm64-buildd.buildinfo
 c490b53a3363aaac8f1c897f5357cf5da63fc347 69601648 firefox-esr_140.10.2esr-1~deb12u1_arm64.deb
Checksums-Sha256:
 4e8f155232b4d585fa2adc6de532df13b81d7a2e8cd4f8173cd0af3981f67071 1326074856 firefox-esr-dbgsym_140.10.2esr-1~deb12u1_arm64.deb
 6638ff68acb7592f835e43ccd938316c32267393e8d272e313ed276b086d43bb 19022 firefox-esr_140.10.2esr-1~deb12u1_arm64-buildd.buildinfo
 c33978bec83fdeab7966a694318fb05ee4768fa239cc92a494eaee82f5311db2 69601648 firefox-esr_140.10.2esr-1~deb12u1_arm64.deb
Files:
 dabf5ceab03aa4d0fbe6a4c82f2ee6e6 1326074856 debug optional firefox-esr-dbgsym_140.10.2esr-1~deb12u1_arm64.deb
 65619ffab78d4ac402d3723fab1fb870 19022 web optional firefox-esr_140.10.2esr-1~deb12u1_arm64-buildd.buildinfo
 f77d2cc1bc02628751f1bf05ed3426a2 69601648 web optional firefox-esr_140.10.2esr-1~deb12u1_arm64.deb

-----BEGIN PGP SIGNATURE-----
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=XSHm
-----END PGP SIGNATURE-----