-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 14 Jan 2026 08:04:40 +0900
Source: firefox-esr
Binary: firefox-esr firefox-esr-dbgsym
Architecture: amd64
Version: 140.7.0esr-1~deb13u1
Distribution: trixie-security
Urgency: medium
Maintainer: amd64 / i386 Build Daemon (x86-csail-01) <buildd_amd64-x86-csail-01@buildd.debian.org>
Changed-By: Mike Hommey <glandium@debian.org>
Description:
 firefox-esr - Mozilla Firefox web browser - Extended Support Release (ESR)
Changes:
 firefox-esr (140.7.0esr-1~deb13u1) trixie-security; urgency=medium
 .
   * New upstream release.
   * Fixes for mfsa2026-03, also known as:
     CVE-2026-0877, CVE-2026-0878, CVE-2026-0879, CVE-2026-0880,
     CVE-2026-0882, CVE-2025-14327, CVE-2026-0883, CVE-2026-0884,
     CVE-2026-0885, CVE-2026-0886, CVE-2026-0887, CVE-2026-0890,
     CVE-2026-0891.
Checksums-Sha1:
 1a74f14869d3c4f9fa24ffd1799607dd036859b2 591068100 firefox-esr-dbgsym_140.7.0esr-1~deb13u1_amd64.deb
 9d9d4d8261b1be7ff6fb7016e07415e7e512b6ef 18505 firefox-esr_140.7.0esr-1~deb13u1_amd64-buildd.buildinfo
 31d8d175993f64d1039debcadd4f8a7c5a05fd02 71800520 firefox-esr_140.7.0esr-1~deb13u1_amd64.deb
Checksums-Sha256:
 6391cd32c3d914b30ca8797199a553ef0b2ffdca457b0163e41dae8c916c4071 591068100 firefox-esr-dbgsym_140.7.0esr-1~deb13u1_amd64.deb
 0cccbc14ad0d321bb517bc3e2ef2025811b65b61b3fc74741f9cd984bc4cbe26 18505 firefox-esr_140.7.0esr-1~deb13u1_amd64-buildd.buildinfo
 3fd9ea05ff3d8fceab7e6dff71f40411437236e430983e93c65359ffdb39f4d0 71800520 firefox-esr_140.7.0esr-1~deb13u1_amd64.deb
Files:
 35e49a6744434a2a307313beb56c0004 591068100 debug optional firefox-esr-dbgsym_140.7.0esr-1~deb13u1_amd64.deb
 987d9a49799ca4a18e525bdcf937bcd2 18505 web optional firefox-esr_140.7.0esr-1~deb13u1_amd64-buildd.buildinfo
 9d570400e115d8468430d8d3179bcba7 71800520 web optional firefox-esr_140.7.0esr-1~deb13u1_amd64.deb

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEXNeYFUF3FbHcrtSeIy3Pg040HrAFAmlm+GQACgkQIy3Pg040
HrALqA/8Cw/pYZA4J3Jxct8nuVpx97P8+OMbU95G+tvTnBkAFQsS1WXgk92uyO8+
jJccmuZYHfHlpwrUrnAOWCS/QjPqxWU97PAJXtTo7dF0wZGNRHUAxmcBOexQqNOa
iNJ/rw9OHsNzjIja1xEC4TyBQv6Q2z+RfzztYcA4vDtA0fiGmmvTZXzUayKaKSl8
kHsHm+kPXQdLJoXq1+kl5Il/oSnVJJH7TGQNwabpyaiVTIYwB7e4BQMUPPRKQxcr
7vUFHUtmm0mk8EFxEpmz8gcdWqiOxs5gYDu089GS5yMckpW0EFF5dXN3usibGd0l
dx5af869OkdtTaEVPXBwpqHmv3uID8pylxnl+88h9zytvghJ1z3XJFYzTgPkog9C
riA8qgo2m7AcddDfPJ/+JZeixqKtneegOP8JY6yXcEXc9DBvMRKiHZ6JC09HcQto
9y0AI1oxY9nhJJZXRPX+1jKu4IOWYk/3bF0AVfngK9gYd664PDe12nJ/oKlSepDY
hqAzkGAxucGYLc7XiQsNdP+Wqt+lPY3hDvOMKPG4SlYTXKjq9MDtuw/xy3OtbKQJ
etmz2PsSOGtHM/GWXA6571gz8YxiSdeQlrpKt5OoOOUaUlfypJ/3w69JLPA99nJp
dV+C15dST1kZ7iaAD7a8fdL2hhYAC9IhA0hA5e6V0NcgGx6zKus=
=yyGH
-----END PGP SIGNATURE-----