-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 14 Jan 2026 08:04:40 +0900 Source: firefox-esr Binary: firefox-esr firefox-esr-dbgsym Architecture: arm64 Version: 140.7.0esr-1~deb13u1 Distribution: trixie-security Urgency: medium Maintainer: arm Build Daemon (arm-conova-04) Changed-By: Mike Hommey Description: firefox-esr - Mozilla Firefox web browser - Extended Support Release (ESR) Changes: firefox-esr (140.7.0esr-1~deb13u1) trixie-security; urgency=medium . * New upstream release. * Fixes for mfsa2026-03, also known as: CVE-2026-0877, CVE-2026-0878, CVE-2026-0879, CVE-2026-0880, CVE-2026-0882, CVE-2025-14327, CVE-2026-0883, CVE-2026-0884, CVE-2026-0885, CVE-2026-0886, CVE-2026-0887, CVE-2026-0890, CVE-2026-0891. Checksums-Sha1: ade22abd27b5226c54b9694626b31606542ba9dc 587308168 firefox-esr-dbgsym_140.7.0esr-1~deb13u1_arm64.deb 7a2943288f9a4062704d9593cbed3e93c9f1355a 18537 firefox-esr_140.7.0esr-1~deb13u1_arm64-buildd.buildinfo 881e6c6466e3939232d4374324bfc4a3d0f692b5 64372660 firefox-esr_140.7.0esr-1~deb13u1_arm64.deb Checksums-Sha256: 79514c42a58b5f37c993d99afe091e2872e26f9cb168c65cf3a2b64ae8628488 587308168 firefox-esr-dbgsym_140.7.0esr-1~deb13u1_arm64.deb b97ee8c32670b21219b65cc99eb97b97ccb14376a285ae72a5b5f1b929f64f85 18537 firefox-esr_140.7.0esr-1~deb13u1_arm64-buildd.buildinfo f5613202bc60d6cd677bf0628bf0226d35946c2115a48a4eb2dfeb89eaad03bf 64372660 firefox-esr_140.7.0esr-1~deb13u1_arm64.deb Files: a2c141b21ee797c377a816081f033835 587308168 debug optional firefox-esr-dbgsym_140.7.0esr-1~deb13u1_arm64.deb e5b606328bb5b1a35882e130caab189d 18537 web optional firefox-esr_140.7.0esr-1~deb13u1_arm64-buildd.buildinfo bb3cebb6d66b4fa749c54ba4919a7711 64372660 web optional firefox-esr_140.7.0esr-1~deb13u1_arm64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEYxmcRLDHP0tCCM0oScpU3dYulLgFAmlm9toACgkQScpU3dYu lLibPRAAnAGv7yJIgBvYOnVKnA4UZ4Inq8AsTzrP/Wj4a1b067TJpDN8FC5RLIJX gn/RYxXsxI12mc4SIgetxa4P0Jw812SJz8+q9YKXo9SNWzsKcpJxdDrEadtNxDT3 w47yaNPpGu4Az4VEnM4cIoVPMMGjyCoFcH0bVE9eqr4p03xKmIXdu+sxKP9+cLr3 B6G0OpH22B/1rN7NFhjnyvdg3aNv44GbD1NNRg4XVtrlwCiUOfwULCn5NfZKHfOk EU/JjgJgzcFCHfCyfDgb98yCdZFL5lqs57RUKUFietH9gPXkBji+SUX5PVyH+L/+ yM+68vS8xHoNlUjBL6zNGQJRjAAsUo/D9BH6lLz/HejWN4Ao1uDoeA23qpDfn/HS GawBpB5k0bwTc0sDOzzwXabnQlgJozjH1VNJPp5Ip1spwhTVAg8Z2496Ldzdfsc3 cAdkbcTX2dWi9TOVQu4kRiwav4RTRbZ4NlB+bCpAvzwZ4a3cIxFb8CKrFBQIztVS FIkPuFDFP/UtghZDGQmd5yljIumgvfdtZWzRDeU+4Pef/zl6rHrs9vGOPg5W/xVW lpEyGDIEK5ik5+uawmOn1k2KEtvPnAUoutf0KrhhjIeIa7Uw921cZEBPiW5akV2f 8c13njvBlk6i4nWQgxj77i2UYvul1yICDPvK/wRphkXYzKPMNCg= =uzw9 -----END PGP SIGNATURE-----