-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 14 Jan 2026 08:04:40 +0900
Source: firefox-esr
Binary: firefox-esr firefox-esr-dbgsym
Architecture: i386
Version: 140.7.0esr-1~deb13u1
Distribution: trixie-security
Urgency: medium
Maintainer: i386 Build Daemon (x86-grnet-01) <buildd_amd64-x86-grnet-01@buildd.debian.org>
Changed-By: Mike Hommey <glandium@debian.org>
Description:
 firefox-esr - Mozilla Firefox web browser - Extended Support Release (ESR)
Changes:
 firefox-esr (140.7.0esr-1~deb13u1) trixie-security; urgency=medium
 .
   * New upstream release.
   * Fixes for mfsa2026-03, also known as:
     CVE-2026-0877, CVE-2026-0878, CVE-2026-0879, CVE-2026-0880,
     CVE-2026-0882, CVE-2025-14327, CVE-2026-0883, CVE-2026-0884,
     CVE-2026-0885, CVE-2026-0886, CVE-2026-0887, CVE-2026-0890,
     CVE-2026-0891.
Checksums-Sha1:
 2888f0c31b51fb337b95dd3c688f3c51079e1ab7 8050636 firefox-esr-dbgsym_140.7.0esr-1~deb13u1_i386.deb
 dcb907ba0bbb17c96ea81eb906c68967d3bad3ae 18418 firefox-esr_140.7.0esr-1~deb13u1_i386-buildd.buildinfo
 736bc685700d67d8575cf856a43570dec4a4892f 75336664 firefox-esr_140.7.0esr-1~deb13u1_i386.deb
Checksums-Sha256:
 12160af9790974d5d625591daa744e509ce2d41ce64326cb6c222a06a9139a7b 8050636 firefox-esr-dbgsym_140.7.0esr-1~deb13u1_i386.deb
 56eac5f9822e0aadd728162b9bd6479ce8a53ca38f7cb06ec93463e9d07f3135 18418 firefox-esr_140.7.0esr-1~deb13u1_i386-buildd.buildinfo
 aef8c6bb95fe37b40e69a519bca7d55fa183009291cdf000260578990f9328d6 75336664 firefox-esr_140.7.0esr-1~deb13u1_i386.deb
Files:
 a5f7eec1b0a6996799d91ca2d18a2191 8050636 debug optional firefox-esr-dbgsym_140.7.0esr-1~deb13u1_i386.deb
 75d78dcbf5bd9104cc3915721c3c521d 18418 web optional firefox-esr_140.7.0esr-1~deb13u1_i386-buildd.buildinfo
 c411f90781fc05d2c9b818d319100210 75336664 web optional firefox-esr_140.7.0esr-1~deb13u1_i386.deb

-----BEGIN PGP SIGNATURE-----
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=Wp5G
-----END PGP SIGNATURE-----