-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 20 May 2026 07:48:20 +0900
Source: firefox-esr
Binary: firefox-esr firefox-esr-dbgsym
Architecture: amd64
Version: 140.11.0esr-1~deb12u1
Distribution: bookworm-security
Urgency: medium
Maintainer: all / amd64 / i386 Build Daemon (x86-conova-02) <buildd_amd64-x86-conova-02@buildd.debian.org>
Changed-By: Mike Hommey <glandium@debian.org>
Description:
 firefox-esr - Mozilla Firefox web browser - Extended Support Release (ESR)
Changes:
 firefox-esr (140.11.0esr-1~deb12u1) bookworm-security; urgency=medium
 .
   * New upstream release.
   * Fixes for mfsa2026-48, also known as:
     CVE-2026-8946, CVE-2026-8388, CVE-2026-8947, CVE-2026-8391,
     CVE-2026-8401, CVE-2026-8950, CVE-2026-8953, CVE-2026-8954,
     CVE-2026-8955, CVE-2026-8956, CVE-2026-8957, CVE-2026-8958,
     CVE-2026-8961, CVE-2026-8962, CVE-2026-8968, CVE-2026-8970,
     CVE-2026-8974, CVE-2026-8975.
Checksums-Sha1:
 51352bad54bf8a172504ddb323b79ab45ac39e37 1348080828 firefox-esr-dbgsym_140.11.0esr-1~deb12u1_amd64.deb
 15e75071c178735f521e8bd12b0c43b70e1738a7 18964 firefox-esr_140.11.0esr-1~deb12u1_amd64-buildd.buildinfo
 c2eb43ca5a9718edc63587571d103ab748da602d 76211980 firefox-esr_140.11.0esr-1~deb12u1_amd64.deb
Checksums-Sha256:
 1a7562dab03a272d5c84196315fea12afd2b67002a6a38e13fc189837a81c42d 1348080828 firefox-esr-dbgsym_140.11.0esr-1~deb12u1_amd64.deb
 e0d7898043943a5171c99cf02deabbb9802fee59b0ef7fc3ef62fbedc5cefce0 18964 firefox-esr_140.11.0esr-1~deb12u1_amd64-buildd.buildinfo
 03a40acc916ffe58de64eddf0963210c0f6c7e8bb52e98044aa20390a24c57a4 76211980 firefox-esr_140.11.0esr-1~deb12u1_amd64.deb
Files:
 f0a915882f699f28a7a36cf70d3450c1 1348080828 debug optional firefox-esr-dbgsym_140.11.0esr-1~deb12u1_amd64.deb
 8452b124a7897b7a1af270f161ce5712 18964 web optional firefox-esr_140.11.0esr-1~deb12u1_amd64-buildd.buildinfo
 93cb1bcea2dc2a904b519f3d199888a5 76211980 web optional firefox-esr_140.11.0esr-1~deb12u1_amd64.deb

-----BEGIN PGP SIGNATURE-----
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=utL8
-----END PGP SIGNATURE-----