-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 20 May 2026 07:48:20 +0900 Source: firefox-esr Binary: firefox-esr firefox-esr-dbgsym Architecture: armhf Version: 140.11.0esr-1~deb12u1 Distribution: bookworm-security Urgency: medium Maintainer: armhf Build Daemon (arm-ubc-06) Changed-By: Mike Hommey Description: firefox-esr - Mozilla Firefox web browser - Extended Support Release (ESR) Changes: firefox-esr (140.11.0esr-1~deb12u1) bookworm-security; urgency=medium . * New upstream release. * Fixes for mfsa2026-48, also known as: CVE-2026-8946, CVE-2026-8388, CVE-2026-8947, CVE-2026-8391, CVE-2026-8401, CVE-2026-8950, CVE-2026-8953, CVE-2026-8954, CVE-2026-8955, CVE-2026-8956, CVE-2026-8957, CVE-2026-8958, CVE-2026-8961, CVE-2026-8962, CVE-2026-8968, CVE-2026-8970, CVE-2026-8974, CVE-2026-8975. Checksums-Sha1: b7ab6e358dfb0b44816884cfb1f9f2e1ad319110 12536892 firefox-esr-dbgsym_140.11.0esr-1~deb12u1_armhf.deb b76bc36d253cf91b7bd82d621361b80ecb31f00c 18909 firefox-esr_140.11.0esr-1~deb12u1_armhf-buildd.buildinfo 65d6c48dd665eb7f5d72d829a1dc5876fcb0794a 70876452 firefox-esr_140.11.0esr-1~deb12u1_armhf.deb Checksums-Sha256: 521b0929ca2dead194bba41e727d88c72dcd93a049134c36ecc0564c0c82f2e7 12536892 firefox-esr-dbgsym_140.11.0esr-1~deb12u1_armhf.deb a1eda816aa21f2009058cdca3d2fb1f7c6f732d7f8f252d4475b0144a6768c00 18909 firefox-esr_140.11.0esr-1~deb12u1_armhf-buildd.buildinfo f919e0484ea2745565140c59c17cc7381bf9a331f8a93ef4f755c7004ce4d784 70876452 firefox-esr_140.11.0esr-1~deb12u1_armhf.deb Files: 3a2e0c5d20764193ef480067305df692 12536892 debug optional firefox-esr-dbgsym_140.11.0esr-1~deb12u1_armhf.deb 05539f9fe673047e4a793881c5175b25 18909 web optional firefox-esr_140.11.0esr-1~deb12u1_armhf-buildd.buildinfo 4991ee2fc4ab0945903a64391c92efc3 70876452 web optional firefox-esr_140.11.0esr-1~deb12u1_armhf.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEBOUsBrtd5lcy6oRfutMAkCxKbL0FAmoNGi4ACgkQutMAkCxK bL24yQ//aTWYANHdPNHnM/hmxyxWWC9dINSQUHREPfjOwFwqP++EYZMd1c8Tjxnx /gauyiKDsHpbqfHBK2Wrzk579AD73kIwGvDAgxL7x3hVHsaAKlaWdSJORTuuPVJv ue4Nmg3nqGCaNYyqaVFVTuek+6qDAgx/m/R5aKnrBa4p60p+QynAso7/+VYZ9HX6 7WZWhwGfuH6ryGiC3a1AqomZ3h0vFHmgUT/7AaBLF08gV8cgLFpBggyiV9r8QSZj Q5mFMBRX/DANHZqPMF91IADH8FZcaECIx2MgQVmLKCrgo1ENLtfjkg3rfNfrnIKF QoJihit1eKxdvppOGdk1zY4eAUSI4jU8mRKcnXwcVIQWVcTSlK0E4EPtgiRKyO/N DgF8Mv5oe5tYW4HhmFp4vZ1QwBTYz1zIIt0Yu+s7fZQTgpmVS7ECsp7b2VnUFSMc rRm+yr6O7WAl8GqYq2NeQ63EAP2YuwwFM3ZURgxgeBMck+9VNvh+GdGIkK+eld74 /IuEmkNHII6KMJz44NuRYph1oJq75JOyoJWlbmNiY4a55BYuEZXH82D4gTh3gPZp yfUkcm783GdB08yrxp3f8dshLDgNOiZMTuLVHPIiWgPcpVyig5VOn7ZoBTfx0hv3 Ke5vn96sylZId7xZc99ggXCT3U985r26Ut23PhDaDaD7MYUGZN8= =V9sg -----END PGP SIGNATURE-----