-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 12 Nov 2025 07:25:00 +0900 Source: firefox-esr Binary: firefox-esr firefox-esr-dbgsym Architecture: amd64 Version: 140.5.0esr-1~deb12u1 Distribution: bookworm-security Urgency: medium Maintainer: all / amd64 / i386 Build Daemon (x86-grnet-03) Changed-By: Mike Hommey Description: firefox-esr - Mozilla Firefox web browser - Extended Support Release (ESR) Changes: firefox-esr (140.5.0esr-1~deb12u1) bookworm-security; urgency=medium . * New upstream release. * Fixes for mfsa2025-88, also known as: CVE-2025-13012, CVE-2025-13016, CVE-2025-13017, CVE-2025-13018, CVE-2025-13019, CVE-2025-13013, CVE-2025-13020, CVE-2025-13014, CVE-2025-13015. Checksums-Sha1: 13bf483b1e23f6cae20a6e1f9ca7048f63b914ca 1345684028 firefox-esr-dbgsym_140.5.0esr-1~deb12u1_amd64.deb 5a96437d2925958758a4f4d412ad9b2c8f814bbb 18920 firefox-esr_140.5.0esr-1~deb12u1_amd64-buildd.buildinfo 6e4f2f4f9fe9370ba97defc248036e30586d1e25 76036052 firefox-esr_140.5.0esr-1~deb12u1_amd64.deb Checksums-Sha256: 428a863d8aa94f484bf01265ed839b6c393c0e678f282c7f80099dc952034f37 1345684028 firefox-esr-dbgsym_140.5.0esr-1~deb12u1_amd64.deb ca1c21a26479f3ab690f2fa42055facf4edaa94c5a2e4505cd669afa06c90cc8 18920 firefox-esr_140.5.0esr-1~deb12u1_amd64-buildd.buildinfo 2b2efc7da5820d549b74fe9d902e3a5159d7c67273ea3cebb468e7d9d03f2325 76036052 firefox-esr_140.5.0esr-1~deb12u1_amd64.deb Files: bc1735ec38257ff91dbaede24a1932ee 1345684028 debug optional firefox-esr-dbgsym_140.5.0esr-1~deb12u1_amd64.deb 6084ec6129fe231d108a3a9e35167b10 18920 web optional firefox-esr_140.5.0esr-1~deb12u1_amd64-buildd.buildinfo d2ca8780b4fe06eb284bed9ce365f940 76036052 web optional firefox-esr_140.5.0esr-1~deb12u1_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEHqtYLkdKRyCY94K8fUw6/tXbAmMFAmkT+NAACgkQfUw6/tXb AmPB1A/9EerqnzkPBDgW7efx0hAhypCEJHjfSSLXvhd8C2FFyNaRZ6iDZnDVZK07 PNc5ACW2iS8rO5l9OVAqCydp7VksPopPrk0u9M1p39hY4EokpbhvOpB7EzgJJuvB 2Gp0C2qB9JFI87vdFK/K3zgJynW6DpHLtQ0P4I9i7V6oQCe3gqC2ig3inwQLZ5Ug snOT1rCNBoNjOb2rW+t94J765kJFV+D1UhSDSE2xQxFvqhdpz/GYjww3vZ1vbMQN g5NXO9/0Qvb/s6e7RCwunTuuuWrmHxbZhwm0P9xMjA65VdD0TNholoj357VZldQG Mgr4/xExy9gB8WPjs0GKSSMo5DaUZcCQ9sxUg4fyLXdRn/Tx38yZbucn6Iap7zJh rUZh7ckkw8Kq1SBpK3POKyKYmUojKeXbG0ZtRcNoyIEhMai6gv6CAyh0ewrud4y5 Sdcn3quWL76/XdnnqDrX4ijOAlXc9cpQatiGLQqOgAuaBAny9DRPcJKO39Y2PQ5f RPJS2pbb/nxGsi8fHrjoMKc58ZComG1wQICgJ4hKG3fMewzd0ZNEgaPM2UunKaaE YYltH/AOkq/EBSBgoh+ygCJL7R+BC2cyKWem8ustCHAeOVNFCt10pCMlGlwaVB+Z 16v+8D/wYclVRJVs9rtrrJPZwyoZIHBVOtDrxfRDdJtsYNSeVAQ= =gf96 -----END PGP SIGNATURE-----