-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 12 Nov 2025 07:25:00 +0900
Source: firefox-esr
Binary: firefox-esr firefox-esr-dbgsym
Architecture: i386
Version: 140.5.0esr-1~deb12u1
Distribution: bookworm-security
Urgency: medium
Maintainer: amd64 / i386 Build Daemon (x86-ubc-01) <buildd_amd64-x86-ubc-01@buildd.debian.org>
Changed-By: Mike Hommey <glandium@debian.org>
Description:
 firefox-esr - Mozilla Firefox web browser - Extended Support Release (ESR)
Changes:
 firefox-esr (140.5.0esr-1~deb12u1) bookworm-security; urgency=medium
 .
   * New upstream release.
   * Fixes for mfsa2025-88, also known as:
     CVE-2025-13012, CVE-2025-13016, CVE-2025-13017, CVE-2025-13018,
     CVE-2025-13019, CVE-2025-13013, CVE-2025-13020, CVE-2025-13014,
     CVE-2025-13015.
Checksums-Sha1:
 9bc6f9c5a0933966f3ac747fd3d6f15f07fcc244 9620128 firefox-esr-dbgsym_140.5.0esr-1~deb12u1_i386.deb
 e98270bb19647962c7db3aa5d0aa7e89e91e9da4 18857 firefox-esr_140.5.0esr-1~deb12u1_i386-buildd.buildinfo
 78d01569fb2c4280bb13579e33b2445557ef713c 80786204 firefox-esr_140.5.0esr-1~deb12u1_i386.deb
Checksums-Sha256:
 c55ebdfc897d2cd1657deb75c4077fb61cd9ace16f385f61a6a4bd8624564b6f 9620128 firefox-esr-dbgsym_140.5.0esr-1~deb12u1_i386.deb
 e33ed6c396d9a961ccd90d02b39e148386ad2a11ddf9d231cda897e58137bede 18857 firefox-esr_140.5.0esr-1~deb12u1_i386-buildd.buildinfo
 1afe003ebfff47bd10907d1ef8b7093c27c06a1c55d27ec397e16a9b93d27e5c 80786204 firefox-esr_140.5.0esr-1~deb12u1_i386.deb
Files:
 8cda6d96b0ba1488721ea056e367e9c2 9620128 debug optional firefox-esr-dbgsym_140.5.0esr-1~deb12u1_i386.deb
 f8bc2e77c977226c61e51c56ee95e73d 18857 web optional firefox-esr_140.5.0esr-1~deb12u1_i386-buildd.buildinfo
 41d111f3e8ef68b6a8c0e7aaf416152b 80786204 web optional firefox-esr_140.5.0esr-1~deb12u1_i386.deb

-----BEGIN PGP SIGNATURE-----
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=9KAy
-----END PGP SIGNATURE-----