-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 22 Jul 2026 09:18:35 +0900
Source: firefox-esr
Binary: firefox-esr firefox-esr-dbgsym
Architecture: amd64
Version: 140.14.0esr-1~deb13u1
Distribution: trixie-security
Urgency: medium
Maintainer: all / amd64 / i386 Build Daemon (x86-conova-01) <buildd_amd64-x86-conova-01@buildd.debian.org>
Changed-By: Mike Hommey <glandium@debian.org>
Description:
 firefox-esr - Mozilla Firefox web browser - Extended Support Release (ESR)
Changes:
 firefox-esr (140.14.0esr-1~deb13u1) trixie-security; urgency=medium
 .
   * New upstream release.
   * Fixes for mfsa2026-70, also known as:
     CVE-2026-74934, CVE-2026-74935, CVE-2026-74936, CVE-2026-74939,
     CVE-2026-74940, CVE-2026-74941, CVE-2026-74942, CVE-2026-74943,
     CVE-2026-74944, CVE-2026-74945, CVE-2026-74946, CVE-2026-74948,
     CVE-2026-74949, CVE-2026-74953, CVE-2026-74957, CVE-2026-74959,
     CVE-2026-74960, CVE-2026-74962, CVE-2026-74963, CVE-2026-74964,
     CVE-2026-74965, CVE-2026-74967, CVE-2026-74969, CVE-2026-74971,
     CVE-2026-74972, CVE-2026-74973, CVE-2026-74974, CVE-2026-74976,
     CVE-2026-74983, CVE-2026-74987, CVE-2026-74990.
 .
   * python/mach/mach/command_util.py: Fix AST parsing in DecoratorVisitor for
     Python 3.14. bz#1993797.
   * python/mozbuild/mozbuild/frontend/reader.py,
     python/mozbuild/mozbuild/vendor/rewrite_mozbuild.py: Change uses of
     ast.Str with ast.Constant. bz#1969769.
   * python/mozbuild/mozbuild/vendor/vendor_python.py,
     third_party/python/jsonschema/jsonschema/validators.py: Patch jsonschema
     to work with Python 3.14+. bz#1983736.
Checksums-Sha1:
 c8f63544f9b0d26c6b3415006e5680f046573c68 592171640 firefox-esr-dbgsym_140.14.0esr-1~deb13u1_amd64.deb
 a80bc3ff86d27210651bc1dcfc5fda5c030cf706 19029 firefox-esr_140.14.0esr-1~deb13u1_amd64-buildd.buildinfo
 0d810dcd5a328a37d7219c553ef14d2813c06c51 71958744 firefox-esr_140.14.0esr-1~deb13u1_amd64.deb
Checksums-Sha256:
 a7d854b15d92f27b2745e2b0d6b564182adc82b28a576b6b18343884c8f3fd75 592171640 firefox-esr-dbgsym_140.14.0esr-1~deb13u1_amd64.deb
 b8381a084f5152c3eb77e5b9fe96265ea23badd87c923646013dc7523cfd2b42 19029 firefox-esr_140.14.0esr-1~deb13u1_amd64-buildd.buildinfo
 65c217cdd9015843e51b0a5707c9a622b255ff2f059ff15a8e854151dfa0e237 71958744 firefox-esr_140.14.0esr-1~deb13u1_amd64.deb
Files:
 61996a91fdc461e7912f412fdfe6c991 592171640 debug optional firefox-esr-dbgsym_140.14.0esr-1~deb13u1_amd64.deb
 e48d1e0423693e62b3803628cac78ed4 19029 web optional firefox-esr_140.14.0esr-1~deb13u1_amd64-buildd.buildinfo
 137a081fa326e04cb78748d6ee81001d 71958744 web optional firefox-esr_140.14.0esr-1~deb13u1_amd64.deb

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEE7cQ9mRD4+dWjjrb6PkCWRKsh20cFAmqFWfwACgkQPkCWRKsh
20c8ZxAAsmXwbHqC0UASMmLZa5NQME8vSZFwVIcNlQnP2qKeFGqe8UbTOv1UKXy2
6JMYw044uo6pImFQX8uIDVVUHx3cY4ePtvRE6VMs93zdeoibmsEXaNo7gPi1YdzF
zfWQTwf3BvOJ4gTudN0rI8B9aMHTbegO38kctmMMMaUmUZv2O6OK+9/yJTuqNT3h
McvmHNHzk3DCJqr/eUhgdBnl13C1cSHauuXrdAw369ZzxFbdM5tOTAWUzqeeGv7j
l62xb+JFViRvVrhNutyTBoBJjZJ+dM4tmQFA3erPYXBJfl4nlLC5WWhDjfIu9DIU
z5omRaGMt29Oh69NBuhWyJmouxLCjYD+81bdN+xxI3/VPqB3HWXI5IZZOXPuH/7C
s6ML93iVDTqJP8PFw+VgCOxi/JgCa/hpMTfcCet9KxESl0+lzgIZ7h3To39E7+mu
IOG6b7pzmG6I0gtU6s99GB5FeCBjpGnzgelIUM1mUr+ZOcLZiW7VRCBZnlKJDr1L
8byuG7iplo3kfZmH/PaLX4jSwI9yzJahitx4HnJ4tgHKW+c4GiMan6pJgNJmoIGk
4xoe47Bo6RyDuSmqoFPYCoFJpwkwNUmsI+HZeDre1agZhsLJVNJq/Zj88b2blGmN
7Z6/PjOHGOX9B1LM95B/2EX4Fi+mTJK1qZDujD0FU3eSKbLPNuw=
=DCL7
-----END PGP SIGNATURE-----