-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 22 Jul 2026 09:18:35 +0900 Source: firefox-esr Binary: firefox-esr firefox-esr-dbgsym Architecture: i386 Version: 140.14.0esr-1~deb13u1 Distribution: trixie-security Urgency: medium Maintainer: i386 Build Daemon (x86-grnet-01) Changed-By: Mike Hommey Description: firefox-esr - Mozilla Firefox web browser - Extended Support Release (ESR) Changes: firefox-esr (140.14.0esr-1~deb13u1) trixie-security; urgency=medium . * New upstream release. * Fixes for mfsa2026-70, also known as: CVE-2026-74934, CVE-2026-74935, CVE-2026-74936, CVE-2026-74939, CVE-2026-74940, CVE-2026-74941, CVE-2026-74942, CVE-2026-74943, CVE-2026-74944, CVE-2026-74945, CVE-2026-74946, CVE-2026-74948, CVE-2026-74949, CVE-2026-74953, CVE-2026-74957, CVE-2026-74959, CVE-2026-74960, CVE-2026-74962, CVE-2026-74963, CVE-2026-74964, CVE-2026-74965, CVE-2026-74967, CVE-2026-74969, CVE-2026-74971, CVE-2026-74972, CVE-2026-74973, CVE-2026-74974, CVE-2026-74976, CVE-2026-74983, CVE-2026-74987, CVE-2026-74990. . * python/mach/mach/command_util.py: Fix AST parsing in DecoratorVisitor for Python 3.14. bz#1993797. * python/mozbuild/mozbuild/frontend/reader.py, python/mozbuild/mozbuild/vendor/rewrite_mozbuild.py: Change uses of ast.Str with ast.Constant. bz#1969769. * python/mozbuild/mozbuild/vendor/vendor_python.py, third_party/python/jsonschema/jsonschema/validators.py: Patch jsonschema to work with Python 3.14+. bz#1983736. Checksums-Sha1: 181a30ef57ad20aaa599dccabcf9043410f49dca 8051544 firefox-esr-dbgsym_140.14.0esr-1~deb13u1_i386.deb a37767d996eb127ea350895ce0016795bf93916f 18942 firefox-esr_140.14.0esr-1~deb13u1_i386-buildd.buildinfo f8ddc4b465842b405deac759004ef2658be33be5 75504256 firefox-esr_140.14.0esr-1~deb13u1_i386.deb Checksums-Sha256: 3229e7e98d1634ad1948b249553982ef3f5ac99fdddcd7ddece2da348399b456 8051544 firefox-esr-dbgsym_140.14.0esr-1~deb13u1_i386.deb ee8b180ec1140a3e919ab9a73fe71e4cbd4171cb6d0f16a59229d8b54301050e 18942 firefox-esr_140.14.0esr-1~deb13u1_i386-buildd.buildinfo abfcc2a1153f114ac08e3d95d6e73d2eaae02958855cab511bf62b0dd2d74752 75504256 firefox-esr_140.14.0esr-1~deb13u1_i386.deb Files: 83f7c80db3ddbb2fc7321b4216a7f980 8051544 debug optional firefox-esr-dbgsym_140.14.0esr-1~deb13u1_i386.deb 34d6cf5a0ef9f5165146f10ba269ff99 18942 web optional firefox-esr_140.14.0esr-1~deb13u1_i386-buildd.buildinfo b66f5f5d890e42bd49ecb14deb13f0b7 75504256 web optional firefox-esr_140.14.0esr-1~deb13u1_i386.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEPAUaMA0H0rOy6qBWf2INRiCdaWIFAmqFWZoACgkQf2INRiCd aWJGWA//SMXz26rUvOu3VUVzIfBg8NdXwk4Rmx7OS4cVZh6hJo8Hbt0oyEfDPqBt 1svM64B3KjdEdPl3qsglhslFG4LmwbmZgsWy3qUrzd95ksA8/ODaZoVTGqxLqz6M gmMPhUsvIIjQZ3Gzz/G/cWBfmnLI8etS9kN/ji9fbOV1BBRiu+yyDi8C2DSnNBkm 3EeEsmEgr58e5olIsOihqeWFuLvqVnJ1drTDh/DD0FQxvcZLbS4xSWeuf6lmZVA4 u58Sf0aaz1iRFzxYJb7sE7UAwazSMdJAMYr6oliuik+Er337SiOlLSWigQzQzl4P h1LSvxPFth1Dy23RFa7qFwXr5Jrwo5uZq8l4PngKDoAT5piamKCKDu0eWcmjQCRM /Sd7tO+dnYSQCXZ9sln5PkNi+EMIinw/zY8R7oSP9/SRAmTnDn66CehV0tuo8356 61tvPtQnCyCC27Ot7ROMqMvQRE/LXPTFR78tSjgxoubHWLiRz5C7KX4Th5nyVddX hVJCe0bfee6ig40Bpkzm8nzjTno57yfAhtVfNFM2sfdyWCF1boEgw2PvQf9jvHYN 1qQEwNzjPjEDDgLvSPvVm3Iwi+onhvGWyD22cyyVXLhJDf4NPGzJ2XqUNo7vGWsu OQBhCJFsAEV1DnlsUR+VsufjBmd08XcabuWWpYIX0WaEAlPPQuY= =zu1k -----END PGP SIGNATURE-----