-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 19 Aug 2026 09:51:19 +0900
Source: firefox-esr
Binary: firefox-esr firefox-esr-dbgsym
Architecture: amd64
Version: 140.15.0esr-1~deb13u1
Distribution: trixie-security
Urgency: medium
Maintainer: amd64 / i386 Build Daemon (x86-ubc-01) <buildd_amd64-x86-ubc-01@buildd.debian.org>
Changed-By: Mike Hommey <glandium@debian.org>
Description:
 firefox-esr - Mozilla Firefox web browser - Extended Support Release (ESR)
Changes:
 firefox-esr (140.15.0esr-1~deb13u1) trixie-security; urgency=medium
 .
   * New upstream release.
   * Fixes for mfsa2026-84, also known as:
     CVE-2026-75874, CVE-2026-16365, CVE-2026-84119, CVE-2026-84120,
     CVE-2026-84121, CVE-2026-84122, CVE-2026-84124, CVE-2026-16371,
     CVE-2026-84131, CVE-2026-84143, CVE-2026-84145.
 .
   * third_party/rust/glslopt/.cargo-checksum.json,
     third_party/rust/glslopt/glsl-optimizer/include/c11/threads_posix.h:
     Fix conficting types for once_flag and call_once. Fixes: #1128875.
Checksums-Sha1:
 60415cd2c2d5ce5952b79f5fdaebe863d071e823 592247900 firefox-esr-dbgsym_140.15.0esr-1~deb13u1_amd64.deb
 c33deb89fbe2795b8a3c1686b3aea64ed3bde5ad 19093 firefox-esr_140.15.0esr-1~deb13u1_amd64-buildd.buildinfo
 de5678f1ca035f282a2da3ba70d3174d22f5c7ce 71937020 firefox-esr_140.15.0esr-1~deb13u1_amd64.deb
Checksums-Sha256:
 0c83c0cd1617922e15c9f0c99070c1b01fe78f322b609bd358bae2120cd911f3 592247900 firefox-esr-dbgsym_140.15.0esr-1~deb13u1_amd64.deb
 ed5d5eeb4715b4a3527aa81074dd9c0a6c4d5c585915199525a69ea9e53acb17 19093 firefox-esr_140.15.0esr-1~deb13u1_amd64-buildd.buildinfo
 6ecab8a1d17117b017f806b78efff670c111f34fa999cd12c63b41d99f7188eb 71937020 firefox-esr_140.15.0esr-1~deb13u1_amd64.deb
Files:
 5a1bd73651cf00d9d519e97d010ce46b 592247900 debug optional firefox-esr-dbgsym_140.15.0esr-1~deb13u1_amd64.deb
 8fdc634ee55778860184ed1fa62e31f7 19093 web optional firefox-esr_140.15.0esr-1~deb13u1_amd64-buildd.buildinfo
 10b5edf4825a11c3f9b68ecc3d85d5f8 71937020 web optional firefox-esr_140.15.0esr-1~deb13u1_amd64.deb

-----BEGIN PGP SIGNATURE-----
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=aVPS
-----END PGP SIGNATURE-----