-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 08 May 2026 08:22:51 +0900
Source: firefox-esr
Binary: firefox-esr firefox-esr-dbgsym
Architecture: amd64
Version: 140.10.2esr-1~deb12u1
Distribution: bookworm-security
Urgency: medium
Maintainer: all / amd64 / i386 Build Daemon (x86-conova-01) <buildd_amd64-x86-conova-01@buildd.debian.org>
Changed-By: Mike Hommey <glandium@debian.org>
Description:
 firefox-esr - Mozilla Firefox web browser - Extended Support Release (ESR)
Changes:
 firefox-esr (140.10.2esr-1~deb12u1) bookworm-security; urgency=medium
 .
   * New upstream release.
   * Fixes for mfsa2026-41, also known as:
     CVE-2026-8090, CVE-2026-8094, CVE-2026-8092.
Checksums-Sha1:
 4b2e7b65c03d99ba8006a0eb9c7e61b43ebc6b32 1347677360 firefox-esr-dbgsym_140.10.2esr-1~deb12u1_amd64.deb
 d04d4ec4a3b23130d4194bdd1fa9bf696d1a43b8 18956 firefox-esr_140.10.2esr-1~deb12u1_amd64-buildd.buildinfo
 a9f3bf833f6530830cc498da4657ac34e48b5066 76223992 firefox-esr_140.10.2esr-1~deb12u1_amd64.deb
Checksums-Sha256:
 a8d8e15dc9777d06e59bc3ddfcb9c1e493fba0517948e9d4d8633e036efc9ea2 1347677360 firefox-esr-dbgsym_140.10.2esr-1~deb12u1_amd64.deb
 0f6db2c8e98e9c510a1356b59fb29e83ca330571918fc8b6a95173c46c7640ce 18956 firefox-esr_140.10.2esr-1~deb12u1_amd64-buildd.buildinfo
 91d7de2b4822a85e40152c7de09a1f106c423c769b41044a61c4b8356c7c1ab0 76223992 firefox-esr_140.10.2esr-1~deb12u1_amd64.deb
Files:
 f8d830719074f0b1badbc7f6c5a57ceb 1347677360 debug optional firefox-esr-dbgsym_140.10.2esr-1~deb12u1_amd64.deb
 f6790b69f9d52435ca722b91b63379f4 18956 web optional firefox-esr_140.10.2esr-1~deb12u1_amd64-buildd.buildinfo
 2cf9c68b4d1e7bf74d359cb50f8e92e2 76223992 web optional firefox-esr_140.10.2esr-1~deb12u1_amd64.deb

-----BEGIN PGP SIGNATURE-----
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=mSBH
-----END PGP SIGNATURE-----