-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 08 May 2026 08:22:51 +0900
Source: firefox-esr
Binary: firefox-esr firefox-esr-dbgsym
Architecture: amd64
Version: 140.10.2esr-1~deb13u1
Distribution: trixie-security
Urgency: medium
Maintainer: all / amd64 / i386 Build Daemon (x86-grnet-03) <buildd_amd64-x86-grnet-03@buildd.debian.org>
Changed-By: Mike Hommey <glandium@debian.org>
Description:
 firefox-esr - Mozilla Firefox web browser - Extended Support Release (ESR)
Changes:
 firefox-esr (140.10.2esr-1~deb13u1) trixie-security; urgency=medium
 .
   * New upstream release.
   * Fixes for mfsa2026-41, also known as:
     CVE-2026-8090, CVE-2026-8094, CVE-2026-8092.
Checksums-Sha1:
 a8ef0ae9bf735adb220abe9ce15a8ecba811fa9a 591987468 firefox-esr-dbgsym_140.10.2esr-1~deb13u1_amd64.deb
 eee5311dc9d194e1b7f7745da74b77f4c718260f 18631 firefox-esr_140.10.2esr-1~deb13u1_amd64-buildd.buildinfo
 c02f0c086ef25942eb6019c67d3af332b8833bf2 71934084 firefox-esr_140.10.2esr-1~deb13u1_amd64.deb
Checksums-Sha256:
 04ff19d497b4cc601e0dcf13c8d3805a6f5574cd720c7b9cb6791f38e6539501 591987468 firefox-esr-dbgsym_140.10.2esr-1~deb13u1_amd64.deb
 4c5e6ef02d2ff18a7ac3f1962e8bbee3a415bc83318bdb080db385cf3ad6addd 18631 firefox-esr_140.10.2esr-1~deb13u1_amd64-buildd.buildinfo
 cfc191b02023c057e23e956f471d8bf3aa21a48b0087cf61e7e5c5a5b8a161b5 71934084 firefox-esr_140.10.2esr-1~deb13u1_amd64.deb
Files:
 aed3fa4fab22d15903daeff2db381777 591987468 debug optional firefox-esr-dbgsym_140.10.2esr-1~deb13u1_amd64.deb
 64f327ebeb7135cae9ff90bfe8dd02a4 18631 web optional firefox-esr_140.10.2esr-1~deb13u1_amd64-buildd.buildinfo
 bacf788eb7bbb2751eac608bbb33f455 71934084 web optional firefox-esr_140.10.2esr-1~deb13u1_amd64.deb

-----BEGIN PGP SIGNATURE-----
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=9zK9
-----END PGP SIGNATURE-----