-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 29 Apr 2026 07:57:41 +0900
Source: firefox-esr
Binary: firefox-esr firefox-esr-dbgsym
Architecture: amd64
Version: 140.10.1esr-1~deb13u1
Distribution: trixie-security
Urgency: medium
Maintainer: all / amd64 / i386 Build Daemon (x86-conova-01) <buildd_amd64-x86-conova-01@buildd.debian.org>
Changed-By: Mike Hommey <glandium@debian.org>
Description:
 firefox-esr - Mozilla Firefox web browser - Extended Support Release (ESR)
Changes:
 firefox-esr (140.10.1esr-1~deb13u1) trixie-security; urgency=medium
 .
   * New upstream release.
   * Fixes for mfsa2026-36, also known as:
     CVE-2026-7320, CVE-2026-7321, CVE-2026-7322, CVE-2026-7323.
Checksums-Sha1:
 fbfa057456cf6383269bb1e4ac0edbf3fc4d342c 591998392 firefox-esr-dbgsym_140.10.1esr-1~deb13u1_amd64.deb
 115654a5128de9e72d0771f8802e2e8f41f8a23b 18623 firefox-esr_140.10.1esr-1~deb13u1_amd64-buildd.buildinfo
 205566fc5f7cb738f3cfdfaa960d1da903d7c795 71932236 firefox-esr_140.10.1esr-1~deb13u1_amd64.deb
Checksums-Sha256:
 ed4e7b49a74ad48d6b31a66a15834e4c1d95cf1116e07c12f559dc7fe5318820 591998392 firefox-esr-dbgsym_140.10.1esr-1~deb13u1_amd64.deb
 436f9e01f39204a5fa1d3d34602b8b6080eb44fa028c6f8adfacd942abba2a40 18623 firefox-esr_140.10.1esr-1~deb13u1_amd64-buildd.buildinfo
 8eb223702473ed844b58078532d9b9c59b54ff7efac216480ffff2252e2ec83d 71932236 firefox-esr_140.10.1esr-1~deb13u1_amd64.deb
Files:
 b40b5475b88090b5f5395c8fa6c351c8 591998392 debug optional firefox-esr-dbgsym_140.10.1esr-1~deb13u1_amd64.deb
 7569a28b0fae9f3f7b4cbecb71dde9e9 18623 web optional firefox-esr_140.10.1esr-1~deb13u1_amd64-buildd.buildinfo
 e7f0348c2dfe0334b7c9b62445611e8b 71932236 web optional firefox-esr_140.10.1esr-1~deb13u1_amd64.deb

-----BEGIN PGP SIGNATURE-----
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=SPPt
-----END PGP SIGNATURE-----