-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 02 Feb 2026 18:10:45 +0100
Source: fonttools
Binary: fonttools python-fonttools-doc
Architecture: all
Version: 4.38.0-1+deb12u1
Distribution: bookworm
Urgency: medium
Maintainer: all / amd64 / i386 Build Daemon (x86-grnet-03) <buildd_amd64-x86-grnet-03@buildd.debian.org>
Changed-By: Bastian Germann <bage@debian.org>
Description:
 fonttools  - Converts OpenType and TrueType fonts to and from XML (Executables
 python-fonttools-doc - Converts OpenType and TrueType fonts to and from XML (Documentati
Closes: 1121605
Changes:
 fonttools (4.38.0-1+deb12u1) bookworm; urgency=medium
 .
   * Team upload.
   * Backport the upstream fix for CVE-2025-66034. Closes: #1121605
   * Apply the upstream fix for CVE-2023-45139.
Checksums-Sha1:
 622aff1ec92ae27e0d0e6726abaad063baf1103b 11248 fonttools_4.38.0-1+deb12u1_all-buildd.buildinfo
 75b6e009de189baae03d4a75c38f0e7735c44ddc 11084 fonttools_4.38.0-1+deb12u1_all.deb
 c03845f250cf2db4dadef3eb42a254ec6e730c1b 1757120 python-fonttools-doc_4.38.0-1+deb12u1_all.deb
Checksums-Sha256:
 47e1047e22635d1b3d0bced215df8774ff7bd56f4db0f5107afd361849bc5a34 11248 fonttools_4.38.0-1+deb12u1_all-buildd.buildinfo
 f3a6fd92f72f5ba67eef6bd629d3c9a4d14b42cd59dc2338956c76bb44db7f1d 11084 fonttools_4.38.0-1+deb12u1_all.deb
 3a224a421ad08e416fda2dec2bba0a5dd1e01aca923699b35b136b9198d4af14 1757120 python-fonttools-doc_4.38.0-1+deb12u1_all.deb
Files:
 6028c22896f6334944964003dcab5595 11248 devel optional fonttools_4.38.0-1+deb12u1_all-buildd.buildinfo
 ddfeab51adc22b8c5daeef42b65dfe36 11084 devel optional fonttools_4.38.0-1+deb12u1_all.deb
 b19306334c15da75f6d535e8c0385cda 1757120 doc optional python-fonttools-doc_4.38.0-1+deb12u1_all.deb

-----BEGIN PGP SIGNATURE-----
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=tiiO
-----END PGP SIGNATURE-----