-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 02 Feb 2026 18:10:45 +0100
Source: fonttools
Binary: python3-fonttools python3-fonttools-dbgsym
Architecture: amd64
Version: 4.38.0-1+deb12u1
Distribution: bookworm
Urgency: medium
Maintainer: amd64 / i386 Build Daemon (x86-ubc-01) <buildd_amd64-x86-ubc-01@buildd.debian.org>
Changed-By: Bastian Germann <bage@debian.org>
Description:
 python3-fonttools - Converts OpenType and TrueType fonts to and from XML (Python 3 Li
Closes: 1121605
Changes:
 fonttools (4.38.0-1+deb12u1) bookworm; urgency=medium
 .
   * Team upload.
   * Backport the upstream fix for CVE-2025-66034. Closes: #1121605
   * Apply the upstream fix for CVE-2023-45139.
Checksums-Sha1:
 fb0db2ee38e5bf9f2cb5c4e1e4d1dbc263219137 8749 fonttools_4.38.0-1+deb12u1_amd64-buildd.buildinfo
 35cff680687441c5c514c6d17908b0e2696cbfc7 871112 python3-fonttools-dbgsym_4.38.0-1+deb12u1_amd64.deb
 97bb948bd8b9a32cb0dc0ee23a451c2f18c8ca4a 1012272 python3-fonttools_4.38.0-1+deb12u1_amd64.deb
Checksums-Sha256:
 b31c6494b8af9deed7f1d91a34ee5389dbbb82ebd98889ecf9e0d17fdc61b22f 8749 fonttools_4.38.0-1+deb12u1_amd64-buildd.buildinfo
 f32d77c0cf197f05ceb809014f007a1e40cf403e7a478ad2c02688b5c82618c2 871112 python3-fonttools-dbgsym_4.38.0-1+deb12u1_amd64.deb
 c6fd1de05cc61dd7ae0780902b776f1db63ccf01ac8cf73cb11f469c66e6664b 1012272 python3-fonttools_4.38.0-1+deb12u1_amd64.deb
Files:
 a7845c03eb8d95a5381c7fb0af2c4ef0 8749 devel optional fonttools_4.38.0-1+deb12u1_amd64-buildd.buildinfo
 52769edea433edc5b85f4bab49739833 871112 debug optional python3-fonttools-dbgsym_4.38.0-1+deb12u1_amd64.deb
 d709cf31ebe79e0179221a1c1fd8040e 1012272 python optional python3-fonttools_4.38.0-1+deb12u1_amd64.deb

-----BEGIN PGP SIGNATURE-----
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=1JLp
-----END PGP SIGNATURE-----