-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 02 Feb 2026 18:10:45 +0100
Source: fonttools
Binary: python3-fonttools python3-fonttools-dbgsym
Architecture: armel
Version: 4.38.0-1+deb12u1
Distribution: bookworm
Urgency: medium
Maintainer: armel Build Daemon (arm-conova-02) <buildd_arm64-arm-conova-02@buildd.debian.org>
Changed-By: Bastian Germann <bage@debian.org>
Description:
 python3-fonttools - Converts OpenType and TrueType fonts to and from XML (Python 3 Li
Closes: 1121605
Changes:
 fonttools (4.38.0-1+deb12u1) bookworm; urgency=medium
 .
   * Team upload.
   * Backport the upstream fix for CVE-2025-66034. Closes: #1121605
   * Apply the upstream fix for CVE-2023-45139.
Checksums-Sha1:
 6fbf4bb0b674619588e5741b0398168cd52d242d 8522 fonttools_4.38.0-1+deb12u1_armel-buildd.buildinfo
 f350b0cdd4477995f9553b5aa1c0316929872af8 854228 python3-fonttools-dbgsym_4.38.0-1+deb12u1_armel.deb
 6045fbfaf4dcf4fbe9e03b33c888b3f574248262 988384 python3-fonttools_4.38.0-1+deb12u1_armel.deb
Checksums-Sha256:
 495865f18e902e5aa5f378469ae7b0f74bfde586c57bd4792f0f31fd8c3e3a1b 8522 fonttools_4.38.0-1+deb12u1_armel-buildd.buildinfo
 24df8c11384fd1a8536e201a66972cac83a6d681cf568eaead01d6b91a465cac 854228 python3-fonttools-dbgsym_4.38.0-1+deb12u1_armel.deb
 17c3f6dae69d5b264ad70a1e904939f44bc33b9441147fb6603e9a60ceb7cc50 988384 python3-fonttools_4.38.0-1+deb12u1_armel.deb
Files:
 9ff6d19c099551d31e98df655b2ca9c1 8522 devel optional fonttools_4.38.0-1+deb12u1_armel-buildd.buildinfo
 7ecba3df304851598567bdf876963b90 854228 debug optional python3-fonttools-dbgsym_4.38.0-1+deb12u1_armel.deb
 ae145cb8c2b813009f5403cd7b0a3e77 988384 python optional python3-fonttools_4.38.0-1+deb12u1_armel.deb

-----BEGIN PGP SIGNATURE-----
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=KayN
-----END PGP SIGNATURE-----