-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 02 Feb 2026 18:10:45 +0100
Source: fonttools
Binary: python3-fonttools python3-fonttools-dbgsym
Architecture: armhf
Version: 4.38.0-1+deb12u1
Distribution: bookworm
Urgency: medium
Maintainer: armhf Build Daemon (arm-conova-01) <buildd_arm64-arm-conova-01@buildd.debian.org>
Changed-By: Bastian Germann <bage@debian.org>
Description:
 python3-fonttools - Converts OpenType and TrueType fonts to and from XML (Python 3 Li
Closes: 1121605
Changes:
 fonttools (4.38.0-1+deb12u1) bookworm; urgency=medium
 .
   * Team upload.
   * Backport the upstream fix for CVE-2025-66034. Closes: #1121605
   * Apply the upstream fix for CVE-2023-45139.
Checksums-Sha1:
 4bc9d58644c8a9187b3ba0d2b78d5d1a97de4e37 8251 fonttools_4.38.0-1+deb12u1_armhf-buildd.buildinfo
 21f1c76f1126f18b99e3fbc8d95fc6d9ab92bbdd 861604 python3-fonttools-dbgsym_4.38.0-1+deb12u1_armhf.deb
 ccdd171fb95b9e5e0b02429cf46c0f65bc3c321c 989212 python3-fonttools_4.38.0-1+deb12u1_armhf.deb
Checksums-Sha256:
 86687aee7c60b207acc7c9d2bdc2c9cbf0f41c45890aad5b490b8353829d0c25 8251 fonttools_4.38.0-1+deb12u1_armhf-buildd.buildinfo
 91d357f793e8768aae0f24581287594dff334bcaf2c775f697c11d92216d0da6 861604 python3-fonttools-dbgsym_4.38.0-1+deb12u1_armhf.deb
 33cbc79dbe150497abc2dd4dd6a0d3fe1872c47439db241d1474e5a330161043 989212 python3-fonttools_4.38.0-1+deb12u1_armhf.deb
Files:
 5eb90e1ec4e781cdf71f8abec75ed594 8251 devel optional fonttools_4.38.0-1+deb12u1_armhf-buildd.buildinfo
 e35fadb90f0558e5e029ea26ac633d2c 861604 debug optional python3-fonttools-dbgsym_4.38.0-1+deb12u1_armhf.deb
 e1708462975ac43a8af3ac0f57545a72 989212 python optional python3-fonttools_4.38.0-1+deb12u1_armhf.deb

-----BEGIN PGP SIGNATURE-----
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=9wgy
-----END PGP SIGNATURE-----