-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 02 Feb 2026 18:10:45 +0100
Source: fonttools
Binary: python3-fonttools python3-fonttools-dbgsym
Architecture: mipsel
Version: 4.38.0-1+deb12u1
Distribution: bookworm
Urgency: medium
Maintainer: mipsel Build Daemon (mipsel-osuosl-04) <buildd_mips64el-mipsel-osuosl-04@buildd.debian.org>
Changed-By: Bastian Germann <bage@debian.org>
Description:
 python3-fonttools - Converts OpenType and TrueType fonts to and from XML (Python 3 Li
Closes: 1121605
Changes:
 fonttools (4.38.0-1+deb12u1) bookworm; urgency=medium
 .
   * Team upload.
   * Backport the upstream fix for CVE-2025-66034. Closes: #1121605
   * Apply the upstream fix for CVE-2023-45139.
Checksums-Sha1:
 d7cd4a58cb427dd02a9ab010c0029157e42131e3 8446 fonttools_4.38.0-1+deb12u1_mipsel-buildd.buildinfo
 d67d5580c7d0152a3bc71056494161167a61b9b1 872352 python3-fonttools-dbgsym_4.38.0-1+deb12u1_mipsel.deb
 6e7deb3ea9b5bc7fd1fe4fdad77fe780b9595eea 984840 python3-fonttools_4.38.0-1+deb12u1_mipsel.deb
Checksums-Sha256:
 6993ab669f488cd13c04c310a5cfefd2cdd511890abe4c4939981614dbc97bcd 8446 fonttools_4.38.0-1+deb12u1_mipsel-buildd.buildinfo
 45b5b18aa65379e3a62ee7def1361349b629b0a5ad069797236ebe3b902f8004 872352 python3-fonttools-dbgsym_4.38.0-1+deb12u1_mipsel.deb
 9e2c2fd4b8ffbae144891888a02d50576a470cc3fdaeaf1b3bd53004934b4b93 984840 python3-fonttools_4.38.0-1+deb12u1_mipsel.deb
Files:
 25700bd26cfdae1316c4aeb6496495cc 8446 devel optional fonttools_4.38.0-1+deb12u1_mipsel-buildd.buildinfo
 9881de15474487e06cb2f9be1a8be1b0 872352 debug optional python3-fonttools-dbgsym_4.38.0-1+deb12u1_mipsel.deb
 90a80babf3b14d06227a67b9506769de 984840 python optional python3-fonttools_4.38.0-1+deb12u1_mipsel.deb

-----BEGIN PGP SIGNATURE-----
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=aL9j
-----END PGP SIGNATURE-----