-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 02 Feb 2026 18:10:45 +0100
Source: fonttools
Binary: python3-fonttools python3-fonttools-dbgsym
Architecture: ppc64el
Version: 4.38.0-1+deb12u1
Distribution: bookworm
Urgency: medium
Maintainer: ppc64el Build Daemon (ppc64el-conova-02) <buildd_ppc64el-ppc64el-conova-02@buildd.debian.org>
Changed-By: Bastian Germann <bage@debian.org>
Description:
 python3-fonttools - Converts OpenType and TrueType fonts to and from XML (Python 3 Li
Closes: 1121605
Changes:
 fonttools (4.38.0-1+deb12u1) bookworm; urgency=medium
 .
   * Team upload.
   * Backport the upstream fix for CVE-2025-66034. Closes: #1121605
   * Apply the upstream fix for CVE-2023-45139.
Checksums-Sha1:
 85112604495ee04100ed5e2763a2ad7b1fcce650 8761 fonttools_4.38.0-1+deb12u1_ppc64el-buildd.buildinfo
 d41050e4988d36ec57d8b76361008d9e93e9ef1c 870616 python3-fonttools-dbgsym_4.38.0-1+deb12u1_ppc64el.deb
 452efa65d6be888316ff45cec0bd17a51074ea25 1007184 python3-fonttools_4.38.0-1+deb12u1_ppc64el.deb
Checksums-Sha256:
 efd20a4b204c6bed1afb8b4a168bc28c70faa220c2bba7a6ab1edc2c12fa1fd7 8761 fonttools_4.38.0-1+deb12u1_ppc64el-buildd.buildinfo
 f342b2e22ef0cd75e62e6978c0d02da85b5a1173bd1d657c40d528500d502ea7 870616 python3-fonttools-dbgsym_4.38.0-1+deb12u1_ppc64el.deb
 e5097862aab8d23dc2f6a55112c9cf268e412752d0cdfe73d419c6b77f840a2e 1007184 python3-fonttools_4.38.0-1+deb12u1_ppc64el.deb
Files:
 1cb89aec432d9f7a9160f3395d9efe7b 8761 devel optional fonttools_4.38.0-1+deb12u1_ppc64el-buildd.buildinfo
 5fe1ad76452ab59072dc6919e5b9b137 870616 debug optional python3-fonttools-dbgsym_4.38.0-1+deb12u1_ppc64el.deb
 ecc7647c275dc1f22492a76057a6bd4a 1007184 python optional python3-fonttools_4.38.0-1+deb12u1_ppc64el.deb

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEySUEQfg5pZeb/U372FRWNm40e2YFAmn2dSAACgkQ2FRWNm40
e2aNIA/+POdtQ+tu9vTxcKqeE/RHEY+msQFc/7N9/cr5aaqYFWFMsGXsN7ACRv74
m0ZT7xjurK9rH/o7v7vGcLvrAKyzMgJ8qap/Mi3JD6Ey1B0gZnxHhN4jspuKzsbv
jJgW2bqpzuKF4xspDFoJAXoDrXy8CMnX4/5WwwKzAnEhmEPyc1V93vlk42fIfSLG
E9nGG7sOEbvRT8U3Nmj1Y5SCVUOpBUvSDWvcgFiZKUOpLLGMe7B04YX9CXX6g8zD
7POcCA2RE5W0XsXrfHBydkKeI8EYnaG8iZxgsx3NkjX8L4dywgZ+1W2AOEiLpzxe
dTGwNHfuACkKYsHrFAigt8C3u0doz5lDkjG593V5G8cMZ6Lz9L8nQcwgUbt5K9Cj
caXCGA+B5T2bt4FY2KThePoVGQo6HPMhl+Wvv7dAAhj0Aw2u43XgoP3ZMdLJojbt
QPTtzQAB27YlAMLF+t9NxuH1o7TxSYdNOKyJ2DR5U1TPrji1UjGiOGyjC8teOmVa
LLLRXSIYi7FeR95H+xHFzfurELAQFoY6YOK2P7rUJ/vGydg+4EH6tWKDowNMa7DP
6MK5i2P9e8BWtOmCpd21I4fQ2izzHDQT7bmP1s+spbqnOYz1gpusX8HVikmpT6xh
zH8wuI9YazflWk5T1PR+aMGrGCp/raPvmOI6pHTgqQCxBka4j6g=
=IMBV
-----END PGP SIGNATURE-----