-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 02 Feb 2026 18:10:45 +0100
Source: fonttools
Binary: python3-fonttools python3-fonttools-dbgsym
Architecture: s390x
Version: 4.38.0-1+deb12u1
Distribution: bookworm
Urgency: medium
Maintainer: s390x Build Daemon (zandonai) <buildd_s390x-zandonai@buildd.debian.org>
Changed-By: Bastian Germann <bage@debian.org>
Description:
 python3-fonttools - Converts OpenType and TrueType fonts to and from XML (Python 3 Li
Closes: 1121605
Changes:
 fonttools (4.38.0-1+deb12u1) bookworm; urgency=medium
 .
   * Team upload.
   * Backport the upstream fix for CVE-2025-66034. Closes: #1121605
   * Apply the upstream fix for CVE-2023-45139.
Checksums-Sha1:
 78e4bd5d99b3b8d56d1f82e3b0ef9a2147aa718c 8617 fonttools_4.38.0-1+deb12u1_s390x-buildd.buildinfo
 71968693a1b5b652afa7c5a55fcc168f98094691 853612 python3-fonttools-dbgsym_4.38.0-1+deb12u1_s390x.deb
 ccd56aaf6d85fe0cbd66a687b3bec875f8f5bde5 983996 python3-fonttools_4.38.0-1+deb12u1_s390x.deb
Checksums-Sha256:
 9d5aa51621bcaee17982dc94eeb3aee76b8ca27ae4779d9e15bd0cf280cfee0e 8617 fonttools_4.38.0-1+deb12u1_s390x-buildd.buildinfo
 ba5a14e3b6dc5b1f3564b865bca75b3775f88cdddc78f8c27f5b858f9f5240ca 853612 python3-fonttools-dbgsym_4.38.0-1+deb12u1_s390x.deb
 80b010dfee530bb7843a80bfeb2c29b7752dc8d913c42faaa2eb8185e0f4f798 983996 python3-fonttools_4.38.0-1+deb12u1_s390x.deb
Files:
 16e268d9b33514c321824556c4bfb857 8617 devel optional fonttools_4.38.0-1+deb12u1_s390x-buildd.buildinfo
 b6bd1cb0c5ef9acaa14fdd3d9d959116 853612 debug optional python3-fonttools-dbgsym_4.38.0-1+deb12u1_s390x.deb
 eb27cb3d4c017e31d5b16a1190836e3d 983996 python optional python3-fonttools_4.38.0-1+deb12u1_s390x.deb

-----BEGIN PGP SIGNATURE-----
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=saPN
-----END PGP SIGNATURE-----