-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 02 Feb 2026 18:10:45 +0100
Source: fonttools
Binary: python3-fonttools python3-fonttools-dbgsym
Architecture: arm64
Version: 4.38.0-1+deb12u1
Distribution: bookworm
Urgency: medium
Maintainer: arm Build Daemon (arm-ubc-02) <buildd_arm64-arm-ubc-02@buildd.debian.org>
Changed-By: Bastian Germann <bage@debian.org>
Description:
 python3-fonttools - Converts OpenType and TrueType fonts to and from XML (Python 3 Li
Closes: 1121605
Changes:
 fonttools (4.38.0-1+deb12u1) bookworm; urgency=medium
 .
   * Team upload.
   * Backport the upstream fix for CVE-2025-66034. Closes: #1121605
   * Apply the upstream fix for CVE-2023-45139.
Checksums-Sha1:
 d9babc3a4304912fcc2f172466b16c4f524b3c3b 8745 fonttools_4.38.0-1+deb12u1_arm64-buildd.buildinfo
 8e64e96a74e4bd48137b0b6da380b358f3f81609 844068 python3-fonttools-dbgsym_4.38.0-1+deb12u1_arm64.deb
 fe3ffb8e9034e46f99825f00c978e70fc5d1bcf4 988788 python3-fonttools_4.38.0-1+deb12u1_arm64.deb
Checksums-Sha256:
 1c2894b2e0adfcf9d5075aa5809f79ebe51edfed678ca640f6b6cda1f4a1bb94 8745 fonttools_4.38.0-1+deb12u1_arm64-buildd.buildinfo
 c6367b674d2a1ba1bb9495675c4d8047e033d1f6fa989321261826e2ceb42eb9 844068 python3-fonttools-dbgsym_4.38.0-1+deb12u1_arm64.deb
 e9c8bb6b7d6781694d258dcfa4ebc93997cf9d9b74d7dd6d297bd51a2ac0f47a 988788 python3-fonttools_4.38.0-1+deb12u1_arm64.deb
Files:
 325e1c6a95e5c90ea33a71e70618741a 8745 devel optional fonttools_4.38.0-1+deb12u1_arm64-buildd.buildinfo
 7b568007e51dfa9cd645bba3f2cf73fc 844068 debug optional python3-fonttools-dbgsym_4.38.0-1+deb12u1_arm64.deb
 1d0063b5fcd1b2292fd9e802ec6ef1e4 988788 python optional python3-fonttools_4.38.0-1+deb12u1_arm64.deb

-----BEGIN PGP SIGNATURE-----
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=hZRd
-----END PGP SIGNATURE-----