-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 02 Feb 2026 18:10:45 +0100
Source: fonttools
Binary: python3-fonttools python3-fonttools-dbgsym
Architecture: i386
Version: 4.38.0-1+deb12u1
Distribution: bookworm
Urgency: medium
Maintainer: amd64 / i386 Build Daemon (x86-ubc-02) <buildd_amd64-x86-ubc-02@buildd.debian.org>
Changed-By: Bastian Germann <bage@debian.org>
Description:
 python3-fonttools - Converts OpenType and TrueType fonts to and from XML (Python 3 Li
Closes: 1121605
Changes:
 fonttools (4.38.0-1+deb12u1) bookworm; urgency=medium
 .
   * Team upload.
   * Backport the upstream fix for CVE-2025-66034. Closes: #1121605
   * Apply the upstream fix for CVE-2023-45139.
Checksums-Sha1:
 726a66c9ba0efee55aac1dbbb8001e4c77b05fd6 8673 fonttools_4.38.0-1+deb12u1_i386-buildd.buildinfo
 f53573557e47e842572b68546cc2df09afac2281 815004 python3-fonttools-dbgsym_4.38.0-1+deb12u1_i386.deb
 fd98b746630280e576d85d5d9e0521fd83508c49 1010268 python3-fonttools_4.38.0-1+deb12u1_i386.deb
Checksums-Sha256:
 2fd06d6b293fde8923d9fa1315f5d97efbc9796e943bb9bbfdd5df8a1820aa97 8673 fonttools_4.38.0-1+deb12u1_i386-buildd.buildinfo
 d4903b0733e082d04362c41a1abf83dda111dfed871d5de384d38451556a5cc2 815004 python3-fonttools-dbgsym_4.38.0-1+deb12u1_i386.deb
 678955c7050c88cbafce5d6d76a7750d5a34858368d1cb994ca1843b197fbe9f 1010268 python3-fonttools_4.38.0-1+deb12u1_i386.deb
Files:
 908aff97a89f545926fc570ba707646c 8673 devel optional fonttools_4.38.0-1+deb12u1_i386-buildd.buildinfo
 e5ca481c360f8d92a7ecf411e0760bdb 815004 debug optional python3-fonttools-dbgsym_4.38.0-1+deb12u1_i386.deb
 b2db16f606de8021671ebefb63a38794 1010268 python optional python3-fonttools_4.38.0-1+deb12u1_i386.deb

-----BEGIN PGP SIGNATURE-----
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=351Y
-----END PGP SIGNATURE-----