-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 02 Feb 2026 18:00:20 +0100
Source: fonttools
Binary: python3-fonttools python3-fonttools-dbgsym
Architecture: amd64
Version: 4.57.0-1+deb13u1
Distribution: trixie
Urgency: medium
Maintainer: all / amd64 / i386 Build Daemon (x86-conova-01) <buildd_amd64-x86-conova-01@buildd.debian.org>
Changed-By: Bastian Germann <bage@debian.org>
Description:
 python3-fonttools - Converts OpenType and TrueType fonts to and from XML (Python 3 Li
Closes: 1121605
Changes:
 fonttools (4.57.0-1+deb13u1) trixie; urgency=medium
 .
   * Team upload.
   * Apply the upstream fix for CVE-2025-66034. Closes: #1121605
Checksums-Sha1:
 3f42887f35f585f612579ab7db652eb8dac5c2e5 8566 fonttools_4.57.0-1+deb13u1_amd64-buildd.buildinfo
 2fb4bcb96ba75b5867ac03a203bdd6b53d39b815 2328888 python3-fonttools-dbgsym_4.57.0-1+deb13u1_amd64.deb
 223119e1ece9f3d896827603289a0899eefcc4c1 1438240 python3-fonttools_4.57.0-1+deb13u1_amd64.deb
Checksums-Sha256:
 d8d51fc610a14ba1045853bede402ad68e44cdf759e6f639ab8ee9e58bcd328e 8566 fonttools_4.57.0-1+deb13u1_amd64-buildd.buildinfo
 c0aceed87aad817196dc1d0a23bde5a598a6d1c357966fe10840cb5730794faa 2328888 python3-fonttools-dbgsym_4.57.0-1+deb13u1_amd64.deb
 d7c0772c0879f02f85d6ca2e999dc07ef9043372411cb7c4fa4d070cc0b8e401 1438240 python3-fonttools_4.57.0-1+deb13u1_amd64.deb
Files:
 3966b18849313ba15278fa48765a3d21 8566 devel optional fonttools_4.57.0-1+deb13u1_amd64-buildd.buildinfo
 de1e29ec7be4f392bf0edef78571381a 2328888 debug optional python3-fonttools-dbgsym_4.57.0-1+deb13u1_amd64.deb
 29f8db62b9e218203abbedb9953e8a58 1438240 python optional python3-fonttools_4.57.0-1+deb13u1_amd64.deb

-----BEGIN PGP SIGNATURE-----
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=Qoxj
-----END PGP SIGNATURE-----