-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 02 Feb 2026 18:10:45 +0100
Source: fonttools
Architecture: source
Version: 4.38.0-1+deb12u1
Distribution: bookworm
Urgency: medium
Maintainer: Debian Fonts Task Force <debian-fonts@lists.debian.org>
Changed-By: Bastian Germann <bage@debian.org>
Closes: 1121605
Changes:
 fonttools (4.38.0-1+deb12u1) bookworm; urgency=medium
 .
   * Team upload.
   * Backport the upstream fix for CVE-2025-66034. Closes: #1121605
   * Apply the upstream fix for CVE-2023-45139.
Checksums-Sha1:
 bf05961726fad77371d2c352595de7b71e62036b 2605 fonttools_4.38.0-1+deb12u1.dsc
 29a8741599fcf8a537cc349bac40649a5090a9f9 2485160 fonttools_4.38.0.orig.tar.xz
 233a9049b48f5f2e96a77d1c4ad8407e777c95ce 12776 fonttools_4.38.0-1+deb12u1.debian.tar.xz
 c3815e9fd8a9936cb73159ee26fb0f93eae34ccf 8503 fonttools_4.38.0-1+deb12u1_source.buildinfo
Checksums-Sha256:
 647a9dce04ac13b5880b6630867026330f0745590cfd9017ae03f06d67a2c698 2605 fonttools_4.38.0-1+deb12u1.dsc
 0398e7df110d188df2bcdbce752bcaad8b208365e655b84514c8fbb90af1267b 2485160 fonttools_4.38.0.orig.tar.xz
 38b730a0c9aa5d6db00499e99b5f1bd6247fed28c9410ce176e0dd8c2afbb9dc 12776 fonttools_4.38.0-1+deb12u1.debian.tar.xz
 20bd9e67c0156284d9abe239a7e60307f68a3c22217877a279135eae49520e6e 8503 fonttools_4.38.0-1+deb12u1_source.buildinfo
Files:
 8723545310e0c18fa5496c295882067f 2605 devel optional fonttools_4.38.0-1+deb12u1.dsc
 c082271f6ffcafe6670788d5f586b7ae 2485160 devel optional fonttools_4.38.0.orig.tar.xz
 bc45a7585f94f15bec1d38e12664c6d2 12776 devel optional fonttools_4.38.0-1+deb12u1.debian.tar.xz
 ccbfa667317cea14c4fd72a8bce0fc5b 8503 devel optional fonttools_4.38.0-1+deb12u1_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=5rO6
-----END PGP SIGNATURE-----