-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 02 Feb 2026 18:00:20 +0100
Source: fonttools
Binary: fonttools python-fonttools-doc
Architecture: all
Version: 4.57.0-1+deb13u1
Distribution: trixie
Urgency: medium
Maintainer: all Build Daemon (x86-grnet-02) <buildd_all-x86-grnet-02@buildd.debian.org>
Changed-By: Bastian Germann <bage@debian.org>
Description:
 fonttools  - Converts OpenType and TrueType fonts to and from XML (Executables
 python-fonttools-doc - Converts OpenType and TrueType fonts to and from XML (Documentati
Closes: 1121605
Changes:
 fonttools (4.57.0-1+deb13u1) trixie; urgency=medium
 .
   * Team upload.
   * Apply the upstream fix for CVE-2025-66034. Closes: #1121605
Checksums-Sha1:
 d7fc62c0d1bdec0a7826a42fe78ae163a2c6429c 11418 fonttools_4.57.0-1+deb13u1_all-buildd.buildinfo
 7388b858a7a883fe3009c97e39db56d0cbbd479d 11956 fonttools_4.57.0-1+deb13u1_all.deb
 3c3307855757495267a573003185cd6b8136a22a 1942832 python-fonttools-doc_4.57.0-1+deb13u1_all.deb
Checksums-Sha256:
 afb6e566886309f8c89394145d724637a346b5d77a7ad4cfc25d2ec49b3610a0 11418 fonttools_4.57.0-1+deb13u1_all-buildd.buildinfo
 265c21568722a4aaa8ad8c184c3ceae6eaae46684ad1dad877fcb3d93f9ac050 11956 fonttools_4.57.0-1+deb13u1_all.deb
 6f19d88f9087eb8e833389828f36bca2c3f6e00c538b2335ae4d8e9b55e8bbff 1942832 python-fonttools-doc_4.57.0-1+deb13u1_all.deb
Files:
 81451bdaae2493280f35691080a780c2 11418 devel optional fonttools_4.57.0-1+deb13u1_all-buildd.buildinfo
 7b53184a258cd9aa979697b48eaed2e5 11956 devel optional fonttools_4.57.0-1+deb13u1_all.deb
 c7d6b815b12dc2192db7e92fd8838bd3 1942832 doc optional python-fonttools-doc_4.57.0-1+deb13u1_all.deb

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEj4Fym5GgeZdPqKhrJm69HxMTN+oFAmmnUO4ACgkQJm69HxMT
N+qPkxAAmZd3+Y6KitgA5I9dVmfnz2fyEVlXxRAeuztx6moNvEZGr5eco6jVmuV1
ulLPdpGb3qTlAKXbPPMZpeCowhm/tvumaJTGsi09zJDw/igcKGf4EC3Dr9Jw+Huo
dGBH9E31UnmzyxId1F731iYhRPlE+z1DTKClJUMeou/vHWAaUN0nvtjaBiDyZj6q
6PLwsJMW8z9aIFwzFfYcb7GvL+iUqmBXBT2plB7ulmfEZQ9lAm24yWk0JuDtfNKq
dsZb8LXbROnovLEcQCkO8cOzkZFLxb4s42Q+HqT8X68NeV01tvgMpfUCymBz1NHl
Z2xuV+8YbR27RU0T8gBOOaH5hrsqxJhD048N5jJyVn5Ydh2lLTCGb58gQ8htx6WU
T0ljgmlEHT43cKFGevpoQhzi8BeYsVF+aetusfSPkc6x6xqJR8Y0dod5AW6s5w2b
YfGddUcuuEohJvMUaD+f/dBu9HiDBKo90UDJdolaJrDVSMMNOstoV0Wmx4yoXPYT
U8+TfU1oDegAD4kWgsUc2AelHl7d/ze00yPk3/agjwRucryIGpYyQEDm7rfrPKFm
Vhmdc5zpXEge7vdWyoKsJ6yLBAri7HqIEpOXDaKlV7uowVHdMuh9KdAWTJbrBO5l
70FZDbvdnuRBvJ27XajdMf+PHxUaD+o/Jnab5kVnCqlAwHdbmpo=
=o86e
-----END PGP SIGNATURE-----