-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 02 Feb 2026 18:00:20 +0100
Source: fonttools
Binary: python3-fonttools python3-fonttools-dbgsym
Architecture: arm64
Version: 4.57.0-1+deb13u1
Distribution: trixie
Urgency: medium
Maintainer: arm Build Daemon (arm-ubc-02) <buildd_arm64-arm-ubc-02@buildd.debian.org>
Changed-By: Bastian Germann <bage@debian.org>
Description:
 python3-fonttools - Converts OpenType and TrueType fonts to and from XML (Python 3 Li
Closes: 1121605
Changes:
 fonttools (4.57.0-1+deb13u1) trixie; urgency=medium
 .
   * Team upload.
   * Apply the upstream fix for CVE-2025-66034. Closes: #1121605
Checksums-Sha1:
 9e44ef8de377065171bc69a90d5e1806b9764887 8550 fonttools_4.57.0-1+deb13u1_arm64-buildd.buildinfo
 add53aac032569d1e997b6de24d439eaf32844eb 2236596 python3-fonttools-dbgsym_4.57.0-1+deb13u1_arm64.deb
 e5b18917657028ac00cf14a975b94cd21c67e23e 1366108 python3-fonttools_4.57.0-1+deb13u1_arm64.deb
Checksums-Sha256:
 d94fe4ed893e3a4d33e4abaef9076acbe8b2bfbae50e8731562caacb25d684d4 8550 fonttools_4.57.0-1+deb13u1_arm64-buildd.buildinfo
 1df3ca8313661dc42b93e11a4300ec58ce4523dcddd5b6c33388a1997bac31ef 2236596 python3-fonttools-dbgsym_4.57.0-1+deb13u1_arm64.deb
 dfd3dd62d0f5edfed54a14ce82ad08e1d63e74401adc1c6ce25ead5b82efb8fe 1366108 python3-fonttools_4.57.0-1+deb13u1_arm64.deb
Files:
 8269bcc17a9310692b18894c05778a61 8550 devel optional fonttools_4.57.0-1+deb13u1_arm64-buildd.buildinfo
 5f4f440545fc3b682f316fa8dd473a3f 2236596 debug optional python3-fonttools-dbgsym_4.57.0-1+deb13u1_arm64.deb
 fb92f36d5e065b57eb6192d30663ec80 1366108 python optional python3-fonttools_4.57.0-1+deb13u1_arm64.deb

-----BEGIN PGP SIGNATURE-----
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=VDEg
-----END PGP SIGNATURE-----