-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 02 Feb 2026 18:00:20 +0100
Source: fonttools
Binary: python3-fonttools python3-fonttools-dbgsym
Architecture: armhf
Version: 4.57.0-1+deb13u1
Distribution: trixie
Urgency: medium
Maintainer: arm Build Daemon (arm-ubc-02) <buildd_arm64-arm-ubc-02@buildd.debian.org>
Changed-By: Bastian Germann <bage@debian.org>
Description:
 python3-fonttools - Converts OpenType and TrueType fonts to and from XML (Python 3 Li
Closes: 1121605
Changes:
 fonttools (4.57.0-1+deb13u1) trixie; urgency=medium
 .
   * Team upload.
   * Apply the upstream fix for CVE-2025-66034. Closes: #1121605
Checksums-Sha1:
 e4e88c9064d881302948a667aeea76b55d841758 8429 fonttools_4.57.0-1+deb13u1_armhf-buildd.buildinfo
 66b395ed2bdf91c3276ba150db925c396782c7f2 2308632 python3-fonttools-dbgsym_4.57.0-1+deb13u1_armhf.deb
 744b538a049280880f8856f42182de9eadf3bd2e 1378816 python3-fonttools_4.57.0-1+deb13u1_armhf.deb
Checksums-Sha256:
 e7d8526a1252469b5120bf32bd5e2b0887ae2014221ad7878db05a9e518472ab 8429 fonttools_4.57.0-1+deb13u1_armhf-buildd.buildinfo
 b05e41c81ea5d971049055beb9a0927ab60b5f0306704ace31b25f9a6e292c0e 2308632 python3-fonttools-dbgsym_4.57.0-1+deb13u1_armhf.deb
 fec88c275401a999f4337d273d2c42106a0362e168d5fae271f8c07a1c4870a4 1378816 python3-fonttools_4.57.0-1+deb13u1_armhf.deb
Files:
 4608ea81cd86d0f34d005fc21ddfaf77 8429 devel optional fonttools_4.57.0-1+deb13u1_armhf-buildd.buildinfo
 50cfba114e7c74578cfa5c5245cdd5ad 2308632 debug optional python3-fonttools-dbgsym_4.57.0-1+deb13u1_armhf.deb
 277d61cc1045c8d32b66f3dc39e7dec6 1378816 python optional python3-fonttools_4.57.0-1+deb13u1_armhf.deb

-----BEGIN PGP SIGNATURE-----
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=+rZY
-----END PGP SIGNATURE-----