-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 02 Feb 2026 18:00:20 +0100
Source: fonttools
Binary: python3-fonttools python3-fonttools-dbgsym
Architecture: i386
Version: 4.57.0-1+deb13u1
Distribution: trixie
Urgency: medium
Maintainer: all / amd64 / i386 Build Daemon (x86-conova-02) <buildd_amd64-x86-conova-02@buildd.debian.org>
Changed-By: Bastian Germann <bage@debian.org>
Description:
 python3-fonttools - Converts OpenType and TrueType fonts to and from XML (Python 3 Li
Closes: 1121605
Changes:
 fonttools (4.57.0-1+deb13u1) trixie; urgency=medium
 .
   * Team upload.
   * Apply the upstream fix for CVE-2025-66034. Closes: #1121605
Checksums-Sha1:
 ff1d5005fea534e28ff34069131b70650fd3d244 8047 fonttools_4.57.0-1+deb13u1_i386-buildd.buildinfo
 14054d7a48b10fda7ba02ddaa6c8ab0ad4d0adc8 2216064 python3-fonttools-dbgsym_4.57.0-1+deb13u1_i386.deb
 6917549623e100f91b64f1878ba6491e72eed949 1431196 python3-fonttools_4.57.0-1+deb13u1_i386.deb
Checksums-Sha256:
 f2c550e4cc78685d2a0eef428e31dd0b6a4444be62c82a7a8f0cfc641a159288 8047 fonttools_4.57.0-1+deb13u1_i386-buildd.buildinfo
 bca36c144fd0e9107834154e7e728fee09eb22272424856f624eb6f65753c436 2216064 python3-fonttools-dbgsym_4.57.0-1+deb13u1_i386.deb
 9b7f8623dc1acc75246558771ba842ff2babda05dd6d965de90b2171ce73fd5f 1431196 python3-fonttools_4.57.0-1+deb13u1_i386.deb
Files:
 0cd6c1cb0bf21a7141fba3f88472e4a3 8047 devel optional fonttools_4.57.0-1+deb13u1_i386-buildd.buildinfo
 d21fc1a016faf8323df79a89a0c5ca98 2216064 debug optional python3-fonttools-dbgsym_4.57.0-1+deb13u1_i386.deb
 1733a6eb5a84494dbac60de9cc17874b 1431196 python optional python3-fonttools_4.57.0-1+deb13u1_i386.deb

-----BEGIN PGP SIGNATURE-----
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=riXF
-----END PGP SIGNATURE-----