-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 02 Feb 2026 18:00:20 +0100
Source: fonttools
Binary: python3-fonttools python3-fonttools-dbgsym
Architecture: riscv64
Version: 4.57.0-1+deb13u1
Distribution: trixie
Urgency: medium
Maintainer: riscv64 Build Daemon (rv-osuosl-01) <buildd_riscv64-rv-osuosl-01@buildd.debian.org>
Changed-By: Bastian Germann <bage@debian.org>
Description:
 python3-fonttools - Converts OpenType and TrueType fonts to and from XML (Python 3 Li
Closes: 1121605
Changes:
 fonttools (4.57.0-1+deb13u1) trixie; urgency=medium
 .
   * Team upload.
   * Apply the upstream fix for CVE-2025-66034. Closes: #1121605
Checksums-Sha1:
 7cc32e528c837f421dbf8ed1b18f2dd5abd2c7bb 8507 fonttools_4.57.0-1+deb13u1_riscv64-buildd.buildinfo
 7474f57a36fd018615c747c4e3db8350bac86356 2030536 python3-fonttools-dbgsym_4.57.0-1+deb13u1_riscv64.deb
 51ad1ad9654c91a338119a5ccb79519569f0a0f2 1426328 python3-fonttools_4.57.0-1+deb13u1_riscv64.deb
Checksums-Sha256:
 4a67c589a3df45a082f3897739e3fac22c69f44af0e1bbf63d9fa2a2510dd566 8507 fonttools_4.57.0-1+deb13u1_riscv64-buildd.buildinfo
 fcc9b41dba3a390bf091da0709e19a11ae05bbe2c0604d9e17d1c2453087f522 2030536 python3-fonttools-dbgsym_4.57.0-1+deb13u1_riscv64.deb
 8bbbb6658eaead22b8f9f267f81b5eb0e62de6ce3de42bd9c8cb8e7c07efeb2d 1426328 python3-fonttools_4.57.0-1+deb13u1_riscv64.deb
Files:
 8b1497145ccc6c17e6f6921d4661553d 8507 devel optional fonttools_4.57.0-1+deb13u1_riscv64-buildd.buildinfo
 68624a04b7c5ae08a5f4ee35020d2b6b 2030536 debug optional python3-fonttools-dbgsym_4.57.0-1+deb13u1_riscv64.deb
 34bea5573be04a6585eb1139b8c6d02f 1426328 python optional python3-fonttools_4.57.0-1+deb13u1_riscv64.deb

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEE3smN1vgomTkXJcrkIhSPlPtgqxkFAmmnVakACgkQIhSPlPtg
qxlO3g//YqTYg3KBl0lmTatJtjnwFzFthyUaW+scDMGy8B+jLsxEB5QXtaqtavLX
hqwhakF33X2HaV/dqZfzN/iDUG0J1p91yqTs0JLCe87oXVh59Y8kXzWA9wYHhN9v
FHjNeee0f0CMjESMTUaGruveDAMueQGK45fU5n5EQ8qFw+4csKswzkHCiEUxQJtk
xRlgxtQ5zgmoS6LERRa70sMDa3Ex07X6QL6uYxXVrsYYoV3EZv48xbnDU/X+XD+q
yxYzzg1PaBWjC603VAT7FRmRnZver2a4+79sRk1S56AyCRNlWnec6J3gv4qRjjID
cRqlvKRGJHHuwRXQszjLMPlagFtqSTjIjkTRFxSvvJmRXeETeu1IWDXWN9KvdOs3
PkUKjZDCyAjkb4cLmJcBNvFchD7//Towdra6sc+pFWRiw4qjnDLhKBhcFb59Hmqb
nMPkgEAppY9IF0PeC6SFsUMO6LVgX9N6O7cYsFN/NUQX0B+e5sZ8H/KZEcNmRaRW
abL8h1X/DzfYFLJPGy4NrEDWlu8Yz91hdwDsc9xr97xKVHvByqp+T3dpJ1JB0NK/
tWK/uB44vG+jvmFI5SnsD4l5nLkgj/xBmcYmN4hl7A0KUkg+Igs7Hgwvtj3GpR6L
deFWfmLhQs+CLacVWJ55pz5NtN6yrHNLEEh/F3c+oKjLXvQ8TCI=
=Vtiq
-----END PGP SIGNATURE-----