-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 02 Feb 2026 18:00:20 +0100
Source: fonttools
Architecture: source
Version: 4.57.0-1+deb13u1
Distribution: trixie
Urgency: medium
Maintainer: Debian Fonts Task Force <debian-fonts@lists.debian.org>
Changed-By: Bastian Germann <bage@debian.org>
Closes: 1121605
Changes:
 fonttools (4.57.0-1+deb13u1) trixie; urgency=medium
 .
   * Team upload.
   * Apply the upstream fix for CVE-2025-66034. Closes: #1121605
Checksums-Sha1:
 7330a0d0b68ac155ea04d41a03e5a4d6f36cc729 3176 fonttools_4.57.0-1+deb13u1.dsc
 1b1a26548777c459ba4fc14da6091b6008a0e3ba 2678472 fonttools_4.57.0.orig.tar.xz
 9d0d6a5a14d038e173658bf866d3faf328a1aab8 14436 fonttools_4.57.0-1+deb13u1.debian.tar.xz
 df72e1d61b51dba1781c8d6682cd1f7f2a2c56c6 8086 fonttools_4.57.0-1+deb13u1_source.buildinfo
Checksums-Sha256:
 05f4aee99a75a83d5c3d69920dbac0f82aef99eda0e7940f60570427ba2c4c8f 3176 fonttools_4.57.0-1+deb13u1.dsc
 46b96a86e9f789b7c9d37794012a7224dde5f49a3a0b1eca599d1d86d54f3a34 2678472 fonttools_4.57.0.orig.tar.xz
 971f55a5f3a91effa74d403481e2dcd7a594f3e2b31c11b2870c0e7024f17387 14436 fonttools_4.57.0-1+deb13u1.debian.tar.xz
 3b6e417f5cadbbdcfe957814603689a3606550ba27ee4562aa6d486809cc6737 8086 fonttools_4.57.0-1+deb13u1_source.buildinfo
Files:
 2b051056e7f785bdf090246399c540af 3176 devel optional fonttools_4.57.0-1+deb13u1.dsc
 024d51578d9f731ea78bf634cefe3181 2678472 devel optional fonttools_4.57.0.orig.tar.xz
 475b750f5f72c33b75a156de02ddaca5 14436 devel optional fonttools_4.57.0-1+deb13u1.debian.tar.xz
 3672c845c4c4b99aae0c0dd9f7194f76 8086 devel optional fonttools_4.57.0-1+deb13u1_source.buildinfo

-----BEGIN PGP SIGNATURE-----

iQHEBAEBCgAuFiEEQGIgyLhVKAI3jM5BH1x6i0VWQxQFAmmkXQUQHGJhZ2VAZGVi
aWFuLm9yZwAKCRAfXHqLRVZDFB8zC/94JaMrHqBn52EfzgF7NDvXIDZn4JVmJA2K
kkQaynlMC2wDRtoeUhiX9APjLEyYPI3WSLsTrQGvzHa168QXgGu2Sps1/GZhbvpW
wuVKqCJ+4LHARU0+Y8UoN+6Mkc5Q4FAKhRtwTOrpw37mMHyp3i7tPVuW+JTqIXjy
xw3KYVtE4nzYTzJ7rXjBtaIywt5xmYYkvWXLNAviVy774vcloUYVcGII7jFbsIIz
vjTzYOduJlLar7TOy8w/B6Os4vpQZZ5iINLE3hffyArPRHcJUcTMW7r+1POOwaV5
pwO2NrpvJ7y0HP4/yCfAQlOupqtHSnqjZFn1ypCnVhulz9IxYZ/S59OfJxulcXjs
qe1aNavUCwn713H0gfBJhItLu/n7cwsbhPbfzZ9dkCnDQCLNFThYEdArgKanXOs4
IRFymNnPy8DbjNtyRAD6To5rG1fZK/gOLo01fQW2Q1g+DKoivhyo+5+uoZIL8r9G
ffZwNTSb3/6CagPRiMFCn3HPXA3aHkY=
=0w2V
-----END PGP SIGNATURE-----