-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 10 Jul 2026 14:32:27 +0200
Source: libxfont
Binary: libxfont-dev libxfont2 libxfont2-dbgsym libxfont2-udeb
Architecture: armhf
Version: 1:2.0.6-1+deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: armhf Build Daemon (arm-ubc-05) <buildd_arm64-arm-ubc-05@buildd.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Description:
 libxfont-dev - X11 font rasterisation library (development headers)
 libxfont2  - X11 font rasterisation library
 libxfont2-udeb - X11 font rasterisation library (udeb)
Closes: 1141702
Changes:
 libxfont (1:2.0.6-1+deb13u1) trixie-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * bitscale: fix integer overflow in BitmapScaleBitmaps bytestoalloc
     (CVE-2026-56001) (Closes: #1141702)
   * pcfread: validate bitmap sizes and offsets against per-glyph metrics
     (CVE-2026-56002) (Closes: #1141702)
   * bitscale: add bounds check to computeProps for property buffer
     (CVE-2026-56003) (Closes: #1141702)
Checksums-Sha1:
 400b31fa7bf47b14e7de7c73f148900940672b8e 145900 libxfont-dev_2.0.6-1+deb13u1_armhf.deb
 e8ae6a811af82db20e2ed11295e9506d5abc658f 222888 libxfont2-dbgsym_2.0.6-1+deb13u1_armhf.deb
 ec0123a8faddb49f925b4f25b0a807bc27acfd29 72032 libxfont2-udeb_2.0.6-1+deb13u1_armhf.udeb
 1c72c4d7732283ed4c305201ae930805d04fcd97 116632 libxfont2_2.0.6-1+deb13u1_armhf.deb
 9f986b233c1b7f850411bc49632962ebeffd43f0 7449 libxfont_2.0.6-1+deb13u1_armhf-buildd.buildinfo
Checksums-Sha256:
 3b5976585b8b8cf26532dabbb1c16676c821e66883107dbebbb2ddc321ce905b 145900 libxfont-dev_2.0.6-1+deb13u1_armhf.deb
 679675eb2c2133f2fed07cbad2142db077b883424c5d101bfbd216fc93eeeb03 222888 libxfont2-dbgsym_2.0.6-1+deb13u1_armhf.deb
 0850493702246fdebd320d62393219a8c4d98743f57ccf9defa908ab6d3b3b44 72032 libxfont2-udeb_2.0.6-1+deb13u1_armhf.udeb
 810bbcd7f196a780c8cabb231f6a7dd0204b59b1a32918a04e526b52dd1c96bb 116632 libxfont2_2.0.6-1+deb13u1_armhf.deb
 29510b63e4e3b4589d147869189eddc9ec2c5751deb8702a398fe4a9ecceb2d5 7449 libxfont_2.0.6-1+deb13u1_armhf-buildd.buildinfo
Files:
 1af39d84e68ecf77f76444a14fd3134a 145900 libdevel optional libxfont-dev_2.0.6-1+deb13u1_armhf.deb
 3ba84a81f36eaa0b97dd9d1effd4d678 222888 debug optional libxfont2-dbgsym_2.0.6-1+deb13u1_armhf.deb
 19bafd0db10915bd4e6c5fe6dd6069ea 72032 debian-installer optional libxfont2-udeb_2.0.6-1+deb13u1_armhf.udeb
 e7f317e700ee67718ba777c8883b5333 116632 libs optional libxfont2_2.0.6-1+deb13u1_armhf.deb
 fb2b05b177bf1bd46446d8382a4a4de1 7449 x11 optional libxfont_2.0.6-1+deb13u1_armhf-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----
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=4BFn
-----END PGP SIGNATURE-----