-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 10 Jul 2026 14:32:27 +0200
Source: libxfont
Binary: libxfont-dev libxfont2 libxfont2-dbgsym libxfont2-udeb
Architecture: i386
Version: 1:2.0.6-1+deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: all / amd64 / i386 Build Daemon (x86-conova-02) <buildd_amd64-x86-conova-02@buildd.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Description:
 libxfont-dev - X11 font rasterisation library (development headers)
 libxfont2  - X11 font rasterisation library
 libxfont2-udeb - X11 font rasterisation library (udeb)
Closes: 1141702
Changes:
 libxfont (1:2.0.6-1+deb13u1) trixie-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * bitscale: fix integer overflow in BitmapScaleBitmaps bytestoalloc
     (CVE-2026-56001) (Closes: #1141702)
   * pcfread: validate bitmap sizes and offsets against per-glyph metrics
     (CVE-2026-56002) (Closes: #1141702)
   * bitscale: add bounds check to computeProps for property buffer
     (CVE-2026-56003) (Closes: #1141702)
Checksums-Sha1:
 5cfd58b21948b9273c6c2b81f9dd06778255ca51 167624 libxfont-dev_2.0.6-1+deb13u1_i386.deb
 4ff7c28548e84302459179c0381f07cb1e9df7b3 203808 libxfont2-dbgsym_2.0.6-1+deb13u1_i386.deb
 b27246d044e0c9743f75888d5ce84fcbf6948bd6 91208 libxfont2-udeb_2.0.6-1+deb13u1_i386.udeb
 1fc732954f62c99ce36ee05a73491533eba0d559 136120 libxfont2_2.0.6-1+deb13u1_i386.deb
 5f85a5196adefc46bf889b216d3b2015157bd336 7478 libxfont_2.0.6-1+deb13u1_i386-buildd.buildinfo
Checksums-Sha256:
 350f9573f5164c77dcf035c1221a40f56a21460c5f176cf73175fbb88778b3e1 167624 libxfont-dev_2.0.6-1+deb13u1_i386.deb
 e153e3d995a631a871098636be274e5d654da73d6077e4f99d33f260eb7595b3 203808 libxfont2-dbgsym_2.0.6-1+deb13u1_i386.deb
 ec147f21913d53ed9974fe3c28adf21aebed6533c9da74e409b984455aabe441 91208 libxfont2-udeb_2.0.6-1+deb13u1_i386.udeb
 9a94176c67e7a0dd880f56da0b3e04b50905bca902e0093805536c950ea421da 136120 libxfont2_2.0.6-1+deb13u1_i386.deb
 932fced62e16dce8cabacebe6b762eae856bfa9968ad1b7e33521b7b825de1e3 7478 libxfont_2.0.6-1+deb13u1_i386-buildd.buildinfo
Files:
 135ce3bc826c78c6734d8fc98ea6ef6b 167624 libdevel optional libxfont-dev_2.0.6-1+deb13u1_i386.deb
 943593fe6a99572de734c2d7a5b8e040 203808 debug optional libxfont2-dbgsym_2.0.6-1+deb13u1_i386.deb
 71c758f09708221842695b95c6579e9e 91208 debian-installer optional libxfont2-udeb_2.0.6-1+deb13u1_i386.udeb
 4e3f1fb3b4af92e2361f4f160edfe327 136120 libs optional libxfont2_2.0.6-1+deb13u1_i386.deb
 cfbeb5808d57a9682ee7c5192d2cf4fa 7478 x11 optional libxfont_2.0.6-1+deb13u1_i386-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----
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=M9ms
-----END PGP SIGNATURE-----