-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 10 Jul 2026 14:32:27 +0200 Source: libxfont Binary: libxfont-dev libxfont2 libxfont2-dbgsym libxfont2-udeb Architecture: ppc64el Version: 1:2.0.6-1+deb13u1 Distribution: trixie-security Urgency: high Maintainer: ppc64el Build Daemon (ppc64el-conova-02) Changed-By: Salvatore Bonaccorso Description: libxfont-dev - X11 font rasterisation library (development headers) libxfont2 - X11 font rasterisation library libxfont2-udeb - X11 font rasterisation library (udeb) Closes: 1141702 Changes: libxfont (1:2.0.6-1+deb13u1) trixie-security; urgency=high . * Non-maintainer upload by the Security Team. * bitscale: fix integer overflow in BitmapScaleBitmaps bytestoalloc (CVE-2026-56001) (Closes: #1141702) * pcfread: validate bitmap sizes and offsets against per-glyph metrics (CVE-2026-56002) (Closes: #1141702) * bitscale: add bounds check to computeProps for property buffer (CVE-2026-56003) (Closes: #1141702) Checksums-Sha1: e5f11e3410df7d4abfcf339fd308c7607e8fbc93 171860 libxfont-dev_2.0.6-1+deb13u1_ppc64el.deb f4c627f2cfaf06e1a233934362bda2e3cba9ffac 227884 libxfont2-dbgsym_2.0.6-1+deb13u1_ppc64el.deb b54e7e4b7027ef78faba370aee56a4437933d722 95452 libxfont2-udeb_2.0.6-1+deb13u1_ppc64el.udeb 20c9865f365591976849117abd4c318e260d984c 139828 libxfont2_2.0.6-1+deb13u1_ppc64el.deb c045a249e81bb5687e6e29de75d4f9b7c38663b8 7594 libxfont_2.0.6-1+deb13u1_ppc64el-buildd.buildinfo Checksums-Sha256: 53ecd15a6173bfa384939b76fdd5df822f4d5ee0d150882957e5bbc4819e2b65 171860 libxfont-dev_2.0.6-1+deb13u1_ppc64el.deb 164f99ff0ec4ce3520b72f026d8025f9000f5ca2e7739b16e66b662d12d4ed5a 227884 libxfont2-dbgsym_2.0.6-1+deb13u1_ppc64el.deb d74aacbb7b05b6a1cdf0a454c0b102bc02305f5e8bacd424fd9ea9e5ff7b141f 95452 libxfont2-udeb_2.0.6-1+deb13u1_ppc64el.udeb 5e2603984573b2ecc492840ab781d578dece06ae08962eb0c5e6931b1db5c854 139828 libxfont2_2.0.6-1+deb13u1_ppc64el.deb d5226558fccd6a40545bf5cf2640d23bd149b25a73660cee272ca942283f9441 7594 libxfont_2.0.6-1+deb13u1_ppc64el-buildd.buildinfo Files: 0f07f4a23d72f6c3c333edc11de9a7be 171860 libdevel optional libxfont-dev_2.0.6-1+deb13u1_ppc64el.deb 0f90d574d2d5eb5afd8ad77c2289923c 227884 debug optional libxfont2-dbgsym_2.0.6-1+deb13u1_ppc64el.deb 8639f4b1b961e16153f0a85f3e091693 95452 debian-installer optional libxfont2-udeb_2.0.6-1+deb13u1_ppc64el.udeb d41721bdd01f6bdc4382b23947a930d6 139828 libs optional libxfont2_2.0.6-1+deb13u1_ppc64el.deb 9f482a8421b31678031e515a26b39932 7594 x11 optional libxfont_2.0.6-1+deb13u1_ppc64el-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEySUEQfg5pZeb/U372FRWNm40e2YFAmpT9s4ACgkQ2FRWNm40 e2buWA//XOeHIQPcMSedzzYPffib9eWMC0CHrRm+VyWjsB2Hr+aWhuxasaON6ajx RALUjaMlnoiatvGXDAp+swpG7dKdb5tYjwkRnchJBafSeFVrMpSUmG8rEBcwP79i v6/IPylkIBeFtSbJapxlGJbC0WHPxtuLn47xIY8TCR1UD3YBS3ejnOM2+TpE4hdG Ln1X1m+WgIcDpg4LHC493511qm8RjdvLd4m4lo+OtnPxMzz7tRUxtSp/Jol7z4J3 tY14jSJRubtIVl66peto30K7c4KHeWiadAoZ8upFoERtURf8X1pZO2Wmd5kuG5dO YzJGOLfgrSgyHYSY5LD0QMFnzQiWyc3ETcsb+sUzKwc1xs9NbC8YRsMKAHi+sjAH ZWjATFoyKs1L46NP4uQ7MZQLwRZyp8DRNnu3ADb2YK2ZuGs0DVFGiKbS0VlOVzsM 0a5l8n3HhigwyLjPV/K47Mcf/fhLoLh+QU6bONP/n4g6D5peJfkLQT3hICLgOG62 gZzRBs7p4w+SbrNKiS0J2sZSzqxpLWhG1GAdN/TlOwKOegcZYDn7lXLGgXRxDegO yDQ2JzTG6EiG3/Za9/O8CwvfH+UP91AM10uq8LZQodbt+iSymOPMNLVNi5w4bSpf kNOxVBwhlDuCOF2q2Tf+1mhYuapaMa3KgNtoboh13yrTLcIT2Fo= =lzBM -----END PGP SIGNATURE-----