-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 10 Jul 2026 14:32:27 +0200
Source: libxfont
Binary: libxfont-dev libxfont2 libxfont2-dbgsym libxfont2-udeb
Architecture: arm64
Version: 1:2.0.6-1+deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: arm64 Build Daemon (arm-conova-03) <buildd_arm64-arm-conova-03@buildd.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Description:
 libxfont-dev - X11 font rasterisation library (development headers)
 libxfont2  - X11 font rasterisation library
 libxfont2-udeb - X11 font rasterisation library (udeb)
Closes: 1141702
Changes:
 libxfont (1:2.0.6-1+deb13u1) trixie-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * bitscale: fix integer overflow in BitmapScaleBitmaps bytestoalloc
     (CVE-2026-56001) (Closes: #1141702)
   * pcfread: validate bitmap sizes and offsets against per-glyph metrics
     (CVE-2026-56002) (Closes: #1141702)
   * bitscale: add bounds check to computeProps for property buffer
     (CVE-2026-56003) (Closes: #1141702)
Checksums-Sha1:
 d6686bbe2bcd6304d70c2febd85f920b02896b30 156236 libxfont-dev_2.0.6-1+deb13u1_arm64.deb
 748f526c030852b464196aae33ac85f92bdab22b 217788 libxfont2-dbgsym_2.0.6-1+deb13u1_arm64.deb
 2a4e11d57065947e7dc9ed6acf0b9907d3d8880f 80120 libxfont2-udeb_2.0.6-1+deb13u1_arm64.udeb
 e34e80066bb64196cc614d0fe652fa75f48138ae 124836 libxfont2_2.0.6-1+deb13u1_arm64.deb
 f512e84b61f42ed0daf88f5ff4569fccbf90699b 7567 libxfont_2.0.6-1+deb13u1_arm64-buildd.buildinfo
Checksums-Sha256:
 38b6c82ac68ccd2609ffc24e40342ea1cc851f8c93ac0d6e04d99ef8b2454024 156236 libxfont-dev_2.0.6-1+deb13u1_arm64.deb
 8a2a0b4623db36caf02b70b0406b7025398663d84d7d3a16871f24215126a840 217788 libxfont2-dbgsym_2.0.6-1+deb13u1_arm64.deb
 2e3c473366cd239a99c695434156bf8481bdc2405eed9299c2056bbec0dccd85 80120 libxfont2-udeb_2.0.6-1+deb13u1_arm64.udeb
 bd15438e61e968518e26f5f4a2523329f16e066652395db915d8b941bf71b5ba 124836 libxfont2_2.0.6-1+deb13u1_arm64.deb
 2d91b5472202dda731da8d1dcd5222fed7ca0ff40e7eaaa4aaca91def028cd3c 7567 libxfont_2.0.6-1+deb13u1_arm64-buildd.buildinfo
Files:
 e12e01da166cb3317b0689ce2167698d 156236 libdevel optional libxfont-dev_2.0.6-1+deb13u1_arm64.deb
 7adc206002689e302fc40d993177fa43 217788 debug optional libxfont2-dbgsym_2.0.6-1+deb13u1_arm64.deb
 3c242b21a56224f15fab3d2a9ea0bbae 80120 debian-installer optional libxfont2-udeb_2.0.6-1+deb13u1_arm64.udeb
 1c2d88d85985386bf6d7999afdef9502 124836 libs optional libxfont2_2.0.6-1+deb13u1_arm64.deb
 ccc5d261af3b78228a324b34f389adb5 7567 x11 optional libxfont_2.0.6-1+deb13u1_arm64-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEElFiH1oZRZh1t4FSiXVp1sEH/1mIFAmpT9tgACgkQXVp1sEH/
1mLNRw//b8IjvwRbQwPjcQIwDKYMuMpYpyExw/vibjf9PrzP8CwV1XJ5JKV06Rvm
YTXWzVdFIP62p1LD7X6128TAfFsQDa6u2tN24Hyki6a5M50YdCv4z3eGaThtfkfI
wXs18lqHEFCqvPCHDszEMEp22HEpMHcjAsP2WYIY03SewFMlcFPf548WUCftptXd
ls0HYZAL9gq6na+AdIbphdY/SL1VjswQO3dBdMPtuAT4Hc2eEGKVn08+BYuAbdt5
/U58zJlCrwFUPWBtjDopLROlvUPDkgOy6ZHeKywzqlhyJArDXkOU/Doj4iRXMew/
cLFgiuh/R5DyHJO/Bf1iTo00GQ29ENUGhTtYW8XiC4dyJGXz2/OpSxILdMMszbKS
spDdy1yep3vvSJc0iGSYNTAhQQcjKqUGq2bHu99YFGusJ4A79L5R8Z8gvDBJfwwe
LlRD6nfXGBWd8TrJ7N/67Nd+vmoeLauPu2wx8x722g8jZHDZph0bjI3RBb0uD5J2
H0l4Nl9GiJBsf9X4D/2B9q8pBDQnHfHi0yot25OkHrYX9jKXwrGlKCGT5BfzEytW
/+jTIxvUmOyTeKmiprQcilqq9VfF0oAY5wC0JzGThMxJ1OdFPqQa9MQm617XgKkx
gZsHqg0js/Zhs5gHdN0F+nbvOrP+b0Y/Zxi+GNFW08jF0rS7trQ=
=jb7E
-----END PGP SIGNATURE-----