-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 10 Jul 2026 14:32:27 +0200
Source: libxfont
Binary: libxfont-dev libxfont2 libxfont2-dbgsym libxfont2-udeb
Architecture: armel
Version: 1:2.0.6-1+deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: armel Build Daemon (arm-conova-04) <buildd_arm64-arm-conova-04@buildd.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Description:
 libxfont-dev - X11 font rasterisation library (development headers)
 libxfont2  - X11 font rasterisation library
 libxfont2-udeb - X11 font rasterisation library (udeb)
Closes: 1141702
Changes:
 libxfont (1:2.0.6-1+deb13u1) trixie-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * bitscale: fix integer overflow in BitmapScaleBitmaps bytestoalloc
     (CVE-2026-56001) (Closes: #1141702)
   * pcfread: validate bitmap sizes and offsets against per-glyph metrics
     (CVE-2026-56002) (Closes: #1141702)
   * bitscale: add bounds check to computeProps for property buffer
     (CVE-2026-56003) (Closes: #1141702)
Checksums-Sha1:
 b7b5166b7b78e64f6c7e832fec09b61e5d6bdaea 148208 libxfont-dev_2.0.6-1+deb13u1_armel.deb
 43480f1303376a81d00ed4fdc04d49b41fd869c1 223364 libxfont2-dbgsym_2.0.6-1+deb13u1_armel.deb
 01abf0881d8c5d5185f1216c646b0abd2bc8802d 74900 libxfont2-udeb_2.0.6-1+deb13u1_armel.udeb
 2d77c9a05e02a165537ff4abfe5e49444fb3bc5d 119572 libxfont2_2.0.6-1+deb13u1_armel.deb
 2d256e4e89034d3b2900333c085e4c3a729081c2 7435 libxfont_2.0.6-1+deb13u1_armel-buildd.buildinfo
Checksums-Sha256:
 058bebe5446539c8bc319eedb59823306ecfaaee9f36dc74065e2851a05865cc 148208 libxfont-dev_2.0.6-1+deb13u1_armel.deb
 f4e3b8421a3723e2d14a68c926c7fc68598bdd21da6956314bc0ba22420a1a73 223364 libxfont2-dbgsym_2.0.6-1+deb13u1_armel.deb
 48f6f27acb201817825a8ced49319a48c5b9749c4082de992614f29223f42e5b 74900 libxfont2-udeb_2.0.6-1+deb13u1_armel.udeb
 4a71b1ca04887194163eb4beecd80b1a1362237c04a10d6b38f6edda63f2a892 119572 libxfont2_2.0.6-1+deb13u1_armel.deb
 be41d9b55b36f242ab8f3702a0cd703f6f5cdbdb07099427c999d1964772d028 7435 libxfont_2.0.6-1+deb13u1_armel-buildd.buildinfo
Files:
 ee5107cc5840625a7c1fea91b5d79d4d 148208 libdevel optional libxfont-dev_2.0.6-1+deb13u1_armel.deb
 f0b64f8e2246c3c3442259ae5b3b0711 223364 debug optional libxfont2-dbgsym_2.0.6-1+deb13u1_armel.deb
 b95b76c22957d4f51113a9122ad84cf6 74900 debian-installer optional libxfont2-udeb_2.0.6-1+deb13u1_armel.udeb
 c32ad88e5ca83cb37147029ab072a9d1 119572 libs optional libxfont2_2.0.6-1+deb13u1_armel.deb
 e8c1afe1139187903f71a23cc6681edb 7435 x11 optional libxfont_2.0.6-1+deb13u1_armel-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----
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=TnjK
-----END PGP SIGNATURE-----