-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 10 Jul 2026 14:32:27 +0200
Source: libxfont
Binary: libxfont-dev libxfont2 libxfont2-dbgsym libxfont2-udeb
Architecture: amd64
Version: 1:2.0.6-1+deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: amd64 / i386 Build Daemon (x86-ubc-01) <buildd_amd64-x86-ubc-01@buildd.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Description:
 libxfont-dev - X11 font rasterisation library (development headers)
 libxfont2  - X11 font rasterisation library
 libxfont2-udeb - X11 font rasterisation library (udeb)
Closes: 1141702
Changes:
 libxfont (1:2.0.6-1+deb13u1) trixie-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * bitscale: fix integer overflow in BitmapScaleBitmaps bytestoalloc
     (CVE-2026-56001) (Closes: #1141702)
   * pcfread: validate bitmap sizes and offsets against per-glyph metrics
     (CVE-2026-56002) (Closes: #1141702)
   * bitscale: add bounds check to computeProps for property buffer
     (CVE-2026-56003) (Closes: #1141702)
Checksums-Sha1:
 4a63ba1360bc78e3ea4bee8112ba2acea45152c9 161624 libxfont-dev_2.0.6-1+deb13u1_amd64.deb
 ed8f8fb297dd1dc139f4d4ee0b4ae715b3d36bc1 224220 libxfont2-dbgsym_2.0.6-1+deb13u1_amd64.deb
 476a38dfddab0b41e1898ab36ca9d58c899bc0a9 88128 libxfont2-udeb_2.0.6-1+deb13u1_amd64.udeb
 49ffbfdd4dc45ec83dd6619cb23632060fdaf7fb 132904 libxfont2_2.0.6-1+deb13u1_amd64.deb
 2b0ca413de7ac51a9490012933c717746b70320a 7583 libxfont_2.0.6-1+deb13u1_amd64-buildd.buildinfo
Checksums-Sha256:
 cef239836034e5ed10ede825115fbb5a5a3353432ace4217e4672768ddc72e25 161624 libxfont-dev_2.0.6-1+deb13u1_amd64.deb
 6e6b0372dec0b4c9d6f03e58d95cb39b19eafdd34cd7dbb7e0e27aae7295939e 224220 libxfont2-dbgsym_2.0.6-1+deb13u1_amd64.deb
 4d3e54c5323b8534c97be9162777bfa4857b5c4c23dcfb9d99705cdc75a20b7f 88128 libxfont2-udeb_2.0.6-1+deb13u1_amd64.udeb
 79a7f56e4a0c7b1defa706c7b1f3076f7d80aaeea9de253b2a87406253319681 132904 libxfont2_2.0.6-1+deb13u1_amd64.deb
 d61402fd244d795aada8e8b9bb0a93c7dc3cd01eaf93ff5ae64a9c8726a3f2e8 7583 libxfont_2.0.6-1+deb13u1_amd64-buildd.buildinfo
Files:
 df9c052247983cf65c2ddf0cb445926b 161624 libdevel optional libxfont-dev_2.0.6-1+deb13u1_amd64.deb
 b84af57c373ddec82ffd32cef3f956ec 224220 debug optional libxfont2-dbgsym_2.0.6-1+deb13u1_amd64.deb
 0c950b012f073c980e67d7ef7a640b61 88128 debian-installer optional libxfont2-udeb_2.0.6-1+deb13u1_amd64.udeb
 b140ed254ea5551d8fb5765c2de66900 132904 libs optional libxfont2_2.0.6-1+deb13u1_amd64.deb
 9ac3e4e85afa64c87d236a9c88056131 7583 x11 optional libxfont_2.0.6-1+deb13u1_amd64-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----
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=nY3b
-----END PGP SIGNATURE-----