-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 10 Jul 2026 14:32:27 +0200 Source: libxfont Binary: libxfont-dev libxfont2 libxfont2-dbgsym libxfont2-udeb Architecture: s390x Version: 1:2.0.6-1+deb13u1 Distribution: trixie-security Urgency: high Maintainer: s390x Build Daemon (zani) Changed-By: Salvatore Bonaccorso Description: libxfont-dev - X11 font rasterisation library (development headers) libxfont2 - X11 font rasterisation library libxfont2-udeb - X11 font rasterisation library (udeb) Closes: 1141702 Changes: libxfont (1:2.0.6-1+deb13u1) trixie-security; urgency=high . * Non-maintainer upload by the Security Team. * bitscale: fix integer overflow in BitmapScaleBitmaps bytestoalloc (CVE-2026-56001) (Closes: #1141702) * pcfread: validate bitmap sizes and offsets against per-glyph metrics (CVE-2026-56002) (Closes: #1141702) * bitscale: add bounds check to computeProps for property buffer (CVE-2026-56003) (Closes: #1141702) Checksums-Sha1: 8589878ee4a23e8d6a509644c48f08c885c607ab 162716 libxfont-dev_2.0.6-1+deb13u1_s390x.deb 100349cca884e8e42a8181390416fc9e5fbbe04e 227004 libxfont2-dbgsym_2.0.6-1+deb13u1_s390x.deb d450368273653a640cf58cad2f854012c872fe3d 88780 libxfont2-udeb_2.0.6-1+deb13u1_s390x.udeb 6ce42c78ecac9f5318a6187953ebe72550ab0c6a 133616 libxfont2_2.0.6-1+deb13u1_s390x.deb 25cb63db892639e50f95501edc00254e6a6b7ca3 7445 libxfont_2.0.6-1+deb13u1_s390x-buildd.buildinfo Checksums-Sha256: 3b1dcb75d0d6dca0b473bc82e514588d7152de4143442b4eb6b6ac030fcf55f5 162716 libxfont-dev_2.0.6-1+deb13u1_s390x.deb 1245e874ea809f6cd3612993c02127b78aa95944125a3aaf88dc5edd547700c4 227004 libxfont2-dbgsym_2.0.6-1+deb13u1_s390x.deb 7b0c902ff3058ed4dd96acf331bcdddab5028cd5b112da397a75f8fb002229f1 88780 libxfont2-udeb_2.0.6-1+deb13u1_s390x.udeb 8119077311fea4f0dcb608e7f8ca9353cb018a3ae17d3ac1189aa3f5ecb3af16 133616 libxfont2_2.0.6-1+deb13u1_s390x.deb 03d056c7b4f78cfeba4070eca8f2e4bd4ae85d01e658d7fc21adb12033d7ff91 7445 libxfont_2.0.6-1+deb13u1_s390x-buildd.buildinfo Files: 983f0854b218b6690467cb50bec23ada 162716 libdevel optional libxfont-dev_2.0.6-1+deb13u1_s390x.deb 51d2eb1f066524b74b07e8315c836872 227004 debug optional libxfont2-dbgsym_2.0.6-1+deb13u1_s390x.deb 598989d5d4b35b4b85d50a0a297bd5b1 88780 debian-installer optional libxfont2-udeb_2.0.6-1+deb13u1_s390x.udeb 099dbc424449cf76a22324474d01d391 133616 libs optional libxfont2_2.0.6-1+deb13u1_s390x.deb 91b714604ac623722180aebb69a48f52 7445 x11 optional libxfont_2.0.6-1+deb13u1_s390x-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEgh4msZ+e2PZfd5KckaCrxAR3BY0FAmpT9tkACgkQkaCrxAR3 BY1iew/+L2OSFT5u8RUTS5wsOeICCaq/BL1yTS2F2Z2P8/nILSItwmFlB2d+FVBS wqAUtVOOzDfeE/K+kS6FLCNniRX/TTcRtgbwAI742GwwBKyN2rr4yG6op6W6XO1p fIcD3f2umD9cdxkftxmChtjBrCCb4vtpHjKQlyBV7sZr7+Scy/mSyQfVciHOjRB0 UyUCzMDeZlx4Kk9bhhRnzIb8fVoNvtsX1A8K6hQ0vB/d6O+28buXzC3XrqBt2xsm 9nO8K3e63x0iYgYCiaMbqCi1cRmDQePzCDNW++pxbs42YpEKiYbd4llRRLUU/wQB pAT/oZpRftDhQ3JOH1DDXU01m8TCt566AUp869iWTHbXgt+FcZJA1sFwLiCTch0s qawmWguct5bBDzeu2z2EuOhWeU+B7f+xnrEW5EvLymWe+XRPXuKtzX0QC19XP+3L GBHKTivYd8nEZxPoxBBIVsMP38P0ZCID4SqtkknJrpWKnuMNoKZQCCp/CdKozAS0 7I1Tq8f9l+iG1WdyVU9vkStjvFjaDljreR4Xr28vlPqPITedEtRS1WRA6HSL/nDK EdpRpkGGqmBQDtU14phvFIDSGKloEaywMfnplfZHv8yEYtK0pcNWAdSgGQPthOdB LH5Suj1X9uspwzfzc0JvICp1eVsWIEFCX5obouPP1TD8oRO2aoo= =2Tow -----END PGP SIGNATURE-----