-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 10 Jul 2026 14:32:27 +0200
Source: libxfont
Binary: libxfont-dev libxfont2 libxfont2-dbgsym libxfont2-udeb
Architecture: riscv64
Version: 1:2.0.6-1+deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: riscv64 Build Daemon (rv-manda-02) <buildd_riscv64-rv-manda-02@buildd.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Description:
 libxfont-dev - X11 font rasterisation library (development headers)
 libxfont2  - X11 font rasterisation library
 libxfont2-udeb - X11 font rasterisation library (udeb)
Closes: 1141702
Changes:
 libxfont (1:2.0.6-1+deb13u1) trixie-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * bitscale: fix integer overflow in BitmapScaleBitmaps bytestoalloc
     (CVE-2026-56001) (Closes: #1141702)
   * pcfread: validate bitmap sizes and offsets against per-glyph metrics
     (CVE-2026-56002) (Closes: #1141702)
   * bitscale: add bounds check to computeProps for property buffer
     (CVE-2026-56003) (Closes: #1141702)
Checksums-Sha1:
 5ade70abaeb90a18d4711fbbaebaf787e4e3e080 266284 libxfont-dev_2.0.6-1+deb13u1_riscv64.deb
 1e17946e8ce93296f24af7080ccfc899916b2b83 216372 libxfont2-dbgsym_2.0.6-1+deb13u1_riscv64.deb
 59a31b2eb96ca8426b26bfaab244024f39178132 87248 libxfont2-udeb_2.0.6-1+deb13u1_riscv64.udeb
 1c555f1196de7d04846d190a7d1d749bd6ec9873 132040 libxfont2_2.0.6-1+deb13u1_riscv64.deb
 d006acbd4696fe5f2277042355c97dde47235e76 7539 libxfont_2.0.6-1+deb13u1_riscv64-buildd.buildinfo
Checksums-Sha256:
 d85c709079ed9889bed9d0d57204bd64e5fe97c9a1287825fce4d1c0cb64d825 266284 libxfont-dev_2.0.6-1+deb13u1_riscv64.deb
 63a1af02912e17519dbf80eaea5cd1324bc69c1ad7cbea9e0436ae97eded89a9 216372 libxfont2-dbgsym_2.0.6-1+deb13u1_riscv64.deb
 10ac40bfe9a92c9d8bfa93501449eb45064caeddec233da4045944949f72c565 87248 libxfont2-udeb_2.0.6-1+deb13u1_riscv64.udeb
 7c8f117bffe81c5dcfcab01e96bb079f9d1675654d53d1cfac7db02ce57ae9bc 132040 libxfont2_2.0.6-1+deb13u1_riscv64.deb
 3faaf50cef1de069c67371bf09ad6db282166903967d92b4ce92c7dcd4d4aeee 7539 libxfont_2.0.6-1+deb13u1_riscv64-buildd.buildinfo
Files:
 50e9b79fe3d0bc82f75fceb42ed78b69 266284 libdevel optional libxfont-dev_2.0.6-1+deb13u1_riscv64.deb
 bef4d86c24d07e60a1de977b41cb95cd 216372 debug optional libxfont2-dbgsym_2.0.6-1+deb13u1_riscv64.deb
 5847ab4af9aaf700886b6cc41677ff74 87248 debian-installer optional libxfont2-udeb_2.0.6-1+deb13u1_riscv64.udeb
 29fe56b4c07166dfc71e94f64f5ee624 132040 libs optional libxfont2_2.0.6-1+deb13u1_riscv64.deb
 aab1d8f53a89ef07dd9e6b6f7554e35e 7539 x11 optional libxfont_2.0.6-1+deb13u1_riscv64-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEER+evXFzNzDWbUDPF7SlJcp2g6OIFAmpT+nkACgkQ7SlJcp2g
6OLUNBAAmaIpsXygrYlPA0OHsUDTsiFsIX61kMw9O5cFKsR1txwERZ2/Rukc1f3R
L9Eo3gCfURPuWYVAwD+3QL/OhBqFv2W7LZy4MTn/uRjjqy6627oeH2tym1yH41JA
7t25s+/yvvU/yRwJ+ZRW/xdz38+kK9LgTGs+pjrTr7q8hm8zvhiNLpilcAHR2eYM
OSGo4YF7jmRU2ySKp5yRJWW6UAyBKmMGl07u98ChSkAQHWPUZ8cv0RIF79jZPlGs
vHeGJxiwrCPYMqD8sPw5hb49vjB4PzgwjeoZBx8E6gXPNZFSqDHHk8KOGmqNbCie
LmNunwGD42F0Zy5kDW7xuuxyRuXonrTwI9vyAQQwvdlaTCf8QKCy+SS8NcfeWsiD
aB5pJqJEgjxgqDCf2MkU6funyRkXrAHPxDdq6Dl0rm3ukfu3vnhOnb3NEz6Gf/jA
Qqx8iJpG10RXHddFKzkTm6DpPKRRee8oZfa+Ks0LXVqe9LzvujwGOg6it5/I4g3H
zt8eFTTU6WS8I/loIcZ+lVFA+k8AjTjplOaCEFlR1o5QgRV4gWf4IwWq98PYki9K
hF3HvttsifIC+Miy8Fv+lC6ojXJmgCCKveyc50E8decnTDjZtGSExcF4zxBDTvMP
s+8BNpwzXtrMnIvERW7SxE2AGD+wbt9M3xCCl6TOnMp7Be+SshU=
=2+va
-----END PGP SIGNATURE-----