-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sun, 12 Jul 2026 16:45:15 +0200
Source: libxfont
Architecture: source
Version: 1:2.0.4-1+deb11u1
Distribution: bullseye-security
Urgency: high
Maintainer: Debian X Strike Force <debian-x@lists.debian.org>
Changed-By: Andrej Shadura <andrewsh@debian.org>
Changes:
libxfont (1:2.0.4-1+deb11u1) bullseye-security; urgency=high
.
* Add upstream patches for security issues:
- CVE-2026-56001: integer overflow in BitmapScaleBitmaps bytestoalloc
- CVE-2026-56002: validate bitmap sizes and offsets in pcfread
- CVE-2026-56003: bounds check to computeProps for property buffer
Checksums-Sha1:
2766a5512b0e010d401aa968ad7e3712b5bac65e 1918 libxfont_2.0.4-1+deb11u1.dsc
20f8c208a21f7a8acdf9514823a33a4c44e4d87c 622726 libxfont_2.0.4.orig.tar.gz
4137707c50df3cf4636c88e59797b9a4f30ae23d 801 libxfont_2.0.4.orig.tar.gz.asc
f88322b36b9b8d783967f3762ef4dd92393c682e 36362 libxfont_2.0.4-1+deb11u1.diff.gz
bd2efddf4d39101630c64eac7ca55dfca8f22a18 6293 libxfont_2.0.4-1+deb11u1_source.buildinfo
Checksums-Sha256:
a2f950367961583c519052d3be922f7b120d7844b6092d357fa2406614ae4306 1918 libxfont_2.0.4-1+deb11u1.dsc
74e577294c7406b284c50dfcfb5e5d9b3b0cc2d83d33866920ffe1e4860f585a 622726 libxfont_2.0.4.orig.tar.gz
fe96e116b81caa07de593b17c3f0362fc02d88bca551146e1ca1342323b205b0 801 libxfont_2.0.4.orig.tar.gz.asc
315afbd0f588d04857d7209ef9b5fcbddbd1e00541445d697bfe36c3089e8d08 36362 libxfont_2.0.4-1+deb11u1.diff.gz
cb539104798c0471708d20772e4cbf2a31a53258ed05ede63d9980234119ed18 6293 libxfont_2.0.4-1+deb11u1_source.buildinfo
Files:
615ad697cb3b5d49f650d9469fd39734 1918 x11 optional libxfont_2.0.4-1+deb11u1.dsc
2dfd73533bb8fb738eee3ea3ccb7e216 622726 x11 optional libxfont_2.0.4.orig.tar.gz
a4c19943012a3ec1d227be400d7468a7 801 x11 optional libxfont_2.0.4.orig.tar.gz.asc
9163e43e454d79fd01a6cf2bb3eba8fc 36362 x11 optional libxfont_2.0.4-1+deb11u1.diff.gz
0e2d31a3242baf69244e2997a89ca595 6293 x11 optional libxfont_2.0.4-1+deb11u1_source.buildinfo
-----BEGIN PGP SIGNATURE-----
wr0EARYKAG8FgmpTz5kJEOhEa0rIx3JhRxQAAAAAAB4AIHNhbHRAbm90YXRpb25z
LnNlcXVvaWEtcGdwLm9yZ4lhos6RRSZOLGMR3oLAKy1wQIfyS9VOSGSlch7+oBfK
FiEEg9zRf0SyLMg2Vu2h6ERrSsjHcmEAAEeLAP49PWBYrTqhYazT0su4CEqoNQ6J
ED+lusxwzyNNtwv3QAEA2OvO1hLopKVQ8AAb8cC35D2mC0l1KvstTWPa6Uj5nAo=
=6R8Y
-----END PGP SIGNATURE-----
