-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Wed, 05 Aug 2026 11:39:27 +0200
Source: libxfont
Architecture: source
Version: 1:2.0.9-1
Distribution: unstable
Urgency: medium
Maintainer: Debian X Strike Force <debian-x@lists.debian.org>
Changed-By: Emilio Pozuelo Monfort <pochu@debian.org>
Changes:
libxfont (1:2.0.9-1) unstable; urgency=medium
.
* Team upload.
* New upstream release.
- CVE-2026-59679: Font Server Client encoding Out-Of-Bounds Read/Write
- CVE-2026-44950: Font Server Client Cumulative Glyph Data Heap Buffer
Overflow
Checksums-Sha1:
32903d65af221d4ee1c0779d4f0316b6ff171ee9 2102 libxfont_2.0.9-1.dsc
e55495fc05d523fbc83162a36f39453d8551b9fd 682926 libxfont_2.0.9.orig.tar.gz
6e6f806901d601068f8ca8cbe9b34e737e6e14eb 45647 libxfont_2.0.9-1.diff.gz
1e51d2915659eda2ff8e6865ed6cc8c06b022431 6501 libxfont_2.0.9-1_source.buildinfo
Checksums-Sha256:
ebccb686c3dfbcf1f8006f08448fe79a3c374b7a7bcc134d8622a4eae668d572 2102 libxfont_2.0.9-1.dsc
8564b4df365bc5a6cb0c15900dc688f6e8f47b00a8571c6708c916dfb85066ba 682926 libxfont_2.0.9.orig.tar.gz
98cb947c4cc744ff5bc5d03c719c8005512eed570390c6c4aeed690003c6a3a0 45647 libxfont_2.0.9-1.diff.gz
5a81558d0719cea5b543f8b04a0f94f11a2ea2d8c45c247e59250c8525888652 6501 libxfont_2.0.9-1_source.buildinfo
Files:
edf9fcb5e06336c4192fbf2df0aac134 2102 x11 optional libxfont_2.0.9-1.dsc
87f5150b284d27a7525139e4185c8fa1 682926 x11 optional libxfont_2.0.9.orig.tar.gz
b77d27f2279a721acab1867603bda15e 45647 x11 optional libxfont_2.0.9-1.diff.gz
1cbc8d718c3656c07afa907fc4943d6f 6501 x11 optional libxfont_2.0.9-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=4XyX
-----END PGP SIGNATURE-----
