From 701e9685f7effa9cbd3b4088106951b7936a84ef Mon Sep 17 00:00:00 2001 From: Bernd Kuhls Date: Thu, 11 Dec 2025 20:19:53 +0100 Subject: [PATCH] package/python-fonttools: security bump version to 4.61.0 https://github.com/fonttools/fonttools/releases/tag/4.61.0 Fixes CVE-2025-66034: https://github.com/fonttools/fonttools/security/advisories/GHSA-768j-98cg-p3fv Signed-off-by: Bernd Kuhls Signed-off-by: Peter Korsgaard (cherry picked from commit b0aa7e5a23895627e28cbcd33f0b998c59023148) Signed-off-by: Thomas Perale --- package/python-fonttools/python-fonttools.hash | 4 ++-- package/python-fonttools/python-fonttools.mk | 4 ++-- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/package/python-fonttools/python-fonttools.hash b/package/python-fonttools/python-fonttools.hash index 49f1ca0235..b83663e8fb 100644 --- a/package/python-fonttools/python-fonttools.hash +++ b/package/python-fonttools/python-fonttools.hash @@ -1,5 +1,5 @@ # md5, sha256 from https://pypi.org/pypi/fonttools/json -md5 b4b79d23865d50084d4c05defa186fc9 fonttools-4.60.1.tar.gz -sha256 ef00af0439ebfee806b25f24c8f92109157ff3fac5731dc7867957812e87b8d9 fonttools-4.60.1.tar.gz +md5 55a7d3d40e191410bbe604d0d795baa4 fonttools-4.61.0.tar.gz +sha256 ec520a1f0c7758d7a858a00f090c1745f6cde6a7c5e76fb70ea4044a15f712e7 fonttools-4.61.0.tar.gz # Locally computed sha256 checksums sha256 6787208f83f659ccbc2223b2fde952ffa6f7e8aca62f1a8a2bf5bc51bb1b2383 LICENSE diff --git a/package/python-fonttools/python-fonttools.mk b/package/python-fonttools/python-fonttools.mk index 3094b1985c..592ef51354 100644 --- a/package/python-fonttools/python-fonttools.mk +++ b/package/python-fonttools/python-fonttools.mk @@ -4,9 +4,9 @@ # ################################################################################ -PYTHON_FONTTOOLS_VERSION = 4.60.1 +PYTHON_FONTTOOLS_VERSION = 4.61.0 PYTHON_FONTTOOLS_SOURCE = fonttools-$(PYTHON_FONTTOOLS_VERSION).tar.gz -PYTHON_FONTTOOLS_SITE = https://files.pythonhosted.org/packages/4b/42/97a13e47a1e51a5a7142475bbcf5107fe3a68fc34aef331c897d5fb98ad0 +PYTHON_FONTTOOLS_SITE = https://files.pythonhosted.org/packages/33/f9/0e84d593c0e12244150280a630999835a64f2852276161b62a0f98318de0 PYTHON_FONTTOOLS_SETUP_TYPE = setuptools PYTHON_FONTTOOLS_LICENSE = MIT PYTHON_FONTTOOLS_LICENSE_FILES = LICENSE