16 Commits

Author SHA256 Message Date
bf563864fc Accepting request 1331140 from M17N
OBS-URL: https://build.opensuse.org/request/show/1331140
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/fontforge?expand=0&rev=66
2026-02-05 16:58:07 +00:00
f64c28d406 Update the changelog to add CVE fix history record. (CVE-2025-50949, bsc#1252652)
OBS-URL: https://build.opensuse.org/package/show/M17N/fontforge?expand=0&rev=110
2026-02-05 10:28:39 +00:00
1e56c0e6d2 Accepting request 1329834 from M17N
OBS-URL: https://build.opensuse.org/request/show/1329834
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/fontforge?expand=0&rev=65
2026-01-30 17:19:44 +00:00
ea87e559ee Drop fontforge-CVE-2025-15279.patch, its content already in fontforge-CVE-2025-15279-part01_7d67700c.patch, which didn't referred in the SPEC file. Only because of forgot to remove after the rename.
OBS-URL: https://build.opensuse.org/package/show/M17N/fontforge?expand=0&rev=108
2026-01-29 15:21:36 +00:00
a795bf75a1 - Add fontforge-fix-multiple-crashes-in-Multiple-Masters.patch:
Backport dfe5c803 from upstream, Fix multiple crashes in Multiple
  Masters.
- Add fontforge-fix-crash-for-content-over-32767-characters-in-GDraw.patch:
  Backport 0df57ac0 from upstream, fix crash for content over 32767
  characters in GDraw multiline text field.
- Add fontforge-CVE-2025-15279-part02_720ea950.patch:
  Backport 720ea950 from upstream, Move bounds check inside
  cnt >= 3 block.
  (CVE-2025-15279, ZDI-CAN-27517, bsc#1256013)
- Add fontforge-CVE-2025-15269.patch:
  Backport 6aea6db5 from upstream, Use-after-free in SFD ligature
  parsing.
  (CVE-2025-15269, ZDI-25-1195, ZDI-CAN-28564, bsc#1256032)
- Add fontforge-CVE-2025-15275.patch:
  Backport 71954027 from upstream, Fix heap buffer overflow in SFD
  image parsing.
  (CVE-2025-15275 ZDI-25-1189 ZDI-CAN-28543 bsc#1256025)
- Add fontforge-CVE-2025-15279-part01_7d67700c.patch:
  Backport 7d67700c from upstream, Fix heap buffer overflow in BMP
  RLE decompression.
  (CVE-2025-15279, ZDI-CAN-27517, bsc#1256013)
- Add fontforge-fix-crash-on-UpDown-keypress-in-the-feature-list.patch:
  Backport aca4f524 from upstream, Metrics view: Fix crash on Up/Down
  keypress while in the feature list.
- Add fontforge-fix-crash-in-Metrics-View.patch
  Backport 46dc37435 from upstream, Fix crash in Metrics View.
- Add fontforge-fix-UFO-crash-for-empty-contours.patch
  Backport 77b1b148 from upstream, Fix UFO crash for empty contours.
- Add fontforge-fix-crash-issue-in-allmarkglyphs.patch:
  Backport 9d793fe9 from upstream, fix crash issue in allmarkglyphs.

OBS-URL: https://build.opensuse.org/package/show/M17N/fontforge?expand=0&rev=107
2026-01-28 15:58:17 +00:00
31044f411d Accepting request 1329048 from M17N
OBS-URL: https://build.opensuse.org/request/show/1329048
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/fontforge?expand=0&rev=64
2026-01-27 15:05:37 +00:00
ec8887766f - Update fontforge.spec to get rid of update-desktop-files:
* It often duplicates upstream translation effort, wasting a human
    work, both community translators and contracted ones.
  * Most of these translations are ~20 years old, and they were never
    reviewed, so it is possible that they are worse than the upstream
    ones. In the last 20 years it did not provide any way to upstream
    the changes and translations. The upstream translations got another
    20 years of development. Also Desktop Categories specification was
    updated, and the upstream specification now covers all aspects of
    former X-SuSE-* Categories extensions.
  * As a result, the SUSE desktop menu experience differs from other
    vendors. Applications have a different name, different translations,
    different placement in the structured menu etc.
  * Upstream translations have a wider impact.
  * Package maintainers have only a limited control over the contents
    visible to users. It is imported during the runtime, and the visible
    contents could be different from the contents in the package.
  * update-desktop-files is a complicated tool. It attempts to fix
    deprecated and obsolete stuff in the desktop files without even
    informing the developer that something was wrong and something was
    modified.
  * It uses a very complicated toolchain that requires access to SUSE
    intranet and access to OpenQA VPN. The complete toolchain setup was
    never published, so it has even problems with Open Source ideas.
  * It mixes SUSE-unique translations with translations that just
    duplicate the upstream translation effort. As a result it significantly
    increases number of strings to translate and decreases the quality of
    the translation.
  (jsc#PED-14507)

OBS-URL: https://build.opensuse.org/package/show/M17N/fontforge?expand=0&rev=105
2026-01-25 08:58:13 +00:00
db5adaf196 Accepting request 1319020 from M17N
OBS-URL: https://build.opensuse.org/request/show/1319020
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/fontforge?expand=0&rev=63
2025-11-24 13:09:27 +00:00
f7d6efac46 Update the changelog, add security bugID for previous update fixed (CVE-2025-50949, bsc#1252652)
OBS-URL: https://build.opensuse.org/package/show/M17N/fontforge?expand=0&rev=103
2025-11-21 09:43:37 +00:00
f63f19c0d2 Accepting request 1311056 from M17N
OBS-URL: https://build.opensuse.org/request/show/1311056
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/fontforge?expand=0&rev=62
2025-10-14 16:06:00 +00:00
9afcf38820 - Update to version 20251009
* Update documentation for py scripts (#5180)
  * Update GitHub CI runners (#5328)
  * Update po files from Croudin sources. (#5330)
  * Use consistent Python in MacOS GitHub runner (#5331)
  * Fix CI for Windows GitHub runner (#5335)
  * Fix lookup flags parsing (#5338)
  * Fixes (#5332): glyph file names uXXXXX (#5333)
  * make harmonization robust and avoid zero handles after harmonization (#5262)
  * Quiet strict prototypes warnings. (#5313)
  * Fix crash in parsegvar() due to insufficient buffer (#5339)
  * Handle failed iconv conversion. Unhandled execution path was UB, causing a segfault for me (#5329)
  * Fix CMake function _get_git_version() (#5342)
  * Don't require individual tuple encapsulation in fontforge.font.bitmapSizes setter (#5138)
  * nltransform of anchor points (#5345)
  * Fix generateFontPostHook being called instead of generateFontPreHook (#5226)
  * Always set usDefaultChar to 0 (.notdef) (#5242)
  * add font attributes, method to Python docs (#5353)
  * fix segfault triggered by Python del c[i:j] (#5352)
  * Autoselect internal WOFF2 format (#5346)
  * 📝 Fix typos in the FAQ (#5355)
  * add font.style_set_names attribute to Python API (#5354)
  * Bulk tester (#5365)
  * Fix Splinefont shell invocation (#5367)
  * Fix the lists of Windows language IDs (#5359)
  * Support suplementary planes in SFD (emojis etc.) (#5364)
  * Remove psaltnames for multi-code-point names (#5305)
  * doc: added missing sudo to installation instructions (#5300)
  * Fix data corruption on SFD reading (#5380)
  * Compare vertical metrics check when generating TTC (#5372)
  * Treat FT_PIXEL_MODE_MONO as 2 grey levels (#5379)
  * Don't attempt to copy anchors into NULL font (#5405)
  * Fix export of supplementary plane characters in font name to TTF (#5396)
  * Defer crowdin update to the end of the pipeline (#5409)
  * Fix generated feature file bugs (#5384)
  * crowdin: update to java 17 (#5447)
  * Remove assert from Python script processor (#5410)
  * Use sysconfig for Python module locations (#5423)
  * Use PyConfig API on Python 3.8 (#5404)
  * Fix resource leak in unParseTTInstrs (#5476)
  * Only install GUI-specific files if ENABLE_GUI is set (#5451)
  * add math device tables to Python API (#5348)
  * Update CI runner to macOS 13 (#5482)
  * Allow hyphen and special characters in Feature File glyph names (#5358)
  * Fix Python font.appendSFNTName() function (#5494)
  * fix memleak in function DlgCreate8 (#5491)
  * Update mm.c (#5386)
  * Warning rollup (probably some hidden bugs!) from clang trunk (#5492)
  * Fix function PyFFFont_addSmallCaps. (#5519)
  * Make SmallCaps() create symbols (#5517)
  * Segfault fix and complete implementation of "Don't generate FFTM tables" (#5509)
  * Modernize fixed pitch flag computation (#5506)
  * fix memleak in function utf7toutf8_copy (#5495)
  * Avoid crashes in Python scripts when objects are accessed in invalid state (#5483)
  * Fix CI for Ubuntu 24 (#5531)
  * Bump GitHub CI runner to Ubuntu 22 (#5551)
  * Fix memory corruption in SFUnicodeRanges() (#5537)
  * Add contour draw option to H.Metrics. (#5496)
  * Fix scaling of references in CharView (#5558)
  * Fix TTF validation on load for fixed pitch fonts (#5562)
  * Performance fixes for GSUB/GPOS dumps (#5547)
  * Simple GTK-based dialog with CSS appearance support (#5546)
  * Support Harfbuzz in Metrics View (#5522)
  * Update po files from crowdin translations (#5575)
  * Be more clever about label text in gtextfield (#5583)
  * Add minimal support for GDEF version 1.3 (#5584)
  * Sanitize messages from python (#5589)
  * Fix a crash caused by deleting a glyph with vertical kerning pairs. (#5592)
  * THEME -> GUI_THEME (#5596)
  * Update po translations from Crowdin (#5593)
  * Upgrade to Unicode 16.0.0 (#5594)
  * Fix Linux AppImage (#5599)
  * Upgrade to Unicode 17.0.0 and extend the language and script lists (#5618)
  * Remove X11 and non-Cairo drawing backends (#5612)
  * Add macOS dependency setup script (#5563)
  * Fix hotkeys in BitmapView (#5626)
  * Manually install Inno Setup 6 (#5621)
  * Remove cv->back_img_out_of_date and cv->backimgs (#5625)
  * fix spelling "bt" -> "but" (#5636)
  * Fix typos in Python module docs (#5634)
  * October 2025 release (#5632)

OBS-URL: https://build.opensuse.org/package/show/M17N/fontforge?expand=0&rev=101
2025-10-13 09:58:05 +00:00
45a14c5410 Accepting request 1280084 from M17N
- Update to version 20230101+git59.770356c9b:
  * Add contour draw option to H.Metrics. (#5496)
  * Fix memory corruption in SFUnicodeRanges() (#5537)
  * Bump GitHub CI runner to Ubuntu 22 (#5551)
  * Fix CI for Ubuntu 24 (#5531)
  * Avoid crashes in Python scripts when objects are accessed in
    invalid state (#5483)
  * fix memleak in function utf7toutf8_copy (#5495)
  * Modernize fixed pitch flag computation (#5506)
  * Segfault fix and complete implementation of "Don't generate
    FFTM tables" (#5509)
  * Make SmallCaps() translate symbols, too.  Update
    documentation accordingly. (#5517)
  * Fix function PyFFFont_addSmallCaps. (#5519)
  * Warning rollup (probably some hidden bugs!) from clang trunk
    (#5492)
  * Update mm.c (#5386)
  * fix memleak in function DlgCreate8 (#5491)
  * Fix Python font.appendSFNTName() function (#5494)
  * Allow hyphen and special characters in Feature File glyph names
    (#5358)
  * Update CI runner to macOS 13 (#5482)
  * add math device tables to Python API (#5348)
  * Only install GUI-specific files if ENABLE_GUI is set (#5451)
  * Fix resource leak in unParseTTInstrs (#5476)
  * Use PyConfig API on Python 3.8 (#5404)
  * Use sysconfig for Python module locations (#5423)
  * More crowdin fix
  * Python script shall trigger no asserts (#5410)
  * crowdin: update to java 17 (#5447)

OBS-URL: https://build.opensuse.org/request/show/1280084
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/fontforge?expand=0&rev=61
2025-05-27 16:49:52 +00:00
b0f8261351 Fix changelog
OBS-URL: https://build.opensuse.org/package/show/M17N/fontforge?expand=0&rev=99
2025-05-26 08:22:59 +00:00
b121b60891 - Update to version 20230101+git59.770356c9b:
* Add contour draw option to H.Metrics. (#5496)
  * Fix memory corruption in SFUnicodeRanges() (#5537)
  * Bump GitHub CI runner to Ubuntu 22 (#5551)
  * Fix CI for Ubuntu 24 (#5531)
  * Avoid crashes in Python scripts when objects are accessed in
    invalid state (#5483)
  * fix memleak in function utf7toutf8_copy (#5495)
  * Modernize fixed pitch flag computation (#5506)
  * Segfault fix and complete implementation of "Don't generate
    FFTM tables" (#5509)
  * Make SmallCaps() translate symbols, too.  Update
    documentation accordingly. (#5517)
  * Fix function PyFFFont_addSmallCaps. (#5519)
  * Warning rollup (probably some hidden bugs!) from clang trunk
    (#5492)
  * Update mm.c (#5386)
  * fix memleak in function DlgCreate8 (#5491)
  * Fix Python font.appendSFNTName() function (#5494)
  * Allow hyphen and special characters in Feature File glyph names
    (#5358)
  * Update CI runner to macOS 13 (#5482)
  * add math device tables to Python API (#5348)
  * Only install GUI-specific files if ENABLE_GUI is set (#5451)
  * Fix resource leak in unParseTTInstrs (#5476)
  * Use PyConfig API on Python 3.8 (#5404)
  * Use sysconfig for Python module locations (#5423)
  * More crowdin fix
  * Python script shall trigger no asserts (#5410)
  * crowdin: update to java 17 (#5447)

OBS-URL: https://build.opensuse.org/package/show/M17N/fontforge?expand=0&rev=98
2025-05-26 08:06:35 +00:00
b99dde5e8f Accepting request 1268125 from M17N
OBS-URL: https://build.opensuse.org/request/show/1268125
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/fontforge?expand=0&rev=60
2025-04-10 19:57:44 +00:00
e77432f38d Add bugID to previous update log, Move help to gutils helps to avoid not validate strings before launching issue. (CVE-2017-17521, bsc#1073014)
OBS-URL: https://build.opensuse.org/package/show/M17N/fontforge?expand=0&rev=96
2025-04-09 10:36:05 +00:00

View File

@@ -185,9 +185,17 @@ Sun Oct 12 13:02:51 UTC 2025 - MihailJP <mihailjp@gmail.com>
* fix spelling "bt" -> "but" (#5636)
* Fix typos in Python module docs (#5634)
* October 2025 release (#5632)
* fix memleak in function DlgCreate8 (#5491)
* fix memleak in function DlgCreate8 (#5491).
Remove da98987f.patch.
(CVE-2025-50949, bsc#1252652)
-------------------------------------------------------------------
Fri Oct 10 12:18:21 UTC 2025 - Cliff Zhao <qzhao@suse.com>
- Add da98987f.patch:
Backport da98987f from upstream, fix memleak in function DlgCreate8.
(CVE-2025-50949, bsc#1252652)
-------------------------------------------------------------------
Mon May 26 06:39:39 UTC 2025 - Antonio Larrosa <alarrosa@suse.com>