Accepting request 986441 from home:AndreasStieger:branches:GNOME:Factory

harfbuzz 4.4.1 CVE-2022-33068 boo#1200900

OBS-URL: https://build.opensuse.org/request/show/986441
OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/harfbuzz?expand=0&rev=215

harfbuzz-4.3.0.tar.xz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:a49628f4c4c8e6d8df95ef44935a93446cf2e46366915b0e3ca30df21fffb530
-size 15036020

harfbuzz-4.4.1.tar.xz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:c5bc33ac099b2e52f01d27cde21cee4281b9d5bfec7684135e268512478bc9ee
+size 15113152

harfbuzz.changes

@@ -1,3 +1,28 @@
+-------------------------------------------------------------------
+Sun Jul  3 09:33:36 UTC 2022 - Andreas Stieger <andreas.stieger@gmx.de>
+
+- harfbuzz 4.4.1:
+  + Fix test failure with some compilers
+  + Fix Telugu and Kannada kerning regression
+- includes changes from 4.4.0:
+  + Caching of variable fonts shaping
+  + Caching of format 2 “Contextual Substitution” and “Chained
+    Contexts Substitution” lookups
+  + Improved ANSI output from hb-view
+  + Support for shaping legacy, pre-OpenType, Windows 3.1-era,
+    Arabic fonts that relied on a fixed PUA encoding
+  + Sinhala script is now shaped by the USE shaper instead of
+    “indic” one
+  + Thai shaper improvements
+  + hb-ot-name API supports approximate BCP-47 language matching,
+    for example asking for “en_US” in a font that has only “en”
+    names will return them
+  + Optimized TrueType glyph shape loading
+  + Fix subsetting of HarfBuzz faces created via
+    hb_face_create_for_tables()
+  + Add 32 bit var store support to the subsetter
+  + CVE-2022-33068: overflow in hb-ot-shape-fallback boo#1200900
+
 -------------------------------------------------------------------
 Sat May 21 08:10:59 UTC 2022 - Andreas Stieger <andreas.stieger@gmx.de>
 

harfbuzz.spec

@@ -17,7 +17,7 @@
 
 
 Name:           harfbuzz
-Version:        4.3.0
+Version:        4.4.1
 Release:        0
 Summary:        An OpenType text shaping engine
 License:        MIT