From e77d77810028a4f850afbb2aa16a42e05297a18621081fc3a38c7efc42138c9a Mon Sep 17 00:00:00 2001 From: Dominique Leuenberger Date: Mon, 26 Jan 2015 11:17:31 +0000 Subject: [PATCH 1/2] Accepting request 282741 from home:vuntz:branches:GNOME:Factory Update to 0.9.38 OBS-URL: https://build.opensuse.org/request/show/282741 OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/harfbuzz?expand=0&rev=58 --- harfbuzz-0.9.36.tar.bz2 | 3 --- harfbuzz-0.9.38.tar.bz2 | 3 +++ harfbuzz.changes | 24 ++++++++++++++++++++++++ harfbuzz.spec | 6 +++--- 4 files changed, 30 insertions(+), 6 deletions(-) delete mode 100644 harfbuzz-0.9.36.tar.bz2 create mode 100644 harfbuzz-0.9.38.tar.bz2 diff --git a/harfbuzz-0.9.36.tar.bz2 b/harfbuzz-0.9.36.tar.bz2 deleted file mode 100644 index 643b724..0000000 --- a/harfbuzz-0.9.36.tar.bz2 +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:3bfbf7b016167ee6b2a2f83948fef75cc1253081873d6a91022161815956b9be -size 1167900 diff --git a/harfbuzz-0.9.38.tar.bz2 b/harfbuzz-0.9.38.tar.bz2 new file mode 100644 index 0000000..9c678d4 --- /dev/null +++ b/harfbuzz-0.9.38.tar.bz2 @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:6736f383b4edfcaaeb6f3292302ca382d617d8c79948bb2dd2e8f86cdccfd514 +size 1177106 diff --git a/harfbuzz.changes b/harfbuzz.changes index 617ddca..45ac5e4 100644 --- a/harfbuzz.changes +++ b/harfbuzz.changes @@ -1,3 +1,27 @@ +------------------------------------------------------------------- +Sun Jan 25 08:33:49 UTC 2015 - vuntz@opensuse.org + +- Update to version 0.9.38: + + Fix minor out-of-bounds access in Indic shaper. + + Change New Tai Lue shaping engine from South-East Asian to + default, reflecting change in Unicode encoding model. + + Add hb-shape --font-size. Can take up to two numbers for + separate x / y size. + + Fix CoreText and FreeType scale issues with negative scales. + + Reject blobs larger than 2GB. This might break some icu-le-hb + clients that need security fixes. See: + http://www.icu-project.org/trac/ticket/11450 + + Avoid accessing font tables during face destruction, in casce + rogue clients released face data already. + + Fix up gobject-introspection a bit. + + Misc fixes. + + API additions: + hb_ft_face_create_referenced() + hb_ft_font_create_referenced() +- Changes from version 0.9.37: + + Fix out-of-bounds access in Context lookup format 3. + + Indic: Allow ZWJ/ZWNJ before syllable modifiers. + ------------------------------------------------------------------- Sat Nov 22 12:01:10 UTC 2014 - zaitor@opensuse.org diff --git a/harfbuzz.spec b/harfbuzz.spec index ed0d1bc..05e2cf6 100644 --- a/harfbuzz.spec +++ b/harfbuzz.spec @@ -1,7 +1,7 @@ # # spec file for package harfbuzz # -# Copyright (c) 2014 SUSE LINUX Products GmbH, Nuernberg, Germany. +# Copyright (c) 2015 SUSE LINUX Products GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -17,7 +17,7 @@ Name: harfbuzz -Version: 0.9.36 +Version: 0.9.38 Release: 0 Summary: An OpenType text shaping engine License: MIT @@ -28,7 +28,7 @@ Source99: baselibs.conf BuildRequires: gcc-c++ BuildRequires: pkgconfig(cairo) >= 1.8.0 BuildRequires: pkgconfig(cairo-ft) -BuildRequires: pkgconfig(freetype2) >= 2.3.8 +BuildRequires: pkgconfig(freetype2) >= 12.0.6 BuildRequires: pkgconfig(glib-2.0) >= 2.16 BuildRequires: pkgconfig(gobject-2.0) BuildRequires: pkgconfig(graphite2) From 7ce0fc042f4cd6dae4d44b8299f548305c9b7510261257a6c3b934311ea319fa Mon Sep 17 00:00:00 2001 From: Dominique Leuenberger Date: Mon, 26 Jan 2015 11:17:57 +0000 Subject: [PATCH 2/2] tweak OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/harfbuzz?expand=0&rev=59 --- harfbuzz.changes | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/harfbuzz.changes b/harfbuzz.changes index 45ac5e4..838c70d 100644 --- a/harfbuzz.changes +++ b/harfbuzz.changes @@ -11,7 +11,7 @@ Sun Jan 25 08:33:49 UTC 2015 - vuntz@opensuse.org + Reject blobs larger than 2GB. This might break some icu-le-hb clients that need security fixes. See: http://www.icu-project.org/trac/ticket/11450 - + Avoid accessing font tables during face destruction, in casce + + Avoid accessing font tables during face destruction, in case rogue clients released face data already. + Fix up gobject-introspection a bit. + Misc fixes.