From 1a8dff193b1d12ea3832548507e9400c32f97ccafae9a6980d8a17fd828dbb04 Mon Sep 17 00:00:00 2001
From: Dominique Leuenberger <dimstar@opensuse.org>
Date: Mon, 4 Jul 2022 09:14:24 +0000
Subject: [PATCH] Accepting request 986441 from
 home:AndreasStieger:branches:GNOME:Factory

harfbuzz 4.4.1 CVE-2022-33068 boo#1200900

OBS-URL: https://build.opensuse.org/request/show/986441
OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/harfbuzz?expand=0&rev=215
---
 harfbuzz-4.3.0.tar.xz |  3 ---
 harfbuzz-4.4.1.tar.xz |  3 +++
 harfbuzz.changes      | 25 +++++++++++++++++++++++++
 harfbuzz.spec         |  2 +-
 4 files changed, 29 insertions(+), 4 deletions(-)
 delete mode 100644 harfbuzz-4.3.0.tar.xz
 create mode 100644 harfbuzz-4.4.1.tar.xz

diff --git a/harfbuzz-4.3.0.tar.xz b/harfbuzz-4.3.0.tar.xz
deleted file mode 100644
index 228ec0d..0000000
--- a/harfbuzz-4.3.0.tar.xz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:a49628f4c4c8e6d8df95ef44935a93446cf2e46366915b0e3ca30df21fffb530
-size 15036020
diff --git a/harfbuzz-4.4.1.tar.xz b/harfbuzz-4.4.1.tar.xz
new file mode 100644
index 0000000..5210083
--- /dev/null
+++ b/harfbuzz-4.4.1.tar.xz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:c5bc33ac099b2e52f01d27cde21cee4281b9d5bfec7684135e268512478bc9ee
+size 15113152
diff --git a/harfbuzz.changes b/harfbuzz.changes
index 8cb1f24..ff00375 100644
--- a/harfbuzz.changes
+++ b/harfbuzz.changes
@@ -1,3 +1,28 @@
+-------------------------------------------------------------------
+Sun Jul  3 09:33:36 UTC 2022 - Andreas Stieger <andreas.stieger@gmx.de>
+
+- harfbuzz 4.4.1:
+  + Fix test failure with some compilers
+  + Fix Telugu and Kannada kerning regression
+- includes changes from 4.4.0:
+  + Caching of variable fonts shaping
+  + Caching of format 2 “Contextual Substitution” and “Chained
+    Contexts Substitution” lookups
+  + Improved ANSI output from hb-view
+  + Support for shaping legacy, pre-OpenType, Windows 3.1-era,
+    Arabic fonts that relied on a fixed PUA encoding
+  + Sinhala script is now shaped by the USE shaper instead of
+    “indic” one
+  + Thai shaper improvements
+  + hb-ot-name API supports approximate BCP-47 language matching,
+    for example asking for “en_US” in a font that has only “en”
+    names will return them
+  + Optimized TrueType glyph shape loading
+  + Fix subsetting of HarfBuzz faces created via
+    hb_face_create_for_tables()
+  + Add 32 bit var store support to the subsetter
+  + CVE-2022-33068: overflow in hb-ot-shape-fallback boo#1200900
+
 -------------------------------------------------------------------
 Sat May 21 08:10:59 UTC 2022 - Andreas Stieger <andreas.stieger@gmx.de>
 
diff --git a/harfbuzz.spec b/harfbuzz.spec
index 5146c65..3dedc52 100644
--- a/harfbuzz.spec
+++ b/harfbuzz.spec
@@ -17,7 +17,7 @@
 
 
 Name:           harfbuzz
-Version:        4.3.0
+Version:        4.4.1
 Release:        0
 Summary:        An OpenType text shaping engine
 License:        MIT