[PATCH] harfbuzz: upgrade 14.5.0 -> 14.5.1

[PATCH] harfbuzz: upgrade 14.5.0 -> 14.5.1

[Jennifer Chukwu]

Overview of changes leading to 14.5.1
- Map the `fonupa` (Uralic Phonetic Alphabet) BCP 47 variant to the `UPPH`
  OpenType language system tag.
- Produce smaller `cmap` subtables and drop no-op variation device tables when
  subsetting.
- Fix possible deadlock in `hb_font_destroy()` after `hb_ft_font_set_funcs()`,
  a regression from 14.5.0.
- Fix signed integer overflows when scaling glyph extents and applying
  synthetic slant and emboldening.
- Fix float-to-int overflow in `VARC` component axis coordinates with
  malformed fonts.
- Fix a memory leak in the experimental WebAssembly shaper when shaping with
  features.
- Fix accumulator overflows in the experimental raster library when rendering
  glyphs with very many overlapping edges.
- Fix heap buffer overflow in the experimental GPU library with malicious
  `COLR` fonts.
- Various build and CI fixes.

Signed-off-by: Jennifer Chukwu <jennifer.chukwu@amarulasolutions.com>
---
 .../harfbuzz/{harfbuzz_14.5.0.bb => harfbuzz_14.5.1.bb}         | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
 rename meta/recipes-graphics/harfbuzz/{harfbuzz_14.5.0.bb => harfbuzz_14.5.1.bb} (96%)

diff --git a/meta/recipes-graphics/harfbuzz/harfbuzz_14.5.0.bb b/meta/recipes-graphics/harfbuzz/harfbuzz_14.5.1.bb
similarity index 96%
rename from meta/recipes-graphics/harfbuzz/harfbuzz_14.5.0.bb
rename to meta/recipes-graphics/harfbuzz/harfbuzz_14.5.1.bb
index 438aa23133..d10f1bfa01 100644
--- a/meta/recipes-graphics/harfbuzz/harfbuzz_14.5.0.bb
+++ b/meta/recipes-graphics/harfbuzz/harfbuzz_14.5.1.bb
@@ -9,7 +9,7 @@ LIC_FILES_CHKSUM = "file://COPYING;md5=b98429b8e8e3c2a67cfef01e99e4893d \
                     "
 
 SRC_URI = "${GITHUB_BASE_URI}/download/${PV}/${BPN}-${PV}.tar.xz"
-SRC_URI[sha256sum] = "b7132e148358a45185c9feafd049dbaf243649d3c44414b3534d9c95d18592b9"
+SRC_URI[sha256sum] = "7e2fa4e8c7c98e8d8140671f5772542afaaa6acccfbd746506886b6d85f7f8d6"
 
 inherit meson pkgconfig lib_package gtk-doc gobject-introspection github-releases
 
-- 
2.43.0

Re: [OE-core] [PATCH] harfbuzz: upgrade 14.5.0 -> 14.5.1

[Michael Opdenacker]

On 10/1/26 3:50 PM, Jennifer Chukwu via lists.openembedded.org wrote:
> Overview of changes leading to 14.5.1
> - Map the `fonupa` (Uralic Phonetic Alphabet) BCP 47 variant to the `UPPH`
>    OpenType language system tag.
> - Produce smaller `cmap` subtables and drop no-op variation device tables when
>    subsetting.
> - Fix possible deadlock in `hb_font_destroy()` after `hb_ft_font_set_funcs()`,
>    a regression from 14.5.0.
> - Fix signed integer overflows when scaling glyph extents and applying
>    synthetic slant and emboldening.
> - Fix float-to-int overflow in `VARC` component axis coordinates with
>    malformed fonts.
> - Fix a memory leak in the experimental WebAssembly shaper when shaping with
>    features.
> - Fix accumulator overflows in the experimental raster library when rendering
>    glyphs with very many overlapping edges.
> - Fix heap buffer overflow in the experimental GPU library with malicious
>    `COLR` fonts.
> - Various build and CI fixes.
>
> Signed-off-by: Jennifer Chukwu <jennifer.chukwu@amarulasolutions.com>
> ---
>   .../harfbuzz/{harfbuzz_14.5.0.bb => harfbuzz_14.5.1.bb}         | 2 +-
>   1 file changed, 1 insertion(+), 1 deletion(-)
>   rename meta/recipes-graphics/harfbuzz/{harfbuzz_14.5.0.bb => harfbuzz_14.5.1.bb} (96%)
>
> diff --git a/meta/recipes-graphics/harfbuzz/harfbuzz_14.5.0.bb b/meta/recipes-graphics/harfbuzz/harfbuzz_14.5.1.bb
> similarity index 96%
> rename from meta/recipes-graphics/harfbuzz/harfbuzz_14.5.0.bb
> rename to meta/recipes-graphics/harfbuzz/harfbuzz_14.5.1.bb
> index 438aa23133..d10f1bfa01 100644
> --- a/meta/recipes-graphics/harfbuzz/harfbuzz_14.5.0.bb
> +++ b/meta/recipes-graphics/harfbuzz/harfbuzz_14.5.1.bb
> @@ -9,7 +9,7 @@ LIC_FILES_CHKSUM = "file://COPYING;md5=b98429b8e8e3c2a67cfef01e99e4893d \
>                       "
>   
>   SRC_URI = "${GITHUB_BASE_URI}/download/${PV}/${BPN}-${PV}.tar.xz"
> -SRC_URI[sha256sum] = "b7132e148358a45185c9feafd049dbaf243649d3c44414b3534d9c95d18592b9"
> +SRC_URI[sha256sum] = "7e2fa4e8c7c98e8d8140671f5772542afaaa6acccfbd746506886b6d85f7f8d6"
>   
>   inherit meson pkgconfig lib_package gtk-doc gobject-introspection github-releases

Reviewed-by: Michael Opdenacker <michael.opdenacker@rootcommit.com>
Thanks Jennifer!
Michael.