Hello, this email is a notification from the Auto Upgrade Helper that the automatic attempt to upgrade the recipe(s) *harfbuzz* to *14.5.1* has Succeeded.
Next steps:
- apply the patch: git am 0001-harfbuzz-upgrade-14.5.0-14.5.1.patch
- check the changes to upstream patches and summarize them in the commit
message,
- compile an image that contains the package
- perform some basic sanity tests
- amend the patch and sign it off: git commit -s --reset-author --amend
- send it to the appropriate mailing list
Alternatively, if you believe the recipe should not be upgraded at this time,
you can fill RECIPE_NO_UPDATE_REASON in respective recipe file so that
automatic upgrades would no longer be attempted.
Please review the attached files for further information and build/update
failures.
Any problem please file a bug at
https://bugzilla.yoctoproject.org/enter_bug.cgi?product=Automated%20Update%20Handler
Regards,
The Upgrade Helper
-- >8 --
>From cc1bd71f146542e1d3003495b7106ced1fe062e2 Mon Sep 17 00:00:00 2001
From: Upgrade Helper <[email protected]>
Date: Thu, 1 Oct 2026 06:11:55 +0000
Subject: [PATCH] harfbuzz: upgrade 14.5.0 -> 14.5.1
Overview of changes leading to 14.5.1
Thursday, October 1, 2026
=====================================
- Map the `fonupa` (Uralic Phonetic Alphabet) BCP 47 variant to the `UPPH`
OpenType language system tag.
- Produce smaller `cmap` subtables and drop no-op variation device tables when
subsetting.
- Fix possible deadlock in `hb_font_destroy()` after `hb_ft_font_set_funcs()`,
a regression from 14.5.0.
- Fix signed integer overflows when scaling glyph extents and applying
synthetic slant and emboldening.
- Fix float-to-int overflow in `VARC` component axis coordinates with
malformed fonts.
- Fix a memory leak in the experimental WebAssembly shaper when shaping with
features.
- Fix accumulator overflows in the experimental raster library when rendering
glyphs with very many overlapping edges.
- Fix heap buffer overflow in the experimental GPU library with malicious
`COLR` fonts.
- Various build and CI fixes.
---
.../harfbuzz/{harfbuzz_14.5.0.bb => harfbuzz_14.5.1.bb} | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
rename meta/recipes-graphics/harfbuzz/{harfbuzz_14.5.0.bb =>
harfbuzz_14.5.1.bb} (96%)
diff --git a/meta/recipes-graphics/harfbuzz/harfbuzz_14.5.0.bb
b/meta/recipes-graphics/harfbuzz/harfbuzz_14.5.1.bb
similarity index 96%
rename from meta/recipes-graphics/harfbuzz/harfbuzz_14.5.0.bb
rename to meta/recipes-graphics/harfbuzz/harfbuzz_14.5.1.bb
index 438aa23133..d10f1bfa01 100644
--- a/meta/recipes-graphics/harfbuzz/harfbuzz_14.5.0.bb
+++ b/meta/recipes-graphics/harfbuzz/harfbuzz_14.5.1.bb
@@ -9,7 +9,7 @@ LIC_FILES_CHKSUM =
"file://COPYING;md5=b98429b8e8e3c2a67cfef01e99e4893d \
"
SRC_URI = "${GITHUB_BASE_URI}/download/${PV}/${BPN}-${PV}.tar.xz"
-SRC_URI[sha256sum] =
"b7132e148358a45185c9feafd049dbaf243649d3c44414b3534d9c95d18592b9"
+SRC_URI[sha256sum] =
"7e2fa4e8c7c98e8d8140671f5772542afaaa6acccfbd746506886b6d85f7f8d6"
inherit meson pkgconfig lib_package gtk-doc gobject-introspection
github-releases
--
2.47.1
packages/x86-64-v3-poky-linux/harfbuzz/harfbuzz-cairo: FILELIST: removed "/usr/lib/libharfbuzz-cairo.so.0.61450.0", added "/usr/lib/libharfbuzz-cairo.so.0.61451.0" packages/x86-64-v3-poky-linux/harfbuzz/harfbuzz-gobject: FILELIST: removed "/usr/lib/libharfbuzz-gobject.so.0.61450.0", added "/usr/lib/libharfbuzz-gobject.so.0.61451.0" packages/x86-64-v3-poky-linux/harfbuzz/harfbuzz-icu: FILELIST: removed "/usr/lib/libharfbuzz-icu.so.0.61450.0", added "/usr/lib/libharfbuzz-icu.so.0.61451.0" packages/x86-64-v3-poky-linux/harfbuzz/harfbuzz-subset: FILELIST: removed "/usr/lib/libharfbuzz-subset.so.0.61450.0", added "/usr/lib/libharfbuzz-subset.so.0.61451.0" packages/x86-64-v3-poky-linux/harfbuzz/harfbuzz: FILELIST: removed "/usr/lib/libharfbuzz.so.0.61450.0", added "/usr/lib/libharfbuzz.so.0.61451.0" Changes to packages/x86-64-v3-poky-linux/harfbuzz (sysroot): /usr/lib/libharfbuzz-cairo.so.0 changed symlink target from libharfbuzz-cairo.so.0.61450.0 to libharfbuzz-cairo.so.0.61451.0 /usr/lib/libharfbuzz-gobject.so.0 changed symlink target from libharfbuzz-gobject.so.0.61450.0 to libharfbuzz-gobject.so.0.61451.0 /usr/lib/libharfbuzz-icu.so.0 changed symlink target from libharfbuzz-icu.so.0.61450.0 to libharfbuzz-icu.so.0.61451.0 /usr/lib/libharfbuzz.so.0 changed symlink target from libharfbuzz.so.0.61450.0 to libharfbuzz.so.0.61451.0 /usr/lib/libharfbuzz-subset.so.0 changed symlink target from libharfbuzz-subset.so.0.61450.0 to libharfbuzz-subset.so.0.61451.0 /usr/lib/libharfbuzz-cairo.so.0.61450.0 moved to /usr/lib/libharfbuzz-cairo.so.0.61451.0 /usr/lib/libharfbuzz-gobject.so.0.61450.0 moved to /usr/lib/libharfbuzz-gobject.so.0.61451.0 /usr/lib/libharfbuzz-icu.so.0.61450.0 moved to /usr/lib/libharfbuzz-icu.so.0.61451.0 /usr/lib/libharfbuzz.so.0.61450.0 moved to /usr/lib/libharfbuzz.so.0.61451.0 /usr/lib/libharfbuzz-subset.so.0.61450.0 moved to /usr/lib/libharfbuzz-subset.so.0.61451.0
0001-harfbuzz-upgrade-14.5.0-14.5.1.patch
Description: Binary data
Overview of changes leading to 14.5.1 Thursday, October 1, 2026 ===================================== - Map the `fonupa` (Uralic Phonetic Alphabet) BCP 47 variant to the `UPPH` OpenType language system tag. - Produce smaller `cmap` subtables and drop no-op variation device tables when subsetting. - Fix possible deadlock in `hb_font_destroy()` after `hb_ft_font_set_funcs()`, a regression from 14.5.0. - Fix signed integer overflows when scaling glyph extents and applying synthetic slant and emboldening. - Fix float-to-int overflow in `VARC` component axis coordinates with malformed fonts. - Fix a memory leak in the experimental WebAssembly shaper when shaping with features. - Fix accumulator overflows in the experimental raster library when rendering glyphs with very many overlapping edges. - Fix heap buffer overflow in the experimental GPU library with malicious `COLR` fonts. - Various build and CI fixes.
packages/x86-64-v3-poky-linux/harfbuzz/harfbuzz-bin: PKGV changed from 14.5.0 [default] to 14.5.1 [default] packages/x86-64-v3-poky-linux/harfbuzz/harfbuzz-bin: PV changed from "14.5.0" to "14.5.1" packages/x86-64-v3-poky-linux/harfbuzz/harfbuzz-cairo: PKGV changed from 14.5.0 [default] to 14.5.1 [default] packages/x86-64-v3-poky-linux/harfbuzz/harfbuzz-cairo: PV changed from "14.5.0" to "14.5.1" packages/x86-64-v3-poky-linux/harfbuzz/harfbuzz-cairo: FILES: removed "/usr/lib/libharfbuzz-cairo.so.0.61450.0", added "/usr/lib/libharfbuzz-cairo.so.0.61451.0" packages/x86-64-v3-poky-linux/harfbuzz/harfbuzz-cairo: FILELIST: removed "/usr/lib/libharfbuzz-cairo.so.0.61450.0", added "/usr/lib/libharfbuzz-cairo.so.0.61451.0" packages/x86-64-v3-poky-linux/harfbuzz/harfbuzz-dbg: PKGV changed from 14.5.0 [default] to 14.5.1 [default] packages/x86-64-v3-poky-linux/harfbuzz/harfbuzz-dbg: PV changed from "14.5.0" to "14.5.1" packages/x86-64-v3-poky-linux/harfbuzz/harfbuzz-dbg: FILELIST: removed "/usr/lib/.debug/libharfbuzz-icu.so.0.61450.0 /usr/lib/.debug/libharfbuzz-gobject.so.0.61450.0 /usr/lib/.debug/libharfbuzz-cairo.so.0.61450.0 /usr/lib/.debug/libharfbuzz-subset.so.0.61450.0 /usr/lib/.debug/libharfbuzz.so.0.61450.0", added "/usr/lib/.debug/libharfbuzz-gobject.so.0.61451.0 /usr/lib/.debug/libharfbuzz-icu.so.0.61451.0 /usr/lib/.debug/libharfbuzz-cairo.so.0.61451.0 /usr/lib/.debug/libharfbuzz-subset.so.0.61451.0 /usr/lib/.debug/libharfbuzz.so.0.61451.0" packages/x86-64-v3-poky-linux/harfbuzz/harfbuzz-dbg: PKGSIZE changed from 97929352 to 97890400 (-0%) packages/x86-64-v3-poky-linux/harfbuzz/harfbuzz-dev: PKGV changed from 14.5.0 [default] to 14.5.1 [default] packages/x86-64-v3-poky-linux/harfbuzz/harfbuzz-dev: PV changed from "14.5.0" to "14.5.1" packages/x86-64-v3-poky-linux/harfbuzz/harfbuzz-doc: PKGV changed from 14.5.0 [default] to 14.5.1 [default] packages/x86-64-v3-poky-linux/harfbuzz/harfbuzz-doc: PV changed from "14.5.0" to "14.5.1" packages/x86-64-v3-poky-linux/harfbuzz/harfbuzz-gobject: PKGV changed from 14.5.0 [default] to 14.5.1 [default] packages/x86-64-v3-poky-linux/harfbuzz/harfbuzz-gobject: PV changed from "14.5.0" to "14.5.1" packages/x86-64-v3-poky-linux/harfbuzz/harfbuzz-gobject: FILES: removed "/usr/lib/libharfbuzz-gobject.so.0.61450.0", added "/usr/lib/libharfbuzz-gobject.so.0.61451.0" packages/x86-64-v3-poky-linux/harfbuzz/harfbuzz-gobject: FILELIST: removed "/usr/lib/libharfbuzz-gobject.so.0.61450.0", added "/usr/lib/libharfbuzz-gobject.so.0.61451.0" packages/x86-64-v3-poky-linux/harfbuzz/harfbuzz-icu: PKGV changed from 14.5.0 [default] to 14.5.1 [default] packages/x86-64-v3-poky-linux/harfbuzz/harfbuzz-icu: PV changed from "14.5.0" to "14.5.1" packages/x86-64-v3-poky-linux/harfbuzz/harfbuzz-icu: FILES: removed "/usr/lib/libharfbuzz-icu.so.0.61450.0", added "/usr/lib/libharfbuzz-icu.so.0.61451.0" packages/x86-64-v3-poky-linux/harfbuzz/harfbuzz-icu: FILELIST: removed "/usr/lib/libharfbuzz-icu.so.0.61450.0", added "/usr/lib/libharfbuzz-icu.so.0.61451.0" packages/x86-64-v3-poky-linux/harfbuzz/harfbuzz-locale: PKGV changed from 14.5.0 [default] to 14.5.1 [default] packages/x86-64-v3-poky-linux/harfbuzz/harfbuzz-locale: PV changed from "14.5.0" to "14.5.1" packages/x86-64-v3-poky-linux/harfbuzz/harfbuzz-src: PKGV changed from 14.5.0 [default] to 14.5.1 [default] packages/x86-64-v3-poky-linux/harfbuzz/harfbuzz-src: PV changed from "14.5.0" to "14.5.1" packages/x86-64-v3-poky-linux/harfbuzz/harfbuzz-src: FILELIST: directory renamed /usr/src/debug/harfbuzz/14.5.0/src/OT/Color/CBDT -> /usr/src/debug/harfbuzz/14.5.1/src/OT/Color/CBDT, directory renamed /usr/src/debug/harfbuzz/14.5.0/src/OT/Color/CPAL -> /usr/src/debug/harfbuzz/14.5.1/src/OT/Color/CPAL, directory renamed /usr/src/debug/harfbuzz/14.5.0/src -> /usr/src/debug/harfbuzz/14.5.1/src, directory renamed /usr/src/debug/harfbuzz/14.5.0/src/OT/Color/COLR -> /usr/src/debug/harfbuzz/14.5.1/src/OT/Color/COLR, directory renamed /usr/src/debug/harfbuzz/14.5.0/src/OT/glyf -> /usr/src/debug/harfbuzz/14.5.1/src/OT/glyf, directory renamed /usr/src/debug/harfbuzz/14.5.0/src/OT/Layout/GPOS -> /usr/src/debug/harfbuzz/14.5.1/src/OT/Layout/GPOS, directory renamed /usr/src/debug/harfbuzz/14.5.0/src/OT/Var/VARC -> /usr/src/debug/harfbuzz/14.5.1/src/OT/Var/VARC, directory renamed /usr/src/debug/harfbuzz/14.5.0/src/OT/name -> /usr/src/debug/harfbuzz/14.5.1/src/OT/name, directory renamed /usr/src/de bug/harfbuzz/14.5.0/src/OT/Color/sbix -> /usr/src/debug/harfbuzz/14.5.1/src/OT/Color/sbix, directory renamed /usr/src/debug/harfbuzz/14.5.0/src/graph -> /usr/src/debug/harfbuzz/14.5.1/src/graph, directory renamed /usr/src/debug/harfbuzz/14.5.0/src/OT/Color/svg -> /usr/src/debug/harfbuzz/14.5.1/src/OT/Color/svg, directory renamed /usr/src/debug/harfbuzz/14.5.0/src/OT/Layout/Common -> /usr/src/debug/harfbuzz/14.5.1/src/OT/Layout/Common, directory renamed /usr/src/debug/harfbuzz/14.5.0/src/OT/Layout -> /usr/src/debug/harfbuzz/14.5.1/src/OT/Layout, directory renamed /usr/src/debug/harfbuzz/14.5.0/src/OT/Layout/GSUB -> /usr/src/debug/harfbuzz/14.5.1/src/OT/Layout/GSUB, directory renamed /usr/src/debug/harfbuzz/14.5.0/src/OT/Layout/GDEF -> /usr/src/debug/harfbuzz/14.5.1/src/OT/Layout/GDEF, directory renamed /usr/src/debug/harfbuzz/14.5.0/util -> /usr/src/debug/harfbuzz/14.5.1/util packages/x86-64-v3-poky-linux/harfbuzz/harfbuzz-src: PKGSIZE changed from 5711926 to 5714639 (+0%) packages/x86-64-v3-poky-linux/harfbuzz/harfbuzz-staticdev: PKGV changed from 14.5.0 [default] to 14.5.1 [default] packages/x86-64-v3-poky-linux/harfbuzz/harfbuzz-staticdev: PV changed from "14.5.0" to "14.5.1" packages/x86-64-v3-poky-linux/harfbuzz/harfbuzz-subset: PKGV changed from 14.5.0 [default] to 14.5.1 [default] packages/x86-64-v3-poky-linux/harfbuzz/harfbuzz-subset: PV changed from "14.5.0" to "14.5.1" packages/x86-64-v3-poky-linux/harfbuzz/harfbuzz-subset: FILES: removed "/usr/lib/libharfbuzz-subset.so.0.61450.0", added "/usr/lib/libharfbuzz-subset.so.0.61451.0" packages/x86-64-v3-poky-linux/harfbuzz/harfbuzz-subset: FILELIST: removed "/usr/lib/libharfbuzz-subset.so.0.61450.0", added "/usr/lib/libharfbuzz-subset.so.0.61451.0" packages/x86-64-v3-poky-linux/harfbuzz/harfbuzz-subset: PKGSIZE changed from 1091751 to 1087655 (-0%) packages/x86-64-v3-poky-linux/harfbuzz/harfbuzz: PKGV changed from 14.5.0 [default] to 14.5.1 [default] packages/x86-64-v3-poky-linux/harfbuzz/harfbuzz: PV changed from "14.5.0" to "14.5.1" packages/x86-64-v3-poky-linux/harfbuzz/harfbuzz: FILELIST: removed "/usr/lib/libharfbuzz.so.0.61450.0", added "/usr/lib/libharfbuzz.so.0.61451.0" packages/x86-64-v3-poky-linux/harfbuzz: PKGV changed from 14.5.0 [default] to 14.5.1 [default] packages/x86-64-v3-poky-linux/harfbuzz: SRC_URI changed from "https://github.com/harfbuzz/harfbuzz/releases//download/14.5.0/harfbuzz-14.5.0.tar.xz"; to "https://github.com/harfbuzz/harfbuzz/releases//download/14.5.1/harfbuzz-14.5.1.tar.xz"; packages/x86-64-v3-poky-linux/harfbuzz: PV changed from "14.5.0" to "14.5.1" Changes to packages/x86-64-v3-poky-linux/harfbuzz (sysroot): /usr/lib/libharfbuzz-cairo.so.0 changed symlink target from libharfbuzz-cairo.so.0.61450.0 to libharfbuzz-cairo.so.0.61451.0 /usr/lib/libharfbuzz-gobject.so.0 changed symlink target from libharfbuzz-gobject.so.0.61450.0 to libharfbuzz-gobject.so.0.61451.0 /usr/lib/libharfbuzz-icu.so.0 changed symlink target from libharfbuzz-icu.so.0.61450.0 to libharfbuzz-icu.so.0.61451.0 /usr/lib/libharfbuzz.so.0 changed symlink target from libharfbuzz.so.0.61450.0 to libharfbuzz.so.0.61451.0 /usr/lib/libharfbuzz-subset.so.0 changed symlink target from libharfbuzz-subset.so.0.61450.0 to libharfbuzz-subset.so.0.61451.0 /usr/lib/libharfbuzz-cairo.so.0.61450.0 moved to /usr/lib/libharfbuzz-cairo.so.0.61451.0 /usr/lib/libharfbuzz-gobject.so.0.61450.0 moved to /usr/lib/libharfbuzz-gobject.so.0.61451.0 /usr/lib/libharfbuzz-icu.so.0.61450.0 moved to /usr/lib/libharfbuzz-icu.so.0.61451.0 /usr/lib/libharfbuzz.so.0.61450.0 moved to /usr/lib/libharfbuzz.so.0.61451.0 /usr/lib/libharfbuzz-subset.so.0.61450.0 moved to /usr/lib/libharfbuzz-subset.so.0.61451.0
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#247007): https://lists.openembedded.org/g/openembedded-core/message/247007 Mute This Topic: https://lists.openembedded.org/mt/121522859/21656 Group Owner: [email protected] Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
