Manual merge of version 1:20190801~dfsg-4+rpi1 and 1:20201107~dfsg-2 to produce 1:20201107~dfsg-2+rpi1

Merge fontforge (1:20201107~dfsg-2) import into refs/heads/workingbranch

Remove link to remote SourceForge logo from Japanese documentation

Origin: vendor
Forwarded: not-needed
Last-Update: 2020-11-23

Also image link to upstream author George Williams’s now defunct old website,
and image link to thunbmail of « Fontes & codages » on Amazon.
Fixes Lintian privacy-breach-logo error.
Last-Update: 2020-11-23
Gbp-Pq: Name 2004-fix-privacy-breach-logo.patch

Avoid links in html documents potentially breaching privacy

Forwarded: not-needed
Last-Update: 2017-09-23

Replace potential tracking image URLs with inline single-pixel
transparent image from
<https://css-tricks.com/snippets/html/base64-encode-of-1x1px-transparent-gif/>.

Strip hardcoded host from demo form.
Last-Update: 2017-09-23

Gbp-Pq: Name 2003_avoid_privacy_breach.patch

Use packaged copy of MathJax from libjs-mathjax

Origin: vendor
Forwarded: not-needed
Last-Update: 2020-11-24

FontForge documentation uses sphinx.ext.mathjax which insert script links
to MathJax served on remote CDNs.

This patch, together with debian/fontforge-doc.links, replaces remote
scripts with MathJax from the libjs-mathjax package.
See https://bugs.debian.org/739300 for discussion.

Fixes Lintian privacy-breach-generic warnings.
Last-Update: 2020-11-24
Gbp-Pq: Name 0003-use-local-libjs-mathjax.patch

Remove custom library search path (RPATH/RUNPATH)

Origin: vendor
Forwarded: not-needed
Last-Update: 2020-11-18

This reverts upstream's preference of setting RPATH/RUNPATH for
installed binaries.  Fixes Lintian custom-library-search-path error.
Last-Update: 2020-11-18
Gbp-Pq: Name 0002-remove-custom-library-search-path.patch

Add extra CMake install rules

Origin: vendor
Forwarded: not-needed
Last-Update: 2020-11-18

for contrib/cidmap, contrib/fonttools and pycontrib to restore the
files that were installed to fontforge-extras and python3-fontforge
prior to the FontForge 2020 March Release.
Last-Update: 2020-11-18
Gbp-Pq: Name 0001-add-extra-cmake-install-rules.patch

fontforge (1:20201107~dfsg-2) unstable; urgency=medium

  * debian/libfontforge4.install: Fix incorrect path.  For example, on i386,
    /usr/bin/${DEB_HOST_GNU_TYPE} resolves to /usr/bin/i686-linux-gnu which
    does not exist on Debian, whereas /usr/bin/${DEB_HOST_MULTIARCH} correctly
    resolves to /usr/bin/i386-linux-gnu that we need (Closes: #975460)
  * debian/rules: Fix binary-indep build by adding override_dh_missing-indep
  * Add debian/python3-fontforge.lintian-overrides
    as Lintian fails to find libfontforge.so.4 (from libfontforge4 package)
    and thus raises false library-not-linked-against-libc errors
  * Update debian/libfontforge4.lintian-overrides
    to point the new location of libfontforge.so.4
  * Remove obsolete debian/libfontforge-dev.links
  * Add debian/patches/2004-fix-privacy-breach-logo.patch
    to fix Lintian privacy-breach-logo errors in the Japanese translation
    of old FontForge documentation
  * Add 0003-use-local-libjs-mathjax.patch and fontforge-doc.links
    to fix Lintian privacy-breach-generic warnings
  * Fix Lintian link-to-shared-library-in-wrong-package warning by removing
    unused usr/lib/*/libfontforge.so symlink from libfontforge4 package
  * Mark libfontforge4 and python3-fontforge "Multi-Arch: same"
    as suggested by Multiarch hinter

[dgit import unpatched fontforge 1:20201107~dfsg-2]

Import fontforge_20201107~dfsg-2.debian.tar.xz

[dgit import tarball fontforge 1:20201107~dfsg-2 fontforge_20201107~dfsg-2.debian.tar.xz]

Import fontforge_20201107~dfsg.orig.tar.xz

[dgit import orig fontforge_20201107~dfsg.orig.tar.xz]

Merge fontforge (1:20190801~dfsg-4+rpi1) import into refs/heads/workingbranch

Disable call to SplineFontFree in _MergeFont

works around use after  free bug (see debian bug 948876) at the cost of
probablly causing a memory leak.

Gbp-Pq: Name 4000-use-after-free-hack.patch

[PATCH] Deref gui initialization to after options parsing

Move GUI initialisation when running with GDK until after options
parsing.  This way, help messages, version information and so on can be
printed even when no gui is around, such as running fontforge -version
from a configure script.

Forwarded: https://github.com/fontforge/fontforge/pull/3922
Bug-Debian: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=952408
Applied-Upstream: https://github.com/fontforge/fontforge/commit/ee87536a63534bddc6535d18be793bc19294e274

Gbp-Pq: Name 3000-debian-bug-952408.patch

fix wrong xml tag

Gbp-Pq: Name 0004-fix-wrong-xml-tag.patch

ignore osx files

Gbp-Pq: Name 0003-ignore-osx-files.patch

Avoid links in html documents potentially breaching privacy

Forwarded: not-needed
Last-Update: 2017-09-23

Replace potential tracking image URLs with inline single-pixel
transparent image from
<https://css-tricks.com/snippets/html/base64-encode-of-1x1px-transparent-gif/>.

Strip hardcoded host from demo form.
Last-Update: 2017-09-23

Gbp-Pq: Name 2003_avoid_privacy_breach.patch

Avoid build tools messing with VCS or packaging

Last-Update: 2016-05-25

Last-Update: 2016-05-25

Gbp-Pq: Name 2002_avoid_upstream_git_or_pkg.patch

fontforge (1:20190801~dfsg-4+rpi1) bullseye-staging; urgency=medium

  * Disable call to SplineFontFree in _MergeFont to work around use after
    free bug (see debian bug 948876).
  * Fix clean target.

[dgit import unpatched fontforge 1:20190801~dfsg-4+rpi1]

Import fontforge_20190801~dfsg-4+rpi1.debian.tar.xz

[dgit import tarball fontforge 1:20190801~dfsg-4+rpi1 fontforge_20190801~dfsg-4+rpi1.debian.tar.xz]

Merge fontforge (1:20190801~dfsg-4) import into refs/heads/workingbranch

[PATCH] Deref gui initialization to after options parsing

Move GUI initialisation when running with GDK until after options
parsing.  This way, help messages, version information and so on can be
printed even when no gui is around, such as running fontforge -version
from a configure script.

Forwarded: https://github.com/fontforge/fontforge/pull/3922
Bug-Debian: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=952408
Applied-Upstream: https://github.com/fontforge/fontforge/commit/ee87536a63534bddc6535d18be793bc19294e274

Gbp-Pq: Name 3000-debian-bug-952408.patch

fix wrong xml tag

Gbp-Pq: Name 0004-fix-wrong-xml-tag.patch

ignore osx files

Gbp-Pq: Name 0003-ignore-osx-files.patch

Avoid links in html documents potentially breaching privacy

Forwarded: not-needed
Last-Update: 2017-09-23

Replace potential tracking image URLs with inline single-pixel
transparent image from
<https://css-tricks.com/snippets/html/base64-encode-of-1x1px-transparent-gif/>.

Strip hardcoded host from demo form.
Last-Update: 2017-09-23

Gbp-Pq: Name 2003_avoid_privacy_breach.patch

Avoid build tools messing with VCS or packaging

Last-Update: 2016-05-25

Last-Update: 2016-05-25

Gbp-Pq: Name 2002_avoid_upstream_git_or_pkg.patch

fontforge (1:20190801~dfsg-4) unstable; urgency=high

  * Team upload.
  * debian/control: Set maintainer email to new mailing list.
  * debian/control.in: Also reflect some changes in the .in file.
  * debian/rules: Fix broken dev-dep list for cdbs.
  * debian/copyright:
    + Properly set Upstream-Name and Upstream-Contact.
    + Update license information for AppStream metadata file.

[dgit import unpatched fontforge 1:20190801~dfsg-4]

Import fontforge_20190801~dfsg-4.debian.tar.xz

[dgit import tarball fontforge 1:20190801~dfsg-4 fontforge_20190801~dfsg-4.debian.tar.xz]

Import fontforge_20190801~dfsg.orig.tar.xz

[dgit import orig fontforge_20190801~dfsg.orig.tar.xz]

Avoid links in html documents potentially breaching privacy

Forwarded: not-needed
Last-Update: 2017-09-23

Replace potential tracking image URLs with inline single-pixel
transparent image from
<https://css-tricks.com/snippets/html/base64-encode-of-1x1px-transparent-gif/>.

Strip hardcoded host from demo form.
Last-Update: 2017-09-23
Gbp-Pq: Name 2003_avoid_privacy_breach.patch

Avoid build tools messing with VCS or packaging

Last-Update: 2016-05-25

Last-Update: 2016-05-25
Gbp-Pq: Name 2002_avoid_upstream_git_or_pkg.patch

Adjust build tools for repackaged upstream source

Last-Update: 2016-05-25

Last-Update: 2016-05-25
Gbp-Pq: Name 2001_repackaging_fixup.patch

fontforge (1:20170731~dfsg-1) unstable; urgency=high

  [upstream]
  * New release with number of adjustments and fixes.
    + Fixes multiple CVE's listed below.
     CVE-2017-11577, CVE-2017-11576, CVE-2017-11575, CVE-2017-11574,
     CVE-2017-11572, CVE-2017-11571, CVE-2017-11569, CVE-2017-11568.
Closes: bug#869614. Thanks to Salvatore Bonaccorso.
  [ Vasudev Kamath ]
  * Add fontforge-doc package to fontforge source.
Closes: bug#855710, bug#853040. Thanks to Hideki Yamane.
  * Simplify d-shlibs handling. Tighten to build-depend on recent d-hlibs.
  * debian/patches:
    + Drop patch 1001, merged upstream.
    + Refresh patch 2002 with new upstream files.
    + Add patch 2003 for removing SourceForge logo from documentation.
  * Update libfontforge2.symbols file for new release.
    There a lot of refactoring done by upstream without bumping major
    version.
  * Drop unused lintian-override from debian/source/lintian-override.
  * Drop wild card debian-old/* from debian/copyright. It is no longer
    available in upstream source.
  * Do not disable PIE.
Closes: bug#865601. Thanks to Adrian Bunk.
  [ Jonas Smedegaard ]
  * Add myself as uploader.
  * Update watch file: Use substitution strings.
  * Drop superfluous dh_installdirs hint files.
  * Advertise DEP-3 format in patch headers.
  * Tighten lintian overrides regarding License-Reference.
  * Tighten lintian overrides regarding long code lines.
  * Add lintian override for obsolete-url-in-packaging false positive.
  * Drop obsolete maintainer script make-clean-tarball.
  * Avoid mentioning Debian in doc-base title.
  * Update homepage.
  * Modernize Vcs-* fields:
    + Consistently use git (not cgit) in path.
    + Consistently include .git suffix in path.
  * Update copyright info:
    + Extend coverage for myself. Relince packaging to GPL-3+.
    + Merge same-licensed Files sections.
    + List graphicore code, licensed as BSD-2-clause.
    + Fix drop duplicate entries.
    + Fix list fontforge/fvimportbdf.c (same as gdraw/fontP.h) as
      licensed BSD-3-clause and X11~TOG (not BSD-3-clause).
    + Fix list files licensed BSD-3-clause in initial wildcard section.
    + Fix list files by a non-main copyright holder licensed GPL-3+.
    + Fix list files by a non-main copyright holders licensed GPL-3+
      with font exception.
    + Fix list font files.
    + Fix list files licensed GPL-2+.
    + Fix add License section for LGPL-2.1+.
    + Exclude non-DFSG free fonts from repackaged tarball.
  * Update package relations:
    + Stop conflict with defoma: Dropped before oldstable.
  * Drop breaks+replaces unneeded since oldstable.
  * Generalize and extend patch 2003 to cover more potential breaches.

[dgit import unpatched fontforge 1:20170731~dfsg-1]

Import fontforge_20170731~dfsg.orig.tar.gz

[dgit import orig fontforge_20170731~dfsg.orig.tar.gz]

Import fontforge_20170731~dfsg-1.debian.tar.xz

[dgit import tarball fontforge 1:20170731~dfsg-1 fontforge_20170731~dfsg-1.debian.tar.xz]