CMakeLists.txt | 1 0 + 1 - 0 !
1 file changed, 1 deletion(-)

 remove custom library search path (rpath/runpath)
 This reverts upstream's preference of setting RPATH/RUNPATH for
 installed binaries.  Fixes Lintian custom-library-search-path error.

doc/sphinx/conf.py | 2 2 + 0 - 0 !
1 file changed, 2 insertions(+)

 use packaged copy of mathjax from libjs-mathjax
 FontForge documentation uses sphinx.ext.mathjax which insert script links
 to MathJax served on remote CDNs.
 .
 This patch, together with debian/fontforge-doc.links, replaces remote
 scripts with MathJax from the libjs-mathjax package.
 See https://bugs.debian.org/739300 for discussion.
 .
 Fixes Lintian privacy-breach-generic warnings.

doc/sphinx/appendices/bibliography.rst | 4 2 + 2 - 0 !
1 file changed, 2 insertions(+), 2 deletions(-)

 avoid links in html documents potentially breaching privacy

Replace potential tracking image URLs with inline single-pixel
transparent image from
<https://css-tricks.com/snippets/html/base64-encode-of-1x1px-transparent-gif/>.

Strip hardcoded host from demo form.

doc/sphinx/olddocs/old/ja/bibliography.html | 2 0 + 2 - 0 !
doc/sphinx/olddocs/old/ja/index.html | 11 1 + 10 - 0 !
doc/sphinx/olddocs/old/ja/pfaeditchangelog.html | 3 1 + 2 - 0 !
3 files changed, 2 insertions(+), 14 deletions(-)

 remove link to remote sourceforge logo from japanese documentation
 Also image link to upstream author George Williamss now defunct old website,
 and image link to thunbmail of  Fontes & codages  on Amazon. 
 Fixes Lintian privacy-breach-logo error.

fontforge/splinefont.c | 125 90 + 35 - 0 !
1 file changed, 90 insertions(+), 35 deletions(-)

 fix splinefont shell command injection (#5367)

po/ca.po | 17 8 + 9 - 0 !
po/de.po | 25 12 + 13 - 0 !
po/el.po | 4 2 + 2 - 0 !
po/en_GB.po | 8 5 + 3 - 0 !
po/es.po | 76 74 + 2 - 0 !
po/fr.po | 93 46 + 47 - 0 !
po/hr.po | 156 132 + 24 - 0 !
po/it.po | 12 6 + 6 - 0 !
po/ja.po | 217 177 + 40 - 0 !
po/ka_GE.po | 1231 1053 + 178 - 0 !
po/ko.po | 43 20 + 23 - 0 !
po/ml.po | 4 2 + 2 - 0 !
po/pl.po | 67 33 + 34 - 0 !
po/pt.po | 4 2 + 2 - 0 !
po/ru.po | 4 2 + 2 - 0 !
po/tr_TR.po | 4 2 + 2 - 0 !
po/uk.po | 41 20 + 21 - 0 !
po/vi.po | 428 19 + 409 - 0 !
po/zh_CN.po | 1021 858 + 163 - 0 !
po/zh_TW.po | 24 12 + 12 - 0 !
20 files changed, 2485 insertions(+), 994 deletions(-)

 update po files from croudin sources after fixing problems

Bug-Debian: https://bugs.debian.org/1074258