buildroot

harfbuzz: security bump to version 1.4.4

Fixes a buffer-overrun in Bengali.
Switch to https URL to avoid a small delay in protocol redirection.

Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
(cherry picked from commit 7bbdd9afa4fa1014fdb050c1437d6cd90ca3a44a)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>