From 290391b45393585948bea1bd490d347cfbf68de2 Mon Sep 17 00:00:00 2001 From: "Tobias C. Berner" Date: Thu, 22 Oct 2020 16:19:23 +0000 Subject: [PATCH] print/freetype2: Security fix release 2.10.4 From: https://sourceforge.net/projects/freetype/files/freetype2/2.10.4/" I. IMPORTANT BUG FIXES - A heap buffer overflow has been found in the handling of embedded PNG bitmaps, introduced in FreeType version 2.6. https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15999 If you use option FT_CONFIG_OPTION_USE_PNG you should upgrade immediately. Partial exp-run by: antoine PR: 250375 MFH: 2020Q4 Security: CVE-2020-15999 --- print/freetype2/Makefile | 3 +-- print/freetype2/distinfo | 6 +++--- print/freetype2/pkg-plist | 9 ++++++--- 3 files changed, 10 insertions(+), 8 deletions(-) diff --git a/print/freetype2/Makefile b/print/freetype2/Makefile index ebe12f18becb..27e99e699e05 100644 --- a/print/freetype2/Makefile +++ b/print/freetype2/Makefile @@ -2,8 +2,7 @@ # $FreeBSD$ PORTNAME= freetype2 -PORTVERSION= 2.10.2 -PORTREVISION= 1 +DISTVERSION= 2.10.4 CATEGORIES= print MASTER_SITES= http://savannah.nongnu.org/download/freetype/ \ SF/freetype/${PORTNAME}/${PORTVERSION:C/^([0-9]+\.[0-9]+\.[0-9]+).*/\1/}/ \ diff --git a/print/freetype2/distinfo b/print/freetype2/distinfo index f2046ac3ae71..24063a2dfe74 100644 --- a/print/freetype2/distinfo +++ b/print/freetype2/distinfo @@ -1,3 +1,3 @@ -TIMESTAMP = 1589001276 -SHA256 (freetype-2.10.2.tar.xz) = 1543d61025d2e6312e0a1c563652555f17378a204a61e99928c9fcef030a2d8b -SIZE (freetype-2.10.2.tar.xz) = 2404456 +TIMESTAMP = 1603355758 +SHA256 (freetype-2.10.4.tar.xz) = 86a854d8905b19698bbc8f23b860bc104246ce4854dcea8e3b0fb21284f75784 +SIZE (freetype-2.10.4.tar.xz) = 2416620 diff --git a/print/freetype2/pkg-plist b/print/freetype2/pkg-plist index 8572e7e357f2..88fbc75d09d2 100644 --- a/print/freetype2/pkg-plist +++ b/print/freetype2/pkg-plist @@ -4,8 +4,9 @@ include/freetype2/freetype/config/ftheader.h include/freetype2/freetype/config/ftmodule.h include/freetype2/freetype/config/ftoption.h include/freetype2/freetype/config/ftstdlib.h -include/freetype2/freetype/ftdriver.h -include/freetype2/freetype/ftparams.h +include/freetype2/freetype/config/integer-types.h +include/freetype2/freetype/config/mac-support.h +include/freetype2/freetype/config/public-macros.h include/freetype2/freetype/freetype.h include/freetype2/freetype/ftadvanc.h include/freetype2/freetype/ftbbox.h @@ -16,6 +17,7 @@ include/freetype2/freetype/ftcache.h include/freetype2/freetype/ftchapters.h include/freetype2/freetype/ftcid.h include/freetype2/freetype/ftcolor.h +include/freetype2/freetype/ftdriver.h include/freetype2/freetype/fterrdef.h include/freetype2/freetype/fterrors.h include/freetype2/freetype/ftfntfmt.h @@ -34,6 +36,7 @@ include/freetype2/freetype/ftmodapi.h include/freetype2/freetype/ftmoderr.h include/freetype2/freetype/ftotval.h include/freetype2/freetype/ftoutln.h +include/freetype2/freetype/ftparams.h include/freetype2/freetype/ftpfr.h include/freetype2/freetype/ftrender.h include/freetype2/freetype/ftsizes.h @@ -52,7 +55,7 @@ include/freetype2/ft2build.h lib/libfreetype.a lib/libfreetype.so lib/libfreetype.so.6 -lib/libfreetype.so.6.17.2 +lib/libfreetype.so.6.17.4 libdata/pkgconfig/freetype2.pc %%CONFIG%%man/man1/freetype-config.1.gz share/aclocal/freetype2.m4