From owner-svn-ports-head@freebsd.org Thu Oct 22 16:19:24 2020 Return-Path: Delivered-To: svn-ports-head@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id 6F66344C6CF; Thu, 22 Oct 2020 16:19:24 +0000 (UTC) (envelope-from tcberner@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4CHCHJ2N5Yz44sh; Thu, 22 Oct 2020 16:19:24 +0000 (UTC) (envelope-from tcberner@FreeBSD.org) Received: from repo.freebsd.org (repo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:0]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 34752192F1; Thu, 22 Oct 2020 16:19:24 +0000 (UTC) (envelope-from tcberner@FreeBSD.org) Received: from repo.freebsd.org ([127.0.1.37]) by repo.freebsd.org (8.15.2/8.15.2) with ESMTP id 09MGJOVs093611; Thu, 22 Oct 2020 16:19:24 GMT (envelope-from tcberner@FreeBSD.org) Received: (from tcberner@localhost) by repo.freebsd.org (8.15.2/8.15.2/Submit) id 09MGJNaC093605; Thu, 22 Oct 2020 16:19:23 GMT (envelope-from tcberner@FreeBSD.org) Message-Id: <202010221619.09MGJNaC093605@repo.freebsd.org> X-Authentication-Warning: repo.freebsd.org: tcberner set sender to tcberner@FreeBSD.org using -f From: "Tobias C. Berner" Date: Thu, 22 Oct 2020 16:19:23 +0000 (UTC) To: ports-committers@freebsd.org, svn-ports-all@freebsd.org, svn-ports-head@freebsd.org Subject: svn commit: r552991 - head/print/freetype2 X-SVN-Group: ports-head X-SVN-Commit-Author: tcberner X-SVN-Commit-Paths: head/print/freetype2 X-SVN-Commit-Revision: 552991 X-SVN-Commit-Repository: ports MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-BeenThere: svn-ports-head@freebsd.org X-Mailman-Version: 2.1.33 Precedence: list List-Id: SVN commit messages for the ports tree for head List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 22 Oct 2020 16:19:24 -0000 Author: tcberner Date: Thu Oct 22 16:19:23 2020 New Revision: 552991 URL: https://svnweb.freebsd.org/changeset/ports/552991 Log: print/freetype2: Security fix release 2.10.4 From: https://sourceforge.net/projects/freetype/files/freetype2/2.10.4/" I. IMPORTANT BUG FIXES - A heap buffer overflow has been found in the handling of embedded PNG bitmaps, introduced in FreeType version 2.6. https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15999 If you use option FT_CONFIG_OPTION_USE_PNG you should upgrade immediately. Partial exp-run by: antoine PR: 250375 MFH: 2020Q4 Security: CVE-2020-15999 Modified: head/print/freetype2/Makefile head/print/freetype2/distinfo head/print/freetype2/pkg-plist Modified: head/print/freetype2/Makefile ============================================================================== --- head/print/freetype2/Makefile Thu Oct 22 16:04:27 2020 (r552990) +++ head/print/freetype2/Makefile Thu Oct 22 16:19:23 2020 (r552991) @@ -2,8 +2,7 @@ # $FreeBSD$ PORTNAME= freetype2 -PORTVERSION= 2.10.2 -PORTREVISION= 1 +DISTVERSION= 2.10.4 CATEGORIES= print MASTER_SITES= http://savannah.nongnu.org/download/freetype/ \ SF/freetype/${PORTNAME}/${PORTVERSION:C/^([0-9]+\.[0-9]+\.[0-9]+).*/\1/}/ \ Modified: head/print/freetype2/distinfo ============================================================================== --- head/print/freetype2/distinfo Thu Oct 22 16:04:27 2020 (r552990) +++ head/print/freetype2/distinfo Thu Oct 22 16:19:23 2020 (r552991) @@ -1,3 +1,3 @@ -TIMESTAMP = 1589001276 -SHA256 (freetype-2.10.2.tar.xz) = 1543d61025d2e6312e0a1c563652555f17378a204a61e99928c9fcef030a2d8b -SIZE (freetype-2.10.2.tar.xz) = 2404456 +TIMESTAMP = 1603355758 +SHA256 (freetype-2.10.4.tar.xz) = 86a854d8905b19698bbc8f23b860bc104246ce4854dcea8e3b0fb21284f75784 +SIZE (freetype-2.10.4.tar.xz) = 2416620 Modified: head/print/freetype2/pkg-plist ============================================================================== --- head/print/freetype2/pkg-plist Thu Oct 22 16:04:27 2020 (r552990) +++ head/print/freetype2/pkg-plist Thu Oct 22 16:19:23 2020 (r552991) @@ -4,8 +4,9 @@ include/freetype2/freetype/config/ftheader.h include/freetype2/freetype/config/ftmodule.h include/freetype2/freetype/config/ftoption.h include/freetype2/freetype/config/ftstdlib.h -include/freetype2/freetype/ftdriver.h -include/freetype2/freetype/ftparams.h +include/freetype2/freetype/config/integer-types.h +include/freetype2/freetype/config/mac-support.h +include/freetype2/freetype/config/public-macros.h include/freetype2/freetype/freetype.h include/freetype2/freetype/ftadvanc.h include/freetype2/freetype/ftbbox.h @@ -16,6 +17,7 @@ include/freetype2/freetype/ftcache.h include/freetype2/freetype/ftchapters.h include/freetype2/freetype/ftcid.h include/freetype2/freetype/ftcolor.h +include/freetype2/freetype/ftdriver.h include/freetype2/freetype/fterrdef.h include/freetype2/freetype/fterrors.h include/freetype2/freetype/ftfntfmt.h @@ -34,6 +36,7 @@ include/freetype2/freetype/ftmodapi.h include/freetype2/freetype/ftmoderr.h include/freetype2/freetype/ftotval.h include/freetype2/freetype/ftoutln.h +include/freetype2/freetype/ftparams.h include/freetype2/freetype/ftpfr.h include/freetype2/freetype/ftrender.h include/freetype2/freetype/ftsizes.h @@ -52,7 +55,7 @@ include/freetype2/ft2build.h lib/libfreetype.a lib/libfreetype.so lib/libfreetype.so.6 -lib/libfreetype.so.6.17.2 +lib/libfreetype.so.6.17.4 libdata/pkgconfig/freetype2.pc %%CONFIG%%man/man1/freetype-config.1.gz share/aclocal/freetype2.m4