[Bug 250375] [exp-run] Upgrad print/freetype2 to 2.10.3

bugzilla-noreply at freebsd.org bugzilla-noreply at freebsd.org
Thu Oct 22 16:25:50 UTC 2020


https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=250375

--- Comment #19 from commit-hook at FreeBSD.org ---
A commit references this bug:

Author: tcberner
Date: Thu Oct 22 16:25:19 UTC 2020
New revision: 552995
URL: https://svnweb.freebsd.org/changeset/ports/552995

Log:
  MFH: r552991

  print/freetype2: Security fix release  2.10.4

  From: https://sourceforge.net/projects/freetype/files/freetype2/2.10.4/"

    I. IMPORTANT BUG FIXES

    - A heap buffer overflow has been found  in the handling of embedded
      PNG bitmaps, introduced in FreeType version 2.6.

        https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15999

      If you  use option  FT_CONFIG_OPTION_USE_PNG  you  should  upgrade
      immediately.

  Partial exp-run by:   antoine
  PR:           250375
  Security:     CVE-2020-15999

  Approved by:  ports-secteam (implicit)

Changes:
_U  branches/2020Q4/
  branches/2020Q4/print/freetype2/Makefile
  branches/2020Q4/print/freetype2/distinfo
  branches/2020Q4/print/freetype2/pkg-plist

-- 
You are receiving this mail because:
You are on the CC list for the bug.


More information about the freebsd-desktop mailing list