[Bug 250375] [exp-run] Upgrad print/freetype2 to 2.10.3
    bugzilla-noreply at freebsd.org 
    bugzilla-noreply at freebsd.org
       
    Thu Oct 22 16:25:50 UTC 2020
    
    
  
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=250375
--- Comment #19 from commit-hook at FreeBSD.org ---
A commit references this bug:
Author: tcberner
Date: Thu Oct 22 16:25:19 UTC 2020
New revision: 552995
URL: https://svnweb.freebsd.org/changeset/ports/552995
Log:
  MFH: r552991
  print/freetype2: Security fix release  2.10.4
  From: https://sourceforge.net/projects/freetype/files/freetype2/2.10.4/"
    I. IMPORTANT BUG FIXES
    - A heap buffer overflow has been found  in the handling of embedded
      PNG bitmaps, introduced in FreeType version 2.6.
        https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15999
      If you  use option  FT_CONFIG_OPTION_USE_PNG  you  should  upgrade
      immediately.
  Partial exp-run by:   antoine
  PR:           250375
  Security:     CVE-2020-15999
  Approved by:  ports-secteam (implicit)
Changes:
_U  branches/2020Q4/
  branches/2020Q4/print/freetype2/Makefile
  branches/2020Q4/print/freetype2/distinfo
  branches/2020Q4/print/freetype2/pkg-plist
-- 
You are receiving this mail because:
You are on the CC list for the bug.
    
    
More information about the freebsd-desktop
mailing list