IABSD.fr/xenocara/lib/freetype

Branch :


Log

Author Commit Date CI Message
a0a0ad34 2026-03-08 15:03:37 Update to freetype 2.14.2. tested by rsadowski@ includes fix for CVE-2026-23865 (Prevent an integer overflow leading to out-of-bounds read)
31b58479 2025-11-09 15:54:17 garbage collect gcc3 support. From Brad.
f1de4a89 2025-10-01 05:03:58 Move PICFLAG override out of the COMPILER_VERSION != gcc3 block as this is not related to the compiler choice. This was mistakenly introduced in 1.53.
fa217aef 2025-09-17 15:19:09 bundle libpng into libfreetype because displaying emojis is really cool ok aja@ sthen@ matthieu@ deraadt@
684e6762 2025-03-09 15:12:54 Uupdate to libfreetype 2.13.3. This is a major shlib version bump. ok tb@
573494db 2024-08-04 17:17:23 Update to freetype 2.13.2. tested by and ok rsadowski@
a44f1fb4 2023-05-21 12:04:40 Revert accicentally committed test/debug stuff.
d7e2c3cb 2023-05-21 09:25:29 Update freetype to 2.13.0
cdb04ba8 2022-07-23 19:27:21 Update to freetype 2.12.1
a4627a86 2022-06-28 13:13:29 Add missing build system files from freetype 2.11.0 Those are not used in xenocara builds, but having them reduces the noise during diffs with upstreams.
933874b4 2022-06-28 13:01:51 Remove stale docs/reference/ files The docs/reference directory in freetype2 sources is not really suited for shipping as source files. Better browse it online at freetype.org
adfe992e 2022-06-28 12:55:41 Remove outdated parts of the freetype-doc package. They are not used in builds and have not been updated recently.
8d89dda2 2022-06-28 12:31:15 fix white space diff with upstreams
3f0cbd06 2022-06-28 12:30:35 Remove leftovers test directive
a5f51add 2022-02-19 10:41:03 enable subpixel rendering in FreeType, ok mpi@ matthieu@ The ClearType colour filtering patents expired in 2019 and various other OS have also made this change since then. https://freetype.org/patents.html
d507eec9 2021-11-11 08:35:54 Missed removed files
c9a91bf4 2021-11-11 08:22:03 Update to Freetype 2.11.0
711bc3da 2020-11-11 09:27:24 Update to freetype 2.10.4. Tested by tb@
6dd6f885 2020-06-27 09:06:07 Update to freetype 2.10.2. Tested by krw@ and myself. Adds supprot for WOFF2 fonts. No visible API/ABI changes.
92537e29 2019-09-13 19:11:23 Fix build with gcc3 which doesn't support symbol visibility. Reposrted and tested by aoyama@
bee0fbcd 2019-09-10 19:13:54 Update to freetype 2.10.1. Tested by semarie@ and naddy@
864ae554 2018-05-26 07:51:37 Remind people to bump dependent libs majors too.
5d55788f 2018-05-21 14:24:32 Update to freetype-doc-2.9.1
1f0d8a70 2018-05-21 11:56:16 Backout local change, not needed anymore Suggested by matthieu@
c1147192 2018-05-21 11:52:24 Update to FreeType 2.9.1 OK matthieu@
891ed56e 2018-03-12 18:49:08 Explicitely initialize memory allocated when cur_count==0. Caused uninitilized memory reads and corruption with some fonts (ja-sazanami-ttf). Issue reported and diagnosticed by Bryan Linton bl at shoshoni dot info. Thanks.
1123ad05 2017-12-15 19:29:11 Update to FreeType 2.8.1 OK matthieu@
c9e1b05c 2017-06-24 13:58:55 Update to freetype-doc-2.8
1a2ccef1 2017-06-23 16:15:17 Update to freetype-2.8 No fallout in a bulk build on i386 (sthen@) OK matthieu@, sthen@
251e3d94 2017-06-18 21:09:07 let X directories build even if you forget depend. - use BUILDFIRST - have fontconfig use normal 'all' targets to make sure its files are built - explicitly document the fontconfig lib order okay matthieu@
e1b18e58 2017-05-10 08:27:50 Fixes for CVE-2017-8105 and CVE-2017-8287 out-of-bounds write caused by a heap-based buffer overflow related to the t1_decoder_parse_charstrings function in psaux/t1decode.c out-of-bounds write caused by a heap-based buffer overflow related to the t1_builder_close_contour function in psaux/psobjs.c From upstream via Arch Linux OK matthieu@
7a54dc44 2017-01-13 11:48:20 Update to freetype-doc-2.7.1
8c605c12 2017-01-13 11:19:58 Update to FreeType-2.7.1 i386 bulk build by sthen@ amd64 bulk build by naddy@ OK matthieu@
91c5ab3b 2016-10-29 12:07:21 Update to freetype-doc-2.7
73770604 2016-10-28 21:41:14 Update to FreeType 2.7 Now Subpixel hinting, also known as ClearType hinting, is enabled by default. OK matthieu@
d9fc70eb 2016-10-10 13:34:43 Remove the global 'make includes' step from 'make build'. This is no longer needed and gets in the way of tightening permission used during build. ok and suggestions natano@
1cfa6ba9 2016-08-09 17:41:23 just dump the major. freetype changes probably extend beyond just the obviously visible symbol additions.
739881e3 2016-08-09 08:16:45 Re-add binary files using 'cvs add -kb'
662d4e30 2016-08-09 08:13:56 Remove binary files
1d43045a 2016-08-09 07:53:52 Update to freetype-doc-2.6.5
7513b427 2016-08-09 07:16:08 Update to FreeType 2.6.5 ok matthieu@
84ff9598 2016-05-30 08:28:23 Update to freetype-doc-2.6.3
bd5c5e0b 2016-05-30 08:22:54 "javascript" renamed to "js"
fc2035f1 2016-05-30 08:22:04 "javascript" renamed to "js"
558b6548 2016-05-29 12:29:25 bump freetype major
ebfdec87 2016-05-29 11:57:09 Update to FreeType 2.6.3 ok sthen@, naddy@, matthieu@
8b6c7dfa 2016-01-02 16:30:55 Sync freetype-doc with freetype, i.e. update freetype-doc to ver. 2.6.2 ok matthieu@
1cd20ba8 2015-12-25 19:06:01 Remove bogus file. ok matthieu@
8f7e2085 2015-12-25 11:54:40 Do no overwrite the installed Unix ftconfig.h with the ANSI one. ok dcoppa@
eebe8212 2015-12-07 09:34:02 Bugfixing update to freetype-2.6.2 Tested on amd64, i386, macppc, sparc64, loongson and compile-tested on arm by matthieu@ Also tested in a ports bulk build by naddy@ OK matthieu@
f3fdd101 2015-10-20 08:10:21 Zap bogus RCS strings
b8f08254 2015-10-19 12:23:39 bump freetype minor; the update adds new functions. spotted by naddy@, "Please go ahead and commit the minor bump" dcoppa@
45d32bf5 2015-10-19 07:51:34 Update to freetype-2.6.1 OK matthieu@ Bulk build by naddy@, thanks!
6780260a 2015-07-19 10:39:19 Clean up and fix make depend.
9b54f826 2015-06-28 08:27:43 Update to FreeType 2.6 OK matthieu@
57be036a 2015-01-10 17:17:22 Bugfixing update to freetype-2.5.5 ok matthieu@
8a4a3c13 2014-12-27 18:43:15 Zap some bogus RCS strings added by accident because of CVS keyword expansion
62705531 2014-12-26 17:52:34 Update to freetype-2.5.4 ports bulk build by landry@ OK matthieu@
d7ab44da 2014-03-15 18:09:43 Revert previous. This was not part of our local changes and the commit wasn't approved. The correct fix is in ../../Makefile
e95d5fc7 2014-03-15 18:02:09 Fix freetype-config after update to freetype 2.5.3. reported by nigel@
ab67cce6 2014-03-15 17:27:50 (re)fix freetype-config too. Spotted by nigel@
c9a482a0 2014-03-14 20:41:41 Revert to the freetype2.pc we had before. There were local changes and I accidentally removed them. ok matthieu@ Sorry for breaking the xenocara tree!
6842467b 2014-03-14 08:17:59 Security/bugfixing update to freetype-2.5.3, featuring a fix for a vulnerability in the CFF driver (CVE-2014-2240) and assorted minor fixes. ok matthieu@
44a7f0fe 2014-02-16 08:10:36 type1cid.c appears twice in sources lists for no reason. Noticed by miod@
02fca8e3 2014-01-12 15:08:24 Update to freetype 2.5.2. With help for handling ports breakage from at least landry@, naddy@, ajacoutot@, jasper@, and dcoppa@. Thanks to all. Need an up to date /etc/mtree/BSD.x11.dist (from a base system build) before building.
fe7f17ac 2013-10-20 12:34:21 Reduce diff with upstreams.
8e0a332f 2013-10-10 19:49:34 Update to freetype 2.5.0.1. Tested by many.
b5bb1299 2013-08-13 07:07:07 Bump the major on every single base library. There are a couple not bumped by this that will be corrected soon. heavy lifting by todd@
4848e852 2013-06-07 17:21:07 Update to freetype 2.4.12. tested by many during t2k13. Thanks.
240eb9af 2013-01-04 16:51:55 Update to freetype 2.4.11. Tested by krw@, jasper@ and on a bulk ports build by naddy@.
64ac4dd1 2012-10-29 20:15:29 Also install freetype-config during install phase. And generate freetype2.pc and freetype-config during make depend to avoid doing that as root. Initial patch from espie@
6f012c14 2012-10-26 06:09:27 Make install of freetype2.pc consistent with other xenocara modules. (don't install it during make includes but during make install). ok espie@
f07a7ccf 2012-10-13 17:16:20 tweak a bit for better standards conformance okay matthieu@
eeabd8b7 2012-09-20 14:11:15 Restore -lz in Libs:. OpenBSD doesn't use the embedded gzip lib, and doesn't link libfreetype against libz. Prodded by ajacoutot@.
25007b34 2012-07-07 16:45:03 Update to freetype-2.4.10. With help and ok matthieu@
9d886fc0 2012-05-11 20:02:28 Fix freetype-2.4.9 regression that caused ghostscript to barf with "Font Renderer Plugin" errors. Patches come from upstream. References: http://bugs.ghostscript.com/show_bug.cgi?id=692940 https://savannah.nongnu.org/bugs/?func=detailitem&item_id=35833 https://savannah.nongnu.org/bugs/?func=detailitem&item_id=35847 http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=9a55cb7a http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=b43e0f44 ok matthieu@
a8e93b57 2012-04-14 09:45:45 Update to freetype 2.4.9 Another round of fixes to better handle invalid fonts. Many of them are vulnerabilities (see CVE-2012-1126 up to CVE-2012-1144 and SA48320).
976f735d 2011-11-19 11:32:45 Update to freetype 2.4.8. Security update fixing CVE-2011-3439
db0c239a 2011-11-16 21:18:14 Commit the last bit of freetype 2.4.6 which I previously hold back, since it changes the metrics of some TrueType fonts. Users of DejaVu at small sizes in xterm can use the 'scaleHeight' resource to restore the previous vertical spacing (with xterm 276 and later). Tested on a wide set of ports by ajachoutot@, naddy@, krw@ shadchin@.
41e9e340 2011-11-13 22:34:37 Update for freetype 2.4.7.
12dde70a 2011-10-30 10:14:50 Update to freetype 2.4.7. This moslty is a bug-fix release for CVE-2011-3256.
6b773761 2011-09-28 19:01:21 Update to freetype 2.4.6. For now, omit the patch to ttdriver.c that changes some font metrics and appearance of applications using TrueType fonts. Will revisit once the issue is solved.
f99cf4f7 2011-07-18 21:15:33 Fix for CVE-2011-0226 from Freetype git repository.
f6c615f0 2011-07-18 20:29:56 Update to freetype 2.4.5. Tested by many.
21087514 2010-12-19 16:08:12 Update to freetype 2.4.4. Tested by shadchin@, ajacoutot@, krw@.
4aee4623 2010-11-06 16:46:57 Security MFC for CVE-2010-3855 commit 59eb9f8cfe7d1df379a2318316d1f04f80fba54a Author: Werner Lemberg <wl@gnu.org> Date: Tue Oct 12 07:49:17 2010 +0200 Fix Savannah bug #31310. * src/truetype/ttgxvar.c (ft_var_readpackedpoints): Protect against invalid `runcnt' values.
625c5107 2010-11-06 16:45:49 MFC security fix for CVE-2010-3814 commit 0edf0986f3be570f5bf90ff245a85c1675f5c9a4 Author: Werner Lemberg <wl@gnu.org> Date: Wed Oct 6 11:52:27 2010 +0200 [truetype] Improve error handling of `SHZ' bytecode instruction. Problem reported by Chris Evans <scarybeasts@gmail.com>. * src/truetype/ttinterp.c (Ins_SHZ): Check `last_point'.
bfe3d87a 2010-10-23 19:30:16 Update to freetype 2.4.3. Tested at least by krw@, ajacoutot@ and jasper@
45438d01 2010-09-01 19:14:23 Update to freetype 2.4.2. This has been in snapshots for a while and tested explicitely by ajacoutot@ jasper@, jcs@, krw@ and others on various architectures.
2b3e93e3 2010-07-17 14:06:43 patches from Freetype.org for the security issues found by Robert Swiecki: CVE-2010-2497 freetype integer underflow CVE-2010-2498 freetype invalid free CVE-2010-2499 freetype buffer overflow CVE-2010-2500 freetype integer overflow CVE-2010-2519 freetype heap buffer overflow CVE-2010-2520 freetype buffer overflow on heap
d9a92f27 2010-05-08 14:15:29 use INSTALL_DATA in BSD Makefiles. ok oga@
54193b0f 2010-03-25 20:53:34 Missing resurected files in freetype 2.3.12
1be5fe96 2010-03-25 20:49:53 Update to freetpe 2.3.12. Tested against ports by naddy@.
df064737 2010-03-25 20:32:36 Update to freetpe 2.3.12. Tested against ports by naddy@.
164d06ad 2009-04-27 07:11:16 Fixes for CVE-2009-0946 from freetype2 git repository: Multiple integer overflows in FreeType 2.3.9 and earlier allow remote attackers to execute arbitrary code via vectors related to large values in certain inputs in (1) smooth/ftsmooth.c, (2) sfnt/ttcmap.c, and (3) cff/cffload.c. Plus one additional fix for malformed compressed data.
e2d272f6 2009-03-26 19:04:00 put libz back into Libs:. Fixes vax linking.
703afbb0 2009-03-26 07:36:34 update to freetype-docs 2.3.9
8a907a31 2009-03-26 07:31:44 Update to Freetype 2.3.9. Bump major to be safe. Small arm assembler fix in ftconfig.h by drahn@
87859a9c 2009-03-10 20:28:33 Update to Freetype 2.3.8. Tested by jsg@.
f8e0dbd0 2008-08-21 05:09:08 Update to Freetype 2.3.7. This is a bug fix release. No API change.