summaryrefslogtreecommitdiff
path: root/lib/freetype
AgeCommit message (Collapse)Author
2013-06-07Update to freetype 2.4.12. tested by many during t2k13. Thanks.Matthieu Herrb
2006-11-25Import freetype 2.2.1Matthieu Herrb
2006-11-25Import freetype 2.2.1Matthieu Herrb
2013-01-04Update to freetype 2.4.11. Tested by krw@, jasper@ and on a bulk portsMatthieu Herrb
build by naddy@.
2006-11-25Import freetype 2.2.1Matthieu Herrb
2012-10-29Also install freetype-config during install phase.Matthieu Herrb
And generate freetype2.pc and freetype-config during make depend to avoid doing that as root. Initial patch from espie@
2012-10-26Make install of freetype2.pc consistent with other xenocara modules.Matthieu Herrb
(don't install it during make includes but during make install). ok espie@
2012-10-13tweak a bit for better standards conformanceMarc Espie
okay matthieu@
2012-09-20Restore -lz in Libs:. OpenBSD doesn't use the embedded gzip lib, andMatthieu Herrb
doesn't link libfreetype against libz. Prodded by ajacoutot@.
2012-07-07Update to freetype-2.4.10.David Coppa
With help and ok matthieu@
2012-05-11Fix freetype-2.4.9 regression that caused ghostscript to barf withDavid Coppa
"Font Renderer Plugin" errors. Patches come from upstream. References: http://bugs.ghostscript.com/show_bug.cgi?id=692940 https://savannah.nongnu.org/bugs/?func=detailitem&item_id=35833 https://savannah.nongnu.org/bugs/?func=detailitem&item_id=35847 http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=9a55cb7a http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=b43e0f44 ok matthieu@
2012-04-14Update to freetype 2.4.9Matthieu Herrb
Another round of fixes to better handle invalid fonts. Many of them are vulnerabilities (see CVE-2012-1126 up to CVE-2012-1144 and SA48320).
2011-11-19Update to freetype 2.4.8. Security update fixing CVE-2011-3439Matthieu Herrb
2011-11-16Commit the last bit of freetype 2.4.6 which I previously hold back,Matthieu Herrb
since it changes the metrics of some TrueType fonts. Users of DejaVu at small sizes in xterm can use the 'scaleHeight' resource to restore the previous vertical spacing (with xterm 276 and later). Tested on a wide set of ports by ajachoutot@, naddy@, krw@ shadchin@.
2011-11-13Update for freetype 2.4.7.Matthieu Herrb
2011-10-30Update to freetype 2.4.7.Matthieu Herrb
This moslty is a bug-fix release for CVE-2011-3256.
2011-09-28Update to freetype 2.4.6.Matthieu Herrb
For now, omit the patch to ttdriver.c that changes some font metrics and appearance of applications using TrueType fonts. Will revisit once the issue is solved.
2011-07-18Fix for CVE-2011-0226 from Freetype git repository.Matthieu Herrb
2011-07-18Update to freetype 2.4.5. Tested by many.Matthieu Herrb
2010-12-19Update to freetype 2.4.4. Tested by shadchin@, ajacoutot@, krw@.Matthieu Herrb
2010-11-06Security MFC for CVE-2010-3855Matthieu Herrb
commit 59eb9f8cfe7d1df379a2318316d1f04f80fba54a Author: Werner Lemberg <wl@gnu.org> Date: Tue Oct 12 07:49:17 2010 +0200 Fix Savannah bug #31310. * src/truetype/ttgxvar.c (ft_var_readpackedpoints): Protect against invalid `runcnt' values.
2010-11-06MFC security fix for CVE-2010-3814Matthieu Herrb
commit 0edf0986f3be570f5bf90ff245a85c1675f5c9a4 Author: Werner Lemberg <wl@gnu.org> Date: Wed Oct 6 11:52:27 2010 +0200 [truetype] Improve error handling of `SHZ' bytecode instruction. Problem reported by Chris Evans <scarybeasts@gmail.com>. * src/truetype/ttinterp.c (Ins_SHZ): Check `last_point'.
2010-10-23Update to freetype 2.4.3. Tested at least by krw@, ajacoutot@ and jasper@Matthieu Herrb
2010-09-01Update to freetype 2.4.2. This has been in snapshots for a whileMatthieu Herrb
and tested explicitely by ajacoutot@ jasper@, jcs@, krw@ and others on various architectures.
2010-07-17patches from Freetype.org for the security issues found by Robert Swiecki:Matthieu Herrb
CVE-2010-2497 freetype integer underflow CVE-2010-2498 freetype invalid free CVE-2010-2499 freetype buffer overflow CVE-2010-2500 freetype integer overflow CVE-2010-2519 freetype heap buffer overflow CVE-2010-2520 freetype buffer overflow on heap
2010-05-08use INSTALL_DATA in BSD Makefiles. ok oga@Matthieu Herrb
2010-03-25Missing resurected files in freetype 2.3.12Matthieu Herrb
2010-03-25Update to freetpe 2.3.12. Tested against ports by naddy@.Matthieu Herrb
2010-03-25Update to freetpe 2.3.12. Tested against ports by naddy@.Matthieu Herrb
2009-04-27Fixes for CVE-2009-0946 from freetype2 git repository:Matthieu Herrb
Multiple integer overflows in FreeType 2.3.9 and earlier allow remote attackers to execute arbitrary code via vectors related to large values in certain inputs in (1) smooth/ftsmooth.c, (2) sfnt/ttcmap.c, and (3) cff/cffload.c. Plus one additional fix for malformed compressed data.
2009-03-26put libz back into Libs:. Fixes vax linking.Matthieu Herrb
2009-03-26update to freetype-docs 2.3.9Matthieu Herrb
2009-03-26Update to Freetype 2.3.9.Matthieu Herrb
Bump major to be safe. Small arm assembler fix in ftconfig.h by drahn@
2009-03-10Update to Freetype 2.3.8. Tested by jsg@.Matthieu Herrb
2008-08-21Update to Freetype 2.3.7. This is a bug fix release. No API change.Matthieu Herrb
2008-06-22Update to freetype 2.3.6.Matthieu Herrb
Contains security fixes for CVE-2008-1806, CVE-2008-1807 and CVE-2008-1808. Tested by many.
2007-11-24Don't hard-code sizeof(long) in ftconfig.h. Fixes 64bit architectures.Matthieu Herrb
Problem noticed by sturm@.
2007-10-27Use buils/unix/ftsystem.c instead of the generic ANSI C one, whichMatthieu Herrb
doesn't set CLOSE_ON_EXEC on files descriptors opened by freetype. Fixes a fd leak reported by kurt@. Tested by naddy@ and others.
2007-09-08More bits for freetype 2.3.5Matthieu Herrb
2007-09-08Merge freetype 2.3.5. Tested by naddy@ and mbalmer@.Matthieu Herrb
2007-09-08import freetype 2.3.5Matthieu Herrb
2007-09-08import freetype 2.3.5Matthieu Herrb
2007-05-29fix two instances XORG_PREFIX that escaped renaming to X11BASE.Matthieu Herrb
2007-05-25Fix for CVE-2007-2754: integer overflow that can lead to an heap overflow.Matthieu Herrb
Discovered by Victor Stinner. Patch from Freetype repository.
2007-04-07Don't include debugging symbols.Matthieu Herrb
2007-04-04fix $OpenBSD$ RCS tags; ok matthieu@David Krause
2007-04-04bdf CVE-2007-1351Todd T. Fries
BDFFont Parsing Integer Overflow Vulnerability The discoverer of this vulnerability wishes to remain anonymous. from matthieu@
2007-03-25Revert local debug stuff that wasn't meant to be committed.Matthieu Herrb
2007-03-25regen with libtool 1.5.22p9Matthieu Herrb
2006-12-23Missed a sed substitution for freetype2.pc.Matthieu Herrb
Noticed by Frederick C. Druseikis, thanks.