freetype: Update to 2.10.4

- Update freetype from 2.10.2 to 2.10.4
	- A heap buffer overflow has been found in the handling of embedded
	PNG bitmaps, introduced in FreeType version 2.6.
	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15999
	If you use option FT_CONFIG_OPTION_USE_PNG you should upgrade immediately.
- Version 2.10.3 and later breaks the build of ghostscript, due to ghostscripts
	use of a withdrawn freetype macro that wasn't for external usage.
	A patch has been created to fix this and is included in the connected
	ghostcript patch.
- Updated rootfile
- Changelog for version 2.10.3 release is too long to add here. This can be
	found in the changelog file in the tarball

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
This commit is contained in:
Adolf Belka
2021-02-04 13:55:27 +01:00
committed by Michael Tremer
parent eb53b56d3a
commit 68b5e6b1bb
2 changed files with 6 additions and 8 deletions

View File

@@ -24,7 +24,7 @@
include Config
VER = 2.10.2
VER = 2.10.4
THISAPP = freetype-$(VER)
DL_FILE = $(THISAPP).tar.xz
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
$(DL_FILE)_MD5 = 7c0d5a39f232d7eb9f9d7da76bf08074
$(DL_FILE)_MD5 = 0e6c0e9b218be3ba3e26e1d23b1c80dd
install : $(TARGET)