CVE and update status of the FreeBSD ports tree4,526 unaddressed CVEs in 616 portsAll times are CET

Port details

print/freetype22.14.3

Free and portable TrueType font rendering engine

Maintainer
desktop@FreeBSD.org
Packages
freetype2 2.14.3
Upstream
Higher version available: 2.15.0
CPE
freetype:freetype from the port
WWW
https://freetype.org/
Links
cgit · VuXML

Unaddressed (0) · The CVE record lists this version as affected, no VuXML entry names the CVE

None. There is no CVE without a VuXML entry for this version.

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (12)

Show 12 fixed
VuXML entries whose affected range this version has left.

Commits (172)

Po-Chuan Hsieh (sunpoet) · 2.14.3
print/freetype2: Update WWW

https://www.freetype.org/ redirects to https://freetype.org/

Approved by:	portmgr (blanket)
04a58f6031
Gleb Popov (arrowd) · 2.14.3
print/freetype2: Update to 2.14.3

PR:		294004
082862cd01
Gleb Popov (arrowd) · 2.14.2
print/freetype2: Update to 2.14.2

PR:		293643
Approved by:	arrowd (desktop)
Exp-run by:	antoine
Co-authored-by:	Gleb Popov <arrowd@FreeBSD.org>
f8e3f13716
Daniel Engberg (diizzy) · 2.14.1
print/freetype2: Update to 2.14.1

Changelog:
https://cgit.git.savannah.gnu.org/cgit/freetype/freetype2.git/tree/docs/CHANGES?h=VER-2-14-1

PR:		289576
Approved by:	maintainer timeout, 3+ weeks
Exp-run by:	antoine
439201bdac
Daniel Engberg (diizzy) · 2.13.3
print/freetype2: Update to 2.13.3

Changelog:
https://git.savannah.gnu.org/cgit/freetype/freetype2.git/tree/docs/CHANGES?h=VER-2-13-3

PR:		281316
Approved by:	desktop (fluffy)
Sponsored by:	Blinkinblox
Exp-run by:	antoine
e0a0e79daf
Daniel Engberg (diizzy) · 2.13.2
print/freetype2: Update to 2.13.2

Changelog:
https://git.savannah.gnu.org/cgit/freetype/freetype2.git/tree/docs/CHANGES?h=VER-2-13-2

PR:		273404
Approved by:	portmgr (maintainer timeout, 2+ months)
Sponsored by:	Blinkinblox
Exp-run by:	antoine
12ed2d42a9
Daniel Engberg (diizzy) · 2.13.1
print/freetype2: Update to 2.13.1

* Remove SUBPIXEL_HINTING option, V38 is removed upstream leaving V40
  as the only option available
* Remove FIX_SIZE_METRICS, code around it has changed and no other
  distro keeps this option around

PR:		272303
Reviewed by:	desktop (tcberner)
Sponsored by:	Blinkinblox
Exp-run by:	antoine
09010f6a0e
Stefan Eßer (se) · 2.12.1_2
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
fb16dfecae
Stefan Eßer (se) · 2.12.1_2
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)
b7f05445c0
Tobias C. Berner (tcberner) · 2.12.1_2
print/freetype2: enable brotli-support (archivers/brotli) by default

graphics/blender will require brotli in upcoming releases [1]. As brotli
brings no additional runtime dependencies, this can be cheaply added to
the defaults.

PR:		265681
Reported by:	Shane <FreeBSD@ShaneWare.Biz>

[1] https://developer.blender.org/rB0830320a7ce8da31dec7c1efd97a7481784b6445
478e294dde
Tobias C. Berner (tcberner) · 2.12.1_1
print: remove 'Created by' lines

A big Thank You to the original contributors of these ports:

  *  Akinori MUSHA aka knu <knu@idaemons.org>
  *  Alan Eldridge <alane@geeksrus.net>
  *  Alex Dupre <ale@FreeBSD.org>
  *  Alex Dupre <sysadmin@alexdupre.com>
  *  Alexander Vereeken <Alexander88207@protonmail.com>
  *  Alexey Dokuchaev <danfe@FreeBSD.org>
  *  Alonso Cardenas Marquez <acm@FreeBSD.org>
  *  Andreas Klemm <andreas@FreeBSD.org>
  *  Andreas Klemm <andreas@klemm.gtn.com>
  *  Andrew Pantyukhin <infofarmer@FreeBSD.org>
  *  Anish Mistry <amistry@am-productions.biz>
  *  Anton Berezin <tobez@tobez.org>
  *  Bruce M Simpson <bms@FreeBSD.org>
  *  Bruce M. Simpson <bms@FreeBSD.org>
  *  CHOI Junho <cjh@FreeBSD.org>
  *  Chuck Robey <chuckr@FreeBSD.org>
  *  D'Arcy Cain <darcy@druid.net>
  *  David O'Brien (obrien@NUXI.com)
  *  David O'Brien <obrien@FreeBSD.org>
  *  David O'Brien <obrien@cs.ucdavis.edu>
  *  Dima Dorfman <dima@unixfreak.org>
  *  Dmitry Kazarov <d.y.kazarov@mail.ru>
  *  Dmitry Sivachenko <dima@Chg.RU>
  *  Emanuel Haupt <ehaupt@FreeBSD.org>
  *  Fabiano Sidler <fabianosidler@swissonline.ch>
  *  Fernan Aguero <fernan.aguero@gmail.com>
  *  Fernan Aguero <fernan@iib.unsam.edu.ar>
  *  Giuseppe Pilichi aka Jacula Modyun <jacula@gmail.com>
  *  Golyashov Sergey <svvord@soft-wizard.ru>
  *  Gvozdikov Veniamin <g.veniamin@googlemail.com>
  *  Hideaki Ohmon <ohmon@tom.sfc.keio.ac.jp>
  *  Igor Pokrovsky <tiamat@comset.net>
  *  James Bailie <jimmy@mammothcheese.ca>
  *  Jean-Marc Zucconi <jmz@FreeBSD.org> and David O'Brien <obrien@FreeBSD.org>
  *  Jean-Sebastien Roy <js@jeannot.org>
  *  Joe Marcus Clarke <marcus@FreeBSD.org>
  *  Joel Sutton <jsutton@bbcon.com.au>
  *  Joerg Wunsch <joerg@FreeBSD.org>
  *  Jose Alonso Cardenas Marquez <acardenas@bsd.org.pe>
  *  Jose Jachuf <jjachuf@gmail.com>
  *  Joseph Koshy <jkoshy@FreeBSD.org>
  *  Juergen Lock <nox@jelal.kn-bremen.de>
  *  Jui-Nan Lin <jnlin@freebsd.cs.nctu.edu.tw>
  *  KANOU Hiroki <kanou@khdd.net>
  *  KATO Tsuguru <tkato@prontomail.com>
  *  Kapil Chowksey
  *  Kentaro Inagaki <JBD01226@niftyserve.ne.jp>
  *  Kimura Fuyuki <fuyuki@hadaly.org>
  *  Klemm <andreas@klemm.gtn.com>
  *  Koop Mast <kwm@FreeBSD.org>
  *  Kozlov Sergey <kozlov.sergey.404@gmail.com>
  *  Lars Koeller
  *  Mario Sergio Fujikawa Ferreira <lioux@FreeBSD.org>
  *  Mark Pulford <mark@kyne.com.au>
  *  Mark Reidel <ports@mark.reidel.info>
  *  Martin Dieringer <martin.dieringer@gmx.de>
  *  Martin Kammerhofer
  *  Martin Klaffenboeck <martin.klaffenboeck@gmx.at>
  *  Martin Ranne <gasp@ridcully.dnsalias.org>
  *  Matthew Hunt <mph@pobox.com>
  *  Maxim Loginov <Zeliboba@mail.ru>
  *  Michael Johnson <ahze@FreeBSD.org>
  *  Michael Moll <kvedulv at kvedulv.de>
  *  Michael Nottebrock <lofi@FreeBSD.org>
  *  Mike Meyer <mwm@mired.org>
  *  Mikhail Teterin
  *  Mita Yoshio <mita@FreeBSD.org>
  *  Nicola Vitale <nivit@email.it>
  *  Oliver Braun <obraun@informatik.unibw-muenchen.de>
  *  Oliver Breuninger <ob@seicom.NET>
  *  Olivier Cochard-Labbe <olivier@FreeBSD.org>
  *  Patrick Dung (patrick_dkt@yahoo.com.hk)
  *  Patrick Powell <papowell@astart.com>
  *  Pedro Giffuni
  *  Philip M. Gollucci <pgpollucci@p6m7g8.com>
  *  Piotr Kubaj <pkubaj@anongoth.pl>
  *  Po-Chuan Hsieh <sunpoet@FreeBSD.org>
  *  Robert Withrow <witr@rwwa.com>
  *  Romain Tartiere <romain@FreeBSD.org>
  *  Satoshi Asami <asami@FreeBSD.org>
  *  Satoshi TAOKA <taoka@FreeBSD.org>
  *  Satoshi Taoka <taoka@FreeBSD.org>
  *  Shen Chuan-Hsing <statue@freebsd.sinica.edu.tw>
  *  Simon 'corecode' Schubert <corecode@corecode.ath.cx>
  *  Simun Mikecin <numisemis@yahoo.com>
  *  Stefan Esser <se@FreeBSD.org>
  *  Stefan Hagen <ports@textmail.me>
  *  Stephen Fisher
  *  Steve Wills <swills@FreeBSD.org>
  *  Sunpoet Po-Chuan Hsieh <sunpoet@FreeBSD.org>
  *  TAKATSU Tomonari <tota@FreeBSD.org>
  *  Thierry Thomas <thierry@pompo.net>
  *  Thomas Gellekum <tg@FreeBSD.org>
  *  Tim McCormick <tim@pcbsd.org>
  *  Tomokatsu SAITO <saito@a2z.co.jp>
  *  Veniamin Gvozdikov <vg@FreeBSD.org>
  *  Wen Heping <wenheping@gmail.com>
  *  Yuichiro AIZAWA <yaizawa@mdbl.sfc.keio.ac.jp>
  *  amistry@am-productions.biz
  *  andrew@scoop.co.nz
  *  arved
  *  brett@peloton.physics.montana.edu
  *  chuckr@FreeBSD.org
  *  cjm2
  *  dbader@eece.unm.edu
  *  dgilbert@velocet.ca
  *  e-masson@kisoft-services.com
  *  eserte@cs.tu-berlin.de
  *  gahr
  *  giffunip
  *  hrs
  *  ijliao
  *  jmz
  *  joerg
  *  johans
  *  jseger@FreeBSD.org
  *  kline
  *  ljo
  *  lofi@FreeBSD.org
  *  martin.dieringer@gmx.de
  *  mwest@uct.ac.za
  *  oly@world.std.com
  *  patrick, trevor
  *  smace@FreeBSD.org
  *  spcoltri@unm.edu
  *  tg@FreeBSD.org
  *  tobez
  *  wenheping@gmail.com

With hat:	portmgr
51879c91f8
Joseph Mingrone (jrm) · 2.12.1_1
print/freetype2: Do not add debug suffix to shared libraries

PR:		264457
Reported by:	Marcin Cieślak <saper@saper.info>
Approved by:	desktop (tcberner)
Sponsored by:	The FreeBSD Foundation
Differential Revision:	https://reviews.freebsd.org/D35712
79e033e525
Joseph Mingrone (jrm) · 2.12.1
print/freetype2: Handle WITH_DEBUG plist changes

PR:		264457
Reported by:	Marcin Cieślak <saper@saper.info>
Approved by:	desktop (tcberner)
Sponsored by:	The FreeBSD Foundation
Differential Revision:	https://reviews.freebsd.org/D35712#810587
a6e35a18d0
Baptiste Daroussin (bapt) · 2.12.1
print/freetype2: update to 2.21.1
ab651f0b14
Tobias C. Berner (tcberner) · 2.12.0
print/freetype2: update to 2.12.0

Exp-run by:	antoine
PR:		262979
ae97718afa
Tobias C. Berner (tcberner) · 2.11.1
print/freetype2: update to 2.11.1

Changelog:
  CHANGES BETWEEN 2.11.0 and 2.11.1

  I. IMPORTANT CHANGES

    - Some  fields  in  the  `CID_FaceDictRec`, `CID_FaceInfoRec`, and
      `FT_Data` structures  have been changed  from signed to unsigned
      type,  which  better reflects  the actual usage.  It is also  an
      additional means to protect against malformed input.

  II. MISCELLANEOUS

    - Cmake support  has been  further improved.   To do  that various
      backward-incompatible  changes were  necessary; please  see file
      `CMakeLists.txt` for more details.

    - Since version  2.11.0, a  C99 compiler  is necessary  to compile
      FreeType.

    - The experimental  'COLR' v1 API  has been updated to  the latest
      OpenType standard 1.9.

    - The `apinames` tool got a new  option `-wV` to output an OpenVMS
      Linker Option File.

    - VMS support was updated.

    - MS Visual Studio support was added to build the demo programs.

PR:		260202
Exp-run by:	antoine
4e4149d6d8
Daniel Engberg (diizzy) · 2.11.0
print/freetype2: Update to 2.11.0

Additional changes:
* Convert to CMake
* Rearrange Makefile
* Clean up MASTER_SITES and use SAVANNAH alias

Changelog:
https://gitlab.freedesktop.org/freetype/freetype/-/blob/VER-2-11-0/docs/CHANGES

I'd also like to thank tcberner and antoine for their time and effort getting
this ready to be committed.

PR:		251512
Exp-run by:	antoine
Approved by:	tcberner (mentor)
Differential Revision:	https://reviews.freebsd.org/D31909
9218bfa5da
Mathieu Arnold (mat) · 2.10.4
Remove # $FreeBSD$ from Makefiles.
305f148f48
Tobias C. Berner (tcberner) · 2.10.4
print/freetype2: Security fix release  2.10.4

From: https://sourceforge.net/projects/freetype/files/freetype2/2.10.4/"

  I. IMPORTANT BUG FIXES

  - A heap buffer overflow has been found  in the handling of embedded
    PNG bitmaps, introduced in FreeType version 2.6.

      https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15999

    If you  use option  FT_CONFIG_OPTION_USE_PNG  you  should  upgrade
    immediately.

Partial exp-run by:	antoine
PR:		250375
MFH:		2020Q4
Security:	CVE-2020-15999
290391b453
Jan Beich (jbeich) · 2.10.2_1
print/freetype2: enable PNG by default

Required by x11-fonts/noto-emoji for colored emoji. PNG unlike SVG is
compatible with many freetype2 consumers.

PR:		249136
Approved by:	tcberner
7766c8e535
Tobias C. Berner (tcberner) · 2.10.2
print/freetype2: fix build of BROTLI option

Submitted by:	fluffy
fc44da5b22
Tobias C. Berner (tcberner) · 2.10.2
print/freetype2: Update to 2.10.2

- breaks print/ftdemos2, which needs to be updated to 2.10.2 as well.

PR:		246432, 246631
Submitted by:	lightside <lightside@gmx.com>
Exp-run by:	antoine
4ca20f66a1
Tobias C. Berner (tcberner) · 2.10.1
Give some more ports to desktop@

Discussed with:	kwm
202e056d64
Mathieu Arnold (mat) · 2.10.1
Convert to UCL & cleanup pkg-message (categories [p-r])
d2f3167e02
Steve Wills (swills) · 2.10.1
print/freetype2: update to 2.10.1

PR:		239165
Submitted by:	lightside@gmx.com
Exp-run by:	antoine
a427583201
Steve Wills (swills) · 2.10.0
print/freetype2: Update to 2.10.0

PR:		236867
Submitted by:	lightside <lightside@gmx.com>
Exp-run by:	antoine@
Reviewed by:	kwm
1a6fdc3bfd
Jan Beich (jbeich) · 2.9.1
print/freetype2: update to 2.9.1

- Keep building freetype-config for now (to skip exp-run)
- Drop upstreamed patch
- Properly spell "subpixel" (following upstream)

Changes:	https://sourceforge.net/projects/freetype/files/freetype2/2.9.1
ABI:		https://abi-laboratory.pro/tracker/timeline/freetype/
PR:		227936
Submitted by:	lightside@gmx.com
Security:	CVE-2018-6942
c5cbd38041
Baptiste Daroussin (bapt) · 2.9_1
Readd LCD_FILTERING option and introduce LCD_RENDERING

Select LCD_RENDERING as the default (same as before the introduction
of the option)

PR:		225072
Submitted by:	lightside <lightside@gmx.com>
4d39579946
Baptiste Daroussin (bapt) · 2.9_1
Incorporate a patch from uptream

Remove the LCD filtering option, now freetype2 offers by default a LCD optimized
output, no need to keep the old LCD filtering option (keeping it off may confuse
users) and let freetype2 use the new "Harmony LCD rendering"

Thanks jbeich for pointing me at the PR I missed.

PR:		225072
Submitted by:	lightside <lightside@gmx.com>
5793655762
Baptiste Daroussin (bapt) · 2.9
Update to 2.9

The ABI is fully backward compatible:
https://abi-laboratory.pro/tracker/timeline/freetype/
47aae8e4d8
Kurt Jaeger (pi) · 2.8_1
print/freetype2: fix incorrect line spacing for some fonts

Problem description: After updating to print/freetypw2-2.8.0 using
Bitstream Vera Sans Mono the vertical pitch increases and significantly
add of the size of the window. See attached images.

See PR for lots of links to related reports upstream
and on other platforms.

PR:		219608
Submitted by:	lightside@gmx.com
Reported by:	Kevin Oberman <rkoberman@gmail.com>
90c5e3c356
Dmitry Marakasov (amdmi3) · 2.8
- Update WWW

Approved by:	portmgr blanket
a596146122
Koop Mast (kwm) · 2.8
Update freetype2 to 2.8.

* `Light' auto-hinting mode no longer uses TrueType metrics for TrueType fonts.
  It causing horizontal scaling also. Add option if people want it back.
* Update pkg-descr, 2.7 started this but I committed the WIP version.

Exp-run done by:	antoine@

PR:		219271
MFH:		2017Q2
Exp-run by:	antoine@
Security:	4a088d67-3af2-11e7-9d75-c86000169601
Security:	CVE-2017-8105, CVE-2017-8287
e186ae0482
Koop Mast (kwm) · 2.7.1
Update freetype2 to 2.7.1.

* List licenses
* Add DEBUG, DOCS, TABLE_VALIDATION and SUBPIXEL_HINTING options.
* Sort options lines by name.
* Add pkg-message describing how certain options can be overwritten
  at run time, like the subpixel hinting engine.
* Fix the build of graphics/inventor.

PR:		ports/211201
Submitted by:	Piotr Kubaj <pkubaj@anongoth.pl>
Discussed with:	jbeigh@, lightside@gmx.com
Exp-run:	antoine@ (earlier version)
a25c66e9e7
Mathieu Arnold (mat) · 2.6.3
Remove ${PORTSDIR}/ from dependencies, categories m, n, o, and p.

With hat:	portmgr
Sponsored by:	Absolight
8d6597e0bb
Koop Mast (kwm) · 2.6.3
Update freetype2 to 2.6.3.
3e3a0ac7fd
Koop Mast (kwm) · 2.6.2
Update freetype2 to 2.6.2. [1]

Mark magicpoint broken, maintainer is notified.

Exp-runs run by antoine@

This version also fixes shadowing of TYPEOF in ftconfig.h [2]

PR:		203554 [1], 202083 [2]
Submitted by:	rhurlin@gwdg.de [2]
e1add76b39
Koop Mast (kwm) · 2.6_1
Revert a upstream commit that causes text getting cut off, while upstream investigates the issue.

Submitted by:	Daniel Kolesa
Tested by:	Daniel Kolesa
1a3e636c60
Koop Mast (kwm) · 2.6
Update freetype2 to 2.6.
852a0439a1
Dmitry Marakasov (amdmi3) · 2.5.5
- Add CPE info

Approved by:	portmgr blanket
9ddcacf81b
Baptiste Daroussin (bapt) · 2.5.5
Remove dead RINGSERVER
fdf29be1f6
Koop Mast (kwm) · 2.5.5
Update freetype2 to 2.5.5.

Handling of uncompressed PCF files again (regression introduced in 2.5.4).
d44418571a
Baptiste Daroussin (bapt) · 2.5.4_1
Bump portrevision after png update
bb21093773
Antoine Brodin (antoine) · 2.5.4
Change libpng15.so to libpng.so in LIB_DEPENDS to prepare the upgrade
7ae46e9b12
Koop Mast (kwm) · 2.5.4
Update freetype2 to 2.5.4.

MFH:		2014Q4
Security:	567beb1e-7e0a-11e4-b9cc-bcaec565249c
1477948d4a
Koop Mast (kwm) · 2.5.3_3
Turn on the LCD_FILTERING option by default for sub-pixel rendering. [1] Drop :keepla from USES=libtool

Approved by:	core@ [1]
bd19905799
Antoine Brodin (antoine) · 2.5.3_2
Cleanup plist
115aba45f3
Adam Weinberger (adamw) · 2.5.3_2
Rename p*/ patch-xy patches to reflect the files they modify.
ba06c2d6a3
Baptiste Daroussin (bapt) · 2.5.3_2
Convert GMAKE to MAKE_CMD Please note that lots of invocation of MAKE_CMD here are wrong as they do not properly respect MAKE_ENV and friends

With hat:	portmgr
a33191366c
Tijl Coosemans (tijl) · 2.5.3_2
When linking a library libA with a library libB using libtool, if libB.la exists, libtool will add all libraries libB.la refers to (dependency_libs field) to the linker command line and store them in the dependency_libs field of libA.la.  So everything that subsequently links with libA will also link to these extra libraries.  This causes too much overlinking.

This commit modifies Mk/Uses/libtool.mk so it empties the dependency_libs
field in .la libraries during staging.  However, because .la libraries have
very limited use when dependency_libs is empty it makes sense to completely
remove them during staging.

So with this commit USES=libtool is modified to remove .la libraries and a
new form (USES=libtool:keepla) is introduced in case they need to be kept
(dependency_libs is still emptied).

PORTREVISION is bumped on all ports with USES=libtool that install .la
libraries.  Most ports are also changed to add :keepla because .la
libraries have to be kept around as long as there are dependent ports with
.la libraries that refer to them in their dependency_libs field.  In most
cases :keepla can be removed again as soon as all dependent ports that
install .la libraries have some form of USES=libtool added to their
Makefile.

PR:		ports/188759
Exp-run:	bdrewery
Approved by:	portmgr (bdrewery)
aad09bc5e2