print/linux-c7-freetype: Update WWW https://www.freetype.org/ redirects to https://freetype.org/ Approved by: portmgr (blanket)be3ca5a6f7
Port details
print/linux-c7-freetype2.8_3
Font rendering engine (Linux CentOS 7.9.2009)
- Maintainer
- emulation@FreeBSD.org
- Packages
- linux-c7-freetype 2.8_3
- Upstream
- up to date
- CPE
freetype:freetypefrom the port- WWW
- https://freetype.org/
- Links
- cgit · VuXML
Unaddressed (6) · The CVE record lists this version as affected, no VuXML entry names the CVE
Updating to 2.12.0 would fix 4 of 6 unaddressed CVEs, according to the CVE records.
Fixed up to each version, cumulative: 2.10.4 1 · 2.12.0 4
| CVE-2022-27404 | 9.8 | 2022-04-22 | FreeType commit 1e2eb65048f75c64b68708efed6ce904c31f3b2f was discovered to contain a heap buffer overflow via the function sfnt_init_face. |
| CVE-2020-15999 | 9.6 | 2020-11-03 | Heap buffer overflow in Freetype in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
| CVE-2025-27363 | 8.1 | 2025-03-11 | An out of bounds write exists in FreeType versions 2.13.0 and below (newer versions of FreeType are not vulnerable) when attempting to parse font subglyph structures rel… |
| CVE-2022-27405 | 7.5 | 2022-04-22 | FreeType commit 53dfdcd8198d2b3201a23c4bad9190519ba918db was discovered to contain a segmentation violation via the function FNT_Size_Request. |
| CVE-2022-27406 | 7.5 | 2022-04-22 | FreeType commit 22a0cccb4d9d002f33c1ba7a4b36812c7d4f46b5 was discovered to contain a segmentation violation via the function FT_Request_Size. |
| CVE-2018-6942 | 6.5 | 2018-02-13 | An issue was discovered in FreeType 2 through 2.9. A NULL pointer dereference in the Ins_GETVARIATION() function within ttinterp.c could lead to DoS via a crafted font f… |
VuXML only (0) · listed, port not fixed yet
None.
pkg audit reports nothing for this version.Fixed (0)
No VuXML entries for this package.
Commits (12)
Framework: Make use of USE_LINUX=imageformat-libs2626acef73
Add missing WWW entries These ports reference the pkg-descr file of some other port and used to get the WWW entry from that other port's file. Reported by: dan@langille.org (Dan Langille)60764ff075
*: Linux emulation: add support for aarch64 PR: 256008 Submitted by: Vincent Milum Jr (prior version) Approved by: emulation (maintainer timeout)c7dd5ca11a
print/linux-c7-freetype: Add CPE information Approved by: portmgr (blanket)00a04652e1
One more small cleanup, forgotten yesterday. Reported by: lwhsucf118ccf87
Remove # $FreeBSD$ from Makefiles.305f148f48
Update Linux CentOS ports to 7.9.2009.9aae2889e0
Update to CentOS 7.7.1908. Put libdrm into a separate port so it can be kept at the CentOS 7.6 version. The new version fails to detect graphics hardware on FreeBSD.e4c0bd396a
Address some portlint warnings in the Linux infrastructure ports. Eliminate LINUXNAME from port Makefiles. This was just a helper variable without special meaning outside port Makefiles but several developers have copied it to new ports where it was then unused, apparently thinking that it did have some special meaning.bb5cf6c4f3
Eliminate RPMVERSION from Linux ports and set DISTVERSIONSUFFIX instead. This puts all version information together in the port Makefiles.5b721b6172
Update CentOS 7 ports to 7.6.1810. This adds some new ports: converters/linux-c7-fribidi required by x11-toolkits/linux-c7-pango. graphics/linux-c7-libglvnd required by graphics/linux-c7-dri. graphics/linux-c7-wayland required by graphics/linux-c7-dri. print/linux-c7-freetype unbundled from emulators/linux_base-c7 because it depends on graphics/linux-c7-png now. Mesa OpenGL libraries in graphics/linux-c7-dri now support libglvnd (GL Vendor-Neutral Dispatch library) which allows some applications to use Mesa while others use Nvidia OpenGL. The x11/nvidia-driver* ports have been changed so versions above 390.42 now use CentOS libglvnd and no longer install a bundled copy. PR: 229431 Submitted by: pkubaj (partly)f099d068fc