[Buildroot] [PATCH v1] freetype: bump version to 2.9.1
Peter Seiderer
ps.report at gmx.net
Thu Nov 29 22:44:06 UTC 2018
Hello Peter,
On Thu, 29 Nov 2018 17:20:58 +0100, Peter Korsgaard <peter at korsgaard.com> wrote:
> >>>>> "Peter" == Peter Seiderer <ps.report at gmx.net> writes:
>
> > According to [1]:
> > - fixes CVE-2018-6942
>
> It is always great to add a short description what this is about. I've
> added:
>
> A NULL pointer dereference in the Ins_GETVARIATION() function within
> ttinterp.c could lead to DoS via a crafted font file.
>
> (from https://security-tracker.debian.org/tracker/CVE-2018-6942)
O.k, will try to add some the next time...
>
>
> > --- a/package/freetype/freetype.mk
> > +++ b/package/freetype/freetype.mk
> > @@ -4,7 +4,7 @@
> > #
> > ################################################################################
>
> > -FREETYPE_VERSION = 2.9
> > +FREETYPE_VERSION = 2.9.1
> > FREETYPE_SOURCE = freetype-$(FREETYPE_VERSION).tar.bz2
> > FREETYPE_SITE = http://download.savannah.gnu.org/releases/freetype
> > FREETYPE_INSTALL_STAGING = YES
> > @@ -14,6 +14,9 @@ FREETYPE_LICENSE_FILES = docs/LICENSE.TXT docs/FTL.TXT docs/GPLv2.TXT
> > FREETYPE_DEPENDENCIES = host-pkgconf
> > FREETYPE_CONFIG_SCRIPTS = freetype-config
>
> > +# since 2.9.1 needed for freetyep-config install
>
> s/freetyep/freetype/
Ups, thanks for fixing...
>
> > +FREETYPE_CONF_OPTS = --enable-freetype-config
>
> We probably also need this for the host variant. Committed after adding
> that, thanks.
>
Was not sure about this as FREETYPE_FIX_CONFIG_FILE and FREETYPE_FIX_CONFIG_FILE_LIBS
are only applied for the target build, but the option will not hurt for the host build...
Thanks for all the fixes ;-)
Regards,
Peter
More information about the buildroot
mailing list