From mboxrd@z Thu Jan 1 00:00:00 1970 Delivery-date: Thu, 15 Oct 2026 20:22:38 +0200 Received: from metis.whiteo.stw.pengutronix.de ([2a0a:edc0:2:b01:1d::104]) by lore.white.stw.pengutronix.de with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1xHQ6A-00E1kl-0H for lore@lore.pengutronix.de; Thu, 15 Oct 2026 20:22:38 +0200 Received: from [127.0.0.1] (helo=metis.whiteo.stw.pengutronix.de) by metis.whiteo.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1xHQ69-0000K4-4h; Thu, 15 Oct 2026 20:22:37 +0200 Received: from mx1.white.stw.pengutronix.de ([185.203.200.13]) by metis.whiteo.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1xHQ5y-0000JF-62 for ptxdist@pengutronix.de; Thu, 15 Oct 2026 20:22:27 +0200 Received: from AS8PR04CU009.outbound.protection.outlook.com (mail-westeuropeazlp170110003.outbound.protection.outlook.com [IPv6:2a01:111:f403:c201::3]) by mx1.white.stw.pengutronix.de (Postfix) with ESMTPS id C6F4B200208 for ; Thu, 15 Oct 2026 20:22:21 +0200 (CEST) ARC-Seal: i=2; s=20260414; d=pengutronix.de; t=1792088541; a=rsa-sha256; cv=pass; b=cmRaJtmH+qgswbgQEbDpxuHUp2UQKFr7qmo9fUo1I9Xm6DDucuaax3jqh3afRKoSvpEn1V jUSA9w7NC7ZRVnXXniI2pmGmw2IFWPI0pCJgTWrkJXKOy17MfaABCAXmAsjzSzXmGCOELJ OdA7K0kS928MB/US+2tQtfk10evEIY0xo0wZxUfsmgMnu6TrM9nsHw0Ce7WZLYwM1sDsCT LYLVURgWDbs9rqxKbediNWarXDw33d/chHi3FSCFJCYSEIryCs80wvuWlZwZzwrIJYvVT6 un9hd5hAQj3ranw+KjCB3MTUxnQoyOrDP7vYdMDGk3dk8uli6vMzlgasAKZSDw== ARC-Authentication-Results: i=2; mx1.white.stw.pengutronix.de; dkim=pass header.d=t2datacom.onmicrosoft.com header.s=selector1-t2datacom-onmicrosoft-com header.b=FRJlSo1K; spf=pass (mx1.white.stw.pengutronix.de: domain of christian.melki@t2data.com designates 2a01:111:f403:c201::3 as permitted sender) smtp.mailfrom=christian.melki@t2data.com; arc=pass ("microsoft.com:s=arcselector10001:i=1"); dmarc=pass (policy=none) header.from=t2data.com ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=pengutronix.de; s=20260414; t=1792088541; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding:dkim-signature; bh=3HHElX/LYBm9A5SOpfr3WQWizvH6UkfR2LuluURmRpk=; b=bi3ATIXZ+UoR72zZrsGwPt2K3CbyXBzc/uVamRWVOcSfIegTovsweD/TpOOjIenlb461ki udN2RjDkeoDyitukX4rPEPawANpBtkc/4SkPX4Cs2ow8+B1p7cXo1MMXWzamILav6BGrv2 9rAYlas13IzFqLhMpRLWgh8vizSWQ/FHd2bULvJnnIZbNWKz/QrdAoc6bRXzkw2UDMo6Lm tPpiXLlmyas5SKcnqKoIESlyuUg3gpSL1gES35qMVVISlKvObIW8bOi52mny7w+LJ8XPCh h5KWPQNE4eQD1xdgc2F0pr6U8dMMjhevwHnZ/cWI3TRkrN1icr+Eyq0f9vyJpA== ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=GFy11ChxGv4ifsOJhedga8j5Jkqz1hg6pNkullMJHad0mIqD7RpQpq+a98ZcYNllPpo8l5HWUY5M+2NiVgAqEDHzMN1lxE8FIpaBhHms9uj1uWU7CUyQBA7JefP1/XyMvZ5udutKxT9eMqiyx+kDYywjpAjsiO/exrOpMJzy+cqTsnYMjrLcXE2CVSNCegPI8KuAYHEYBl155bfMMWoqXgVBOou6lPlG0m5KCpzk9t74LY+EfUzMsZx7CKJiKfH+taCx4iNV/qFOKFjr+YtPwNQ97+Y8+Shb8J6xyVBDpFfk9fq173ZzXY4pbar9O5X3QK/8zbs4NxmNa/uHh6dEeg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=3HHElX/LYBm9A5SOpfr3WQWizvH6UkfR2LuluURmRpk=; b=Yo/cdSWYH62YG7UlBbd5YNt6/XYhRlzQZ1mSQPBsASXGaMS/tyrr7zQAjVS2voa/SGzpF17D00iEg/ZJK3qC+xK1XjJxZYSnCgkssGek4KrBLSinOWhBXFHfZ74g1tI0+OifZER+LlydTw9e0bkYPrw9YRoNt/XXxY22d8YMhkmEng8HiubxxlvBago41eAmgIJwShi7qjv0bZjwqW2VpjV3zXQgSG0wZUd0h0ownmCKos8uMOoLjd9L/AGU8zlk2cZ9mkWp9q/hOo5c68orgD9zYfQyhJwbRbUHAbGrPpKoH4DUkq+dbWlUmd7VYL4SFIdNl1/w+hFqFCGUj3Be8g== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=t2data.com; dmarc=pass action=none header.from=t2data.com; dkim=pass header.d=t2data.com; arc=none Received: from PAXP251MB0394.EURP251.PROD.OUTLOOK.COM (2603:10a6:102:1dc::12) by AS8P251MB0119.EURP251.PROD.OUTLOOK.COM (2603:10a6:20b:401::16) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.522.13; Thu, 15 Oct 2026 18:22:18 +0000 Received: from PAXP251MB0394.EURP251.PROD.OUTLOOK.COM ([fe80::c8e9:257a:7136:fdc2]) by PAXP251MB0394.EURP251.PROD.OUTLOOK.COM ([fe80::c8e9:257a:7136:fdc2%3]) with mapi id 15.21.0522.012; Thu, 15 Oct 2026 18:22:18 +0000 From: Christian Melki To: ptxdist@pengutronix.de Date: Thu, 15 Oct 2026 20:22:12 +0200 Message-ID: <20261015182212.786390-1-christian.melki@t2data.com> X-Mailer: git-send-email 2.43.0 Content-Transfer-Encoding: 8bit Content-Type: text/plain X-ClientProxiedBy: GVYP280CA0023.SWEP280.PROD.OUTLOOK.COM (2603:10a6:150:fa::26) To PAXP251MB0394.EURP251.PROD.OUTLOOK.COM (2603:10a6:102:1dc::12) MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: PAXP251MB0394:EE_|AS8P251MB0119:EE_ X-MS-Office365-Filtering-Correlation-Id: eea4e362-2fcd-4dca-abb1-08df2ae93f14 X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0; ARA:13230040|366016|376014|1800799024|52116014|23010399003|38350700014|56012099006|261009221227099003|261009223027099003|10067099003|18002099003|3023799007; X-Microsoft-Antispam-Message-Info: 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 X-Forefront-Antispam-Report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:PAXP251MB0394.EURP251.PROD.OUTLOOK.COM; PTR:; CAT:NONE; SFS:(13230040)(366016)(376014)(1800799024)(52116014)(23010399003)(38350700014)(56012099006)(261009221227099003)(261009223027099003)(10067099003)(18002099003)(3023799007); DIR:OUT; SFP:1102; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: =?us-ascii?Q?+onhOOE44XVt6a1ptS8ow2tkyodmlyf/GbebI4GIK+3kWODMj7jNAADLyuAH?= =?us-ascii?Q?rA7z0DPWB5r+2uu2TLI679TAK/zPY6R+C2/A8T9oi2KC6GXXjqMLqsEmZHeF?= =?us-ascii?Q?ruNOF/n8WwIXRl9fJbyTo7k8vMBDS7Kk72G84DkHo0AbcIB6wML8LFKhHzON?= =?us-ascii?Q?YDSzeF1FJOAT0r69X35J+Benr8AhlUdpGIbRbH6jecu25MwiFyzuYyFPs7pf?= =?us-ascii?Q?Eo9vgMyWDa63uZ4vMgF/3EcnsH/rdad3uKU9fe0gZbPAsrq8wS1lTPRdLGYn?= =?us-ascii?Q?Lp0RlCwKNGxek6nRXc+ivj1Urwq79CfDaP9nlpVYr6SINsRKwxTEQ0nBEg5b?= =?us-ascii?Q?VS8ZpriltWtt8pgcqqEZx70cQWNzhYDDE8IMG3+1ddH6wTOU3gZCmXq8yzVN?= =?us-ascii?Q?WX9JM0A/tGnTwEeDtrVpyg5yyg6Eo+dnVBep0785kQiFv7nl73/Qa9uEyPvm?= =?us-ascii?Q?IZWGdkJPkPOagNsHf7Xqd3WFXdr29elpc0QXSyfUOsJ3jKGmfLif7k/PpIQ1?= =?us-ascii?Q?94h+jQ0TXpl7qLv42v6yR1BMmpI3dqx1yb2rhfkiqKfawsaT8Hb+WXIxGydP?= =?us-ascii?Q?R1fe0clIpi7ahFZxrfgtZE5nTrslyqnIps2ciK9H/dDglcRgo3/zM+fEWk8I?= =?us-ascii?Q?vsRjP7tXC+cqpJZT0n2ZqyeHStPANKS6AqWn4NlzdUfBUaUZBmBGlddJvh+/?= =?us-ascii?Q?DDg9cr8jFVye5sqKp4wFOS38Er0uETqmKEJEMLRVMgQpvxY6QGKz2o4bnCaA?= =?us-ascii?Q?8TdH9Chz5EaqvDWxo+HYQyg98Wu9pKH2m6JyRbzhW5dR7dx9qw/GfG6w+g0h?= =?us-ascii?Q?NsQZizoSBVNL8aNzSZTabrbo4MMHhJszL1IBkAQdUBrTBsJBUVeqgmDKijpX?= =?us-ascii?Q?I2MuVXkRl6xvqRLjyFDjNBsivvp6Vs7FSo0x5czJdKdymATW3hVHpwW+iNBp?= =?us-ascii?Q?eg7MlGIK72/r+iBJAu8QEsHKgGd4OWOpl/PP8TIMCJ/WLSUIFzAMMb/qAGg8?= =?us-ascii?Q?AiSvdDugvSWziFHfYTPkXVNF+Ha3ubRzlPmHLXoTjfYZCBtGppuydEpv0FD2?= =?us-ascii?Q?BXq0TKxAqCK3tBOp2cT/7euC3HOctEkj+04hgGTLdRQMukT+uY8TnemxbkSh?= =?us-ascii?Q?KKvB0fs9qrOPzuvyfmQ2Q2pOaP7WiPpfnu24yNxMaNxkZ1tXhp+vnTWlWTeO?= =?us-ascii?Q?SmR8B4EoLRd76Oi8Tsyw5Jtc9OZtAGO4ebJMfjymSfevDdXhvvnco2jWVr8E?= =?us-ascii?Q?zrCa86dIoCdpf1EgHZMAMMDiUSvMNeu5hHCTZ9e7ODo89Jyb3dz7+jpWEkON?= =?us-ascii?Q?pgQN5244urr/2yRepyV9qZk/RXYQaLTjkDPz+p4itONlhFdMPecYtYng6ieS?= =?us-ascii?Q?dwEI7EabHMdAn5E9OTSHWpXKz5JDwyOxxyKUw4XWIcwUTy/rJCXCE2MPhezz?= =?us-ascii?Q?IzLFYUwqrN/mLkEM8+G0OOOFe6fkQuPSrDYkBExW89VXKMhsRGSBL964cBtm?= =?us-ascii?Q?BaNo/AFCB0b9/NJRjDgtkKsWnYTMzEOfKut1xH9hHAIXmBpYa1yEBRBKrGXH?= =?us-ascii?Q?msyjkDDiOrnNWNf13FT6tK2ZdIJnr3U8EjbjdVnBfeulIuneScBQtiZC8fYV?= =?us-ascii?Q?WPjp+ttJZPf5547NXCEwGvqJ0W0W94bePVfchU2x7IlkIO3x3Km/U1BYZ68+?= =?us-ascii?Q?7HSHrjz0K+VexV4u33mxa8SNYdSuXtxKPf05frNMgIS+XZpntxf713dvw1yN?= =?us-ascii?Q?iUcq9RHupjGj8Z/FLsdABiIVICSXrQ8=3D?= X-OriginatorOrg: t2data.com X-MS-Exchange-CrossTenant-Network-Message-Id: eea4e362-2fcd-4dca-abb1-08df2ae93f14 X-MS-Exchange-CrossTenant-AuthSource: PAXP251MB0394.EURP251.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 15 Oct 2026 18:22:18.4777 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 27928da5-aacd-4ba1-9566-c748a6863e6c X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: ZXk4ubK/V+h+xGMOfPGXYC+8cmtMYr0M7nWk3yC9rey53bCMvXQD6m8Pqi1blmQop0uJaSNqo8AthxlRMBgGjfgLSSJCCTBvrMkXoNkTJ8A= X-MS-Exchange-Transport-CrossTenantHeadersStamped: AS8P251MB0119 X-Spamd-Result: default: False [-3.50 / 15.00]; BAYES_HAM(-3.00)[100.00%]; MID_CONTAINS_FROM(1.00)[]; ARC_ALLOW(-1.00)[microsoft.com:s=arcselector10001:i=1]; DMARC_POLICY_ALLOW(-0.50)[t2data.com,none]; R_MISSING_CHARSET(0.50)[]; R_SPF_ALLOW(-0.20)[+ip6:2a01:111:f403:c000::/51]; R_DKIM_ALLOW(-0.20)[t2datacom.onmicrosoft.com:s=selector1-t2datacom-onmicrosoft-com]; MIME_GOOD(-0.10)[text/plain]; RCPT_COUNT_ONE(0.00)[1]; ASN(0.00)[asn:8075, ipnet:2a01:111:f000::/36, country:US]; TO_DN_NONE(0.00)[]; FROM_HAS_DN(0.00)[]; MIME_TRACE(0.00)[0:+]; ARC_SIGNED(0.00)[pengutronix.de:s=20260414:i=2]; FROM_EQ_ENVFROM(0.00)[]; NEURAL_HAM(-0.00)[-1.000]; TO_MATCH_ENVRCPT_ALL(0.00)[]; RCVD_COUNT_TWO(0.00)[2]; RCVD_TLS_LAST(0.00)[]; RCVD_IN_DNSWL_NONE(0.00)[2a01:111:f403:c201::3:from]; DKIM_TRACE(0.00)[t2datacom.onmicrosoft.com:+] X-Rspamd-Action: no action X-Rspamd-Server: mx1 X-Rspamd-Queue-Id: C6F4B200208 X-Stat-Signature: b5wik5xx9ehs97uohukuihpgebwic66q X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on metis.whiteo.stw.pengutronix.de X-Spam-Level: X-Spam-Status: No, score=-0.9 required=5.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,FORGED_SPF_HELO,RCVD_IN_DNSWL_NONE,SPF_HELO_PASS autolearn=no autolearn_force=no version=3.4.2 Subject: [ptxdist] [PATCH] freetype: Version bump. 2.14.3 -> 2.15.0 X-BeenThere: ptxdist@pengutronix.de X-Mailman-Version: 2.1.29 Precedence: list List-Id: PTXdist Development Mailing List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: ptxdist@pengutronix.de Sender: "ptxdist" X-SA-Exim-Connect-IP: 127.0.0.1 X-SA-Exim-Mail-From: ptxdist-bounces@pengutronix.de X-SA-Exim-Scanned: No (on metis.whiteo.stw.pengutronix.de); SAEximRunCond expanded to false Doesn't look that major. https://gitlab.freedesktop.org/freetype/freetype/-/blob/VER-2-15-0/docs/CHANGES Plugs CVE: CVE-2026-95512: Fix DoS from specially crafted CID-keyed font. * Forward patchset with slight offset adjustment. Signed-off-by: Christian Melki --- ...erate-freetype-config-and-freetype2.pc-correctly.patch | 8 ++++---- patches/{freetype-2.14.3 => freetype-2.15.0}/autogen.sh | 0 patches/{freetype-2.14.3 => freetype-2.15.0}/series | 0 rules/freetype.make | 4 ++-- 4 files changed, 6 insertions(+), 6 deletions(-) rename patches/{freetype-2.14.3 => freetype-2.15.0}/0001-generate-freetype-config-and-freetype2.pc-correctly.patch (95%) rename patches/{freetype-2.14.3 => freetype-2.15.0}/autogen.sh (100%) rename patches/{freetype-2.14.3 => freetype-2.15.0}/series (100%) diff --git a/patches/freetype-2.14.3/0001-generate-freetype-config-and-freetype2.pc-correctly.patch b/patches/freetype-2.15.0/0001-generate-freetype-config-and-freetype2.pc-correctly.patch similarity index 95% rename from patches/freetype-2.14.3/0001-generate-freetype-config-and-freetype2.pc-correctly.patch rename to patches/freetype-2.15.0/0001-generate-freetype-config-and-freetype2.pc-correctly.patch index a903b2480..39222bc89 100644 --- a/patches/freetype-2.14.3/0001-generate-freetype-config-and-freetype2.pc-correctly.patch +++ b/patches/freetype-2.15.0/0001-generate-freetype-config-and-freetype2.pc-correctly.patch @@ -11,10 +11,10 @@ Signed-off-by: Michael Olbrich 4 files changed, 18 insertions(+), 26 deletions(-) diff --git a/builds/unix/configure.ac b/builds/unix/configure.ac -index 5c4ccf1e8b34..e3cd66f0638b 100644 +index a0e86517d347..968c4f6d3104 100644 --- a/builds/unix/configure.ac +++ b/builds/unix/configure.ac -@@ -1200,7 +1200,9 @@ AC_CONFIG_HEADERS([ftconfig.h]) +@@ -1245,7 +1245,9 @@ AC_CONFIG_HEADERS([ftconfig.h]) # and `builds/unix/unix-cc.mk' that will be used by the build system # AC_CONFIG_FILES([unix-cc.mk:unix-cc.in @@ -26,7 +26,7 @@ index 5c4ccf1e8b34..e3cd66f0638b 100644 AC_OUTPUT diff --git a/builds/unix/freetype-config.in b/builds/unix/freetype-config.in -index 911b5347c715..db82729d1cd1 100644 +index 4e69a06725cd..05047c245314 100644 --- a/builds/unix/freetype-config.in +++ b/builds/unix/freetype-config.in @@ -16,13 +16,6 @@ export LC_ALL @@ -96,7 +96,7 @@ index fe389f4b6fef..885444efebf7 100644 +Libs.private: @PKGCONFIG_LIBS_PRIVATE@ Cflags: -I${includedir}/freetype2 diff --git a/builds/unix/unix-def.in b/builds/unix/unix-def.in -index fe629272d5fe..53977e7e7410 100644 +index 9bf2e2b57235..fe4165d99cea 100644 --- a/builds/unix/unix-def.in +++ b/builds/unix/unix-def.in @@ -157,7 +157,4 @@ $(OBJ_BUILD)/freetype2.pc: $(TOP_DIR)/builds/unix/freetype2.in diff --git a/patches/freetype-2.14.3/autogen.sh b/patches/freetype-2.15.0/autogen.sh similarity index 100% rename from patches/freetype-2.14.3/autogen.sh rename to patches/freetype-2.15.0/autogen.sh diff --git a/patches/freetype-2.14.3/series b/patches/freetype-2.15.0/series similarity index 100% rename from patches/freetype-2.14.3/series rename to patches/freetype-2.15.0/series diff --git a/rules/freetype.make b/rules/freetype.make index cfa0c2f3f..75f01038d 100644 --- a/rules/freetype.make +++ b/rules/freetype.make @@ -15,8 +15,8 @@ PACKAGES-$(PTXCONF_FREETYPE) += freetype # # Paths and names # -FREETYPE_VERSION := 2.14.3 -FREETYPE_SHA256 := 36bc4f1cc413335368ee656c42afca65c5a3987e8768cc28cf11ba775e785a5f +FREETYPE_VERSION := 2.15.0 +FREETYPE_SHA256 := 93cd47eb719c325107f2d3cf087d06299e944c3b48a40b55537302304dea1dd5 FREETYPE := freetype-$(FREETYPE_VERSION) FREETYPE_SUFFIX := tar.xz FREETYPE_SOURCE := $(SRCDIR)/$(FREETYPE).$(FREETYPE_SUFFIX) -- 2.43.0