Thomas Perale 953c7fb20d package/freetype: patch CVE-2026-23865 ...

Fixes the following security vulnerability:

- CVE-2026-23865:
    An integer overflow in the tt_var_load_item_variation_store function
    of the Freetype library in versions 2.13.2 and 2.13.3 may allow for an
    out of bounds read operation when parsing HVAR/VVAR/MVAR tables in
    OpenType variable fonts. This issue is fixed in version 2.14.2.

For more information, see
  - https://www.cve.org/CVERecord?id=CVE-2026-23865
  - fc85a25584.patch

(cherry picked from commit 6c3933d14b)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>

2026-04-24 18:20:34 +02:00

..

0001-Check-for-overflow-in-array-size-computation.patch

…

Config.in

…

freetype.hash

…

freetype.mk

…