Thomas Perale 953c7fb20d package/freetype: patch CVE-2026-23865
Fixes the following security vulnerability:

- CVE-2026-23865:
    An integer overflow in the tt_var_load_item_variation_store function
    of the Freetype library in versions 2.13.2 and 2.13.3 may allow for an
    out of bounds read operation when parsing HVAR/VVAR/MVAR tables in
    OpenType variable fonts. This issue is fixed in version 2.14.2.

For more information, see
  - https://www.cve.org/CVERecord?id=CVE-2026-23865
  - fc85a25584.patch

(cherry picked from commit 6c3933d14b)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-04-24 18:20:34 +02:00
2026-04-10 12:20:23 +02:00
2025-01-15 21:30:31 +01:00
2026-04-21 20:25:36 +02:00
2026-04-03 12:21:54 +02:00
2026-04-21 22:58:11 +02:00
2026-01-15 09:36:08 +01:00
2026-04-03 12:21:44 +02:00

Buildroot is a simple, efficient and easy-to-use tool to generate embedded
Linux systems through cross-compilation.

The documentation can be found in docs/manual. You can generate a text
document with 'make manual-text' and read output/docs/manual/manual.text.
Online documentation can be found at https://buildroot.org/docs.html

To build and use the buildroot stuff, do the following:

1) run 'make menuconfig'
2) select the target architecture and the packages you wish to compile
3) run 'make'
4) wait while it compiles
5) find the kernel, bootloader, root filesystem, etc. in output/images

You do not need to be root to build or run buildroot.  Have fun!

Buildroot comes with a basic configuration for a number of boards. Run
'make list-defconfigs' to view the list of provided configurations.

Please feed suggestions, bug reports, insults, and bribes back to the
buildroot mailing list: buildroot@buildroot.org
You can also find us on #buildroot on OFTC IRC.

If you would like to contribute patches, please read
https://buildroot.org/manual.html#submitting-patches
Description
No description provided
Readme 207 MiB
Languages
Makefile 62.5%
Python 19%
C 8.5%
Shell 6.1%
PHP 1.4%
Other 2.1%