diff --git a/freetype.spec b/freetype.spec index e188fe9..3425cd7 100644 --- a/freetype.spec +++ b/freetype.spec @@ -4,7 +4,7 @@ Summary: A free and portable font rendering engine Name: freetype Version: 2.10.4 -Release: 10%{?dist} +Release: 11%{?dist} License: (FTL or GPLv2+) and BSD and MIT and Public Domain and zlib with acknowledgement URL: http://www.freetype.org Source: http://download.savannah.gnu.org/releases/freetype/freetype-%{version}.tar.xz @@ -42,14 +42,7 @@ Patch10: freetype-2.10.4-properly-guard-face_index.patch Patch11: freetype-2.10.4-guard-face-size.patch # CVE-2025-27363 -# https://access.redhat.com/security/cve/cve-2025-27363 # https://bugzilla.redhat.com/show_bug.cgi?id=2351357 -# https://issues.redhat.com/browse/RHEL-83104 -# https://issues.redhat.com/browse/RHEL-83109 -# Patch initially by Marc Deslauriers of Canonical -# https://www.openwall.com/lists/oss-security/2025/03/14/3 -# Adjusted for EL9 by Jonathan Wright of AlmaLinux -# and a member of the Meta security team Patch12: freetype-2.10.4-cve-2025-27363.patch BuildRequires: gcc @@ -261,9 +254,16 @@ rm -f $RPM_BUILD_ROOT%{_libdir}/*.{a,la} %{_mandir}/man1/* %changelog +* Thu Apr 10 2025 Marek Kasik - 2.10.4-11 +- Adjust text in the spec file +- Resolves: RHEL-83109 + * Fri Mar 14 2025 Michel Lind - 2.10.4-10 - Fix for CVE-2025-27363 out-of-bound write vulnerability -- Resolves: RHEL-83104 +- Patch initially by Marc Deslauriers of Canonical +- https://www.openwall.com/lists/oss-security/2025/03/14/3 +- Adjusted for EL9 by Jonathan Wright of AlmaLinux +- and a member of the Meta security team - Resolves: RHEL-83109 * Tue May 31 2022 Marek Kasik - 2.10.4-9