FreeType 2.4.8 has been released. It is available from
http://savannah.nongnu.org/download/freetype/ or http://sourceforge.net/projects/freetype/files/ The latter site also holds older versions of the FreeType library. This is a security update; see below for the relevant snippet from the CHANGES file. Users of version 2.4.7 should upgrade immediately if they process CID-keyed PostScript fonts. Werner PS: It takes up to one day until the FreeType archive files on Savannah are available on all GNU mirrors. ---------------------------------------------------------------------- FreeType 2 is a software font engine that is designed to be small, efficient, highly customizable, and portable while capable of producing high-quality output (glyph images) of most vector and bitmap font formats. Note that FreeType 2 is a font service and doesn't provide APIs to perform higher-level features, like text layout or graphics processing (e.g., colored text rendering, `hollowing', etc.). However, it greatly simplifies these tasks by providing a simple, easy to use, and uniform interface to access the content of font files. FreeType 2 is released under two open-source licenses: our own BSD-like FreeType License and the GPL. It can thus be used by any kind of projects, be they proprietary or not. ---------------------------------------------------------------------- CHANGES BETWEEN 2.4.7 and 2.4.8 I. IMPORTANT BUG FIXES - Some vulnerabilities in handling CID-keyed PostScript fonts have been fixed; see CVE-2011-3439. II. MISCELLANEOUS - Chris Liddell contributed a new API, `FT_Get_PS_Font_Value', to retrieve most of the dictionary keys in Type 1 fonts. _______________________________________________ Freetype-announce mailing list Freetype-announce@nongnu.org https://lists.nongnu.org/mailman/listinfo/freetype-announce