[ITA from Yaakov] freeport2

[ITA from Yaakov] freeport2

[Ken Brown]

[-- Attachment #1: Type: text/plain, Size: 544 bytes --]

My cygport file is attached.  Aside from some trivial URL changes, it differs 
from Yaakov's as follows:

1. I've bumped the version from 2.9.1 to 2.10.2, the latest upstream release.

2. I removed the Fedora patch freetype-2.9-ftsmooth.patch, which is no longer 
used in the Fedora build.

3. I removed the line 'cygmake refdoc', which was previously used to build the 
API reference manual.  The html files are now included in the source tarball. 
The refdoc target is apparently now only needed for a build from the upstream 
git repo.

Ken

[-- Attachment #2: freetype2.cygport --]
[-- Type: text/plain, Size: 1961 bytes --]

NAME="freetype2"
VERSION=2.10.2
RELEASE=1
CATEGORY="Libs"
SUMMARY="FreeType font engine"
DESCRIPTION="FreeType 2 is a software font engine that is designed to be small,
efficient, and highly customizable while capable of producing
high-quality output (glyph images)."
HOMEPAGE="http://freetype.sourceforge.net/"
SRC_URI="mirror://sourceforge/freetype/freetype-${VERSION}.tar.xz
         mirror://sourceforge/freetype/freetype-doc-${VERSION}.tar.xz
         mirror://sourceforge/freetype/ft2demos-${VERSION}.tar.xz"
SRC_DIR="freetype-${VERSION}"
PATCH_URI="
	https://src.fedoraproject.org/cgit/rpms/freetype.git/plain/freetype-2.3.0-enable-spr.patch
	https://src.fedoraproject.org/cgit/rpms/freetype.git/plain/freetype-2.2.1-enable-valid.patch
	https://src.fedoraproject.org/cgit/rpms/freetype.git/plain/freetype-2.6.5-libtool.patch
"

PKG_NAMES="${NAME}-demos libfreetype6 libfreetype-devel libfreetype-doc"
freetype2_demos_SUMMARY="${SUMMARY} (demo programs)"
freetype2_demos_CONTENTS="usr/bin/ft*.exe* usr/bin/tt*.exe"
libfreetype6_CONTENTS="--exclude=html usr/bin/*.dll usr/share/doc/"
libfreetype_devel_CONTENTS="usr/include/ usr/lib/ usr/share/aclocal/"
libfreetype_doc_CATEGORY="Doc"
libfreetype_doc_CONTENTS="usr/share/doc/${NAME}/html/"

DIFF_EXCLUDES='aclocal.m4 configure *.html'

src_compile() {
	cd ${S}/builds/unix
	NO_AUTOHEADER=1 \
	ACLOCAL_FLAGS="-I ." \
	cygautoreconf

	mkdir -p ${B}/freetype2
	lndir ${S} ${B}/freetype2
	cd ${B}/freetype2
	CYGCONF_SOURCE=${B}/freetype2
	# harfbuzz: new in 2.5.3, circular dep
	cygconf --with-zlib --with-bzip2 --with-png --without-harfbuzz
	cygmake all

	mkdir -p ${B}/ft2demos
	lndir ${S}/../ft2demos-${PV} ${B}/ft2demos
	cd ${B}/ft2demos
	cygmake
}

src_install() {
	local d

	cd ${B}/freetype2
	cyginstall

	cd ${B}/ft2demos
	dobin bin/*.exe

	cd ${S}/docs
	dodoc [A-HJ-Z]* *.txt

	docinto html
	dodoc ft2faq.html

	for d in design glyphs reference tutorial
	do
		docinto html/${d}
		dodoc ${d}/*
	done
}

Re: [ITA from Yaakov] freeport2

[Ken Brown]

On 5/12/2020 12:50 PM, Ken Brown via Cygwin-apps wrote:
> My cygport file is attached.  Aside from some trivial URL changes, it differs 
> from Yaakov's as follows:
> 
> 1. I've bumped the version from 2.9.1 to 2.10.2, the latest upstream release.
> 
> 2. I removed the Fedora patch freetype-2.9-ftsmooth.patch, which is no longer 
> used in the Fedora build.
> 
> 3. I removed the line 'cygmake refdoc', which was previously used to build the 
> API reference manual.  The html files are now included in the source tarball. 
> The refdoc target is apparently now only needed for a build from the upstream 
> git repo.

Typo in the subject.  s/port/type/

Re: [ITA from Yaakov] freetype2

[Yaakov Selkowitz]

On Tue, 2020-05-12 at 12:50 -0400, Ken Brown via Cygwin-apps wrote:
> My cygport file is attached.  Aside from some trivial URL changes, it differs 
> from Yaakov's as follows:
> 
> 1. I've bumped the version from 2.9.1 to 2.10.2, the latest upstream release.

Unfortunately 2.10 has some ABI/API-breaking changes, which Fedora
mitigates with the following patches:

https://src.fedoraproject.org/rpms/freetype/raw/master/f/freetype-2.10.0-internal-outline.patch

https://src.fedoraproject.org/rpms/freetype/raw/master/f/freetype-2.10.1-debughook.patch

> 2. I removed the Fedora patch freetype-2.9-ftsmooth.patch, which is no longer 
> used in the Fedora build.

Fine.

> 3. I removed the line 'cygmake refdoc', which was previously used to build the 
> API reference manual.  The html files are now included in the source tarball. 
> The refdoc target is apparently now only needed for a build from the upstream 
> git repo.

IIRC there were also new Python module build requirements necessary to
(re)build the docs, so just as well.

> PATCH_URI="
> 	https://src.fedoraproject.org/cgit/rpms/freetype.git/plain/freetype-2.3.0-enable-spr.patch
> 	https://src.fedoraproject.org/cgit/rpms/freetype.git/plain/freetype-2.2.1-enable-valid.patch
> 	https://src.fedoraproject.org/cgit/rpms/freetype.git/plain/freetype-2.6.5-libtool.patch
> "

These currently work through forwarding but should be changed to the
new locations:  
https://src.fedoraproject.org/rpms/freetype/raw/master/f/$FILENAME

--
Yaakov

Re: [ITA from Yaakov] freeport2

[Marco Atzeri]

Am 12.05.2020 um 18:53 schrieb Ken Brown via Cygwin-apps:
> On 5/12/2020 12:50 PM, Ken Brown via Cygwin-apps wrote:
>> My cygport file is attached.  Aside from some trivial URL changes, it 
>> differs from Yaakov's as follows:
>>
>> 1. I've bumped the version from 2.9.1 to 2.10.2, the latest upstream 
>> release.
>>
>> 2. I removed the Fedora patch freetype-2.9-ftsmooth.patch, which is no 
>> longer used in the Fedora build.
>>
>> 3. I removed the line 'cygmake refdoc', which was previously used to 
>> build the API reference manual.  The html files are now included in 
>> the source tarball. The refdoc target is apparently now only needed 
>> for a build from the upstream git repo.
> 
> Typo in the subject.  s/port/type/

freeport2 is not in Cygwin for what I see

https://cygwin.com/packages/package_list.html

so may be it is a  ITP ?

Regards
Marco

Re: [ITA from Yaakov] freeport2

[Ken Brown]

On 5/12/2020 2:08 PM, Marco Atzeri via Cygwin-apps wrote:
> Am 12.05.2020 um 18:53 schrieb Ken Brown via Cygwin-apps:
>> On 5/12/2020 12:50 PM, Ken Brown via Cygwin-apps wrote:
>>> My cygport file is attached.  Aside from some trivial URL changes, it differs 
>>> from Yaakov's as follows:
>>>
>>> 1. I've bumped the version from 2.9.1 to 2.10.2, the latest upstream release.
>>>
>>> 2. I removed the Fedora patch freetype-2.9-ftsmooth.patch, which is no longer 
>>> used in the Fedora build.
>>>
>>> 3. I removed the line 'cygmake refdoc', which was previously used to build 
>>> the API reference manual.  The html files are now included in the source 
>>> tarball. The refdoc target is apparently now only needed for a build from the 
>>> upstream git repo.
>>
>> Typo in the subject.  s/port/type/
    ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

> freeport2 is not in Cygwin for what I see
> 
> https://cygwin.com/packages/package_list.html
> 
> so may be it is a  ITP ?
> 
> Regards
> Marco
> 
> 

Re: [ITA from Yaakov] freetype2

[Ken Brown]

On 5/12/2020 2:02 PM, Yaakov Selkowitz wrote:
> On Tue, 2020-05-12 at 12:50 -0400, Ken Brown via Cygwin-apps wrote:
>> My cygport file is attached.  Aside from some trivial URL changes, it differs
>> from Yaakov's as follows:
>>
>> 1. I've bumped the version from 2.9.1 to 2.10.2, the latest upstream release.
> 
> Unfortunately 2.10 has some ABI/API-breaking changes, which Fedora
> mitigates with the following patches:
> 
> https://src.fedoraproject.org/rpms/freetype/raw/master/f/freetype-2.10.0-internal-outline.patch
> 
> https://src.fedoraproject.org/rpms/freetype/raw/master/f/freetype-2.10.1-debughook.patch
> 
>> 2. I removed the Fedora patch freetype-2.9-ftsmooth.patch, which is no longer
>> used in the Fedora build.
> 
> Fine.
> 
>> 3. I removed the line 'cygmake refdoc', which was previously used to build the
>> API reference manual.  The html files are now included in the source tarball.
>> The refdoc target is apparently now only needed for a build from the upstream
>> git repo.
> 
> IIRC there were also new Python module build requirements necessary to
> (re)build the docs, so just as well.
> 
>> PATCH_URI="
>> 	https://src.fedoraproject.org/cgit/rpms/freetype.git/plain/freetype-2.3.0-enable-spr.patch
>> 	https://src.fedoraproject.org/cgit/rpms/freetype.git/plain/freetype-2.2.1-enable-valid.patch
>> 	https://src.fedoraproject.org/cgit/rpms/freetype.git/plain/freetype-2.6.5-libtool.patch
>> "
> 
> These currently work through forwarding but should be changed to the
> new locations:
> https://src.fedoraproject.org/rpms/freetype/raw/master/f/$FILENAME

Thanks.  I've make those changes.

Ken

Re: [ITA from Yaakov] freeport2

[Marco Atzeri]

Am 12.05.2020 um 20:08 schrieb Marco Atzeri:
> Am 12.05.2020 um 18:53 schrieb Ken Brown via Cygwin-apps:
>> On 5/12/2020 12:50 PM, Ken Brown via Cygwin-apps wrote:
>>> My cygport file is attached.  Aside from some trivial URL changes, it 
>>> differs from Yaakov's as follows:
>>>
>>> 1. I've bumped the version from 2.9.1 to 2.10.2, the latest upstream 
>>> release.
>>>
>>> 2. I removed the Fedora patch freetype-2.9-ftsmooth.patch, which is 
>>> no longer used in the Fedora build.
>>>
>>> 3. I removed the line 'cygmake refdoc', which was previously used to 
>>> build the API reference manual.  The html files are now included in 
>>> the source tarball. The refdoc target is apparently now only needed 
>>> for a build from the upstream git repo.
>>
>> Typo in the subject.  s/port/type/
> 
> freeport2 is not in Cygwin for what I see
> 
> https://cygwin.com/packages/package_list.html
> 
> so may be it is a  ITP ?
> 
> Regards
> Marco
> 

updated freetype2.
All your Ken

Regards
Marco

libfreetype CVE FYI

[Brian Inglis]

In case you haven't seen it yet, from news feed:

FreeType 2.10.4 Rushed Out As Emergency Security Release
https://www.phoronix.com/scan.php?page=news_item&px=FreeType-2.10.4-Released

links to: https://www.freetype.org/

"FreeType 2.10.4
2020-10-20
This is an emergency release, fixing a severe vulnerability in embedded PNG
bitmap handling (see here for more).

All users should update immediately."

links to: https://sourceforge.net/projects/freetype/files/freetype2/2.10.4/

-- 
Take care. Thanks, Brian Inglis, Calgary, Alberta, Canada

This email may be disturbing to some readers as it contains
too much technical detail. Reader discretion is advised.
[Data in binary units and prefixes, physical quantities in SI.]

Re: libfreetype CVE FYI

[Ken Brown]

On 10/20/2020 10:46 AM, Brian Inglis wrote:
> In case you haven't seen it yet, from news feed:
> 
> FreeType 2.10.4 Rushed Out As Emergency Security Release
> https://www.phoronix.com/scan.php?page=news_item&px=FreeType-2.10.4-Released
> 
> links to: https://www.freetype.org/
> 
> "FreeType 2.10.4
> 2020-10-20
> This is an emergency release, fixing a severe vulnerability in embedded PNG
> bitmap handling (see here for more).
> 
> All users should update immediately."
> 
> links to: https://sourceforge.net/projects/freetype/files/freetype2/2.10.4/

Thanks, Brian.  I'll update it.

Ken

Re: libfreetype CVE FYI

[Achim Gratz]

Ken Brown via Cygwin-apps writes:
>> https://sourceforge.net/projects/freetype/files/freetype2/2.10.4/
>
> Thanks, Brian.  I'll update it.

Did you intend to release this security / minor version update as a test
release?  It would seem more prudent to just update the package or do
you expect problems?


Regards,
Achim.
-- 
+<[Q+ Matrix-12 WAVE#46+305 Neuron microQkb Andromeda XTk Blofeld]>+

Wavetables for the Waldorf Blofeld:
http://Synth.Stromeko.net/Downloads.html#BlofeldUserWavetables

Re: libfreetype CVE FYI

[Ken Brown]

On 10/21/2020 1:03 PM, Achim Gratz wrote:
> Ken Brown via Cygwin-apps writes:
>>> https://sourceforge.net/projects/freetype/files/freetype2/2.10.4/
>>
>> Thanks, Brian.  I'll update it.
> 
> Did you intend to release this security / minor version update as a test
> release?  It would seem more prudent to just update the package or do
> you expect problems?

I did that because Fedora is still on 2.10.2, and I generally try to avoid 
getting ahead of Fedora on package releases.  That's because (a) the Fedora 
maintainers are more knowledgeable than I am about many of the packages that I 
maintain, and (b) the update will get much more testing once Fedora releases it.

That said, I agree that a security update should get high priority.  So I'll 
wait a few more days for Fedora, and then I'll go ahead and promote the test 
release to "current", regardless of what Fedora does.

Ken