[ 20:06 marcus  ]

• 1.2034 MOVED
• 1.158 Mk/bsd.gnome.mk
• 1.25 accessibility/Makefile
• 1.10 accessibility/accerciser/Makefile
• 1.6 accessibility/accerciser/distinfo
• 1.5 accessibility/accerciser/pkg-plist
• 1.70 accessibility/at-spi/Makefile
• 1.39 accessibility/at-spi/distinfo
• 1.34 accessibility/at-spi/pkg-plist
• 1.59 accessibility/atk/Makefile

Presenting GNOME 2.28.1 for FreeBSD.  The official release notes for this
release can be found at http://library.gnome.org/misc/release-notes/2.28/ .
Officially, this is mostly a polishing release in preparation for GNOME 3.0
due in about a year.

On the FreeBSD front, though, a lot went into this release.  Major thanks
goes to kwm and avl who did a lot of the porting work for this release.
In particular, kwm brought in Evolution MAPI support for better Microsoft
Exchange integration.  Avl made sure that the new gobject introspection
repository ports were nicely compartmentalized so that large dependencies
aren't brought in wholesale.

But, every GNOME team member (ahze, avl, bland, kwm, mezz, and myself)
contributed to this release.

(Only the first 15 lines of the commit message are shown above )

[ 09:55 miwi  ]

• 1.85 print/freetype2/Makefile
• 1.1 print/freetype2/files/patch-src-cff_cffload.c
• 1.1 print/freetype2/files/patch-src-lzw_ftzopen.c
• 1.1 print/freetype2/files/patch-src-sfnt_ttcmap.c
• 1.1 print/freetype2/files/patch-src-smooth_ftsmooth.c

- Fix security problems

Note:
An integer overflow error within the "cff_charset_compute_cids()"
function in cff/cffload.c can be exploited to potentially cause
a heap-based buffer overflow via a specially crafted font.

Multiple integer overflow errors within validation functions in
sfnt/ttcmap.c can be exploited to bypass length validations and
potentially cause buffer overflows via specially crafted fonts.

An integer overflow error within the "ft_smooth_render_generic()"
function in smooth/ftsmooth.c can be exploited to potentially cause
a heap-based buffer overflow via a specially crafted font.

Approved by:    portmgr (pav)
Obtained from:  freetype git repo
Security:      
http://www.vuxml.org/freebsd/20b4f284-2bfc-11de-bdeb-0030843d3802.html