Re: [ft-devel] details on iPhone exploit caused by FreeType?

2011-07-28 Thread Alan Coopersmith
I sent privately to Werner yesterday, but since the sites are public, I guess it might as well go to the full list. Our security team pointed me to the analysis at: http://esec-lab.sogeti.com/post/Analysis-of-the-jailbreakme-v3-font-exploit and that Red Hat has issued a security patch consisting

Re: [ft-devel] details on iPhone exploit caused by FreeType?

2011-07-28 Thread Werner LEMBERG
I sent privately to Werner yesterday, but since the sites are public, I guess it might as well go to the full list. [...] And I replied that I'll do a new release today :-) Werner ___ Freetype-devel mailing list Freetype-devel@nongnu.org

Re: [ft-devel] truetype metrics resize request question

2011-07-28 Thread Werner LEMBERG
Werner, you are right, it should be reflected in the CHANGES. The changes result in better, more consistent line spacing. DejaVu got one point smaller, there is nothing wrong with that too. Done. Thanks for the images! Werner ___

[ft-devel] FreeType 2.4.6 has been released

2011-07-28 Thread Werner LEMBERG
FreeType 2.4.6 has been released. It is available from http://savannah.nongnu.org/download/freetype/ or http://sourceforge.net/projects/freetype/files/ The latter site also holds older versions of the FreeType library. See below for the relevant snippet from the CHANGES file;