Double free in ft2font

[vbraun]

As reported at https://groups.google.com/d/msg/sage-support/K-neaKVSGiE/YMvQqVNQCQAJ

sage: import matplotlib 
sage: matplotlib.rc('text', usetex=True) 
sage: plot(sin).save('/tmp/test.svg') # works 
sage: plot(sin).save('/tmp/test.svg') # segfault 

This is a bug in freetype 2.5.2 (http://savannah.nongnu.org/bugs/?40997)

Update to freetype-2.6 fixes it.

CC: @kiwifb

Component: packages: standard

Author: Volker Braun

Branch: 1be3c2b

Reviewer: François Bissey

Issue created by migration from https://trac.sagemath.org/ticket/18962

[vbraun]

Author: Volker Braun

[vbraun]

Branch: u/vbraun/double_free_in_ft2font

[vbraun]

New commits:

1be3c2b

Update to freetype 2.6

[vbraun]

Commit: 1be3c2b

[kiwifb]

comment:4

Hum, I am only at 2.5.5 in sage-on-gentoo and that's not vulnerable. Hum, spkg-install doesn't do anything special that will need updating for that version so it should be all good.

[vbraun]

comment:5

Yes, 2.5.5 is also good.

[vbraun]

Reviewer: François Bissey

[sagetrac-aginiewicz]

comment:7

I can confirm that it fixes original issue (made fresh build, all tests passed and saving to svg no longer segfaults)

[vbraun]

Changed branch from u/vbraun/double_free_in_ft2font to 1be3c2b

[kiwifb]

comment:9

follow up in #19089

[kiwifb]

Changed commit from 1be3c2b to none