Announcing FreeType version 2.14.3

Werner LEMBERG <[email protected]> Sun, 22 Mar 2026 15:49:50 +0000
Newsgroups gmane.comp.fonts.freetype.devel,gmane.comp.fonts.freetype.user
Message-ID <[email protected]>
FreeType 2.14.3 has been released.

It is available from

    https://savannah.nongnu.org/download/freetype/

or

    https://sourceforge.net/projects/freetype/files/

The latter site also holds older versions of the FreeType library.

See below for the relevant snippet from the CHANGES file.

Enjoy!


   Werner


PS: Downloads from  savannah.nongnu.org  will redirect to your nearest
    mirror site.   Files on  mirrors may  be subject to  a replication
    delay   of   up   to   24   hours.   In   case   of  problems  use
    https://download-mirror.savannah.gnu.org/releases/


----------------------------------------------------------------------


https://www.freetype.org


FreeType 2  is a software  font engine that  is designed to  be small,
efficient,  highly   customizable,  and  portable   while  capable  of
producing high-quality output (glyph images) of most vector and bitmap
font formats.

Note that  FreeType 2 is  a font service  and doesn't provide  APIs to
perform higher-level features, like text layout or graphics processing
(e.g.,  colored  text  rendering,  'hollowing',  etc.).   However,  it
greatly simplifies these tasks by providing a simple, easy to use, and
uniform interface to access the content of font files.

FreeType  2  is  released  under  two open-source  licenses:  our  own
BSD-like FreeType  License and the  GPL.  It can  thus be used  by any
kind of projects, be they proprietary or not.


----------------------------------------------------------------------


You  can use  a  `.sig` file  to verify  that  the corresponding  file
(without the  `.sig` suffix)  is intact.  First,  be sure  to download
both  the `.sig`  file and  the  corresponding archive.   Then, run  a
command like this:

  gpg --verify freetype-2.14.3.tar.gz.sig

If that command fails because you  don't have the required public key,
execute

  gpg --keyserver pgp.mit.edu --recv-keys BE6C3AAC63AD8E3F

to import it, then rerun the `gpg --verify` command.

SHA1 file checksums:

a911f65c6355ddcf7aaba46e250dbc00f67e1678  freetype-2.14.3.tar.gz
62e26b89a057ad4f1e28af977945d5c1975a8e67  freetype-2.14.3.tar.xz
b734e1565484e4544537f8ac76df3a18edf3cea9  ft2143.zip
ae69bab101121b31dff3d1abb6e7288a342b526f  ft2demos-2.14.3.tar.gz
64983178afa790fd0687506f4341ab6b921a22a8  ft2demos-2.14.3.tar.xz
6777274c434aba7c30f0f9c6c09574ad7b162ead  ftdmo2143.zip
1cb80c066c3b7f021696910efb664c6588fec371  freetype-doc-2.14.3.tar.gz
c8f9e3a4da795e3da95717055ab069cbe8ed9577  freetype-doc-2.14.3.tar.xz
2ad7e911b1300d3d0da2d2e87049a6d667ca377a  ftdoc2143.zip

SHA256 file checksums:

e61b31ab26358b946e767ed7eb7f4bb2e507da1cfefeb7a8861ace7fd5c899a1  freetype-2.14.3.tar.gz
36bc4f1cc413335368ee656c42afca65c5a3987e8768cc28cf11ba775e785a5f  freetype-2.14.3.tar.xz
566518a6d5a5cfbfc9697fca5b59571de5a357f9d6fe41c7cf8adc80c4b0bd06  ft2143.zip
49e26470cd5e0fde5a00e4631a0f095e2b7252a70981aa0bdaa5f1510f96a2f0  ft2demos-2.14.3.tar.gz
1ac96a066c39108f2b0cc8aa805106ed2c38146c8913dc2396dc242e91e35686  ft2demos-2.14.3.tar.xz
9e5490b4cfc2109d83d27ee9d48ced004c37bc9a1629950ca5ff573539c028c9  ftdmo2143.zip
5cff09612e151ea496877df332b4614078fcf977cfe36e6e480beae5bb9b84b2  freetype-doc-2.14.3.tar.gz
66a988d8bbb58f83efafe555678ac172f70f0b060cf61424fe5460157470fd21  freetype-doc-2.14.3.tar.xz
0556f9fa366dd4bf8bddd66105c6fe5dea134abdd543ebbfa13f5616abd77857  ftdoc2143.zip


CHANGES BETWEEN 2.14.2 and 2.14.3 (2026-Mar-22)

  I. IMPORTANT BUG FIXES

  - A bunch of potential security problems have been found.  All users
    should update.


  II. MISCELLANEOUS

  - If configuration option `TT_CONFIG_OPTION_GPOS_KERNING` is active,
    GPOS-based kerning could miss some  value pairs (bug introduced in
    version 2.14.0).