Re: Security Report: Unbounded Composite Glyph Recursion DoS (CWE-674)

Alan Coopersmith <[email protected]> Wed, 25 Mar 2026 14:20:38 -0700

Newsgroups	gmane.comp.fonts.freetype.devel
Message-ID	<[email protected]>

On 3/25/26 13:01, J Laratro wrote:
> There is also no way to disclose security issues through the GitHub: https:// 
> github.com/freetype/freetype/security 

As it says on the front page of https://github.com/freetype/freetype the
github is just a mirror of the main repo at
https://gitlab.freedesktop.org/freetype/freetype
and if you scroll down to the README on the github you'll see it also
links to the gitlab to report bugs.

-- 
         -Alan Coopersmith-                 [email protected]
          Oracle Solaris Engineering - https://blogs.oracle.com/solaris