Summary
Now the library still by default uses freetype 2.6.1
|
LOCAL_FREETYPE_VERSION = '2.6.1' |
Freetype 2.6.1 is a very old version. Today latest freetype release is 2.11.0. And some freetype release like 2.10.4 has important vulnerability fix. See
https://www.freetype.org/index.html#news
Proposed fix
Support newer versions of freetype, and by default use its latest version that is 2.11.0
Summary
Now the library still by default uses freetype 2.6.1
matplotlib/setupext.py
Line 174 in 3a4fdea
Freetype 2.6.1 is a very old version. Today latest freetype release is 2.11.0. And some freetype release like 2.10.4 has important vulnerability fix. See https://www.freetype.org/index.html#news
Proposed fix
Support newer versions of freetype, and by default use its latest version that is 2.11.0