The following reply was made to PR pkg/33858; it has been noted by GNATS.

From: Lubomir Sedlacik <salo@netbsd.org>
To: gnats-bugs@NetBSD.org
Cc: 
Subject: PR/33858 CVS commit: [pkgsrc-2006Q2] pkgsrc/graphics/freetype2
Date: Tue, 22 Aug 2006 23:44:08 +0000 (UTC)

 Module Name:	pkgsrc
 Committed By:	salo
 Date:		Tue Aug 22 23:44:08 UTC 2006
 
 Modified Files:
 	pkgsrc/graphics/freetype2 [pkgsrc-2006Q2]: Makefile distinfo
 Added Files:
 	pkgsrc/graphics/freetype2/patches [pkgsrc-2006Q2]: patch-aa patch-ab
 
 Log Message:
 Pullup ticket 1803 - requested by joerg
 security fix for freetype2
 
 Revisions pulled up:
 - pkgsrc/graphics/freetype2/Makefile			1.53, 1.54
 - pkgsrc/graphics/freetype2/distinfo			1.19
 - pkgsrc/graphics/freetype2/patches/patch-aa		1.7
 - pkgsrc/graphics/freetype2/patches/patch-ab		1.8
 
    Module Name:		pkgsrc
    Committed By:	minskim
    Date:		Sun Jul 23 14:37:08 UTC 2006
 
    Modified Files:
    	pkgsrc/graphics/freetype2: Makefile
 
    Log Message:
    Link against the Carbon library if the framework is available.  This fixes
    PR 33858.
 
    Bump PKGREVISION.
 ---
    Module Name:		pkgsrc
    Committed By:	joerg
    Date:		Tue Aug 22 18:43:51 UTC 2006
 
    Modified Files:
    	pkgsrc/graphics/freetype2: Makefile distinfo
    Added Files:
    	pkgsrc/graphics/freetype2/patches: patch-aa patch-ab
 
    Log Message:
    Add two patches to work around issues from CVE-2006-3467. Patches are
    directly from FreeType CVS. Bump revision.
 
 
 To generate a diff of this commit:
 cvs rdiff -r1.52 -r1.52.2.1 pkgsrc/graphics/freetype2/Makefile
 cvs rdiff -r1.18 -r1.18.2.1 pkgsrc/graphics/freetype2/distinfo
 cvs rdiff -r0 -r1.6.2.1 pkgsrc/graphics/freetype2/patches/patch-aa
 cvs rdiff -r0 -r1.7.16.1 pkgsrc/graphics/freetype2/patches/patch-ab
 
 Please note that diffs are not public domain; they are subject to the
 copyright notices on the relevant files.