[AUTO-CHERRYPICK] Upgrade freetype to 2.13.1 for CVE-2025-27363 [High] - branch main (#12923)

Co-authored-by: Kanishk Bansal <103916909+Kanishk-Bansal@users.noreply.github.com>

Author: CBL-Mariner-Bot

SPECS/freetype/freetype.signatures.json

@@ -1,6 +1,6 @@
 {
   "Signatures": {
-    "freetype-doc-2.13.0.tar.gz": "62086392a5c747ac0a64b5c63870e4b31d4609160f399e7a6154b7de427f6cd6",
-    "freetype-2.13.0.tar.gz": "a7aca0e532a276ea8d85bd31149f0a74c33d19c8d287116ef8f5f8357b4f1f80"
+    "freetype-doc-2.13.1.tar.gz": "1e47dfd61681464b741c5682830684ee2c5ff7b4f6e6f5b7170654d2d5717220",
+    "freetype-2.13.1.tar.gz": "0b109c59914f25b4411a8de2a506fdd18fa8457eb86eca6c7b15c19110a92fa5"
   }
 }

SPECS/freetype/freetype.spec

@@ -1,6 +1,6 @@
 Summary:        software font engine.
 Name:           freetype
-Version:        2.13.0
+Version:        2.13.1
 Release:        1%{?dist}
 License:        BSD/GPLv2
 Vendor:         Microsoft Corporation
@@ -80,6 +80,9 @@ make -k check |& tee %{_specdir}/%{name}-check-log || %{nocheck}
 %{_bindir}/freetype-config
 
 %changelog
+* Wed Mar 12 2025 Kanishk Bansal <kanbansal@microsoft.com> - 2.13.1-1
+- Upgrade to 2.13.1 - for CVE-2025-27363
+
 * Mon May 08 2023 CBL-Mariner Servicing Account <cblmargh@microsoft.com> - 2.13.0-1
 - Auto-upgrade to 2.13.0 - to fix CVE-2023-2004
 

cgmanifest.json

@@ -3880,8 +3880,8 @@
         "type": "other",
         "other": {
           "name": "freetype",
-          "version": "2.13.0",
-          "downloadUrl": "https://download.savannah.gnu.org/releases/freetype/freetype-2.13.0.tar.gz"
+          "version": "2.13.1",
+          "downloadUrl": "https://download.savannah.gnu.org/releases/freetype/freetype-2.13.1.tar.gz"
         }
       }
     },