- updated to 5.5.7 (fixes CVE-2013-6420)
- fix building with freetype >= 2.5.1 (cherry-pick 732e12)