freetype: security update to 2.5.4.