freetype version bump security