libjpeg-turbo: fix CVE-2014-9092 (RHBZ #1169851 #1169853)
libxml2: update to 2.9.2
freetype: update to 2.5.4