You  can use  a  `.sig` file  to verify  that  the corresponding  file
(without the  `.sig` suffix)  is intact.  First,  be sure  to download
both  the `.sig`  file and  the  corresponding archive.   Then, run  a
command like this:

  gpg --verify freetype-2.14.3.tar.gz.sig

If that command fails because you  don't have the required public key,
execute

  gpg --keyserver pgp.mit.edu --recv-keys BE6C3AAC63AD8E3F

to import it, then rerun the `gpg --verify` command.

SHA1 file checksums:

a911f65c6355ddcf7aaba46e250dbc00f67e1678  freetype-2.14.3.tar.gz
62e26b89a057ad4f1e28af977945d5c1975a8e67  freetype-2.14.3.tar.xz
b734e1565484e4544537f8ac76df3a18edf3cea9  ft2143.zip
ae69bab101121b31dff3d1abb6e7288a342b526f  ft2demos-2.14.3.tar.gz
64983178afa790fd0687506f4341ab6b921a22a8  ft2demos-2.14.3.tar.xz
6777274c434aba7c30f0f9c6c09574ad7b162ead  ftdmo2143.zip
1cb80c066c3b7f021696910efb664c6588fec371  freetype-doc-2.14.3.tar.gz
c8f9e3a4da795e3da95717055ab069cbe8ed9577  freetype-doc-2.14.3.tar.xz
2ad7e911b1300d3d0da2d2e87049a6d667ca377a  ftdoc2143.zip

SHA256 file checksums:

e61b31ab26358b946e767ed7eb7f4bb2e507da1cfefeb7a8861ace7fd5c899a1  freetype-2.14.3.tar.gz
36bc4f1cc413335368ee656c42afca65c5a3987e8768cc28cf11ba775e785a5f  freetype-2.14.3.tar.xz
566518a6d5a5cfbfc9697fca5b59571de5a357f9d6fe41c7cf8adc80c4b0bd06  ft2143.zip
49e26470cd5e0fde5a00e4631a0f095e2b7252a70981aa0bdaa5f1510f96a2f0  ft2demos-2.14.3.tar.gz
1ac96a066c39108f2b0cc8aa805106ed2c38146c8913dc2396dc242e91e35686  ft2demos-2.14.3.tar.xz
9e5490b4cfc2109d83d27ee9d48ced004c37bc9a1629950ca5ff573539c028c9  ftdmo2143.zip
5cff09612e151ea496877df332b4614078fcf977cfe36e6e480beae5bb9b84b2  freetype-doc-2.14.3.tar.gz
66a988d8bbb58f83efafe555678ac172f70f0b060cf61424fe5460157470fd21  freetype-doc-2.14.3.tar.xz
0556f9fa366dd4bf8bddd66105c6fe5dea134abdd543ebbfa13f5616abd77857  ftdoc2143.zip


CHANGES BETWEEN 2.14.2 and 2.14.3 (2026-Mar-22)

  I. IMPORTANT BUG FIXES

  - A bunch of potential security problems have been found.  All users
    should update.


  II. MISCELLANEOUS

  - If configuration option `TT_CONFIG_OPTION_GPOS_KERNING` is active,
    GPOS-based kerning could miss some  value pairs (bug introduced in
    version 2.14.0).