this is freetype-2.4.11 from RHEL/CentOS Linux 7.5 distribution, which
includes multiple security fixes.

0000-enable-spr.patch (subpixel rendering) is not applied here.
