*: Bump PORTREVISION on Poppler's consumers7ddc6804bf
cups-filters -- remote code executionentered 2024-09-27
Additional backends, filters and other software for CUPS
# pkg install cups-filtersinstalls 1.28.17_14 from latest; from quarterly (2026Q4) 1.28.17_14# cd /usr/ports/print/cups-filters && make install clean# make -C /usr/ports/print/cups-filters config # change options first
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 16 | 1.28.17_14 | 1.28.17_14 | – |
| FreeBSD 15 | 1.28.17_14 | 1.28.17_14 | – |
| FreeBSD 14 | 1.28.17_14 | 1.28.17_14 | 1.28.17_14 |
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 15 | 1.28.17_14 | 1.28.17_14 | – |
| FreeBSD 14 | 1.28.17_14 | 1.28.17_14 | 1.28.17_14 |
version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.
The CVE record lists the packaged version 1.28.17_14 as affected, and no VuXML entry names the CVE. What does this mean?
| CVE | CVSS | Published | Description |
|---|---|---|---|
| CVE-2023-24805 | 8.8 | 2023-05-17 | cups-filters contains backends, filters, and other software required to get the cups printing service working on operating systems other than macos. If you use the Backe… |
Listed in VuXML, the packaged version 1.28.17_14 is still in the affected range; pkg audit reports it. What does this mean?
*: Bump PORTREVISION on Poppler's consumers7ddc6804bf
graphics/lcms2: Bump PORTREVISION of dependent ports for shlib change PR: 292881 Reported by: Petr Lampa <lampa@fit.vutbr.cz>2adc4bef7d
print/cups-filters: Bump PORTREVISION5733a9fc5d
print/cups-filters: Update to more recent commit3684165dcf
graphics/poppler: bump consumers of graphics/poppler PR: 291277 Exp-run by: antoine3076d31cda
print/cups-filters: Support QPDF 12 Also add more upstream bugfixes. Upstream commit c3d2f07399da contains bits that look like PDF headers that cause github.com to return Forbidden. Put it as a patch in the ports tree. PR: 288928ab9cb97c16
graphics/poppler: bump dependent ports78c4bd4996
graphics/poppler: bump dependent ports12a794e8bd
*: Bump revisions after dbus update PR: 285253 Reported by: Martin Birgmeier <d8zNeCFG@aon.at>a347a92e6e
print/cups-filters: Fix cups-browsed RCE Add upstream patches to fix recent vulnerabilities. Security: CVE-2024-47076 Security: CVE-2024-471767e9c3e23fd
all: drop support for expired FreeBSD 14.0 Simplify expressions for FreeBSD 13.X Reviewed by: many Differential Revision: https://reviews.freebsd.org/D466014485bd8221
print/cups-filters: cups-browsed: disable cups protocol Disable the cups-browsed cups protocol. This reduces the attack surface but does NOT fix the recently discovered remote code execution vulnerability in cups-browsed. Derived from https://github.com/OpenPrinting/cups-browsed/commit/1debe6b140c371a513901b
all: drop support for FreeBSD 13.2 which reached EOL today Thanks again to jbeich for noticing various things I overlooked. Reviewed by: acm, ashish, eduardo, ehaupt, eugen, jbeich, martymac, mat, nobukata, sunpoet, tagattie, yuri, arrowd, kde Differential Revision: https://reviews.freebsd.org/D4514119d68720f1
graphics/tiff: Update to 4.6.0 PR: 278577 Exp-run by: antoine98bf25875a
graphics/poppler: bump consumers of graphics/poppler Bump after rupdate in 478df79a3071b399f648107456cf371587e84a3fd2f834ba51
print/cups-filters: Install man pages under share/man Sponsored by: The FreeBSD Foundationa03fe356ee
graphics/poppler: bump revision of consumers672f0463c7
print/cups-filters: Update to 1.28.17a5148ec3fc
*/*: Bump PORTREVISION for Ghostscript 10 change Reported by: sunpoet Approved by: jrm (mentor), sunpoet Differential Revision: https://reviews.freebsd.org/D42412fcf68ae5ec
*/*: Bump jpeg-turbo users treewide New major version 3.0.0664a2fa1e5
*/*: Fix build with llvm16 on 13.2-STABLE As like as HEAD(14.0-RELEASE) llvm16 was merged in base for 13.2-STABLE with the OSVERSION 1302507. - Utilize USE_CXXSTD=c++14 or similar solution where applicable - Update conditionals to addtionally check for OSVERSION greater than 1302507 and less than 1400000 Approved by: portmgr (blanket) Sponsored by: The FreeBSD Foundation95274bf4f9
print/cups-filters: Fix build with llvm16 Approved by: portmgr (blanket) Sponsored by: The FreeBSD Foundation47613a2f58
graphics/poppler: bump dependenciesedbe24d784
Mk/Uses/magick.mk: Bump all consumers Bump all consumers of ImageMagick ports after flavorizing them. Approved by: tcberner (mentor, implicit)a6bb2f8c5e
graphics/poppler: bump consumers after update to 23.04 graphics/poppler was updated in 06339c451266f5843e53bd6406c81a89eedd4ab132edee2a20
Mk/**ldap.mk: Convert USE_LDAP to USES=ldap
Convert the USE_LDAP=yes to USES=ldap and adds the following features:
- Adds the argument USES=ldap:server to add openldap2{4|5|6}-server as
RUN_DEPENDS
- Adds the argument USES=ldap<version> and replaces WANT_OPENLDAP_VER
- Adds OPENLDAP versions in bsd.default-versions.mk
- Adds USE_OPENLDAP/WANT_OPENLDAP_VER in Mk/bsd.sanity.mk
- Changes consumers to use the features
Reviewed by: delphij
Approved by: portmgr
Differential Revision: https://reviews.freebsd.org/D382336e1233be22graphics/poppler: bump dependencies Follow-up to 9b78681895a5a5b7225299242098f7f2f27d959c6f417247b1
graphics/cups-filters: Update to 1.28.16f4ff9af5ea
graphics/poppler: bump dependenciese3d436085f
graphics/poppler: bump PORTREVISION of dependencies - after update to 22.11 in d01d0d73b1693a7ab00b4f
graphics/poppler: bump port revision of poppler consumers - poppler was updated to 22.10 in df406767857ddfc6d9580d72b1613a7cf8579bbcc8e8499d9e
graphics/poppler: bump port revision of consumers after upgrade to 22.09541d96e3f6
Remove WWW entries moved into port Makefiles Commit b7f05445c00f has added WWW entries to port Makefiles based on WWW: lines in pkg-descr files. This commit removes the WWW: lines of moved-over URLs from these pkg-descr files. Approved by: portmgr (tcberner)fb16dfecae
Add WWW entries to port Makefiles It has been common practice to have one or more URLs at the end of the ports' pkg-descr files, one per line and prefixed with "WWW:". These URLs should point at a project website or other relevant resources. Access to these URLs required processing of the pkg-descr files, and they have often become stale over time. If more than one such URL was present in a pkg-descr file, only the first one was tarnsfered into the port INDEX, but for many ports only the last line did contain the port specific URL to further information. There have been several proposals to make a project URL available as a macro in the ports' Makefiles, over time. This commit implements such a proposal and moves one of the WWW: entries of each pkg-descr file into the respective port's Makefile. A heuristic attempts to identify the most relevant URL in case there is more than one WWW: entry in some pkg-descr file. URLs that are not moved into the Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr files in order to preserve them. There are 1256 ports that had no WWW: entries in pkg-descr files. These ports will not be touched in this commit. The portlint port has been adjusted to expect a WWW entry in each port Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as deprecated. Approved by: portmgr (tcberner)b7f05445c0
graphics/poppler: bump dependencies Bump port revisions of poppler users after 04f1b0c1a895851aed9221282c1a503bc7415a37016c05440c
graphics/poppler: bump PORTREVISION of poppler consumers7e5fe8fd65
graphics/poppler: bump port revision of consumers after 22.06 upgrade7c24f75361
graphics/poppler: bump portrevision of consumersf22f615ec3
print/cups-filters: update to 1.28.1503a9f8b598
graphics/poppler: bump portrevision of consumers Bump revisions after 0ee787592d5a due to so-version bump. PR: 2630097dd73cf435
graphics/poppler: bump consumers Bump consumers of graphics/poppler after e25859e09380f5930718094423dc8616cbb202b36f59b7b9ba
Fix CONFLICTS entries of multiple ports There have been lots of missing CONFLICTS_INSTALL entries, either because conflicting ports were added without updating existing ports, due to name changes of generated packages, due to mis-understanding the format and semantics of the conflicts entries, or just due to typoes in package names. This patch is the result of a comparison of all files contained in the official packages with each other. This comparison was based on packages built with default options and may therefore have missed further conflicts with optionally installed files. Where possible, version numbers in conflicts entries have been generalized, some times taking advantage of the fact that a port cannot conflict with itself (due to logic in bsd.port.mk that supresses the pattern match result in that case). A few ports that set the conflicts variables depending on complex conditions (e.g. port options), have been left unmodified, despite probably containing outdated package names. These changes should only affect the installation of locally built ports, not the package building with poudriere. They should give an early indication of the install conflict in cases where currently the pkg command aborts an installation when it detects that an existing file would be overwritten, Approved by: portmgr (implicit)bcaf25a8c8
graphics/poppler: update to 21.12
Release 21.12.0:
core:
* Add API to add images
* CairoOutputDev: Fix de-duping of Flate images
* Fix crash on broken files when using non-default ENABLE_ZLIB_UNCOMPRESS. Issue #393
* Minor code improvements
glib:
* Add API for validation of signatures
* Add API to read/save to file descriptor
utils:
* pdftohtml: Reduce sensitivity of duplicate detection. Issue #1117
build system:
* Increase C++ standard to 17
Exp-run by: antoine
PR: 260344fd68e9e2b6framework: Add new USES 'magick' for graphics/ImageMagick*
A new USES has been added to depend on ImageMagick.
USES=magick
adds a LIB_DEPENDS on graphics/ImageMagick${IMAGEMAGICK_DEFAULT}.
If a specific version is required, use for example
USES=magick:6 resp. USES=magick:7
If only a build, run or test is required, use for example
USES=magick:build resp. USES=magick:6,build,test
If a dependency on the nox11 flavor is required, use for example
USES=magick:nox11 resp. USES=magick:7,nox11,run,test
See magick.mk for more details on the available flags.
The tree has been completely converted to make use of this.
Approved by: bapt
Differential Revision: https://reviews.freebsd.org/D3275445526ecbee*/*: Remove redundant '-[0-9]*' from CONFLICTS The conflict checks compare the patterns first against the package names without version (as reported by "pkg query "%n"), then - if there was no match - agsinst the full package names including the version (as reported by "pkg query "%n-%v"). Many CONFLICTS definitions used patterns like "bash-[0-9]*" to filter for the bash package in any version. But that pattern is functionally identical with just "bash". Approved by: portmgr (blanket)819f25b36d
*: fix tab vs. space issues, and comments according to the guide.4460cf727a
graphics/poppler: bump consumers after 2dee0997fbc9ee01991f73f0fa55f9b18908a264e140c1eb79
print/cups-filters: Update to 1.28.10 Enable POPPLER option by default to support some Brother printers. (Poppler was already a dependency through the PSHYBRID option.) PR: 25854003e35e3913
poppler: bump revisions of users Bump the remaining users of poppler after d98b56f1deb5b6a03a7e04fc16192ecb2af9df1e PR: 258206392e088e76
graphics/poppler: update to 21.08.0
Release 21.08.0:
core:
* Add API to allow addition and modification of outlines into a PDF
* Use additional samples to test for constant parts of an axial gradient
* forms: Create fallback fonts for some well known font names
* Support reading the PDF Version from the Catalog
* Fix XRef::copy when there are modified objects
* Take into account that Date string may be in unicode
* JBIG2Stream: Fix regression in "Do not consider a size-0 to be an error"
* Replace a local bubble sort implementation by std::sort
* Fix issues with malformed files
build system:
* Better error message when libjpeg is not found
* Better error messages when libopenjpeg2 is not found
qt5/qt6:
* Document that a document has to outlive its pages
* Make getPdfVersion return a dedicated version object
glib:
* mimick TextSelectionDumper logic change for spaceAfter
Exp-run by: antoine
PR: 2575399a1df6a85c