- Update to 1.25.0. - Make portlint happy.665876b565
cups-filters -- remote code executionentered 2024-09-27
Additional backends, filters and other software for CUPS
# pkg install cups-filtersinstalls 1.28.17_14 from latest; from quarterly (2026Q4) 1.28.17_14# cd /usr/ports/print/cups-filters && make install clean# make -C /usr/ports/print/cups-filters config # change options first
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 16 | 1.28.17_14 | 1.28.17_14 | – |
| FreeBSD 15 | 1.28.17_14 | 1.28.17_14 | – |
| FreeBSD 14 | 1.28.17_14 | 1.28.17_14 | 1.28.17_14 |
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 15 | 1.28.17_14 | 1.28.17_14 | – |
| FreeBSD 14 | 1.28.17_14 | 1.28.17_14 | 1.28.17_14 |
version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.
The CVE record lists the packaged version 1.28.17_14 as affected, and no VuXML entry names the CVE. What does this mean?
| CVE | CVSS | Published | Description |
|---|---|---|---|
| CVE-2023-24805 | 8.8 | 2023-05-17 | cups-filters contains backends, filters, and other software required to get the cups printing service working on operating systems other than macos. If you use the Backe… |
Listed in VuXML, the packaged version 1.28.17_14 is still in the affected range; pkg audit reports it. What does this mean?
- Update to 1.25.0. - Make portlint happy.665876b565
Update to 1.23.0.8185ed94ad
graphics/poppler: update to 0.77.0
Release 0.77.0:
core:
* Fix crash on signature handling. Issue #766
* Fix small memory leak in SignatureHandler::getCertificateInfo
* Splash: Restrict filling of overlapping boxes. Issue #750
* Fix crash on malformed files
qt5:
* Fix optional content handling with exclusive layers
cpp:
* Make render_page thread-safe
utils:
* pdfsig: Fix small memory leak
* pdftotext: Fix typo in manpage
PR: 238115
Exp-run by: antoine
Approved by: gnome (kwm, implicit)d163307e80graphics/poppler: update to 0.76.1
From Changelog at https://poppler.freedesktop.org/releases.html :
Release 0.76.1:
core:
* Make the mul tables be calculated at compile time with constexpr.
* splash: Fix compile with SPLASH_CMYK enabled
* Some typo fixing in error messages
qt5:
* Fix regression in annotation handling
build system:
* Fix some typos in build system output and comments
Release 0.76.0:
core:
* Fix regression on case-insensitive search. Issue #743
* Remove GooList, use std::vector instead
* Fix radiobutton reporting wrong state. Issue #159
* Handle UTF16-LE strings
* Don't error out if there's no DA in FreeText annotation
* cairo: Compute correct coverage values for box filter.
* cairo: Constrain number of cycles in rescale filter.
* Read more fields from ViewerPreferences
* Introduce and use Ref::INVALID
* Fix crashes in broken files
* Fix mismatched free/delete
* Add missing include guards
utils:
* pdftohtml: Properly initialize HtmlOutputDev::page to avoid SIGSEGV upon error exit. Issue #742
All the required patches have been obtained via gentoo.
PR: 237846
Exp-run by: antoine
Approved by: kwm753388101eUpdate to 1.22.5.afabbe4010
Update to 1.22.2.9c49c3bc8d
Update to 1.22.1.c026fee6b9
Update to 1.21.6.3062585b6e
- Update to 1.21.5. - Fix support for cups_browsed_flags in the cups_browsed rc.d script. The flags were passed to daemon(8) instead of cups_browsed. [1] PR: 230951 [1] Submitted by: J.R. Oldroyd <fbsd@opal.com> [1]399abe0750
Bump PORTREVISION for ports depending on the canonical version of GCC defined via Mk/bsd.default-versions.mk which has moved from GCC 7.4 t GCC 8.2 under most circumstances. This includes ports - with USE_GCC=yes or USE_GCC=any, - with USES=fortran, - using Mk/bsd.octave.mk which in turn features USES=fortran, and - with USES=compiler specifying openmp, nestedfct, c11, c++0x, c++11-lang, c++11-lib, c++14-lang, c++17-lang, or gcc-c++11-lib plus, as a double check, everything INDEX-11 showed depending on lang/gcc7. PR: 231590a9f015d155
Update ImageMagick to 6.9.10.14 [1] * Add PKGNAMESUFFIX and rename the directory. This was done to show that IM6 is not the "main" version. But still fully supported by upstream. * Convert a number of options to optionhelpers. * Add option for ISO/IEC 23008-12:2017 HEIF suport * Add comment to pkg-descr explaining IM6's "legacy" tag. * Add comment to the patch-config_policy.xml file why it still needed. Please note that IM7 is not a drop in replacement due to library API and command arguments changes. And as a result ports need to decide for themself which version to use. Chase these changes in all the ports that using IM6. PR: 225102 (based on, only the version update) [1] Submitted by: Pascal Christen <pascal.christen@hostpoint.ch>289883b11b
- Update to 1.21.3. - Reorganise options to enable configurations that don't depend on Ghostscript or Poppler.84a01c181c
print/qpdf: Update 8.0.1 -> 8.2.1 PR: 230443 Submitted by: Dmitri Goutnik <dg@syrec.org> Approved by: d.y.kazarov@mail.ru (maintainer's timeout; 24 days)a4ef4a7544
Bump PORTREVISION for ports depending on the canonical version of GCC in the ports tree (via Mk/bsd.default-versions.mk and lang/gcc) which has now moved from GCC 6 to GCC 7 by default. This includes ports - featuring USE_GCC=yes or USE_GCC=any, - featuring USES=fortran, - using Mk/bsd.octave.mk which in turn features USES=fortran, and those - with USES=compiler specifying one of openmp, nestedfct, c11, c++0x, c++11-lib, c++11-lang, c++14-lang, c++17-lang, or gcc-c++11-lib. PR: 22254209f9633cb6
print/qpdf: Update to 8.0.1 Port changes: * Add the second license Bump print/cups-filters PR: 226370 Submitted by: Dmitri Goutnik <dg@syrec.org> Approved by: d.y.kazarov@mail.ru (maintainer's timeout, 14 days)1f9bc2001b
Take maintainership.bf67239ee5
print/cups-filters: cyberbotx@cyberbotx.com dropped maintainership PR: 226133 Submitted by: Naram Qashat <cyberbotx@cyberbotx.com> (maintainer) Approved by: Naram Qashat <cyberbotx@cyberbotx.com> (maintainer), tcberner (mentor, implicit)ac15ca9b94
print/cups-filters: PORTREVSION bump for the print/qpdf library change in r460458 PR: 225726 Reported by: O. Hartmann<ohartmann@walstatt.org>, tijl Approved by: adamw (mentor, an obvious followup of D14201) Differential Revision: https://reviews.freebsd.org/D142524e5ae7168e
Bump PORTREVISION for ports depending on the canonical version of GCC (via Mk/bsd.default-versions.mk and lang/gcc) which has moved from GCC 5.4 to GCC 6.4 under most circumstances. This includes ports - with USE_GCC=yes or USE_GCC=any, - with USES=fortran, - using Mk/bsd.octave.mk which in turn features USES=fortran, and - with USES=compiler specifying openmp, nestedfct, c++11-lib, c++11-lang, c++14-lang, c++0x, c11, or gcc-c++11-lib. PR: 219275e59c88cece
Add missed PORTREVISION bumps after recent poppler update40db78cf06
print/cups-filters: Update to 1.16.0 PR: 221166 Submitted by: Naram Qashat <cyberbotx@cyberbotx.com> (maintainer)ca79042f25
Always specify --with-pdftops-path to fix build with MUPDF option. PR: 219548 Submitted by: Albert Ou <aou@eecs.berkeley.edu> Approved by: Naram Qashat <cyberbotx@cyberbotx.com> (maintainer)c7ec85aed2
- Update to 1.13.5 PR: 219016 Submitted by: maintainer31d5144d50
Add a MUPDF option under PDFTOPS_RENDERER. When activated, mupdf will be used instead of Ghostscript/Poppler. When inactive, mupdf is not a dependency. PR: 217848 Submitted by: raivo.hool@gmail.com Reviewed by: mat Approved by: swills (mentor), cyberbotx@cyberbotx.com (maintainer) Differential Revision: https://reviews.freebsd.org/D103255309aa388d
Bump PORTREVISIONs for ports depending on the canonical version of GCC and lang/gcc which have moved from GCC 4.9.4 to GCC 5.4 (at least under some circumstances such as versions of FreeBSD or platforms). This includes ports - with USE_GCC=yes or USE_GCC=any, - with USES=fortran, - using using Mk/bsd.octave.mk which in turn has USES=fortran, and - with USES=compiler specifying openmp, nestedfct, c++11-lib, c++14-lang, c++11-lang, c++0x, c11, or gcc-c++11-lib. PR: 21670704d6f52202
print/cups-filters: fix printing of PDF files - by explicitly referencing the path to pdftops PR: 218175 Submitted by: Jonathan Chen <jonc@chen.org.nz> Approved by: Naram Qashat <cyberbotx@cyberbotx.com> (maintainer)520a1f5159
print/cups-filters: update 1.11.4 -> 1.13.4 * Add LICENSE * Add dependency to mupdf * Update distinfo * Update pkg-plist * Add patches to filter/gstoraster.c and filter/mupdftoraster.c due to execvpe() not existing under FreeBSD PR: 217848 Submitted by: Naram Qashat <cyberbotx@cyberbotx.com> (maintainer)4e6d167d30
Chase update of graphics/poppler (and slaves ports) in revision r43077747706eca19
Assume "pkg-config zlib" works after 9.x reached EOL Many ports passed ZLIB_CFLAGS="-I/usr/include" ZLIB_LIBS="-L/usr/lib -lz" which is unsafe at least with lang/gcc* that override some system headers and have newer libgcc_s.so that our old version in base may not be forward-compatible with.32d56ae68a
Update to version 1.11.4 PR: 212871 Submitted by: Naram Qashat (maintainer)a217fa6819
Most commonly used build systems support silent builds, when they hide actual commands executed and only show short summary line (like "CC foo.c"). CMake and ninja enable this by default, some autotools using ports do as well. This is unacceptable because we need complete build logs at any time, so we now switch to verbose build logs unconditionally. Note that this change deliberately affects ALL Change summary: - Always do verbose builds for cmake, ninja and GNU configure (the latter includes check if --disable-silent-rules is actually supported by the configure script; there are isolated cases when it's not true) - Remove CMAKE_VERBOSE, NINJA_VERBOSE and CONFIGURE_ARGS=--disable-silent-rules from all ports which set them for this is no longer needed - Revert hacks for --disable-silent-rules support priorly committed to biology/ncbi-blast+ and net-p2p/mldonkey - no longer needed as well Submitted by: amdmi3 Reviewed by: mat Exp-run by: antoine Approved by: portmgr (mat, antoine) Differential Revision: D753430a00f2227
Chase update of Poppler after revision r421386548adee57e
- Update to version 1.10.0 - Update required dependencies PR: 211534 Submitted by: Naram Qashat (maintainer)47c8694a30
Update to 1.9.0. PR: 210575 Approved by: Naram Qashat <cyberbotx@cyberbotx.com> (maintainer)ed79651ba0
Remove ${PORTSDIR}/ from dependencies, categories m, n, o, and p.
With hat: portmgr
Sponsored by: Absolight8d6597e0bb- Update cups-filters to 1.8.3. - Move D-Bus dependency under a COLORD option. - Make libijs dependency optional. - Add BRAILLE option and add missing dependencies to it. There's no port of liblouisutdml yet but it isn't strictly required. - Move jpeg, png and tiff dependencies under an IMAGEFILTERS option. - Add an option group for cups-browsed, move AVAHI under it and add LDAP. - Add an optio PR: 208345 Approved by: Naram Qashat <cyberbotx@cyberbotx.com> (maintainer)d2d25adfba
- Update security/gnutls to 3.4.10. - Rename the LIBDANE option DANE because that's the name of the protocol supported by libgnutls-dane and gnutls-cli. Also clarify the option description. - Add an IDN option. - libgnutls-openssl has been removed in 3.4. Some ports used this library in their LIB_DEPENDS but no port actually required it. - Some old API functions have been removed. Ports t net-im/jabber: This port used the old API to give users fine grained control over which crypto algorithms were used via a configuration file. It's not immediately obvious how to port this to the new API so the port always uses the defaults now. www/hydra: Mark BROKEN. This uses more removed calls than the other ports, is said to be alpha quality and not fully functional and has been abandoned 10 years ago. PR: 207768 Exp-run by: antoine Approved by: portmgr (antoine)6bc6f3a9e0
Make print/ghostscript9-agpl-base the default Ghostscript port. Upstream changed the license to the AGPL 3 in version 9.07 so print/ghostscript9-base is stuck at 9.06 which is almost 4 years old now. Fix the logic in Uses/ghostscript.mk so "agpl" is treated as a real version on its own instead of as a variant of other versions. Fix print/ghostscript9-agpl-base to install eps2write. Update math/asymptote to 2.37 to support newer Ghostscript. PR: 208159 Exp-run by: antoine Approved by: portmgr (antoine)77760fcb63
- Update print/qpdf to 6.0.0. - Remove bash dependency. - Remove SDK option. It was added to prevent installation of headers because they sometimes cause build conflicts with newer versions of qpdf due to incorrect order of -I flags. This has been fixed now. - Add DOCS option. - Replace patch-configure with CPPFLAGS/LIBS and a post-patch command in the Makefile to take into account ${LOCAL
PR: 207751
Approved by: d.y.kazarov@mail.ru (maintainer)61017bd10f- Let foomatic-rip use /bin/sh instead of /bin/bash. - Patch foomatic-rip to reset stdin after replacing the underlying file descriptor. - Remove a patch for the pdftops filter that is no longer needed. Submitted by: Alexander Zagrebin <alex@zagrebin.ru>0a0acad559
Combine print/cups-base, print/cups-client and print/cups-image into print/cups and update it to 2.1.3. Also remove print/cups-pstoraster, improve print/cups-filters, print/foomatic-* and update print/hplip to 3.16.2. Long description: First some background. When you hand a file to cups it sets up a chain of filter programs that converts the file to something a printer understands. Each filter has a cost associated with it and cups tries to find the cheapest chain. Costs used to be configured in such a way that files were first converted to PostScript. This could then be manipulated further (e.g. putting multiple pages on one sheet) before finally being sent to a PostScript printer or another filter like pstoraster which produces a raster format understood by non-PostScript printer drivers. Nowadays most filters have been moved from cups to cups-filters and they have been configured to use PDF as an intermediate format instead of PostScript. Merging of cups-base, cups-client and cups-image into print/cups: - cups-image provides a library to work with the cups raster format. It is only used to implement filters and printer drivers and these only exist in the context of a cups server so there's no need to separate this from cups-base. - cups-client provides a library that allows applications to print via cups. It is possible to use the library to access a remote cups server without running a local cups server, but such a setup is discouraged and the configuration file to set this up has been marked deprecated. It is better to run a local cups server and let that talk to the remote cups server because then you have the benefits of local job queuing in case the remote server is down or busy. Given this and the fact that without filters cups-base is now smaller than it used to be it makes sense to merge the ports. The patch also adds options IPPTOOL, DOCS and NLS which when disabled make the new cups package smaller than the current cups-client package. Merging the ports also prevents problems with options like ZEROCONF being configured differently in both ports. - print/cups was a metaport that depended on cups-base and some filters. There isn't really a need for such a metaport so cups-base can be renamed to cups. The filters can be depended on by printer drivers such as hplip if they need them. Additional changes to the new print/cups: - Clean up the patches. They seem to have been regenerated with post-patch changes included. - Add a patch to prevent intermediate conversion to PDF when a PostScript file is sent to a PostScript printer when cups-filters is installed. - Fix the PAM configuration file. - Add a patch to let the server search /usr/local/share/ppd like on Linux so other ports don't have to add links to it. - Remove ulpt(4) helper scripts. The port uses libusb with ugen(4). - Remove support for mDNSResponder. cups-filters only supports Avahi. - Combine ICONS and XDG_OPEN options into an X11 option to support WITHOUT_X11. - Optionally depend on colord for ICC profile support. - Various smaller changes. Changes to print/cups-filters: - Let the cups_browsed rc.d script depend on cupsd and avahi_daemon instead of LOGIN. - Development of foomatic-filters has been moved to cups-filters so let this port install foomatic related files and add foomatic-filters to CONFLICTS. - Fix location of liblouis tables. - Add patch to fix ICC support. Changes to print/cups-pstoraster: This port is essentially an old version of Ghostscript plus a cups filter. It's no longer developed. This commit removes it and changes existing dependencies to print/cups-filters which depends on print/ghostscript* and includes a gstoraster filter that can handle both PostScript and PDF. Changes to print/foomatic-db*: Remove old MASTER_SITES and dependencies and eliminate PKGNAMEPREFIX. Changes to print/foomatic-filters: Install beh backend with its original name again and add cups-filters to CONFLICTS. Changes to print/hplip: - Stop installing hpijs/foomatic-rip support. This is no longer supported upstream. - Stop installing hpcups PPDs. These are now automatically generated. The bundled PPDs are generated for an older version of cups. - Rename the QT option to X11 to support WITHOUT_X11. - Simplify the patches now that ports are installed in a staging area. - Add a patch to set SO_REUSEPORT (next to SO_REUSEADDR) on the mDNS socket like avahi-daemon does. This fixes Zeroconf support for HP network printers. PR: 207746 Exp-run by: antoine Approved by: portmgr (antoine)59272d1017
print/foomatic-filters: remove CONFLICT with cups-filters PR: 207181 Submitted by: Vladimir Omelchuk <admin@vladiom.com.ua> Approved by: cyberbotx@cyberbotx.com (maintainer)a1570ec30b
print/cups-filters, print/foomatic-filters: add CONFLICTS PR: 207172 Submitted by: admin@vladiom.com.uaa6f8374d10
print/cups-filters: 1.5.0 -> 1.8.2 Changes: http://bzr.linuxfoundation.org/loggerhead/openprinting/cups-filters/changes PR: 206720 Submitted by: Naram Qashat <cyberbotx@cyberbotx.com> (maintainer)d1ede6e14b
Update poppler to 0.40.0. [1] Add patches to py-poppler [2] and rubygem-poppler [3] to fix the build of these ports with poppler 0.39+. PR: 206293 [1] Submitted by: olivierd@ [1] Obtained from: ubuntu [2], rubygem-poppler upstream [3]cf649469f2
- Update to 1.5.0 PR: 205395 Submitted by: maintainer Approved by: mat (mentor) Differential Revision: D46277e63fecf77
print/cups-filters: Update to 1.4.0 This update resolves a code execution vulnerability. Approved by: ports-secteam (with hat) MFH: 2015Q4 Security: CVE-2015-8560f7e89874de
- Update to 1.3.0 Changes: http://fossies.org/linux/cups-filters/NEWS PR: 205235 Submitted by: Naram Qashat <cyberbotx@cyberbotx.com> (maintainer)6c8314a758
- Update to 1.2.0 PR: 204915 Submitted by: maintainer Approved by: mat (mentor) Differential Revision: https://reviews.freebsd.org/D4400e05bb102c2
Update to version 1.1.0 PR: 204114 Submitted by: Naram Qashat (maintainer)653686bd65