CVE and update status of the FreeBSD ports tree3,295 unaddressed CVEs in 670 portsAll times are CET
Port details

print/cups 2.4.20

Common UNIX Printing System

Port info

Maintainer
tijl@FreeBSD.org
Packages
latest: 2.4.20
Upstream
up to date
Last update
to 2.4.20 · 3c361bc046
Quarterly
2026Q4: 2.4.20 · last MFH 6ec2c7eba3
Formerly
print/cups-base until 2016-03-11, print/cups-client until 2016-03-11, print/cups-image until 2016-03-11, print/cups-lpr until 2006-06-23
WWW
https://github.com/OpenPrinting/cups
Links
cgit · VuXML

Install

Package
# pkg install cups
installs 2.4.20 from latest; from quarterly (2026Q4) 2.4.20
Port
# cd /usr/ports/print/cups && make install clean
# make -C /usr/ports/print/cups config  # change options first
Size
5.4 MiB download · 14 MiB installed
Depends on
devel/dbus 1.16.2_4,1, net/avahi-app 0.8_6, print/libpaper 1.1.28_1
License
APACHE20 and CUPS
Creates
user cups, group cups
Options
7 of 9 on in the package: AVAHI DBUS DOCS IPPTOOL LIBPAPER NLS OPENSSL
Show the 2 options that are off
GNUTLS X11

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 162.4.202.4.19_2–
FreeBSD 152.4.202.4.20–
FreeBSD 142.4.202.4.19_22.4.20

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 152.4.202.4.20–
FreeBSD 142.4.202.4.19_22.4.20

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 2.4.20.

Fixed (4)

Show 4 fixed
VuXML entries whose affected range the packaged version has left.

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (409)

Tijl Coosemans (tijl) · 2.4.20 MFH 2026Q4 ✓
print/cups: Fix build with AVAHI option disabled

PR:		299342
Reported by:	vvd
3c361bc046
Tijl Coosemans (tijl) · 2.4.19_2
print/cups: Fix pkg-plist with option OPENSSL
afcb256509
Tijl Coosemans (tijl) · 2.4.19_1
print/cups: Enable IPPTOOL and add OPENSSL option

PR:		295249
8afcfe15f7
Tijl Coosemans (tijl) · 2.4.19
print/cups: Update to 2.4.19
0b605090f1
Tijl Coosemans (tijl) · 2.4.18
print/cups: Update to 2.4.18

Include patch by Christian Ullrich to fix documentation links.

PR:		294786
ed63c6bd18
Tijl Coosemans (tijl) · 2.4.16
print/cups: Update to 2.4.16

Also include 2 post-release bug fixes.
5f374fcd8d
Tijl Coosemans (tijl) · 2.4.15_1
print/cups: Fix regressions

- Apply upstream patch to unblock GTK+ print dialogs.
- Apply upstream patch for out-of-bounds read in cupsUTF8ToCharset().
- Make cupsd ignore IdleExitTimeout in cupsd.conf.

Reported by:	christos
773bd2e7b1
Tijl Coosemans (tijl) · 2.4.15
print/cups: Update to 2.4.15
2c6ce5b2d1
Tijl Coosemans (tijl) · 2.4.14
print/cups: Update to 2.4.14

PR:		289626
Security:	CVE-2025-58060
Security:	CVE-2025-58364
819e724a08
Tijl Coosemans (tijl) · 2.4.12
print/cups: Update to 2.4.12
7db6b9d37c
Gleb Popov (arrowd) · 2.4.11_1
*: Bump revisions after dbus update

PR:		285253
Reported by:	Martin Birgmeier <d8zNeCFG@aon.at>
a347a92e6e
Tijl Coosemans (tijl) · 2.4.11
print/cups: Update to 2.4.11

Security:	CVE-2024-47175
ae60f3b29d
Tijl Coosemans (tijl) · 2.4.10_1
print/cups: Fix checkboxes in the web interface

Add a patch so checkboxes aren't always off when submitting forms.

PR:		279883
cf99a48a1c
Tijl Coosemans (tijl) · 2.4.10
print/cups: Update to 2.4.10

Pet portclippy/portfmt.

PR:		278920, 279883
9a4fe7c6ba
Vladimir Druzenko (vvd) · 2.4.8
print/cups: update to 2.4.8

CUPS 2.4.8 brings many bug fixes which aggregated over the last half a year.
It brings the important fix for race conditions and errors which can happen
when installing permanent IPP Everywhere printer, support for PAM modules
password-auth and system-auth and new option for lpstat which can show only
the successful jobs.

Detailed list of changes is available in CHANGES.md:
https://github.com/OpenPrinting/cups/blob/v2.4.8/CHANGES.md

PR:		278899
Approved by:	tijl (maintainer)
MFH:		2024Q2
172b2c1425
Muhammad Moinur Rahman (bofh) · 2.4.7_2
print/cups: Moved man to share/man

Approved by:    portmgr (blanket)
edb53ad8f1
Tijl Coosemans (tijl) · 2.4.7_1
print/cups: Fix build with GNUTLS disabled

PR:		275154
6218c0ab25
Tijl Coosemans (tijl) · 2.4.7
print/cups: Update to 2.4.7
f381770c45
Tijl Coosemans (tijl) · 2.4.6
print/cups: Use upstream release tarball

PR:		272167
21e620488c
Tijl Coosemans (tijl) · 2.4.6
print/cups: Update to 2.4.6
13f045cb40
Tijl Coosemans (tijl) · 2.4.2_1
print/cups: Fix issues with color printing

PR:		271163
61428d4580
Stefan Eßer (se) · 2.4.2
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
fb16dfecae
Stefan Eßer (se) · 2.4.2
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)
b7f05445c0
Tobias C. Berner (tcberner) · 2.4.2
print: remove 'Created by' lines

A big Thank You to the original contributors of these ports:

  *  Akinori MUSHA aka knu <knu@idaemons.org>
  *  Alan Eldridge <alane@geeksrus.net>
  *  Alex Dupre <ale@FreeBSD.org>
  *  Alex Dupre <sysadmin@alexdupre.com>
  *  Alexander Vereeken <Alexander88207@protonmail.com>
  *  Alexey Dokuchaev <danfe@FreeBSD.org>
  *  Alonso Cardenas Marquez <acm@FreeBSD.org>
  *  Andreas Klemm <andreas@FreeBSD.org>
  *  Andreas Klemm <andreas@klemm.gtn.com>
  *  Andrew Pantyukhin <infofarmer@FreeBSD.org>
  *  Anish Mistry <amistry@am-productions.biz>
  *  Anton Berezin <tobez@tobez.org>
  *  Bruce M Simpson <bms@FreeBSD.org>
  *  Bruce M. Simpson <bms@FreeBSD.org>
  *  CHOI Junho <cjh@FreeBSD.org>
  *  Chuck Robey <chuckr@FreeBSD.org>
  *  D'Arcy Cain <darcy@druid.net>
  *  David O'Brien (obrien@NUXI.com)
  *  David O'Brien <obrien@FreeBSD.org>
  *  David O'Brien <obrien@cs.ucdavis.edu>
  *  Dima Dorfman <dima@unixfreak.org>
  *  Dmitry Kazarov <d.y.kazarov@mail.ru>
  *  Dmitry Sivachenko <dima@Chg.RU>
  *  Emanuel Haupt <ehaupt@FreeBSD.org>
  *  Fabiano Sidler <fabianosidler@swissonline.ch>
  *  Fernan Aguero <fernan.aguero@gmail.com>
  *  Fernan Aguero <fernan@iib.unsam.edu.ar>
  *  Giuseppe Pilichi aka Jacula Modyun <jacula@gmail.com>
  *  Golyashov Sergey <svvord@soft-wizard.ru>
  *  Gvozdikov Veniamin <g.veniamin@googlemail.com>
  *  Hideaki Ohmon <ohmon@tom.sfc.keio.ac.jp>
  *  Igor Pokrovsky <tiamat@comset.net>
  *  James Bailie <jimmy@mammothcheese.ca>
  *  Jean-Marc Zucconi <jmz@FreeBSD.org> and David O'Brien <obrien@FreeBSD.org>
  *  Jean-Sebastien Roy <js@jeannot.org>
  *  Joe Marcus Clarke <marcus@FreeBSD.org>
  *  Joel Sutton <jsutton@bbcon.com.au>
  *  Joerg Wunsch <joerg@FreeBSD.org>
  *  Jose Alonso Cardenas Marquez <acardenas@bsd.org.pe>
  *  Jose Jachuf <jjachuf@gmail.com>
  *  Joseph Koshy <jkoshy@FreeBSD.org>
  *  Juergen Lock <nox@jelal.kn-bremen.de>
  *  Jui-Nan Lin <jnlin@freebsd.cs.nctu.edu.tw>
  *  KANOU Hiroki <kanou@khdd.net>
  *  KATO Tsuguru <tkato@prontomail.com>
  *  Kapil Chowksey
  *  Kentaro Inagaki <JBD01226@niftyserve.ne.jp>
  *  Kimura Fuyuki <fuyuki@hadaly.org>
  *  Klemm <andreas@klemm.gtn.com>
  *  Koop Mast <kwm@FreeBSD.org>
  *  Kozlov Sergey <kozlov.sergey.404@gmail.com>
  *  Lars Koeller
  *  Mario Sergio Fujikawa Ferreira <lioux@FreeBSD.org>
  *  Mark Pulford <mark@kyne.com.au>
  *  Mark Reidel <ports@mark.reidel.info>
  *  Martin Dieringer <martin.dieringer@gmx.de>
  *  Martin Kammerhofer
  *  Martin Klaffenboeck <martin.klaffenboeck@gmx.at>
  *  Martin Ranne <gasp@ridcully.dnsalias.org>
  *  Matthew Hunt <mph@pobox.com>
  *  Maxim Loginov <Zeliboba@mail.ru>
  *  Michael Johnson <ahze@FreeBSD.org>
  *  Michael Moll <kvedulv at kvedulv.de>
  *  Michael Nottebrock <lofi@FreeBSD.org>
  *  Mike Meyer <mwm@mired.org>
  *  Mikhail Teterin
  *  Mita Yoshio <mita@FreeBSD.org>
  *  Nicola Vitale <nivit@email.it>
  *  Oliver Braun <obraun@informatik.unibw-muenchen.de>
  *  Oliver Breuninger <ob@seicom.NET>
  *  Olivier Cochard-Labbe <olivier@FreeBSD.org>
  *  Patrick Dung (patrick_dkt@yahoo.com.hk)
  *  Patrick Powell <papowell@astart.com>
  *  Pedro Giffuni
  *  Philip M. Gollucci <pgpollucci@p6m7g8.com>
  *  Piotr Kubaj <pkubaj@anongoth.pl>
  *  Po-Chuan Hsieh <sunpoet@FreeBSD.org>
  *  Robert Withrow <witr@rwwa.com>
  *  Romain Tartiere <romain@FreeBSD.org>
  *  Satoshi Asami <asami@FreeBSD.org>
  *  Satoshi TAOKA <taoka@FreeBSD.org>
  *  Satoshi Taoka <taoka@FreeBSD.org>
  *  Shen Chuan-Hsing <statue@freebsd.sinica.edu.tw>
  *  Simon 'corecode' Schubert <corecode@corecode.ath.cx>
  *  Simun Mikecin <numisemis@yahoo.com>
  *  Stefan Esser <se@FreeBSD.org>
  *  Stefan Hagen <ports@textmail.me>
  *  Stephen Fisher
  *  Steve Wills <swills@FreeBSD.org>
  *  Sunpoet Po-Chuan Hsieh <sunpoet@FreeBSD.org>
  *  TAKATSU Tomonari <tota@FreeBSD.org>
  *  Thierry Thomas <thierry@pompo.net>
  *  Thomas Gellekum <tg@FreeBSD.org>
  *  Tim McCormick <tim@pcbsd.org>
  *  Tomokatsu SAITO <saito@a2z.co.jp>
  *  Veniamin Gvozdikov <vg@FreeBSD.org>
  *  Wen Heping <wenheping@gmail.com>
  *  Yuichiro AIZAWA <yaizawa@mdbl.sfc.keio.ac.jp>
  *  amistry@am-productions.biz
  *  andrew@scoop.co.nz
  *  arved
  *  brett@peloton.physics.montana.edu
  *  chuckr@FreeBSD.org
  *  cjm2
  *  dbader@eece.unm.edu
  *  dgilbert@velocet.ca
  *  e-masson@kisoft-services.com
  *  eserte@cs.tu-berlin.de
  *  gahr
  *  giffunip
  *  hrs
  *  ijliao
  *  jmz
  *  joerg
  *  johans
  *  jseger@FreeBSD.org
  *  kline
  *  ljo
  *  lofi@FreeBSD.org
  *  martin.dieringer@gmx.de
  *  mwest@uct.ac.za
  *  oly@world.std.com
  *  patrick, trevor
  *  smace@FreeBSD.org
  *  spcoltri@unm.edu
  *  tg@FreeBSD.org
  *  tobez
  *  wenheping@gmail.com

With hat:	portmgr
51879c91f8
Tijl Coosemans (tijl) · 2.4.2
print/cups: update to 2.4.2
9519440953
Tijl Coosemans (tijl) · 2.4.1
print/cups: update to 2.4.1

PR:		263672
2c00022c72
Piotr Kubaj (pkubaj) · 2.3.3op2
print/cups: remove obsolete conditional for powerpc

PIE now works fine.
a29ec5f531
Stefan Eßer (se) · 2.3.3op2
*/*: Remove redundant '-[0-9]*' from CONFLICTS

The conflict checks compare the patterns first against the package
names without version (as reported by "pkg query "%n"), then - if
there was no match - agsinst the full package names including the
version (as reported by "pkg query "%n-%v").

Many CONFLICTS definitions used patterns like "bash-[0-9]*" to filter
for the bash package in any version. But that pattern is functionally
identical with just "bash".

Approved by:	portmgr (blanket)
819f25b36d
Mathieu Arnold (mat) · 2.3.3op2
all: Remove all other $FreeBSD keywords.
135fdeebb9
Mathieu Arnold (mat) · 2.3.3op2
Remove # $FreeBSD$ from Makefiles.
305f148f48
Tijl Coosemans (tijl) · 2.3.3op2
Follow other distributions and switch to OpenPrinting version of CUPS.

It tracks the current Apple CUPS sources and includes common changes and
bug fixes for the various Linux distributions and other UNIX®-like
operating systems.

PR:		253244
Submitted by:	pi
e781b6d8ec
Mark Linimon (linimon) · 2.3.3_1
Add compiler:c++11-lang to USES to fix build on GCC-based systems:

cc1: error: unrecognized command line option "-Wno-unused-result"

(et. al.)

Approved by:	portmgr (tier-2 blanket)
376ee10372
Tijl Coosemans (tijl) · 2.3.3_1
Fix pkg-plist for AVAHI off and DOCS on.

PR:		247521
13c8947d1f
Tijl Coosemans (tijl) · 2.3.3_1
Fix the fix for CVE-2020-3898.
6967d10321
Tijl Coosemans (tijl) · 2.3.3
Update to 2.3.3.
579b2e1c6b
Tijl Coosemans (tijl) · 2.2.13
Update to 2.2.13.
b878dca33d
Tijl Coosemans (tijl) · 2.2.12
Update to 2.2.12.

MFH:		2019Q3
Security:	https://github.com/apple/cups/releases/tag/v2.2.12
Security:	CVE-2019-8675
Security:	CVE-2019-8696
a78f3120cc
Tijl Coosemans (tijl) · 2.2.11
Update to 2.2.11.
0a8016cf09
Tijl Coosemans (tijl) · 2.2.10
Add WITH_DEBUG support.
7c75491bae
Tijl Coosemans (tijl) · 2.2.10
Update to 2.2.10.
4958f8c47a
Tijl Coosemans (tijl) · 2.2.8_1
Add upstream patch to fix high CPU load.

PR:		229051
Submitted by:	tcberner
3838aaee00
Tijl Coosemans (tijl) · 2.2.8
Update to 2.2.8.
f36889127d
Tijl Coosemans (tijl) · 2.2.7
- Update to 2.2.7. - Remove -Wl,-R flag from cups-config output to fix out of tree builds of   Gnome.  The -R flag takes precedence over -L flags when the linker   searches for dependencies of libraries listed on the command line which   can be unexpected.  Therefore, config scripts like this should only   provide -L flags.  An rpath is then typically generated automatically by   the build system 

PR:		227891 [1]
Reported by:	Ting-Wei Lan <lantw44@gmail.com>
3542108dc0
Justin Hibbits (jhibbits) · 2.2.6
Drop PIE for cups, it's not supported on powerpc, so fails the build

Reviewed By:tijl
Differential Revision: https://reviews.freebsd.org/D10613
6ab1b175f9
Tijl Coosemans (tijl) · 2.2.6
Update to 2.2.6.
26d06b4dd5
Tijl Coosemans (tijl) · 2.2.3
Update to 2.2.3.
613c49701b
Dmitry Marakasov (amdmi3) · 2.2.2_1
- Remove bogus (in presence of USE_GITHUB) USES=tar*

Approved by:	portmgr blanket
c1ceab4ebe
Tijl Coosemans (tijl) · 2.2.2_1
Remove Kerberos related configuration from default cupsd.conf because Kerberos support is disabled and the configuration causes an error.

Reported by:	cpm
43e03dac3f
Tijl Coosemans (tijl) · 2.2.2
Update to 2.2.2.
1d624f2502