CVE and update status of the FreeBSD ports tree3,298 unaddressed CVEs in 671 portsAll times are CET
Port details

print/cups 2.4.20

Common UNIX Printing System

Port info

Maintainer
tijl@FreeBSD.org
Packages
latest: 2.4.20
Upstream
up to date
Last update
to 2.4.20 · 3c361bc046
Quarterly
2026Q4: 2.4.20 · last MFH 6ec2c7eba3
Formerly
print/cups-base until 2016-03-11, print/cups-client until 2016-03-11, print/cups-image until 2016-03-11, print/cups-lpr until 2006-06-23
WWW
https://github.com/OpenPrinting/cups
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install cups
installs 2.4.20 from latest; from quarterly (2026Q4) 2.4.20
Port
# cd /usr/ports/print/cups && make install clean
# make -C /usr/ports/print/cups config  # change options first
Size
5.4 MiB download · 14 MiB installed
Depends on
devel/dbus 1.16.2_4,1, net/avahi-app 0.8_6, print/libpaper 1.1.28_1
License
APACHE20 and CUPS
Creates
user cups, group cups
Options
7 of 9 on in the package: AVAHI DBUS DOCS IPPTOOL LIBPAPER NLS OPENSSL
Show the 2 options that are off
GNUTLS X11

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 162.4.202.4.19_2–
FreeBSD 152.4.202.4.20–
FreeBSD 142.4.202.4.19_22.4.20

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 152.4.202.4.20–
FreeBSD 142.4.202.4.19_22.4.20

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 2.4.20.

Fixed (4)

Show 4 fixed
VuXML entries whose affected range the packaged version has left.

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (409)

Ion-Mihai Tetcu (itetcu) · 1.2.2
- update to 1.2.2 [1] - tell in pkg-message about permissions needed [2] [3] - fix man / mlink install [4] [5] - don't remove dirs listed in bsd.local.dist [6] - conflict with LPRng [7] - fix OPTIONS handling [8] - fix printing raw data using application/octet-stream [9] - some other small fixes

Please note that the biggest part of the work was done by Marcin Wisnicki and
this commit it's based manly on his work.

PR:		ports/99624 [1]
		ports/99460 [2] ports/99745 [3]
		ports/99798 [4] ports/101175 [5]
		ports/100865 [6]
		ports/99791 [7]
		ports/99786 [8]
		ports/99707 [9]
Submitted by:	Marcin Wisnicki [1]
		Nicolas Blais [2],Osamu Hasegawa [3]
		Tsurutani Naoki [4], Dominic Fandrey [5]
		Stanislav Sedov [6]
		Leif Pedersen [7]
		Harald Schmalzbauer [8]
		Jonathan Fosburgh [9]
Rewiev by:	many with no objections
Approved by:	maintainer timeout
cc7e718b9d
Ion-Mihai Tetcu (itetcu) · 1.2.2 · as print/cups-base
- update to 1.2.2 [1] - tell in pkg-message about permissions needed [2] [3] - fix man / mlink install [4] [5] - don't remove dirs listed in bsd.local.dist [6] - conflict with LPRng [7] - fix OPTIONS handling [8] - fix printing raw data using application/octet-stream [9] - some other small fixes

Please note that the biggest part of the work was done by Marcin Wisnicki and
this commit it's based manly on his work.

PR:		ports/99624 [1]
		ports/99460 [2]	ports/99745 [3]
		ports/99798 [4] ports/101175 [5]
		ports/100865 [6]
		ports/99791 [7]
		ports/99786 [8]
		ports/99707 [9]
Submitted by:	Marcin Wisnicki [1]
		Nicolas Blais [2],Osamu Hasegawa [3]
		Tsurutani Naoki [4], Dominic Fandrey [5]
		Stanislav Sedov [6]
		Leif Pedersen [7]
		Harald Schmalzbauer [8]
		Jonathan Fosburgh [9]
Rewiev by:	many with no objections
Approved by:	maintainer timeout
ddddfaf57c
Ion-Mihai Tetcu (itetcu) · 1.2.0_2 · as print/cups-base
* Fixes problems with updating CUPS installation (Udo Schweigert) * Fixes conflict with PHP5 when WITH_PHP is not enabled

PR:		99371
Submitted by:	maintainer
Tested by:	Beech Rintoul <beech@alaskaparadise.com>
eb62356a3e
Michael Johnson (ahze) · as print/cups-lpr
- Remove cups-lpr, it has been merged in to print/cups-base

Pointyhat to:	me for not removing this earlier.
bd71a6c533
Michael Johnson (ahze) · 1.2.0
- Update to 1.2.0

PR:		ports/97783
		ports/97782
Submitted by:	maintainer
2bc3fec6c8
Edwin Groothuis (edwin) · as print/cups-lpr
Remove USE_REINPLACE from all categories starting with P
a80969d36e
Marcus Alves Grando (mnag) · as print/cups-base
- Add patch for security issues - Bump PORTREVISION - portlint(1)

Approved by:	maintainer timeout (2 days, security)
Obtained from:	gentoo
Security:	CVE-2005-3624, CVE-2005-3625, CVE-2005-3626, CVE-2005-3627,
		http://secunia.com/advisories/18303/
9e5bc725e7
Doug Barton (dougb) · as print/cups-base
Replace the old cups.sh script with a new rc.d style cupsd[.sh]

Approved by:	Sergey Akifyev <asa@agava.com> (maintainer)
f42467b02f
Edwin Groothuis (edwin) · as print/cups-base
Replace ugly "@unexec rmdir %D... 2>/dev/null || true" with @dirrmtry

Approved by:    krion@
PR:             ports/88711 (related)
508b8d82f4
Roman Bogorodskiy (novel) · 1.1.23.0_1
Chase gnutls update.
17b54d4ed8
Marcus Alves Grando (mnag) · as print/cups-base
Backport xpdf vendor patch (affected part) Bump PORTREVISION

PR:		90072
Approved by:	maintainer
Security:	http://www.idefense.com/application/poi/display?id=342&type=vulnerabilities
		http://www.idefense.com/application/poi/display?id=343&type=vulnerabilities
		http://www.idefense.com/application/poi/display?id=344&type=vulnerabilities
		http://secunia.com/advisories/17897/
		CVE-2005-3191, CVE-2005-3192
950b32ed2b
Doug Barton (dougb) · as print/cups-base
Remove the PROVIDE line from the startup script. From our perspective, this is still an old-style rc script, however the presence of the PROVIDE line fools the new rcorder code in HEAD into thinking that it should be treated like a new style script.

I submitted the patch to the maintainer recently, but given
that the PR points out the problem in the real world, I'm
taking unilateral action. If the maintainer has a better
solution, that's not a problem.

PR:		ports/89892
Submitted by:	Nicolas Blais
f678b28453
Sam Lawrance (lawrance) · as print/cups-base
Fix embedded xpdf vulnerability. Bump PORTREVISION.

Approved by:	asa@agava.com (maintainer, timeout 3 weeks), linimon
Obtained from:	RedHat/FC3
Security:	http://www.FreeBSD.org/ports/portaudit/24eee285-09c7-11da-bc08-0001020eed82.html
Security:	CAN-2005-2097
8c7b5e4f7f
Michael Reifenberger (mr) · as print/cups-base
Forgot to bump PORTREVISION after fixing gnu-tls support.

Remindet by: Doug Barton
47e53368ea
Michael Reifenberger (mr) · 1.1.23.0
Just using --enable-gnutls doesn't seem to be sufficient for cups-base to choose it in favour of the base openssl. This kills cups-printing from inside firefox/mozilla. Adding --disable-openssl seems to solve this.

Testet by:	Stijn Hoop <stijn win.tue.nl>
f87f31c5c6
David E. O'Brien (obrien) · 1.1.23.0
At Kris's request, back out the MACHINE_ARCH spelling correction until after 5.4-RELEASE.
c3d8037aeb
David E. O'Brien (obrien) · 1.1.23.0
Assist getting more ports working on AMD64 by obeying the Ports Collection documentation and use 'ARCH' rather than 'MACHINE_ARCH'.
f2fc2d60ae
Kirill Ponomarev (krion) · 1.1.23.0
Add libpaper (print/libpaper) support.

PR:		ports/77609
Submitted by:	Oyvind Moll <oyvind@moll.no>
Approved by:	maintainer
45df66a190
Volker Stolz (vs) · as print/cups-base
Do not wipe existing certs on installation from port

PR:		ports/76522
Submitted by:	Tsurutani Naoki
Approved by:	maintainer
88ea3562e0
Tom Rhodes (trhodes) · as print/cups-base
Patch for remote buffer exploit.

Submitted by:	simon
Approved by:	MAINTAINER
VuXML uuid:	f755545e-6fcd-11d9-abec-00061bd2d56f
f602e79ae6
Sergey Matveychuk (sem) · 1.1.23.0
- Update to 1.1.23 - Build with GNUTLS isntead of OpenSSL by default to fix FireFox issues - Fixed man languages - Change maintainer e-mail - Pass maintainership of print/cups to submitter

PR:		ports/76337
Submitted by:	Sergey Akifyev <asa(at)agava.com> (maintainer of cups-base and cups-lpr)
4b20f10627
Simon L. B. Nielsen (simon) · as print/cups-base
Fix remote arbitrary code execution vulnerability.

Note that this does not fix all the security vulnerabilities for CUPS,
but it fixes the most serious one.

With hat:	secteam
VuXML:		http://www.vuxml.org/freebsd/40a3bca2-6809-11d9-a9e7-0001020eed82.html
Obtained from:	CUPS bug system - http://www.cups.org/str.php?L1024
Approved by:	erwin (mentor)
ec1d8095ea
Josef El-Rayes (josef) · as print/cups-base
Patch vulnerability in imported xpdf code. Bump PORTREVISION.

Approved by:    pav(mentor)
With hat:       secteam

References:
http://www.vuxml.org/freebsd/e3e266e9-5473-11d9-a9e7-0001020eed82.html
ba9d5bd945
Volker Stolz (vs) · as print/cups-lpr
Fix printing with JDK14 (cf. http://www.cups.org/str.php?L1004)

PR:		ports/74312
Submitted by:	Gustavo De Nardin
Approved by:	maintainer
bc713acfba
Doug Barton (dougb) · 1.1.22.0
Update to 1.1.22, which was released on 29 October and is the latest version. While I'm here, make pkg-message print the actual prefix when the port is installed, and a nicer message for package installs.

This version of the software also includes 'es' man pages to
go with the 'fr' ones.
60171985c3
Doug Barton (dougb) · as print/cups-base
Fix build and plist by updating the locations of a couple of man pages that changed in version 1.1.21.

According to lofi (who committed the PR for the upgrade) the maintainer
is currently, "very offline," so he agreed that I should just commit
the fixes.

Forgotten by:	MAINTAINER
Untested by:	lofi
30b21968e9
Michael Nottebrock (lofi) · 1.1.21.0
Update to 1.1.21.

PR: 71811
Submitted by: maintainer
b515c96389
Volker Stolz (vs) · as print/cups-base
Also keep backups of mime.{convs,types} on upgrades.

PR:		ports/70195
Requested by:	John Merryweather Cooper
Patched by:	Sergey Akifyev (maintainer)
af0214e2fe
Michael Nottebrock (lofi) · as print/cups-base
Prevent configure from setting CXX=CC and falling over with gcc-3.4.2 because of it afterwards.
0251351f10
Volker Stolz (vs) · as print/cups-base
- Provide helpful pkg-message [1] - Add URL to pkg-descr [1] - Use correct path to configuration files in man-page [2]

PRs:		ports/65390 [1], ports/65391 [2]
Submitted by:	Daniel Harris
Approved by:	maintainer
797b1f8583
Daniel Harris (dannyboy) · 1.1.20.0
Remove the part about installing the cups-lpr port because the meta-port already does.
abd26601df
Daniel Harris (dannyboy) · 1.1.20.0
Duplicate the relevant parts of the former cups-base pkg-message here, so the user has another shot at seeing them. The resurrection of this file in the cups-base port (to catch users not installing by this metaport) is pending maintainer approval.

Submitted by:	Grumbling on IRC
4d63b7c349
Daniel Harris (dannyboy) · 1.1.20.0
Add missing WWW.
f695834f73
Joe Marcus Clarke (marcus) · as print/cups-base
Bump PORTREVISION on all ports that depend on gettext to aid with upgrading.

(Part 1)
73f7c91b5d
Michael Nottebrock (lofi) · as print/cups-base
Fix some fallout from the permissions-fix.

Noticed by: kde-freebsd buildcluster.
091be4305f
Joe Marcus Clarke (marcus) · as print/cups-base
Unmark FORBIDDEN, and fix the permissions issue.

Submitted by:	maintainer
e7247d5d2d
Pete Fritchman (petef) · 1.1.20.0
- add WITH_PERL and WITH_PYTHON knobs - remove dependency on autoconf

PR:		60557
Submitted by:	Seva Gluschenko <gvs@rinet.ru>
5a724c22d6
Pav Lucistnik (pav) · as print/cups-lpr
- Base lpr lives in /usr not in /

Approved by:	maintainer
d964da3bd5
Pav Lucistnik (pav) · 1.1.20.0
- Update to 1.1.20

PR:		ports/59709
Submitted by:	Sergey Akifyev <asa@gascom.ru> (maintainer)
Approved by:	adamw (mentor)
51f8f29d0f
Joe Marcus Clarke (marcus) · as print/cups-lpr
Do not overwrite base lp* files by default.  Instead, provide a CUPS_OVERWRITE_BASE macro, plus some instruction on what could happen should users chose this option.

Submitted by:	maintainer
Approved by:	portmgr (implicit)
c35036d957
Pav Lucistnik (pav) · as print/cups-lpr
- Move lpr binaries in base away, so cups binaries in /usr/local/bin   get picked. - Move them back on deinstall. - Give maintainershop to submitter.

PR:		ports/57938
Submitted by:	Sergey Akifyev <asa@gascom.ru>
Reviewed by:	marcus
Approved by:	adamw (mentor)
a4d9d6e1c4
Pav Lucistnik (pav) · as print/cups-base
- Let package create necessary config directories - Change pkg-message to point to common configuration problems - Give maintainership to submitter

PR:             ports/57937
Submitted by:   Sergey Akifyev <asa@gascom.ru>
Reviewed by:    marcus
Approved by:    adamw (mentor)
889b8c4403
Oliver Eikemeier (eik) · 1.1.19.0
Fix some ports that write something after bsd.port.mk

PR:		59254
Approved by:	marcus (mentor)
f6153f1cce
Tilman Keskinoz (arved) · 1.1.19.0
Update to 1.1.19
f334b33c50
Will Andrews (will) · 1.1.18.0_5
REST IN PEACE  	Alan Eldridge Born December 15, 1961 in Iowa Died June 6, 2003 in Denver, Colorado

Thank you for your contributions, you
will be greatly missed.
f9be1a26da