Created attachment 222159 [details] patch Testbuild on 13/amd64 was fine. Probably needs more testbuilds and run-tests.
Apparently, https://github.com/OpenPrinting/cups is the new/maintained upstream.
And it fixes a buffer (read) overflow in the ippReadIO function (CVE-2020-10001)
This move to openprinting was mentioned in https://lwn.net/Articles/843573/
Hi, Can we use the release archive instead? https://github.com/OpenPrinting/cups/releases/tag/v2.3.3op1 --> https://github.com/OpenPrinting/cups/releases/download/v2.3.3op1/cups-2.3.3op1-source.tar.gz Several repos carries this patch, is this something we want to use too? https://git.alpinelinux.org/aports/tree/main/cups/cups-no-export-ssllibs.patch Best regards, Daniel
(In reply to daniel.engberg.lists from comment #4) I don't think we need that patch. As far as I can see it only affects the output of "cups-config --static --libs" and only if static libraries are installed which isn't the case currently.
A commit references this bug: Author: tijl Date: Tue Feb 16 17:20:51 UTC 2021 New revision: 565417 URL: https://svnweb.freebsd.org/changeset/ports/565417 Log: Follow other distributions and switch to OpenPrinting version of CUPS. It tracks the current Apple CUPS sources and includes common changes and bug fixes for the various Linux distributions and other UNIX?-like operating systems. PR: 253244 Submitted by: pi Changes: head/print/cups/Makefile head/print/cups/distinfo head/print/cups/pkg-descr