Bug 253244 - print/cups: switch upstream to openprinting repo, update to 2.3.3op2
Summary: print/cups: switch upstream to openprinting repo, update to 2.3.3op2
Status: Closed FIXED
Alias: None
Product: Ports & Packages
Classification: Unclassified
Component: Individual Port(s) (show other bugs)
Version: Latest
Hardware: Any Any
: --- Affects Only Me
Assignee: Tijl Coosemans
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2021-02-04 11:03 UTC by Kurt Jaeger
Modified: 2021-02-16 17:31 UTC (History)
2 users (show)

See Also:
bugzilla: maintainer-feedback? (tijl)
pi: merge-quarterly?


Attachments
patch (1006 bytes, patch)
2021-02-04 11:03 UTC, Kurt Jaeger
no flags Details | Diff

Note You need to log in before you can comment on or make changes to this bug.
Description Kurt Jaeger freebsd_committer freebsd_triage 2021-02-04 11:03:52 UTC
Created attachment 222159 [details]
patch

Testbuild on 13/amd64 was fine. Probably needs more testbuilds and run-tests.
Comment 1 Kurt Jaeger freebsd_committer freebsd_triage 2021-02-04 11:06:29 UTC
Apparently, https://github.com/OpenPrinting/cups is the new/maintained upstream.
Comment 2 Kurt Jaeger freebsd_committer freebsd_triage 2021-02-04 11:07:50 UTC
And it fixes a buffer (read) overflow in the ippReadIO function
(CVE-2020-10001)
Comment 3 Kurt Jaeger freebsd_committer freebsd_triage 2021-02-04 11:19:23 UTC
This move to openprinting was mentioned in

https://lwn.net/Articles/843573/
Comment 4 Daniel Engberg freebsd_committer freebsd_triage 2021-02-05 00:01:22 UTC
Hi,

Can we use the release archive instead?
https://github.com/OpenPrinting/cups/releases/tag/v2.3.3op1 --> https://github.com/OpenPrinting/cups/releases/download/v2.3.3op1/cups-2.3.3op1-source.tar.gz

Several repos carries this patch, is this something we want to use too?
https://git.alpinelinux.org/aports/tree/main/cups/cups-no-export-ssllibs.patch

Best regards,
Daniel
Comment 5 Tijl Coosemans freebsd_committer freebsd_triage 2021-02-11 19:13:08 UTC
(In reply to daniel.engberg.lists from comment #4)
I don't think we need that patch.  As far as I can see it only affects the output of "cups-config --static --libs" and only if static libraries are installed which isn't the case currently.
Comment 6 commit-hook freebsd_committer freebsd_triage 2021-02-16 17:21:33 UTC
A commit references this bug:

Author: tijl
Date: Tue Feb 16 17:20:51 UTC 2021
New revision: 565417
URL: https://svnweb.freebsd.org/changeset/ports/565417

Log:
  Follow other distributions and switch to OpenPrinting version of CUPS.

  It tracks the current Apple CUPS sources and includes common changes and
  bug fixes for the various Linux distributions and other UNIX?-like
  operating systems.

  PR:		253244
  Submitted by:	pi

Changes:
  head/print/cups/Makefile
  head/print/cups/distinfo
  head/print/cups/pkg-descr