BSD Ports

Vulnerable: version 2.4.19nb2 is affected by 1 known vulnerability. See below.

print/cups-base 2.4.19nb2 NetBSD

Common UNIX Printing System

System
NetBSD
Repository
pkgsrc
Maintainer
[email protected]
Last update
Commit
bf4ffe0a8a
License
gnu-gpl-v2 AND gnu-lgpl-v2
Categories
print
Package size
4654.5 KiB, 13634.9 KiB installed

Description

The Common UNIX Printing System provides a portable printing layer for UNIX operating systems. It has been developed by Easy Software Products to promote a standard printing solution for all UNIX vendors and users. CUPS provides the System V and Berkeley command-line interfaces.

CUPS uses the Internet Printing Protocol (IETF-IPP) as the basis for managing print jobs and queues. The Line Printer Daemon (LPD, RFC1179) and AppSocket protocols are also supported with reduced functionality.

CUPS adds network printer browsing and PostScript Printer Description ("PPD")-based printing options to support real world applications under UNIX.

Install

Binary package:

pkgin install cups-base

From pkgsrc:

cd /usr/pkgsrc/print/cups-base && make install clean

Packages

The version each package repository carries. “-” means the repository builds no package of it, “n/a” that there is no such repository.

RepositoryVersion
NetBSD 10.1 x86_642.4.19nb2
NetBSD 10.1 aarch642.4.19nb1
SmartOS / illumos x86_642.4.20
macOS 15 arm642.4.20

Dependencies

Run dependencies 9

Known vulnerabilities 1

Commit history 8

DateCommitCreditsLog message
bf4ffe0a8a tnn cups: fix libcups build when dnssd option is off. From upstream.
3869efa6c9 wiz *cups*: update to 2.4.20
v2.4.20 - 2026-10-05 -------------------- - SECURITY-5.7: The scheduler did not open temporary PPD files in exclusive mode (CVE-2026-55480) - SECURITY-5.5: The scheduler did not remove all job status attributes from a job creation request (GHSA-7j85-5r23-xhvh) - SECURITY-5.3: The scheduler did not validate the request language value (CVE-2026-61702) - SECURITY-4.6: Attribute names were not validated as proper keyword values (GHSA-w9hj-hq9p-m7f6) - SECURITY-4.3: The `cupsUTF32toUTF8` function incorrectly treated UTF-32 values as 64-bit (CVE-2026-87875) - SECURITY-4.1: Held jobs for temporary print queues could crash the scheduler (GHSA-qqm8-4q5h-jg55) - SECURITY-3.3: The backend did not sanitize IPP attribute strings (CVE-2026-55453) …
7b5a3977f9 wiz *: recursive bump for pcre2 10.49
204ac6b2b7 tnn *: revbump for pcre2 symbol versioning change
5e4aea17e2 wiz *: recursive bump for pcre2 10.48

The latest 5 of 8 in the history this site was built from.