From nobody Fri Sep 27 10:33:22 2024 X-Original-To: dev-commits-ports-main@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4XFRdH0SzDz5XqN7; Fri, 27 Sep 2024 10:33:23 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R11" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4XFRdG734jz4Z8s; Fri, 27 Sep 2024 10:33:22 +0000 (UTC) (envelope-from git@FreeBSD.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1727433203; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=XUqgnjZwNR8Y8IAKwghd+xj07gNSEu8gKB8UO3XxVDM=; b=lZlqn2eqDJFLHa094MtbGTpdTX0FVG2BngBTM63pE4SGMdVZzjz2+Ha/sQZTYGqW/+KPek sfpEjt4Bd0WFxAuWfXnwduMchlBYvro0jg+Ix4FmeH2cJsnOrWZu3ieb4jX1+k45sKwv1N p6INv+8Yo9ouPBu9Kp9UPxDD1y9WQHtvWM5U+sxn53rxhZDwxHwwCcELDv3HjPLqR+Qn7N lYnjopIYE/xbann3tyRCfWdU9fDM9xOMZVPIEzvnjpSpvEOUJA/nl4xZpudTBV5cDpuKCT SWaRKqUcrrcsP0oQT/LwtsPIYc9WQo/yu1oBrUH3PF9ldMaBc4qGiZCJzQJehg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1727433203; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=XUqgnjZwNR8Y8IAKwghd+xj07gNSEu8gKB8UO3XxVDM=; b=BS8ID5n56pdbsUHacYX7/K0fFv83cNqSCk8kxs74aOx0EVVytQcnajSXbeRcqdpS/LumMS 7VxRXnfIX/WTE4FBsuIxsmrT59YzaXiMyACSW7+eRIf8nYT5O2qXDHMGbKETX6DpP+PBuY f5h9iZ14tOxh5hn1GOq9D2rjwKcska7m61JS5DUW/kbyY/UVeMey0K8HWWiLU+DXAldH/t PHZDAJony0DxI7WEU+A2HTQm1kkNC5SmPAVNb5IDHX/95UuSNFwbKI8tZUd/ectVOvFt2z zV0PTGR4uRa8zDXUAGmf979hBBTS6P3cgQ2GsCd+i1vm9+8X4IHxCdmA0JERrg== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1727433203; a=rsa-sha256; cv=none; b=pRzpGR5bt6OQUaChQldzTkiJIHC5NfQCxSiiH827OF7gp0r1pr8hccd87fNq9qoMCLsWUm zaJDjLkrufvfAvtaYv45PXZ9ak/kUbNko1EmCafGDy5GPgfw/5b7dsJoXDfvInlTWT9n2/ BSXszC6KLRzR1ll+mHlf2xaqBJ5+S2j3xF8lP5nUTE3us/jC3EPlgcr5tN6eztyCIiQ0KI LcCxpK7fcGjFkpZOBjBHfFm1BbL7LJrX5eCF8JbpDiGVbqMBTQS+3+yWZG8AzzdUaXKtOI sNjqgPYwdMmBOJzuqrQVJ8FuNFZeKynIEYeosLsKrlB6N11hVa50dYUO2f8vTw== Received: from gitrepo.freebsd.org (gitrepo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:5]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4XFRdG6drwzcyM; Fri, 27 Sep 2024 10:33:22 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from gitrepo.freebsd.org ([127.0.1.44]) by gitrepo.freebsd.org (8.18.1/8.18.1) with ESMTP id 48RAXMfn050567; Fri, 27 Sep 2024 10:33:22 GMT (envelope-from git@gitrepo.freebsd.org) Received: (from git@localhost) by gitrepo.freebsd.org (8.18.1/8.18.1/Submit) id 48RAXMSD050564; Fri, 27 Sep 2024 10:33:22 GMT (envelope-from git) Date: Fri, 27 Sep 2024 10:33:22 GMT Message-Id: <202409271033.48RAXMSD050564@gitrepo.freebsd.org> To: ports-committers@FreeBSD.org, dev-commits-ports-all@FreeBSD.org, dev-commits-ports-main@FreeBSD.org From: Tijl Coosemans Subject: git: 71a513901b51 - main - print/cups-filters: cups-browsed: disable cups protocol List-Id: Commits to the main branch of the FreeBSD ports repository List-Archive: https://lists.freebsd.org/archives/dev-commits-ports-main List-Help: List-Post: List-Subscribe: List-Unsubscribe: X-BeenThere: dev-commits-ports-main@freebsd.org Sender: owner-dev-commits-ports-main@FreeBSD.org MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit X-Git-Committer: tijl X-Git-Repository: ports X-Git-Refname: refs/heads/main X-Git-Reftype: branch X-Git-Commit: 71a513901b516975329baf6709570ad3c1502ac7 Auto-Submitted: auto-generated The branch main has been updated by tijl: URL: https://cgit.FreeBSD.org/ports/commit/?id=71a513901b516975329baf6709570ad3c1502ac7 commit 71a513901b516975329baf6709570ad3c1502ac7 Author: Tijl Coosemans AuthorDate: 2024-09-27 10:01:26 +0000 Commit: Tijl Coosemans CommitDate: 2024-09-27 10:32:21 +0000 print/cups-filters: cups-browsed: disable cups protocol Disable the cups-browsed cups protocol. This reduces the attack surface but does NOT fix the recently discovered remote code execution vulnerability in cups-browsed. Derived from https://github.com/OpenPrinting/cups-browsed/commit/1debe6b140c3 --- print/cups-filters/Makefile | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/print/cups-filters/Makefile b/print/cups-filters/Makefile index 8d9686526d52..1b38bc4479d5 100644 --- a/print/cups-filters/Makefile +++ b/print/cups-filters/Makefile @@ -1,6 +1,6 @@ PORTNAME= cups-filters PORTVERSION= 1.28.17 -PORTREVISION= 4 +PORTREVISION= 5 CATEGORIES= print MASTER_SITES= https://github.com/OpenPrinting/cups-filters/releases/download/${DISTVERSION}/ @@ -100,8 +100,8 @@ POPPLER_LIB_DEPENDS= libpoppler-cpp.so:graphics/poppler CUPS_BROWSED_DESC= cups-browsed(8) options AVAHI_CONFIGURE_ENABLE= avahi -AVAHI_CONFIGURE_OFF= --with-browseremoteprotocols=cups -AVAHI_CONFIGURE_ON= --with-browseremoteprotocols="dnssd cups" +AVAHI_CONFIGURE_OFF= --with-browseremoteprotocols=none +AVAHI_CONFIGURE_ON= --with-browseremoteprotocols=dnssd AVAHI_DESC= Discover Zeroconf/Bonjour network printers AVAHI_LIB_DEPENDS= libavahi-client.so:net/avahi-app AVAHI_SUB_LIST= AVAHI_DAEMON=avahi_daemon