cups-filters-legacy

LOW
maintainer Gurov 1 votes scanned 2026-09-02 15:51:02.635429
View on AUR
Why flagged
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
Triggered rules

Low Few votes, recently uploaded zero_votes_recent
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
PKGBUILD

      1# Maintainer: Gurov <thuggerthugger1@duck.com>
    
      2pkgname=cups-filters-legacy
    
      3pkgver=1.28.17
    
      4pkgrel=1
    
      5pkgdesc="Legacy OpenPrinting CUPS Filters 1.x for classic PPD printer drivers"
    
      6arch=('x86_64')
    
      7url="https://github.com/OpenPrinting/cups-filters"
    
      8license=('BSD-4-Clause AND GPL-2.0-only AND GPL-2.0-or-later AND GPL-3.0-only AND GPL-3.0-or-later AND LGPL-2.0-only AND LGPL-2.1-or-later AND MIT')
    
      9
    
      10provides=(
    
      11  "cups-filters=${pkgver}"
    
      12  "cups-browsed=${pkgver}"
    
      13)
    
      14
    
      15conflicts=(
    
      16  'cups-browsed'
    
      17  'cups-filters'
    
      18  'libcupsfilters'
    
      19  'libppd'
    
      20)
    
      21
    
      22depends=(
    
      23  'avahi'
    
      24  'dbus'
    
      25  'fontconfig'
    
      26  'freetype2'
    
      27  'glib2'
    
      28  'ijs'
    
      29  'lcms2'
    
      30  'libcups>=2.2.6-2'
    
      31  'libexif'
    
      32  'libjpeg-turbo'
    
      33  'libpng'
    
      34  'libtiff'
    
      35  'poppler'
    
      36  'qpdf'
    
      37)
    
      38
    
      39makedepends=(
    
      40  'ghostscript'
    
      41  'glib2-devel'
    
      42  'liblouis'
    
      43  'mupdf-tools'
    
      44  'python'
    
      45)
    
      46
    
      47optdepends=(
    
      48  'antiword: Microsoft Word conversion for Braille support'
    
      49  'docx2txt: DOCX conversion for Braille support'
    
      50  'foomatic-db: printer definitions for Foomatic'
    
      51  'foomatic-db-engine: Foomatic printer driver support'
    
      52  'foomatic-db-nonfree: additional non-free Foomatic printer definitions'
    
      53  'ghostscript: PostScript/PDF conversion and rasterization'
    
      54  'imagemagick: Braille embosser support'
    
      55  'liblouis: Braille embosser support'
    
      56  'mupdf-tools: MuPDF-based PDF rasterization'
    
      57)
    
      58
    
      59backup=('etc/cups/cups-browsed.conf')
    
      60
    
      61# openSUSE's maintained cups-filters 1.28.x compatibility/security patches
    
      62_obs_p="https://api.opensuse.org/public/source/Printing/cups-filters"
    
      63
    
      64# Debian's maintained cups-filters 1.28.17 security patch series
    
      65_deb_p="https://sources.debian.org/data/main/c/cups-filters/1.28.17-7/debian/patches"
    
      66
    
      67source=(
    
      68  "https://github.com/OpenPrinting/cups-filters/releases/download/${pkgver}/cups-filters-${pkgver}.tar.xz"
    
      69
    
      70  # CVE-2023-24805: beh command injection
    
      71  "cups-filters-CVE-2023-24805.patch::https://github.com/OpenPrinting/cups-filters/commit/93e60d3df358c0ae6f3dba79e1c9684657683d89.patch"
    
      72
    
      73  # qpdf 12 compatibility
    
      74  "${_obs_p}/cups-filters-qpdf12.patch"
    
      75
    
      76  # 2024 security fixes
    
      77  "${_obs_p}/cups-filters-1.28.17-CVE-2024-47076.patch"
    
      78  "${_obs_p}/cups-filters-1.28.17-CVE-2024-47175.patch"
    
      79  "${_obs_p}/cups-filters-1.28.17-CVE-2024-47176.patch"
    
      80
    
      81  # 2025 security fixes
    
      82  "CVE-2025-57812-1.patch::${_deb_p}/CVE-2025-57812-1.patch"
    
      83  "CVE-2025-57812-2.patch::${_deb_p}/CVE-2025-57812-2.patch"
    
      84  "CVE-2025-57812-3.patch::${_deb_p}/CVE-2025-57812-3.patch"
    
      85  "CVE-2025-57812-4.patch::${_deb_p}/CVE-2025-57812-4.patch"
    
      86  "CVE-2025-57812-5.patch::${_deb_p}/CVE-2025-57812-5.patch"
    
      87  "CVE-2025-64503.patch::${_deb_p}/CVE-2025-64503.patch"
    
      88  "CVE-2025-64524.patch::${_deb_p}/CVE-2025-64524.patch"
    
      89
    
      90  # systemd hardening for cups-browsed
    
      91  "${_obs_p}/harden_cups-browsed.service.patch"
    
      92)
    
      93
    
      94sha256sums=('270a3752a960368aa99d431fb5d34f4039b2ac943c576d840612d1d8185c9bb9'
    
      95            'c79f9bb558ce02117c09c461d760844d5de79e7f753a48971bb5f9aed1a9f913'
    
      96            'e6b2425f241931cd68f7ec8fe8c0cb35294dc49258e8854a53a814f4e13a90f5'
    
      97            '4c83794ec044842cfec1b9906aca9f64c08aee7a280fbe28a29e08dbe0eaccf2'
    
      98            '77d582c3422839d9a5d8242f0fdf62f7cfd251056e3016f7f733be1dab6ecb9c'
    
      99            '95fc35c48b11c802838f64d50507eef9eeab38f9daf49c0fb56fe6da55e1a247'
    
      100            'ee9fd264db9360368e91eb39b293f1c68b3ffcc8303b07fdbedc8add7339d0c2'
    
      101            '3db9ab993f2d90981f4fb77a27241025a9b5e9f74d52b616af746e47aab0c188'
    
      102            'c60c80418b993f27b7c60b7caed57a17ed2050eb4448826082bcf0c5ae8d1ac3'
    
      103            '9d7cd2afb5da6147eba085df5f6925b08d81dce10b37ed77cdc777869e720c6a'
    
      104            '2cbafc283cbbf211500c99e805a685404d11cb18c5e16b4626f4cb4203dfbf60'
    
      105            'cbb28d664ef3a876352afad22e411a3a06a16c607c71389191c1067af5fca111'
    
      106            'f46d54221942e2257c78c2cc4055b9902522a375ebc801528a72aedd37108dd5'
    
      107            '4d3c902f9cea37f9bbb747f530ecae7b0ff9172bb7fa99058801a10e1c9c3608')
    
      108
    
      109prepare() {
    
      110  cd "${srcdir}/cups-filters-${pkgver}"
    
      111
    
      112  # CVE-2023-24805
    
      113  patch -Np1 -i "${srcdir}/cups-filters-CVE-2023-24805.patch"
    
      114
    
      115  # 2024 security fixes
    
      116  patch -Np1 -i "${srcdir}/cups-filters-1.28.17-CVE-2024-47076.patch"
    
      117  patch -Np1 -i "${srcdir}/cups-filters-1.28.17-CVE-2024-47175.patch"
    
      118  patch -Np1 -i "${srcdir}/cups-filters-1.28.17-CVE-2024-47176.patch"
    
      119
    
      120  # 2025 security fixes
    
      121  patch -Np1 -i "${srcdir}/CVE-2025-57812-1.patch"
    
      122  patch -Np1 -i "${srcdir}/CVE-2025-57812-2.patch"
    
      123  patch -Np1 -i "${srcdir}/CVE-2025-57812-3.patch"
    
      124  patch -Np1 -i "${srcdir}/CVE-2025-57812-4.patch"
    
      125  patch -Np1 -i "${srcdir}/CVE-2025-57812-5.patch"
    
      126  patch -Np1 -i "${srcdir}/CVE-2025-64503.patch"
    
      127  patch -Np1 -i "${srcdir}/CVE-2025-64524.patch"
    
      128
    
      129  # qpdf 12 compatibility
    
      130  patch -Np1 -i "${srcdir}/cups-filters-qpdf12.patch"
    
      131
    
      132  # systemd sandbox hardening
    
      133  patch -Np1 -i "${srcdir}/harden_cups-browsed.service.patch"
    
      134
    
      135  # Security patches modify autotools inputs.
    
      136  ./autogen.sh
    
      137}
    
      138
    
      139build() {
    
      140  cd "${srcdir}/cups-filters-${pkgver}"
    
      141
    
      142  # Required for current GCC.
    
      143  CFLAGS+=" -std=gnu11"
    
      144
    
      145  # openSUSE's qpdf 12 compatibility patch uses qpdf's old API
    
      146  # through its transition compatibility mode.
    
      147  CXXFLAGS+=" -std=c++17 -DPOINTERHOLDER_TRANSITION=0"
    
      148
    
      149  ./configure \
    
      150    --prefix=/usr \
    
      151    --sysconfdir=/etc \
    
      152    --sbindir=/usr/bin \
    
      153    --localstatedir=/var \
    
      154    --with-rcdir=no \
    
      155    --enable-avahi \
    
      156    --with-browseremoteprotocols=DNSSD
    
      157
    
      158  make
    
      159}
    
      160
    
      161package() {
    
      162  cd "${srcdir}/cups-filters-${pkgver}"
    
      163
    
      164  make DESTDIR="${pkgdir}" install
    
      165
    
      166  # cups-filters 1.x doesn't install its systemd unit automatically.
    
      167  install -Dm644 \
    
      168    utils/cups-browsed.service \
    
      169    "${pkgdir}/usr/lib/systemd/system/cups-browsed.service"
    
      170
    
      171  # cups-browsed is installed under /usr/bin on Arch.
    
      172  sed -i \
    
      173    's|/usr/sbin/cups-browsed|/usr/bin/cups-browsed|' \
    
      174    "${pkgdir}/usr/lib/systemd/system/cups-browsed.service"
    
      175
    
      176  # Remove obsolete Upstart configuration.
    
      177  rm -rf "${pkgdir}/etc/init"
    
      178
    
      179  install -Dm644 \
    
      180    COPYING \
    
      181    "${pkgdir}/usr/share/licenses/${pkgname}/COPYING"
    
      182}
    
      183
Scan history

Scanned at (UTC)	Severity	Rules
2026-09-02 15:51:02	Low	1