print/cups-filters: Fix cups-browsed RCE

Add upstream patches to fix recent vulnerabilities.

Security:	CVE-2024-47076
Security:	CVE-2024-47176

all: drop support for expired FreeBSD 14.0

Simplify expressions for FreeBSD 13.X

Reviewed by:	many

Differential Revision:	https://reviews.freebsd.org/D46601

print/cups-filters: cups-browsed: disable cups protocol

Disable the cups-browsed cups protocol.  This reduces the attack
surface but does NOT fix the recently discovered remote code execution
vulnerability in cups-browsed.

Derived from https://github.com/OpenPrinting/cups-browsed/commit/1debe6b140c3

all: drop support for FreeBSD 13.2 which reached EOL today

Thanks again to jbeich for noticing various things I overlooked.

Reviewed by:	acm, ashish, eduardo, ehaupt, eugen, jbeich, martymac, mat,
nobukata, sunpoet, tagattie, yuri, arrowd, kde
Differential Revision:	https://reviews.freebsd.org/D45141

graphics/tiff: Update to 4.6.0

PR:		278577
Exp-run by:	antoine

graphics/poppler: bump consumers of graphics/poppler

Bump after rupdate in 478df79a3071b399f648107456cf371587e84a3f

print/cups-filters: Install man pages under share/man

Sponsored by:	The FreeBSD Foundation

graphics/poppler: bump revision of consumers

print/cups-filters: Update to 1.28.17

*/*: Bump PORTREVISION for Ghostscript 10 change

Reported by:	sunpoet
Approved by:	jrm (mentor), sunpoet
Differential Revision:	https://reviews.freebsd.org/D42412

*/*: Bump jpeg-turbo users treewide

New major version 3.0.0

*/*: Fix build with llvm16 on 13.2-STABLE

As like as HEAD(14.0-RELEASE) llvm16 was merged in base for 13.2-STABLE
with the OSVERSION 1302507.

- Utilize USE_CXXSTD=c++14 or similar solution where applicable
- Update conditionals to addtionally check for OSVERSION greater than
  1302507 and less than 1400000

Approved by:	portmgr (blanket)
Sponsored by:	The FreeBSD Foundation

print/cups-filters: Fix build with llvm16

Approved by:	portmgr (blanket)
Sponsored by:	The FreeBSD Foundation

graphics/poppler: bump dependencies

Mk/Uses/magick.mk: Bump all consumers

Bump all consumers of ImageMagick ports after flavorizing them.

Approved by:	tcberner (mentor, implicit)

graphics/poppler: bump consumers after update to 23.04

graphics/poppler was updated in 06339c451266f5843e53bd6406c81a89eedd4ab1

Mk/**ldap.mk: Convert USE_LDAP to USES=ldap

Convert the USE_LDAP=yes to USES=ldap and adds the following features:

- Adds the argument USES=ldap:server to add openldap2{4|5|6}-server as
  RUN_DEPENDS
- Adds the argument USES=ldap<version> and replaces WANT_OPENLDAP_VER
- Adds OPENLDAP versions in bsd.default-versions.mk
- Adds USE_OPENLDAP/WANT_OPENLDAP_VER in Mk/bsd.sanity.mk
- Changes consumers to use the features

Reviewed by:	delphij
Approved by:	portmgr
Differential Revision: https://reviews.freebsd.org/D38233

graphics/poppler: bump dependencies

Follow-up to 9b78681895a5a5b7225299242098f7f2f27d959c

graphics/cups-filters: Update to 1.28.16

graphics/poppler: bump dependencies

graphics/poppler: bump PORTREVISION of dependencies

- after update to 22.11 in d01d0d73b169

graphics/poppler: bump port revision of poppler consumers

- poppler was updated to 22.10 in df406767857ddfc6d9580d72b1613a7cf8579bbc

graphics/poppler: bump port revision of consumers after upgrade to 22.09

Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)

Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

graphics/poppler: bump dependencies

Bump port revisions of poppler users after
04f1b0c1a895851aed9221282c1a503bc7415a37

graphics/poppler: bump PORTREVISION of poppler consumers

graphics/poppler: bump port revision of consumers after 22.06 upgrade

graphics/poppler: bump portrevision of consumers

print/cups-filters: update to 1.28.15

graphics/poppler: bump portrevision of consumers

Bump revisions after 0ee787592d5a due to so-version bump.

PR:		 263009

graphics/poppler: bump consumers

Bump consumers of graphics/poppler after
e25859e09380f5930718094423dc8616cbb202b3

Fix CONFLICTS entries of multiple ports

There have been lots of missing CONFLICTS_INSTALL entries, either
because conflicting ports were added without updating existing ports,
due to name changes of generated packages, due to mis-understanding
the format and semantics of the conflicts entries, or just due to
typoes in package names.

This patch is the result of a comparison of all files contained in
the official packages with each other. This comparison was based on
packages built with default options and may therefore have missed
further conflicts with optionally installed files.

Where possible, version numbers in conflicts entries have been
generalized, some times taking advantage of the fact that a port

graphics/poppler: update to 21.12

Release 21.12.0:
    core:
         * Add API to add images
         * CairoOutputDev: Fix de-duping of Flate images
         * Fix crash on broken files when using non-default
ENABLE_ZLIB_UNCOMPRESS. Issue #393
         * Minor code improvements

    glib:
         * Add API for validation of signatures
         * Add API to read/save to file descriptor

    utils:
         * pdftohtml: Reduce sensitivity of duplicate detection. Issue #1117

    build system:
         * Increase C++ standard to 17

Exp-run by:	antoine
PR:		260344

framework: Add new USES 'magick' for graphics/ImageMagick*

A new USES has been added to depend on ImageMagick.

	USES=magick

adds a LIB_DEPENDS on graphics/ImageMagick${IMAGEMAGICK_DEFAULT}.

If a specific version is required, use for example

	USES=magick:6        resp.     USES=magick:7

If only a build, run or test is required, use for example

	USES=magick:build    resp.     USES=magick:6,build,test

*/*: Remove redundant '-[0-9]*' from CONFLICTS

The conflict checks compare the patterns first against the package
names without version (as reported by "pkg query "%n"), then - if
there was no match - agsinst the full package names including the
version (as reported by "pkg query "%n-%v").

Many CONFLICTS definitions used patterns like "bash-[0-9]*" to filter
for the bash package in any version. But that pattern is functionally
identical with just "bash".

Approved by:	portmgr (blanket)

*: fix tab vs. space issues, and comments according to the guide.

graphics/poppler: bump consumers after 2dee0997fbc9ee01991f73f0fa55f9b18908a264

print/cups-filters: Update to 1.28.10

Enable POPPLER option by default to support some Brother printers.
(Poppler was already a dependency through the PSHYBRID option.)

PR:		258540

poppler: bump revisions of users

Bump the remaining users of poppler after
d98b56f1deb5b6a03a7e04fc16192ecb2af9df1e

PR:		258206

graphics/poppler: update to 21.08.0

Release 21.08.0:
        core:
         * Add API to allow addition and modification of outlines into a PDF
         * Use additional samples to test for constant parts of an axial
gradient
         * forms: Create fallback fonts for some well known font names
         * Support reading the PDF Version from the Catalog
         * Fix XRef::copy when there are modified objects
         * Take into account that Date string may be in unicode
         * JBIG2Stream: Fix regression in "Do not consider a size-0 to be an
error"
         * Replace a local bubble sort implementation by std::sort
         * Fix issues with malformed files

        build system:

net/openldap24-client: bump all dependent port

In the earlier net/openldap24-server commit, only those which depend on
net/openldap24-sasl-client were bumped. Bumping all dependent port that
didn't get a bump to force a rebuild of these packages.

Suggested by:	kib

graphics/poppler: update to 21.07.0

Release 21.07.0:
        core:
         * JBIG2Stream: Do not consider a size-0 to be an error. Issue #535
         * PSOutputDev: fix off-by-one error for image masking in L1/L2 output.
Issue #1088
         * CairoOutputDev: Fix memory leak on broken files
         * Minor code improvements

        build system:
         * set C standard to 11 without extensions

Exp-run by:	antoine
PR:		256981

graphics/poppler: update to 21.06.0

Release 21.06.0:
        core:
         * Fix rendering of some extended latin1 characters in annotations.
Issue #1070
         * Support some not so well formed documents with password. Issue #1083
         * Add API to get notified if the xref is reconstructed
         * Add somewhat fancier left/right signature visual representation
         * Fix crashes in malformed files
         * Minor code improvements

        qt6:
         * Change some functions to return std::unique_ptr

        qt5/qt6:

graphics/poppler: update to 21.05.0

Release 21.05.0:
        core:
         * Fix crashes in malformed files
         * Export SplashFont* symbols used by Scribus
         * Minor code improvements

        qt5/qt6:
         * Make sure new signatures are always properly oriented
         * Allow to pass the border width when signing

        glib:
         * Enhance find to support multi-line matching

        utils:
         * pdftoppm: Fix regression when using single scaleTo. Issue #1062

        build system:
         * Allow to disable building manual tests

PR:		255562
Exp-run by:	antoine

graphics/poppler: update to 21.04.0

Release 21.04.0:
        core:
         * Hide symbols by default
         * TextSelectionDumper: fix word order for RTL text
         * Fix rendering of text in some files. Issue #1052
         * Implement rendering of Masks of Image subtype. Issue #1058
         * Forms: fix unclicking standalone form buttons. Issue #1034

        glib:
         * Expose more fields from MediaRendition in PopplerMedia
         * Use stock glib macro to define boxed type
         * Remove incorrecly used volatile from enum type registration code

One more small cleanup, forgotten yesterday.
Reported by:	lwhsu

all: Remove all other $FreeBSD keywords.

Remove # $FreeBSD$ from Makefiles.

graphics/poppler: update to 21.03.0

Release 21.03.0:
        core:
         * Fix parsing text in some broken pdf files. Issue #1040
         * Fix memory issue when using threads. Issue #1050
         * TextSelectionDumper: Fix getText() for space after word
         * Change signature of OutputDev:tilingPatternFill
         * Make PDFDocBuilder return a std::unique_ptr
         * Improve well formed check for shading functions
         * Fix leak in case of fread failing
         * Fix memory leak in broken file in JBIG2Stream::readGenericBitmap
         * PSOutputDev: Fix stack overflow in broken files

        glib:

Bump PORTREVISION after r564968

r564968 essentially changed RUN_DEPENDS from ImageMagick6 to ImageMagick7.

Introduce ImageMagick default version and use it in print/cups-filters.

The different versions of ImageMagick in the ports tree all conflict with
each other and some ports can depend on either of them so it's a perfect
candidate for the default-versions framework.

PR:		252335
Submitted by:	VVD <vvd@unislabs.com>

graphics/poppler: update to 21.02

Release 21.02.0:
        core:
         * GfxCal*ColorSpace: introduce Bradford transform for chromatic
adaptation
         * Fix memory leak if saving the file fails
         * Internal code improvements
         * Fix various issues handling broken files
         * Make checkedAdd work for long long in MSVC

        qt5:
         * Properly export NewSignatureData class
         * Fix regression in QIODeviceOutStream + MSVC

        qt6:
         * Properly export NewSignatureData class
         * Fix regression in QIODeviceOutStream + MSVC

        utils:
         * pdftohtml: Fix error() parameter type

PR:		253183
Exp-run by:	antoine

graphics/poppler: update to 21.01.0

Release 21.01.0:
        core:
         * Faster routines for jpeg decoding
         * Fix reading signatures in encrypted files
         * Add white point correction when lcms is used
         * JBIG2Stream: Fix byte counting
         * Fix potential data loss if we try to fetch a non existing Ref after
modifying the document
         * Specifically use DeviceGray instead of DefaultGray for softmasks
         * Fix various issues handling broken files

        utils:
         * pdftocairo: Setmode binary for windows
         * pdfsig: Add hability to digitally sign files

graphics/poppler: update to 20.12.0

Changelog:
        core:
         * Draw better circles for circle annotations
         * Fix annotation line width if no appearance stream or style are given
         * Tweak rendering of highlight annotations
         * Fix border rendering of some annotations
         * Fix rendering of some files. Issue #976 Issue #567
         * PSOutputDev: provide options to set the rasterization color space and
ICC profile
         * PSOutputDev: for splashModeCMYK8 and language level >=2 activate
overprint emulation
         * PSOutputDev: use the DeviceN8 bitmap for rasterization with
CMYK-output + overprint
         * Use the font name without subset tag when querying for a system font
         * Splash: Fix wrong x adjustment during clipping
         * Splash: Fix blitImage in uncolored tiling patterns

Update to 1.28.6.

graphics/poppler: update to 20.11.0

Release 20.11.0:
        core:
         * More work on rendering of standalone Annot Widgets. Issue #806
         * Fix crashes in embedded file handling on broken files. Issue #967
         * Fix uninitialized memory read on broken files
         * Save a bit of memory in Dict data

        cpp:
         * Fix crashes in embedded file handling on broken files. Issue #966

        utils:
         * pdftohtml: HTML and XML output includes font opacity.

Update to 1.28.4.

graphics/poppler: update to 20.10.0

Release 20.10.0:
        core:
         * Filter out repeated forms
         * Implement EmbedStream::reset()
         * CairoOutputDev: evict just font faces owned solely by cache.
         * Splash: Rename Yd to Ydown, Xu to Xup, etc.
         * Splash: fix crash in out-of-memory situation.
         * Fix some undefined behaviour situation with forged files

PR:		250052
Exp-run by:	antoine

Update to 1.28.3.

graphics/poppler: update to 20.09.0

Release 20.09.0:
        core:
         * Compability fix for Forms
         * Fix fetching of Objects failing in some cases
         * Fix clearing date in Annot setModified/setDate
         * TextSelectionPainter: support glyphless fonts
         * Splash: Don't try read past end of image
         * avoid abort() on large memory allocation
         * Fix memory leak on broken files
         * Fix potential invalid memory read
         * Small code improvements

        qt5:

Update to 1.28.1.

Bump revisions of poppler consumers after r544863

graphics/poppler: update to 0.90

Release 0.90.0:
        core:
         * Color profile tweaks
         * Small signature improvements
         * BBoxOutputDev: Fix calculation when type3 fonts are involved
         * Fix potential crash when reading Forms
         * Fix infinite loop in broken file
        glib:
         * Fix adding annots in rotated pages
         * Add ability to reset forms
         * Several fixes to the documentation
        qt5:
         * Make it clear we require Qt 5.5

Update to 1.27.5.

Use @sample for cups-browsed.conf. [1]

PR:		246074 [1]
Submitted by:	Felix Palmen <felix@palmen-it.de> [1]

graphics/poppler: update to 0.89.0

Release 0.89.0:
        core:
         * Add support for ResetForm action. Issue #225
         * Fix crash in PDFDoc::getSignatureFields when there's no Forms at all
         * Fix exporting to PS of some files with CID fonts
         * Use ICC profiles in PS output (if new enough lcms is used)
         * Allow almost-singular tiling pattern matrices. Issue #894
         * Fix memory leak when failing to load some fonts
         * CairoOutputDev: Use stroke opacity when clipping to a stroke path
         * CairoOutputDev: Fix tiling patterns when pattern cell is too far.
Issue #190

        glib:
         * Add poppler_movie_get_aspect

        cpp:
         * Add the font infos to the text_box object

Exp-run by:	antoine
PR:		246848

graphics/poppler: update to 0.88.0

Release 0.88.0:

        core:
         * Support Widget Annotation Buttons not linked to any Form
         * SplashOuputDev: Use stroking opacity when clipping to a stroke path
         * Handle 1 bit RGB images in ICC colorspace
         * Internal code improvements

        qt5:
         * Add Document::signatures. Returns signatures not attached to any page
         * ArthurOutputDev: Fix font hinting
         * ArthurOutputDev: Set the opacity when filling with axial gradients
         * ArthurOutputDev: Implement the clipToStrokePath method

Update to 1.27.4.

graphics/poppler: update to 0.87.0

Release 0.87.0:
        core:
         * Fix crashes due to inconsistent vtables for Clang builds
         * Fix leak in broken files
         * Internal code improvements

        qt5:
         * Add option to get form choice for export value
         * ArthurOutputDev: Avoid division by zero in updateLineDash. Issue #695

        glib:
         * Internal code improvements

         utils:
         * pdftohtml: Fix memory leak in HtmlOutputDev::getLinkDest

PR:		245150
Exp-run by:	antoine

Update to 1.27.3.

Update poppler to 0.86.1

Release 0.86.1:
        core:
         * Fix regression in Browse Link handling
         * Internal code improvements

Release 0.86.0:
        core:
         * Fix link content exfiltration attack
         * Splash: Implement gouraudTriangleShadedFill for some non parametrized
shadings. Issue #881
         * Fix case unsensitive search for Old Hungarian, Warang Citi,
Medefaidrin and Adlam
         * Internal code improvements

        glib:

Update to 1.27.2.

Update to 1.27.1.

Bump revision of poppler dependencies

- poppler was updated in r525051, bump revisions

Update to 1.27.0.

Update to 1.26.2.

graphics/poppler: update to 0.84.0

Release 0.84.0:
        core:
         * Fix crash when converting from Unicode to ASCII-7
         * Splash::scaleImageYdXu: Protect against crash if srcWidth is too big
         * JBIG2Stream: fix potential crash in malformed documents
         * JBIG2Stream: fix leak in reset() if called several times
         * Internal code improvements

        utils:
         * pdfimages: Add error message if first page is larger then number of
pages.
         * pdfinfo: Improved paper size recognition
         * pdfsig: Fix exit code when dumping signatures
         * pdftocairo: Error out when even/odd selects 0 pages

Update to 1.26.1.

Update to 1.25.13.

Add a patch to let the implicitclass backend run the ipp backend.

This fixes printer queues for remote printers detected by cups-browsed.

PR:		242615
Submitted by:	J.R. Oldroyd <fbsd@opal.com>

Update to 1.25.12.

graphics/poppler: update to 0.82.0

Release 0.82.0:
        core:
         * Fix not being able to open some files. Issue #832
         * Fix crashes in malformed files
         * Fix memory leak on broken files
         * Minor performance improvements
         * Minor code improvements

        glib:
         * Add poppler_document_new_from_bytes
         * PopplerAttachment: Silence deprecation warnings for ctime/mtime

        build system:
         * pdf-inspector: Support builddir != srcdir
         * Install Cairo* headers if Cairo has been found

Thanks to adridg@ for fixing all the fallout.

Exp-run by:	antoine
PR:		241532
Approved by:	gnome (kwm, implicit)

Update to 1.25.11.

Update to 1.25.7.

Update to 1.25.6.

Remove libiconv fix from post-patch.  Fixed upstream.

Update to 1.25.5.

Update to 1.25.4.

Update to 1.25.3.

Update to 1.25.2.

Bump PORTREVISION for ports depending on the canonical version of GCC
as defined in Mk/bsd.default-versions.mk which has moved from GCC 8.3
to GCC 9.1 under most circumstances now after revision 507371.

This includes ports
 - with USE_GCC=yes or USE_GCC=any,
 - with USES=fortran,
 - using Mk/bsd.octave.mk which in turn features USES=fortran, and
 - with USES=compiler specifying openmp, nestedfct, c11, c++0x, c++11-lang,
   c++11-lib, c++14-lang, c++17-lang, or gcc-c++11-lib
plus, everything INDEX-11 shows with a dependency on lang/gcc9 now.

PR:		238330

Update to 1.25.1.

- Update to 1.25.0.
- Make portlint happy.

Update to 1.23.0.

graphics/poppler: update to 0.77.0

Release 0.77.0:
        core:
         * Fix crash on signature handling. Issue #766
         * Fix small memory leak in SignatureHandler::getCertificateInfo
         * Splash: Restrict filling of overlapping boxes. Issue #750
         * Fix crash on malformed files

        qt5:
         * Fix optional content handling with exclusive layers

        cpp:
         * Make render_page thread-safe

        utils:
         * pdfsig: Fix small memory leak
         * pdftotext: Fix typo in manpage

PR:		238115
Exp-run by:	antoine
Approved by:	gnome (kwm, implicit)

graphics/poppler: update to 0.76.1

From Changelog at https://poppler.freedesktop.org/releases.html :

Release 0.76.1:
        core:
         * Make the mul tables be calculated at compile time with constexpr.
         * splash: Fix compile with SPLASH_CMYK enabled
         * Some typo fixing in error messages

        qt5:
         * Fix regression in annotation handling

        build system:
         * Fix some typos in build system output and comments

Update to 1.22.5.

Update to 1.22.2.

Update to 1.22.1.

Update to 1.21.6.

- Update to 1.21.5.
- Fix support for cups_browsed_flags in the cups_browsed rc.d script.  The
  flags were passed to daemon(8) instead of cups_browsed. [1]

PR:		230951 [1]
Submitted by:	J.R. Oldroyd <fbsd@opal.com> [1]