-
cups (1.4.1-5ubuntu2.7) karmic-security; urgency=low
* SECURITY UPDATE: denial of service and possible code execution via
invalid free
- debian/patches/CVE-2010-2941.dpatch: skip over and reserve unused
tags in cups/ipp.{c,h}.
- CVE-2010-2941
-- Marc Deslauriers <email address hidden> Tue, 02 Nov 2010 11:10:37 -0400
-
cups (1.4.1-5ubuntu2.6) karmic-security; urgency=low
* SECURITY UPDATE: cross-site request forgery in admin interface
- debian/patches/CVE-2010-0540.dpatch: add unpredictable session token
to cgi-bin/cgi.h, cgi-bin/libcupscgi.exp, cgi-bin/template.c,
cgi-bin/var.c, templates/*.tmpl.
- CVE-2010-0540
* SECURITY UPDATE: denial of service or arbitrary code execution in
texttops image filter
- debian/patches/CVE-2010-0542.dpatch: make sure calloc succeeded in
filter/texttops.c.
- CVE-2010-0542
* SECURITY UPDATE: web interface memory disclosure
- debian/patches/CVE-2010-1748.dpatch: validate data in cgi-bin/var.c.
- CVE-2010-1748
* SECURITY UPDATE: file overwrite vulnerability
- debian/patches/security-str3510.dpatch: introduce cups_open() in
cups/file.c and use to make sure hard-linked or symlinked files don't
get overwritten as root.
- No CVE number
* debian/libcupscgi1.symbols: Add new symbols
-- Marc Deslauriers <email address hidden> Fri, 18 Jun 2010 09:55:36 -0400
-
cups (1.4.1-5ubuntu2.4) karmic-security; urgency=low
* SECURITY UPDATE: denial of service via use-after-free
- debian/patches/CVE-2009-3553.dpatch: check fdptr->use and
cupsd_inactive_fds in scheduler/select.c.
- CVE-2009-3553
- CVE-2010-0302
* SECURITY UPDATE: privilege escalation via lppasswd tool
- debian/patches/CVE-2010-0393.dpatch: don't allow environment
variables to override directories in cups/globals.c and
systemv/lppasswd.c.
- CVE-2010-0393
-- Marc Deslauriers <email address hidden> Thu, 25 Feb 2010 10:42:36 -0500
-
cups (1.4.1-5ubuntu2.2) karmic-proposed; urgency=low
* debian/local/filters/pdf-filters/filter/texttopdf.c: Workaround for
bug in ttf-freefont which messed up the output of the texttopdf filter.
Thanks to Hin-Tak Leung and Steve White to find this solution (LP: #447961).
* debian/local/filters/pdf-filters/pdftopdf/P2PDoc.cxx,
debian/local/filters/pdf-filters/pdftopdf/P2PGfx.cxx,
debian/local/filters/pdf-filters/pdftopdf/P2PGfx.h,
debian/local/filters/pdf-filters/pdftopdf/P2PObject.h,
debian/local/filters/pdf-filters/pdftopdf/P2POutput.cxx: Upstream
fix from Koji Otani for the following: (1) Fixed some memory leak;
(2) pdftopdf now delays fetching a referenced object until when it is
written to the output. This fixes memory hogging with N-up output
(N pages per sheet). The fix is mainly done by (2). This fixes
LP: #508731.
* debian/local/filters/pdf-filters/pdftopdf/P2PGfx.cxx: Fixed segfault of
the pdftopdf filter when the input PDF file has ICC-profile-based color
space inline images. Thanks to Koji Otani for the fix. Fixes LP: #407344.
* debian/local/filters/cpdftocps: Fixed turning off duplex via command line
(http://bugs.linux-foundation.org/show_bug.cgi?id=397, LP: #487902).
-- Till Kamppeter <email address hidden> Tue, 26 Jan 2010 12:10:20 +0100
-
cups (1.4.1-5ubuntu2.1) karmic-security; urgency=low
* SECURITY UPDATE: XSS and CRLF injection in headers
- debian/patches/CVE-2009-2820.dpatch: Introduce cgiClearVariables() in
cgi-bin/{var.c,cgi.h,libcupscgi.exp}. Clear out variables in
cgi-bin/{classes,help,ipp-var,jobs,printers}.c. Encode URL string and
clear out variables in cgi-bin/admin.c. Filter more characters in
cgi-bin/template.c.
- debian/libcupscgi1.symbols: add new symbol from security patch
- CVE-2009-2820
-- Marc Deslauriers <email address hidden> Fri, 30 Oct 2009 14:02:38 -0400
-
cups (1.4.1-5ubuntu2) karmic; urgency=low
* debian/rules: Do not have a failing test suite break the build. This is a
temporary workaround for broken Ubuntu buildd chroots which cannot resolve
their own hostname (see LP #447919).
-- Martin Pitt <email address hidden> Thu, 15 Oct 2009 20:58:29 +0200
-
cups (1.4.1-5ubuntu1) karmic; urgency=low
* debian/patches/usb-backend-both-usblp-and-libusb.dpatch: Fixed a bug
of modifying the URI of the current print queue when comparing it with
discovered URIs. Made the USB backend also compatible with URIS generated
by old versions of CUPS, without serial number or with "serial=?"
(LP: #450513).
* debian/cups.init.d: Make cold-plugging of USB printers also correctly
work if the usblp kernel module is loaded.
-- Till Kamppeter <email address hidden> Thu, 15 Oct 2009 18:32:20 +0200
-
cups (1.4.1-5) unstable; urgency=low
[ Till Kamppeter ]
* debian/patches/do-not-broadcast-with-hostnames.dpatch: Do not use host
names for broadcasting print queues and managing print queues broadcasted
from other servers by default. Many networks do not have valid host names
for all machines (LP: #449586).
* debian/cups.postinst: Clear cache for upgrade to CUPS 1.4.x (LP: #420490).
* usb-backend-both-usblp-and-libusb.dpatch: Removed some lines which were
temporarily inserted for debugging.
[ Martin Pitt ]
* usb-backend-both-usblp-and-libusb.dpatch: Add upstream link.
* Drop: disable-pie-mipsen.dpatch: Didn't help to fix the mipsen segfault.
* debian/cups.postinst: Simplify structure and avoid calling invoke-rc.d in
Till's change above.
* Add ppdc-dynamic-linking.dpatch: Dynamically link ppdc, to work around
segfault on mipsen. Thanks to Sune Vuorela! (Closes: #548246)
[ Tormod Volden ]
* debian/cups.init.d: honour blacklist when loading ppdev and lp kernel
modules (LP: #424795)
-- Martin Pitt <email address hidden> Tue, 13 Oct 2009 09:57:11 +0200
-
cups (1.4.1-4) unstable; urgency=low
[ Till Kamppeter ]
* debian/patches/usb-backend-both-usblp-and-libusb.dpatch: Make the USB
backend supporting both printer access via libusb and via the usblp kernel
module. Make it also printing via libusb if the URI for the queue was
generated via usblp and vice versa. This should solve most USB printing
problems which occured on the transition to CUPS 1.4.x (LP: #420015,
LP: #436495; Closes: #546558, #545288, #545453).
[ Martin Pitt ]
* debian/rules: Make the USB backend run as root again, udev rules do not
cover all printers. (LP: #420015)
* Drop debian/blacklist-cups.conf, and remove it on upgrade. With Till's fix
from above this is not necessary any more.
cups (1.4.1-3) unstable; urgency=low
* Add disable-pie-mipsen.dpatch: Disable PIE on mipsen, its binutils
segfaults with it. (Closes: #548246)
-- Martin Pitt <email address hidden> Wed, 30 Sep 2009 15:17:53 +0200
-
cups (1.4.1-2) unstable; urgency=low
[ Till Kamppeter ]
* debian/local/filters/cpdftocps: Double-sided printing did not work on
PostScript printers when the "sides" command line option for "lp"/"lpr"
was used (LP: #411392).
* debian/patches/maintain-default-option-settings.dpatch: For options with
an underscore (or any other allowed non-alphanumeric character) in their
names the default settings were not conserved when the PPD got replaced
("lpadmin -p ... -m ...", system-config-printer, automatic PPD update
for existing print queues). Fixes LP: #432902 and CUPS STR #3340.
[ Martin Pitt ]
* debian/cups.init.d: Don't actually re-trigger udev events for printer
coldplugging, since according to Scott James Remnant this slows down boot
and kills kittens. Instead, just call it with --dry-run and manually call
udev-configure-printer.
* debian/cups.init.d: Only run udevadm if udev and the callout are actually
available. Drop udev dependency to a suggests. This unbreaks cups on
platforms which do not have udev, such as kfreebsd. (Closes: #546922)
* debian/cups.init.d: Drop "cupsctl RIPCache" setting. It changes our
conffile (causing dpkg prompts on upgrade), and overwrites the admin's
setting without warning.
* Add dynamic-default-ripcache-size.dpatch: Replace above functionality by
setting the internal default value of RIPCache to MemTotal/4, if not given
in the configuration file.
* debian/rules: Do not let the usb backend run as root in Ubuntu any more,
since that has a recent enough udev. Still keep it for Debian.
* debian/cups-ppdc.install: Update path for Martin-Éric's section change of
drv manpage.
[ Martin-Éric Racine ]
* Add manual-section-for-drv.dpatch: Fix incorrect man section 7 -> 1 as
reported by Lintian.
-- Martin Pitt <email address hidden> Wed, 23 Sep 2009 23:58:15 +0200
-
cups (1.4.1-1) unstable; urgency=low
[ Till Kamppeter ]
* debian/cups.postinst: Fixed "lpstat -r" check for the auto update of
PPDs of existing queues. "lpstat -r" exits always with status 0, we must
check the actual output.
* debian/cups.postinst: Updated PPD auto update, so that it works with the
new CUPS sample driver PPDs which are dynamically generated now.
[ Martin Pitt ]
* New upstream bug fix release.
* Drop patches accepted upstream:
- ppdc-locale-formatting.dpatch
- usb-backend-infinite-loop-on-end-of-job.dpatch
- dns-sd-check-typo.dpatch
* debian/cups.preinst: Add cleanup of obsolete symlinks in /usr/share/ppd/.
Drop cleanup from debian/cups.prerm. (Closes: #545298)
* debian/control: Add udev dependency, since the init script calls udevadm.
(LP: #429880)
* debian/cups.postinst, debian/cups.init.d: Call client tools with
"-h /var/run/cups/cups.sock" instead of "-h localhost", just in case the
server isn't configured to listen on a TCP port.
* dnssd-avahi.dpatch: Update to latest Fedora version, which fixes the dnssd
backend so that it only reports devices once avahi resolution has
completed. This makes it report Device IDs.
-- Martin Pitt <email address hidden> Tue, 15 Sep 2009 11:30:07 +0200
-
cups (1.4.0-5) unstable; urgency=low
* Drop shlibs files and add symbols files for all libraries, to avoid too
weak dependencies. (Closes: #545244)
* debian/control: Tighten dependencies between server, client, and -common
versions.
-- Martin Pitt <email address hidden> Sun, 06 Sep 2009 13:17:12 +0200
-
cups (1.4.0-4) unstable; urgency=low
Upload 1.4 to unstable.
[ Till Kamppeter ]
* debian/patches/usb-backend-infinite-loop-on-end-of-job.dpatch: Fixed the
patch so that the usb backend really terminates after a job (LP: #420797).
* debian/local/apparmor-profile: cupsd needs also to be allowed to read
the /dev/bus/usb/ directory, given with the "/" in the end. This should
finally fix LP: #420015.
[ Martin Pitt ]
* debian/control: Drop the transitional cupsys packages.
* printer-filtering.dpatch: Fix sometimes overzealous filtering, thanks to
Stéphane Graber!
* debian/rules: Drop autoconf call on build again, we have a proper upstream
release.
* debian/cups.postinst, debian/cups.init.d: Call lpstat, lpadmin, and
cupsctl with "-h localhost" to avoid querying network printers set up in
/etc/cups/client.conf, and asking for passwords. Thanks to Martin-Éric
Racine for tracking this down and the solution! (Closes: #543468)
* debian/control: Bump Standards-Version to 3.8.3 (no changes).
* debian/cups.postinst: Use signal names instead of numbers for trap.
Quiesces a lintian bashism warning.
* Add debian/README.source.
* debian/local/filters/pdf-filters/filter/fontembed/Makefile: Build
libfontembed with -fPIC to also work on HPPA. (Closes: #543973)
* debian/local/filters/pdf-filters/pdftoopvp/Makefile: Don't install font
configuration file as executable.
* debian/cups.lintian-overrides: Update for currently installed backends.
* debian/control: Re-add transitional cupsys packages (except the
libraries), they are still needed for upgrades from Ubuntu 8.04. Add the
"You can safely remove after upgrade" note to their description.
-- Martin Pitt <email address hidden> Sat, 05 Sep 2009 15:31:07 +0200
-
cups (1.4.0-3.1) karmic; urgency=low
Urgent bzr head upload to karmic to unbreak printing for Alpha-5.
[ Till Kamppeter ]
* debian/patches/usb-backend-infinite-loop-on-end-of-job.dpatch: Fixed the
patch so that the usb backend really terminates after a job (LP: #420797).
* debian/local/apparmor-profile: cupsd needs also to be allowed to read
the /dev/bus/usb/ directory, given with the "/" in the end. This should
finally fix LP: #420015.
[ Martin Pitt ]
* debian/control: Drop the transitional cupsys packages.
* printer-filtering.dpatch: Fix sometimes overzealous filtering, thanks to
Stéphane Graber!
* debian/rules: Drop autoconf call on build again, we have a proper upstream
release.
-- Martin Pitt <email address hidden> Wed, 02 Sep 2009 17:01:51 +0200
-
cups (1.4.0-3) experimental; urgency=low
[ Till Kamppeter ]
* debian/patches/usb-backend-infinite-loop-on-end-of-job.dpatch: Fixed
upstream bug of the new libusb-based CUPS "usb" backend falling into
an infinite loop after completing the job, blocking the next job
(LP: #420797).
[ Martin Pitt ]
* debian/local/filters/pdf-filters/pdftopdf/P2PDoc.cxx: Update for poppler
0.11.3 API, thanks to Koji Otani <email address hidden>!
* disable-pdftoopvp-with-old-poppler.dpatch: Revert above change when
building with poppler 0.10.x.
-- Martin Pitt <email address hidden> Tue, 01 Sep 2009 09:44:33 +0200
-
cups (1.4.0-2) experimental; urgency=low
* Add debian/blacklist-cups.conf: Blacklist the usblp module, it's obsolete.
CUPS uses libusb directly now. (LP: #420015, part 1)
* debian/local/apparmor-profile: Allow cupsd to access /dev/bus/usb/.
(LP: #420015, part 2)
* debian/rules: Make the usb backend run as root, since /dev/bus/usb/* are
root:root, and cups does not use the usblp kernel module any more.
(LP: #420015, part 3)
* disable-pdftoopvp-with-old-poppler.dpatch: Update.
-- Martin Pitt <email address hidden> Mon, 31 Aug 2009 17:34:48 +0200
-
cups (1.4.0-1) experimental; urgency=low
[ Martin Pitt ]
* Final 1.4.0 release.
* Add ppdc-locale-formatting.dpatch: Fix locale handling in ppdc to avoid
broken PPD files in non-English locales. (STR#3300)
[ Till Kamppeter ]
* debian/control: Let the cups package only suggest cups-ppdc and not
recommend it, as cups-ppdc is only interesting for developers.
-- Martin Pitt <email address hidden> Sun, 30 Aug 2009 21:20:46 +0200
-
cups (1.4.0~svn8773-1) experimental; urgency=low
* New upstream prerelease snapshot.
[ Changes listed explicitly here as they are not yet available on
www.cups.org ]
1. accept and reject; the accept and reject commands have been
officially renamed to cupsaccept and cupsreject. The old names are
still supported via symlinks.
2. cupsdisable and cupsenable; the cupsdisable command now supports a
--hold option to stop printing after the current job and the
cupsenable command now supports a --release option to release
pending jobs for printing.
3. cupsfilter; the cupsfilter program now supports filtering of
already-queued print job files and can also run printer-specific
filters specified in the PPD file.
4. cupstestdsc; the cupstestdsc utility has been improved to better
detect problems with PostScript print files.
5. cupstestppd; the cupstestppd utility has been improved to test new
PPD keywords and better detect impossible constraints.
6. lpadmin; the lpadmin command now supports options to hold and
release new jobs on a printer or all printers.
7. lpoptions; the lpoptions command now describes custom options and
their parameters.
8. lppasswd; the lppasswd program is no longer installed setuid by
default.
9. lpstat; the lpstat command now supports a -H option to show the
current default server and no longer slows down when a printer is
specified.
10. Look-n-feel; the web interface has been given a new look.
11. PHP support; the "php-cgi" program is used, when available, to
process PHP pages in the CUPS web interface.
12. Printer configuration; improvements have been made to the add and
modify printer pages.
13. Printer options; the Set Default Options page now provides a
"query" button that queries the default and installed options from
the printer.
14. Printer sharing; the "share printer" and "unshare printer" buttons
are now only shown when printer sharing is enabled in the
scheduler.
15. Security; the web interface has been updated to support
authentication for printing of test pages and RSS subscription
operations.
16. Server settings; the Administration page now provides access to
common "advanced" server settings.
17. Bonjour (DNS-SD) printing support; a new mdns backend provides
Bonjour-based printer discovery and the ipp, lpd, and socket
backends now support Bonjour address resolution.
18. Bonjour (DNS-SD) perforance tuning; the scheduler now only uses a
single file descriptor for printer sharing. It previously used one
per printer.
19. Bonjour (DNS-SD) web interface registry; when remote access is
enabled, the scheduler can register the web interface for easier
access.
20. LPD client support; the cups-lpd mini-daemon now provides the
document-name for print jobs and supports specification of a CUPS
server.
21. PWG Port Monitor MIB; the snmp backend now supports the PWG Port
Monitor MIB to better choose the device URI to use.
22. SNMP-based monitoring; the ipp, lpd, and socket backends now report
supply levels and printer status using SNMP queries.
23. IPP/2.x support; CUPS now conforms to the draft IPP/2.0 and IPP/2.1
specifications.
24. CUPS-Add-Modify-Printer operation; the scheduler now supports
setting the printer-state-reasons attribute using this operation.
25. CUPS-Get-Document operation; the scheduler now supports a "get
document" operation to download files from a print job.
26. Device location; the scheduler and backend discovery interface now
support a device-location attribute.
27. Hold-New-Jobs and Release-Held-New-Jobs operations; the scheduler
now supports the Hold-New-Jobs and Release-Held-New-Jobs
operations.
28. Access control; the scheduler now supports multiple addresses in
Allow and Deny lines. It also now returns a HTTP 403 (forbidden)
status when a user authenticates successfully but is not allowed to
perform an operation.
29. Access logging; the scheduler now supports an AccessLogLevel
directive to control what is logged in the access_log file.
30. Configuration files; the default cupsd.conf file now provides an
"authenticated" policy for easy authenticated sharing of printers.
31. Default LogLevel; the default LogLevel is now "warn" instead of
"info".
32. Automatic debug logging; the scheduler now records up to the last N
(default 200) debug messages for failed print jobs.
33. Default paper size; the scheduler now supports a DefaultPaperSize
directive to override the default paper size defined by the locale
or libpaper configuration.
34. Encryption support; the scheduler now supports a SSLOptions
directive to optionally support Windows clients in "FIPS" mode. It
also now loads both the server and CA certificates (if present)
from the ServerCertificate file.
35. Error logging; the scheduler now logs unsuccessful operations as
errors in the error_log file.
36. Error policies; the scheduler now supports a retry-current-job
error policy that retries the current job immediately.
37. Fatal error handling; the scheduler now supports a FatalErrors
directive to control which startup errors should be considered
fatal.
38. Filter command-line; the scheduer now passes the
job-originating-host-name attribute as a CUPS option to filters and
backends.
39. Filter environment; the scheduler now includes CUPS_JOBTYPE,
PRINTER_INFO, and PRINTER_LOCATION variables in the environment
passed to filters and backends.
40. Job progress; the scheduler now supports a job-media-progress
attribute to track the printing progress of each page.
41. MIME database; MIME types now support a priority attribute to
override the default (alphabetical) rules of precedence.
42. Page logging; the scheduler now supports a PageLogFormat directive
to control the format of the page_log file.
43. PAM support; the scheduler now sets more PAM attributes to better
support third-party authentication schemes.
44. PDF job ticket support; the scheduler now supports cupsJobTicket
comments at the beginning of PDF print jobs.
45. Performance tuning; the scheduler now coalesces configuration and
state file changes to reduce the amount of disk activity and caches
printer attributes to further reduce startup time.
46. Printcap support; the scheduler no longer clears the printcap file
when shutting down, and can now create XML "plist" printcap files
as well.
47. RSS subscriptions; the scheduler now starts the notifier for RSS
subscriptions after creation so the feed is available immediately.
48. Sandbox support; the scheduler now runs child processes using
restrictive policies on Mac OS X for improved security and job
isolation.
49. Test option; the scheduler now supports a test mode via the "-t"
option.
50. Device discovery; the cups-deviced helper now runs backends in
parallel for faster discovery and streams the results of discovery
as the backends provide them.
51. Driver development kit; the CUPS DDK is now a standard part of
CUPS.
52. Driver information file support; the cups-driverd helper program
now directly supports PPD compiler driver information files.
53. Dynamic PPD support; drivers can now set PPD keywords dynamically
using PPD: messages.
54. Generic PostScript command filter; a new CUPS command file filter
for PostScript printers provides auto-configuration, self-test
page, and status and supply level reporting functions.
55. New printer drivers; new generic PostScript and PCL drivers provide
improved support for laser printers, the CUPS DDK drivers offer
support for many HP DesignJet printers, and new label drivers offer
support for Seiko and Tharo label printers.
56. PJL support; the cupsPJLDisplay PPD attribute controls the PJL
commands used to display the current user and job on the printer.
57. PPD compiler improvements; the PPD compiler now supports Mac OS X
.strings files, OID query strings, conditional directives, long
file names, and a test mode. It also fixes many other bugs from the
CUPS DDK 1.2.3 release.
58. USB printer support; the usb backend now uses libusb when available
to allow it to better work with third-party scanning and printing
solutions.
59. Banner filter; the bundled banner ("job-sheets") pages are now
generated using a new banner filter provides easier customization
and better support for UTF-8 text.
60. Image filters; the standard image filters now support image files
larger than 2GB.
61. PDF filter; the pdftops filter has been replaced with a wrapper
program that runs the Xpdf, poppler, or Ghostscript PDF to
PostScript utilities.
62. Backend API; a new cupsBackendReport function is provided to report
a device from a backend and handles any needed quoting of the
make-and-model, info, device-id, and location strings.
63. Device discovery; the new cupsGetDevices function streams
discovered devices to an application-provided callback function.
64. IPP API; the IPP read and write functions no longer use a large
stack-based buffer when reading and writing IPP attributes.
65. PPD support; several new functions are provided: cupsGetPPD3,
cupsResolveConflicts, ppdInstallableConflict, ppdLocalizeAttr,
ppdLocalizeMarkerName and ppdPageSizeLimits.
66. Side-Channel API; new cupsSideChannelSNMPGet and
cupsSideChannelSNMPWalk functions allow printer drivers to do SNMP
queries via the standard network backends.
67. Streaming API; a new streaming request API provides asynchronous
job creation and request submission.
* debian/patches/freebsd.dpatch,
debian/patches/manpage-typos.dpatch,
debian/patches/search_mime_files_in_usr_share.dpatch,
debian/patches/cupsaccept.dpatch,
debian/patches/gnutls-pkgconfig.dpatch: Removed backport patches of upstream
features.
* debian/patches/testsuite-increase-wait-timeout.dpatch: Removed, fixed
upstream.
* debian/patches/removecvstag.dpatch,
debian/patches/pidfile.dpatch,
debian/patches/ppd-poll-with-client-conf.dpatch,
debian/patches/quiesce-bonjour-warning.dpatch,
debian/patches/rootbackends-worldreadable.dpatch,
debian/patches/drop_unnecessary_dependencies.dpatch,
debian/patches/reactivate_recommended_driver.dpatch,
debian/patches/default_log_settings.dpatch,
debian/patches/confdirperms.dpatch,
debian/patches/printer-filtering.dpatch,
debian/patches/ubuntu-disable-browsing.dpatch: Regenerated.
* debian/local/backends/dnssd, debian/control, debian/cups.install,
debian/rules: "dnssd" backend removed, DNS-SD discovery backend is now
provided upstream.
* debian/patches/dns-sd-check-typo.dpatch: Fixed typo in upstream code to
check for the availability of dns_sd.h.
* debian/patches/dnssd-avahi.dpatch: Added avahi support for the "dnssd" CUPS
backend (patch from Fedora). CUPS' DNS-SD support does not build with the
libdns_sd of avahi.
* debian/patches/show-compile-command-lines.dpatch: Show compiler command
lines in the output of the "make" process.
* debian/control: Added libusb-dev to the build dependencies, the new USB
printer backend uses libusb and not any more the usblp kernel module.
* debian/control: Added libavahi-common-dev and libavahi-client-dev to
the build dependencies, for the avahi patch for the DNS-SD support.
* debian/control: Added new packages for the new shared libraries and also
cups-ppdc for the PPD manipulation utilities of the former CUPS DDk. Added
transitional package for CUPS DDK. Added Conflicts:/Replaces: as cupsddk
is replaced by cups-ppdc and the files of cupsddk-drivers go into the
main cups package.
* debian/rules: Added "--enable-libusb" to the ./configure command line.
* debian/rules: Added "--enable-avahi" to the ./configure command line.
* debian/rules: Call autoconf, as we have an SVN snapshot currently.
* debian/rules: Updated individual file installation and adaptation steps
for the new CUPS version.
* debian/libcups2-dev.install: Added new header file versioning.h.
* debian/libcupscgi1-dev.install, debian/libcupscgi1.install,
debian/libcupsdriver1-dev.install, debian/libcupsdriver1.install,
debian/libcupsmime1-dev.install, debian/libcupsmime1.install,
debian/libcupsppdc1-dev.install, debian/libcupsppdc1.install: Added install
file lists for newly added libraries.
* debian/cups-ppdc.install: File list for new cups-ppdc package. This package
holds the PPD file manipulation tools which were in CUPS DDK formerly.
* debian/cups-common.install, debian/cups.install: Updated for new CUPS
version.
* debian/cups.install, debian/cups-client.install, debian/cups-ppdc.install:
Commented out lines for missing translated man pages.
* debian/cups.postinst: Do not create the /usr/share/ppd/1-local-admin
and /usr/share/ppd/2-third-party links. They are not needed with current
CUPS and they also break the test procedure during package build.
* debian/libcups2.postinst, debian/libcupsimage2.postinst: Removed no-op
maintainer scripts.
* debian/local/filters/pdf-filters/addtocups,
debian/local/filters/pdf-filters/config-scripts/cups-pdf-filters.m4,
debian/local/filters/pdf-filters/filter/texttopdf.c: Let ./configure
script check the CUPS version so that in texttopdf.c a missing variable
can get defined if CUPS is 1.4.x or newer.
* debian/local/filters/pdf-filters/pdftoopvp/Makefile,
debian/local/filters/pdf-filters/pdftopdf/Makefile: Added missing
"unittests", "install-data", "install-headers", "install-libs",
"install-exec", "libs", "apihelp", and "framedhelp" targets to the
Makefiles of the PDF filters.
[ Martin Pitt ]
* debian/cups.install, debian/local/filters/pdf-filters/addtocups: Enable
pdftoopvp filter.
* Add disable-pdftoopvp-with-old-poppler.dpatch: Disable pdftoopvp if we
build against a poppler older than 0.11, since pdftoopvp needs that new
API. (This uses pkg-config --atleast-version in the dpatch script header.)
* ubuntu-disable-browsing.dpatch: Restore Ubuntu check.
* dnssd-avahi.dpatch: Add upstream bug link.
* dnssd-avahi.dpatch: Do not error out of the dnssd backend if system D-Bus
is not running. This unbreaks the test suite when running in a build
environment.
-- Martin Pitt <email address hidden> Tue, 25 Aug 2009 22:07:17 +0200
-
cups (1.3.11-2ubuntu1) karmic; urgency=low
[ Till Kamppeter ]
* debian/local/filters/pdf-filters/addtocups: Reactivate pdftoopvp. Ubuntu
specific until Debian gets a newer poppler.
[ Martin Pitt ]
* debian/control: Create proper Ubuntu branch and update Vcs-Bzr.
cups (1.3.11-2) unstable; urgency=low
[ Till Kamppeter ]
* debian/cups.init.d: Trigger udev event for all USB printers right after
starting the CUPS daemon to run the udev callouts for the printers. This
allows automatic print queue setup and re-enabling print queues also if
the printer is cold-plugged (connected before CUPS and/or udev got
started).
* debian/cups.init.d: Set CUPS RIP cache to 1/4 of the total RAM when CUPS
is started. This way CUPS Raster drivers get enough memory for reliable
and quick operation even if large paper sizes with high resolutions are
printed.
* debian/local/filters/pdf-filters/pdftoopvp/OPVPOutputDev.cxx,
debian/local/filters/pdf-filters/pdftoopvp/OPVPOutputDev.h,
debian/local/filters/pdf-filters/pdftoopvp/pdftoopvp.cxx,
debian/local/filters/pdf-filters/pdftoopvp/opvp/opvp.h,
debian/local/filters/pdf-filters/pdftoopvp/opvp/opvp_0_2_0.h: Adapted
pdftoopvp filter to the new API of Poppler 0.11.2. Thanks to upstream
author Koji Otani for the patch.
* debian/rules: Explicitly create empty file pdftoopvp/Dependencies after
applying the PDF filters add-on as the build servers seem to not copy
empty files.
* debian/patches/default_log_warn.dpatch,
debian/patches/default_log_settings.dpatch: Renamed patch for cupsd.conf
logging settings and added "MaxLogSize 0" so that CUPS does not do its
own log rotation, as our log rotation is much better.
* debian/cups-bsd.postinst, debian/cups.postinst: Moved handling of
/etc/printcap symlink from the post-install script of the cups-bsd
package to the cups package. Should assure that the symlink gets
also set on initial system installation (LP: #415825).
* debian/local/filters/cpdftocps: Updated filter to not use the pdftops
filter of CUPS, as from version 1.3.11 on CUPS' pdftops filter integrates
the call of pstops, and in the PDF workflow this would duplicate the
application of page management options, like N-up, even/odd pages, and
even the number of copies for some printers (LP: #412709).
[ Jamie Strandboge ]
* debian/cups.postinst: reload individual cups profile, not all of apparmor
(LP: #412745)
[ Martin Pitt ]
* debian/local/apparmor-profile: Allow cups-pdf to run /bin/cp.
* debian/control: Drop smbclient to Suggests. (Closes: #542464)
-- Martin Pitt <email address hidden> Sat, 22 Aug 2009 18:11:40 +0200
-
cups (1.3.11-1ubuntu7) karmic; urgency=low
* debian/cups-bsd.postinst, debian/cups.postinst: Moved handling of
/etc/printcap symlink from the post-install script of the cups-bsd
package to the cups package. Should assure that the symlink gets
also set on initial system installation (LP: #415825).
* debian/local/filters/cpdftocps: Updated filter to not use the pdftops
filter of CUPS, as from version 1.3.11 on CUPS' pdftops filter integrates
the call of pstops, and in the PDF workflow this would duplicate the
application of page management options, like N-up, even/odd pages, and
even the number of copies for some printers (LP: #412709).
-- Till Kamppeter <email address hidden> Thu, 20 Aug 2009 22:16:33 +0100
-
cups (1.3.11-1ubuntu6) karmic; urgency=low
* debian/patches/default_log_warn.dpatch,
debian/patches/default_log_settings.dpatch: Renamed patch for cupsd.conf
logging settings and added "MaxLogSize 0" so that CUPS does not do its
own log rotation, as our log rotation is much better.
-- Till Kamppeter <email address hidden> Fri, 14 Aug 2009 11:47:33 +0100
-
cups (1.3.11-1ubuntu5) karmic; urgency=low
* debian/cups.postinst: reload individual cups profile, not all of apparmor
(LP: #412745)
-- Jamie Strandboge <email address hidden> Wed, 12 Aug 2009 16:53:48 -0500
-
cups (1.3.11-1ubuntu4) karmic; urgency=low
* debian/rules: One more blank file to add.
-- Till Kamppeter <email address hidden> Wed, 12 Aug 2009 12:55:33 +0100
-
cups (1.3.11-1ubuntu3) karmic; urgency=low
* debian/rules: Explicitly create empty file pdftoopvp/Dependencies after
applying the PDF filters add-on as the build servers seem to not copy
empty files.
-- Till Kamppeter <email address hidden> Wed, 12 Aug 2009 12:22:33 +0100
-
cups (1.3.11-1ubuntu2) karmic; urgency=low
* debian/local/filters/pdf-filters/addtocups: Reactivated pdftoopvp for this
Ubuntu-only release.
* debian/local/filters/pdf-filters/pdftoopvp/OPVPOutputDev.cxx,
debian/local/filters/pdf-filters/pdftoopvp/OPVPOutputDev.h,
debian/local/filters/pdf-filters/pdftoopvp/pdftoopvp.cxx,
debian/local/filters/pdf-filters/pdftoopvp/opvp/opvp.h,
debian/local/filters/pdf-filters/pdftoopvp/opvp/opvp_0_2_0.h: Adapted
pdftoopvp filter to the new API of Poppler 0.11.2. Thanks to upstream
author Koji Otani for the patch.
-- Till Kamppeter <email address hidden> Wed, 12 Aug 2009 10:23:33 +0100
-
cups (1.3.11-1ubuntu1) karmic; urgency=low
[ Till Kamppeter ]
* Rebuilt against Poppler 0.11.2 due to ABI change in Poppler (LP: #409962).
* debian/cups.init.d: Trigger udev event for all USB printers right after
starting the CUPS daemon to run the udev callouts for the printers. This
allows automatic print queue setup and re-enabling print queues also if
the printer is cold-plugged (connected before CUPS and/or udev got
started).
* debian/cups.init.d: Set CUPS RIP cache to 1/4 of the total RAM when CUPS
is started. This way CUPS Raster drivers get enough memory for reliable
and quick operation even if large paper sizes with high resolutions are
printed.
[ Martin Pitt ]
* debian/local/apparmor-profile: Allow cups-pdf to run /bin/cp.
-- Till Kamppeter <email address hidden> Tue, 4 Aug 2009 00:39:33 +0100
-
cups (1.3.11-1) unstable; urgency=low
[ Till Kamppeter ]
* debian/local/filters/textonly: Adding a final form feed to the job (via
PPD option) did not work (LP: #396673).
* debian/local/filters/pdf-filters/filter/imagetopdf.c: imagetopdf proceeded
the PDF output with a blank line. This made some filters misbehave.
* debian/patches/read-embedded-options-from-incoming-postscript-and-add-to-ipp-attrs.dpatch:
Make CUPS read the number of copies out of Windows print jobs reliably by
also considering lines like "%%BeginNonPPDFeature: NumCopies 2". Thanks
to Dan Sheridan from Adelard (djs at adelard dot com) for this improvement
of the patch.
[ Stéphane Graber ]
* Add printer-filtering.dpatch: Add support for printer filtering.
With this patch, when the PRINTER_LIST environment variable is defined
only the printers (comma separated) in it will be displayed.
[ Martin Pitt ]
* New upstream bug fix release. See http://www.cups.org/articles.php?L586
for details.
* Drop pdftops-testsuite.dpatch (fixed upstream).
* poppler-based-pdftops-fixes.dpatch, search_mime_files_in_usr_share.dpatch:
Update to new upstream version.
-- Martin Pitt <email address hidden> Sat, 11 Jul 2009 17:27:03 +0200
-
cups (1.3.10-5) unstable; urgency=low
* debian/patches/read-embedded-options-from-incoming-postscript-and-add-to-ipp-attrs.dpatch:
Make CUPS reading all option settings in PostScript print jobs and add
the option settings to the filter command line before starting the filter
chain. This fixes the problem that in the PDF printing workflow (where
incoming PostScript gets converted to PDF by pstopdf) option settings
embedded in the incoming PostScript code do not get obeyed. Especially
the options of jobs from Windows clients get ignored.
* debian/filters/pstopdf: Do not let Ghostscript generate multiple copies
of the job if the filter command line from CUPS already supplies the
correct number of copies.
* debian/local/filters/pdf-filters/addtocups: The disabling of the
pdftoopvp filter in cups 1.3.10-3 also disabled pdftopdf. Re-enabled
pdftopdf.
-- Martin Pitt <email address hidden> Mon, 15 Jun 2009 10:50:33 +0200
-
cups (1.3.10-4) unstable; urgency=low
* Add ghostscript-cups dependency. (LP: #385606)
* debian/control: Add back dropped comma, which led to the ssl-cert
dependency being dropped. (Closes: #532845)
* debian/local/apparmor-profile: Allow reading /proc/sys/crypto/**.
(LP: #335898)
* debian/local/apparmor-profile: Allow dac_override to cups-pdf. This is
unfortunate, but required with some $HOME permissions; the profile is very
tight, so this shouldn't actually considerably increase privileges.
(LP: #224365)
-- Martin Pitt <email address hidden> Fri, 12 Jun 2009 11:32:28 +0200
-
cups (1.3.10-3) unstable; urgency=low
[ Till Kamppeter ]
* debian/cups.install, debian/rules: Move added *.convs and *.types files to
/usr/share/cups/mime/ so that they are not considered config files
by dpkg.
* debian/local/text.convs: Turn all text input formats to text/plain at
a high cost, so that the text-only printer (which accepts only text/plain)
accepts them (LP: #385797).
* debian/rules: Switch the pdftops filter back to Poppler, as Ghostscript
has a lot of problems in generating PostScript (LP: #382379).
* debian/patches/poppler-based-pdftops-fixes.dpatch: Fixes for the pdftops
filter in Poppler mode: Do not emit PostScript level 3 as it Poppler's
PostScript level 3 output is not compatible with HP's PostScript printers
(LP: #277404); Added support for the new "-origpagesizes" option of
Poppler's pdftops, so that documents with pages of different sizes get
correctly printed (LP: #310575).
* debian/filters/pstopdf: Do not call Ghostscript with asymmetric resolutions
(like 1200x600 dpi), as it leads to problems with images in some cases.
See http://bugs.ghostscript.com/show_bug.cgi?id=690504.
* debian/local/filters/pdf-filters/pdftopdf/P2PObject.h,
debian/local/filters/pdf-filters/pdftopdf/P2POutput.cxx: Fixed infinite
loop which occured for some PDF files (LP: #382880).
* debian/filters/pstopdf: Make it also correctly working if PaperDimension
and ImageableArea entries in the PPD have no translation strings. Thanks
to Koji Otani to find the bug.
* debian/local/filters/pdf-filters/pdftoopvp/,
debian/local/filters/pdf-filters/README,
debian/local/filters/pdf-filters/addtocups,
debian/local/filters/pdf-filters/removefromcups,
debian/local/filters/pdf-filters/config-scripts/cups-pdf-filters.m4:
Added pdftoopvp CUPS filter as part of the PDF filter add-on.
* debian/cups.install: Make /etc/fonts/conf.d/99pdftoopvp.conf of pdftoopvp
be installed as part of the cups package
* debian/control: Added build dependencies needed by pdftoopvp: liblcms1-dev,
libfreetype6-dev, libfontconfig1-dev
* debian/control: Moved dependency on cups-client to Depends:, as
cups-client is needed by the post-install script for the update of the
PPDs of existing print queues.
* debian/cups.postinst: Case-insensitive check for model names when updating
PPDs of already existing print queues.
[ Martin Pitt ]
* Add gnutls-pkgconfig.dpatch: Use "pkg-config gnutls" instead of deprecated
libgnutls-config. (Closes: #529903)
* Bump Standards-Version to 3.8.1 (no changes necessary).
* debian/control: Point Vcs-Browser: to bzr.d.o. loggerhead, and use http://
URL for Vcs-Bzr.
* debian/control: Drop ghostscript build dependency again, pdftops filter
uses poppler again. Also Drop alternative xpdf-utils build dependency,
since configure now checks for poppler's pdftops capabilities.
* debian/control, debian/rules: Do a build-time check if pdftops supports
-origpagesizes, and dynamically set the poppler-utils dependency. This is
a hack until https://bugs.freedesktop.org/show_bug.cgi?id=19777 makes it
into Debian.
* debian/cups.install, debian/local/filters/pdf-filters/addtocups: Disable
new pdftoopvp filter for now, since sid does not yet have poppler 0.11.
Lower libpoppler-dev build dependency again.
-- Martin Pitt <email address hidden> Thu, 11 Jun 2009 12:19:33 +0200
-
cups (1.3.10-2) unstable; urgency=low
[ Till Kamppeter ]
* debian/local/filters/pdf-filters/pdftopdf/P2PFont.cxx: Make the pdftopdf
filter also building with Poppler 0.11.0.
* debian/filters/pstopdf: Make pstopdf also reading default values from the
PPD if there is no space between the colon and the value. Some programs
seem to remove this space when setting the defaults. Fixes problem of
Shaun Crampton in LP: #357732.
[ Martin Pitt ]
* debian/control: Lift cups-driver-gutenprint from Suggests to Recommends,
it's needed by many printers and not very large. (Closes: #522428)
* debian/control: Drop cups-bsd's Recommends: cups to a Suggests:. Client
packages shouldn't pull in the server by default. (Closes: #529630)
* debian/libcups2.dirs: Drop, obsolete.
* debian/cups.dirs: Remove most directories, not necessary to explicitly
create them.
[ Martin-Éric Racine]
* Cleaned Lintian errors:
(source)
E: debian-rules-ignores-make-clean-error
W: debhelper-but-no-misc-depends
W: dbg-package-missing-depends
(cups)
E: dir-or-file-in-var-run
(cups-common)
W: symlink-should-be-relative
* Added Lintian overrides:
(cups)
W: non-standard-executable-perm
usr/lib/cups/backend-available/[ipp|lpd|serial] 0744 != 0755
cups (1.3.10-1) unstable; urgency=medium
[ Martin Pitt ]
* New upstream security/bug fix release:
- The scheduler now protects against DNS rebinding attacks. Please note
that this could lead to some regressions. (CVE-2009-0164)
- Fixed TIFF integer overflow in image filters. (CVE-2009-0163)
- Lots of bug fixes.
* Drop patches included upstream:
- hpgl-regression.dpatch
- runloop-backchannel-eof-spin.dpatch
- png-image-int-overflow.dpatch
- CVE-2008-5183.dpatch
- pdftops-cups-1.4.dpatch
* Add pdftops-testsuite.dpatch: Fix path to pdftops in the test suite.
* debian/rules: Specify --with-pdftops=gs, so that the pdftops filter is
built with intended ghostscript support.
[ Till Kamppeter ]
* debian/filters/pstopdf: Added support for custom page sizes to the
pstopdf CUPS filter.
* debian/filters/pstopdf: Call Ghostscript with the default paper size
(from PPD or from CUPS filter command line) on its command line. Some
applications generate PostScript without PageSize requests.
Multi-page-size jobs (LP: 310575) do not get broken by this as
Ghostscript uses the given page size only as default and gives priority
to page sizes requested by the document (in contrary to Poppler).
Fixes LP: #357732).
-- Martin Pitt <email address hidden> Thu, 21 May 2009 19:01:37 +0200
-
cups (1.3.9-17ubuntu1) jaunty; urgency=low
* SECURITY UPDATE: fix integer overflow via large TIFF file (LP: #361866)
- debian/patches/CVE-2009-0163.dpatch: adjust CUPS_IMAGE_MAX_HEIGHT in
filter/image-private.h
- CVE-2009-0163
-- Jamie Strandboge <email address hidden> Wed, 15 Apr 2009 09:33:56 -0500
