2 Commits

Author	SHA1	Message	Date
kreiserlee	b85b65e5ee	fix ci error	2024-06-11 06:29:16 +00:00
Till Kamppeter	567d7d21f0	Import Debian changes 2.4.6-0ubuntu3 ... cups (2.4.6-0ubuntu3) mantic; urgency=medium * Let pkg-config data file cups.pc get installed into /usr/lib/<ARCH>/pkgconfig/ * Include pkg-config data file cups.pc in libcups2-dev cups (2.4.6-0ubuntu2) mantic; urgency=medium * SECURITY UPDATE: Postscript parsing heap overflow - debian/patches/CVE-2023-4504.patch: properly check for end of buffer in cups/raster-interpret.c. - CVE-2023-4504 cups (2.4.6-0ubuntu1) mantic; urgency=medium * Update to new upstream version 2.4.6. - Fix printing multiple files on specific printers (Upstream issue #643) cups (2.4.5-0ubuntu2) mantic; urgency=medium * SECURITY UPDATE: use-after-free in cupsdAcceptClient() - debian/patches/CVE-2023-34241.patch: log result of httpGetHostname BEFORE closing the connection in scheduler/client.c. - CVE-2023-34241 cups (2.4.5-0ubuntu1) mantic; urgency=medium * Update to new upstream version 2.4.5. - Fixes color printing on printers with "CMYK" choice instead of "RGB" in "ColorModel" option of their PPD (Upstream issues #451 and #500, LP: 1971242). * Merge from Debian unstable. Remaining changes: - Added "--enable-snapped-clients" to the "./configure" options to use the correct Snap mediation mode for an unsnapped cupsd, like provided by this package. - In the AppArmor profile allow CUPS to access (/var)/run/snapd.socket to allow cupsd to determine which interfaces a snapped client is plugging. - Build-depend on libapparmor-dev, libsnapd-glib-dev, needed for Snap mediation. - Added fully automatic generation of PPD option setting presets to be applied depending on the settings of the job IPP attributes "print-color-mode", "print-quality", and "print-content-optimize". This allows easy control of any printer with only standard IPP attributes, as for example from a phone (functionality overtaken from cups-filters, mot (yet) upstream in CUPS). - In debian/rules updated ./configure arguments from --enable-gnutls to --with-tls=gnutls. Now libcups has support for all hash types again, especially can provide sha2-256 to PAPPL. - When polling capabilities of a driverless printer via get-printer-attributes IPP request, do a separate poll of the media-col-database attribute in case it did not get obtained by the first polls. - In libcupsimage2 recommend libcupsfilters2 instead of libcupsfilters1. * Manually refreshed patch 9100-ppd-cache-add-auto-presets.patch. * Removed patches included upstream: - 9110-create-local-printer-localhost-fix.patch - CVE-2022-26691-2.patch - snapd-glib-2.patch - poll-media-col-database-separately.patch - CVE-2023-32324.patch cups (2.4.2-4) unstable; urgency=medium * CVE-2023-32324 A heap buffer overflow vulnerability would allow a remote attacker to lauch a dos attack. cups (2.4.2-3ubuntu3) mantic; urgency=medium * SECURITY UPDATE: DoS via buffer overflow in format_log_line - debian/patches/CVE-2023-32324.patch: check _cups_strlcpy size in cups/string.c. - CVE-2023-32324 cups (2.4.2-3ubuntu2) lunar; urgency=low * In libcupsimage2 recommend libcupsfilters2 instead of libcupsfilters1. cups (2.4.2-3ubuntu1) lunar; urgency=low * Merge from Debian unstable. Remaining changes: - Added "--enable-snapped-clients" to the "./configure" options to use the correct Snap mediation mode for an unsnapped cupsd, like provided by this package. - In the AppArmor profile allow CUPS to access (/var)/run/snapd.socket to allow cupsd to determine which interfaces a snapped client is plugging. - Build-depend on libapparmor-dev, libsnapd-glib-dev, needed for Snap mediation. - Added fully automatic generation of PPD option setting presets to be applied depending on the settings of the job IPP attributes "print-color-mode", "print-quality", and "print-content-optimize". This allows easy control of any printer with only standard IPP attributes, as for example from a phone (functionality overtaken from cups-filters, mot (yet) upstream in CUPS). - Fixed printing on temporary CUPS queues for local services, like IPP-over-USB or Printer Applications. Especially when printing from the GTK print dialog printing on such queues did not work (Upstream pull request #353, LP: #1965112). - Comment in CVE-2022-26691 patch fixed. - In debian/rules updated ./configure arguments from --enable-gnutls to --with-tls=gnutls. Now libcups has support for all hash types again, especially can provide sha2-256 to PAPPL. - When polling capabilities of a driverless printer via get-printer-attributes IPP request, do a separate poll of the media-col-database attribute in case it did not get obtained by the first polls. - Patch to build with snapd-glib-2 * Refreshed patches 9100-ppd-cache-add-auto-presets.patch and 9110-create-local-printer-localhost-fix.patch with quilt. cups (2.4.2-3) unstable; urgency=medium [ Helge Kreutzmann ] * update translations (Closes: #1032833) * add more translated man pages to binary packages (Closes: #1032621) [ Thorsten Alteholz] * fix typo in French translation * debian/rules: remove link handling for manpages of cups-ipp-utils cups (2.4.2-2) unstable; urgency=medium [ Helge Kreutzmann ] * Update German man page (2220t) [ Thorsten Alteholz] * debian/control: add Recommends: avahi-daemon to cups-ipp-utils (Closes: #904605) * debian/manpage-po4a: add Portuguese translation (Closes: #1001890) * add ippevepcl and ippeveps (and manpages) to cups-ipp-utils (Closes: #990410) cups (2.4.2-1ubuntu4) lunar; urgency=medium * In debian/rules updated ./configure arguments from --enable-gnutls to --with-tls=gnutls. Now libcups has support for all hash types again, especially can provide sha2-256 to PAPPL. cups (2.4.2-1ubuntu3) kinetic; urgency=medium * When polling capabilities of a driverless printer via get-printer-attributes IPP request, do a separate poll of the media-col-database attribute in case it did not get obtained by the first polls. cups (2.4.2-1ubuntu2) kinetic; urgency=medium * Add patch to build with snapd-glib-2 cups (2.4.2-1ubuntu1) kinetic; urgency=low * Merge from Debian unstable. Remaining changes: - Added "--enable-snapped-clients" to the "./configure" options to use the correct Snap mediation mode for an unsnapped cupsd, like provided by this package. - In the AppArmor profile allow CUPS to access (/var)/run/snapd.socket to allow cupsd to determine which interfaces a snapped client is plugging. - Build-depend on libapparmor-dev, libsnapd-glib-dev, needed for Snap mediation. - Added fully automatic generation of PPD option setting presets to be applied depending on the settings of the job IPP attributes "print-color-mode", "print-quality", and "print-content-optimize". This allows easy control of any printer with only standard IPP attributes, as for example from a phone (functionality overtaken from cups-filters, mot (yet) upstream in CUPS). - Fixed printing on temporary CUPS queues for local services, like IPP-over-USB or Printer Applications. Especially when printing from the GTK print dialog printing on such queues did not work (Upstream pull request #353, LP: #1965112). - Comment in CVE-2022-26691 patch fixed. cups (2.4.2-1) unstable; urgency=medium * Update to new upstream version 2.4.2. * debian/rules: temporarily deactivate tests (one test fails due to only generating 4 of 14 expected warnings) cups (2.4.1op1-2) unstable; urgency=medium * debian/rules: in latest cups version, root is no longer automatically added to SystemGroup in cups-files.conf, so add --with-system-groups="root lpadmin" to configure step (Closes: #1006849 #1006727 #876207) cups (2.4.1op1-1ubuntu5) kinetic; urgency=medium * SECURITY UPDATE: Local authorization cert bypass - debian/patches/CVE-2022-26691-1.patch: fix string comparison in scheduler/cert.c. - debian/patches/CVE-2022-26691-2.patch: fix the comment in scheduler/cert.c. - CVE-2022-26691 cups (2.4.1op1-1ubuntu4) jammy; urgency=low * Fixed PPD file auto-generation when a print queue is created with a DNS-SD-service-name-based URI and "-m everywhere" backporting the fix from upstream (Upstream issue #340, #343). cups (2.4.1op1-1ubuntu3) jammy; urgency=low * Fixed crasher in the patch for temporary queues for local services in the previous release. Updated the patch and the upstream pull request (LP: #1965112, Upstream pull request #353). cups (2.4.1op1-1ubuntu2) jammy; urgency=low * Fixed printing on temporary CUPS queues for local services, like IPP-over-USB or Printer Applications. Especially when printing from the GTK print dialog printing on such queues did not work (Upstream pull request #353). cups (2.4.1op1-1ubuntu1) jammy; urgency=low * Merge from Debian unstable. Remaining changes: - Added "--enable-snapped-clients" to the "./configure" options to use the correct Snap mediation mode for an unsnapped cupsd, like provided by this package. - Build CUPS with "SystemGroup lpadmin root" in cups-files.conf by default, as CUPS always worked this way but the new patch for supporting the "cups-control" interface of Snaps does not allow implicit permission to everything for root any more. - In the AppArmor profile allow CUPS to access (/var)/run/snapd.socket to allow cupsd to determine which interfaces a snapped client is plugging. - Build-depend on libapparmor-dev, libsnapd-glib-dev, needed for Snap mediation. - Added fully automatic generation of PPD option setting presets to be applied depending on the settings of the job IPP attributes "print-color-mode", "print-quality", and "print-content-optimize". This allows easy control of any printer with only standard IPP attributes, as for example from a phone (functionality overtaken from cups-filters, mot (yet) upstream in CUPS). * Updated 9100-ppd-cache-add-auto-presets.patch cups (2.4.1op1-1) unstable; urgency=medium * new upstream release * debian/patches/*: update and rebase * debian/control: add myself to Uploaders: * debian/copyright: remove unused BSD-3 license * exlucde some newly generated files * update symbols files * move back to gbp based workflow (git debrebase and dgit do not work in my world) cups (2.3.3op2-7ubuntu2) impish; urgency=low * Updated patch for auto-generation of PPD presets to patch proposed upstream (Upstream pull request #236) due to added PPD options taken into account. cups (2.3.3op2-7ubuntu1) impish; urgency=low * Merge from Debian unstable. Remaining changes: - Added extra checking when administrative requests (create queue, remove someone else's job, ...) reach cupsd. If the client is a Snap, it has to plug the cups-control interface to be allowed to do the task. Added libapparmor-dev and libsnapd-glib-dev to the build dependencies. Also added needed permissions to AppArmor profile. - Build CUPS with "SystemGroup lpadmin root" in cups-files.conf by default, as CUPS always worked this way but the new patch for supporting the "cups-control" interface of Snaps does not allow implicit permission to everything for root any more. - Added "--enable-snapped-clients" to the "./configure" options to use the correct checking mode for an unsnapped cupsd, like provided by this package. - Added fully automatic generation of PPD option setting presets to be applied depending on the settings of the job IPP attributes "print-color-mode", "print-quality", and "print-content-optimize". This allows easy control of any printer with only standard IPP attributes, as for example from a phone (functionality overtaken from cups-filters, mot (yet) upstream in CUPS). * Updated patch for auto-generation of PPD presets to patch proposed upstream (Upstream pull request #236). cups (2.3.3op2-7) unstable; urgency=medium [ Didier Raboud ] * Remove myself from Uploaders [ Roger Lynn ] * Apparmor: allow CUPS to read /etc/letsencrypt/archive/ (Closes: #992378) cups (2.3.3op2-6) unstable; urgency=medium * Migrate to unstable * Packaging cleanup - Update S-V to 4.6.0 without changes needed - Remove 3 obsolete maintscript entries cups (2.3.3op2-5ubuntu1) impish; urgency=low * Merge from Debian unstable. Remaining changes: - Added extra checking when administrative requests (create queue, remove someone else's job, ...) reach cupsd. If the client is a Snap, it has to plug the cups-control interface to be allowed to do the task. Added libapparmor-dev and libsnapd-glib-dev to the build dependencies. Also added needed permissions to AppArmor profile. - Build CUPS with "SystemGroup lpadmin root" in cups-files.conf by default, as CUPS always worked this way but the new patch for supporting the "cups-control" interface of Snaps does not allow implicit permission to everything for root any more. - Added "--enable-snapped-clients" to the "./configure" options to use the correct checking mode for an unsnapped cupsd, like provided by this package. * Added fully automatic generation of PPD option setting presets to be applied depending on the settings of the job IPP attributes "print-color-mode", "print-quality", and "print-content-optimize". This allows easy control of any printer with only standard IPP attributes, as for example from a phone (functionality overtaken from cups-filters, mot (yet) upstream in CUPS). cups (2.3.3op2-5) experimental; urgency=low * Backport 2 upstream USB backend fixes: - Revert enforcing read limits (caused a regression with Lexmark filters) - Use 60s timeout (instead of 250ms) for reading at backchannel, as some older models malfunction if timeout is too short (Closes: #989073) cups (2.3.3op2-4) experimental; urgency=medium [ Helge Kreutzmann ] * Update German man page (2212t) [ Didier Raboud ] * Reorder and cleanup patch queue by replacing some by upstream's * Drop ancient symlink handling in preinsts (Closes: #986165) cups (2.3.3op2-3+deb11u1) unstable; urgency=medium * Backport 2 upstream USB backend fixes: - Revert enforcing read limits (caused a regression with Lexmark filters) - Use 60s timeout (instead of 250ms) for reading at backchannel, as some older models malfunction if timeout is too short (Closes: #989073) cups (2.3.3op2-3ubuntu3) hirsute; urgency=low * Updated AppArmor profile entries for CUPS accessing snapd to check whether a client is a Snap and which interfaces it plugs to. cups (2.3.3op2-3ubuntu2) hirsute; urgency=low * Replaced patch for extra checking of admin requests from snapped clients by the current upstream code. Added "--enable-snapped-clients" to the "./configure" options to use the correct checking mode for an unsnapped cupsd, like provided by this package. cups (2.3.3op2-3ubuntu1) hirsute; urgency=low * Merge from Debian unstable. Remaining changes: - Added extra checking when administrative requests (create queue, remove someone else's job, ...) reach cupsd. If the client is a Snap, it has to plug the cups-control interface to be allowed to do the task. Added libapparmor-dev and libsnapd-glib-dev to the build dependencies. Also added needed permissions to AppArmor profile. - Build CUPS with "SystemGroup lpadmin root" in cups-files.conf by default, as CUPS always worked this way but the new patch for supporting the "cups-control" interface of Snaps does not allow implicit permission to everything for root any more. * Clean up "Build-Depends:" to be in sync with Debian (delta overlooked for near a decade when cups-filters was introduced in 2012), removing the unneeded entries: ghostscript, libavahi-compat-libdnssd-dev, libfontconfig1-dev, libfreetype6-dev, libijs-dev, libjpeg-dev, libldap2-dev, libpng-dev, libtiff-dev, poppler-utils, sharutils * Removed the changes on the machine-generated "configure" file in the patch for checking snapped clients, the changes easily mis-match on updates and we run "autoconf" in debian/rules anyway. cups (2.3.3op2-3) unstable; urgency=medium [ Helge Kreutzmann ] * Update German man page (2212t) [ Didier Raboud ] * Wrap-and-sort -baskt, keep comments * Let cups.1 point to client.conf.5, not client.conf.7 (Closes: #982303) * Make CUPS reproducible by patching it to; - skip the httpAddrGetHostname() test (that fails under reprotest) - skip the stp tests if ran as root, without aborting - run testlang for each provided CUPS locale only cups (2.3.3op2-2) unstable; urgency=medium * Bump debhelper compat to 13, document not-installed files cups (2.3.3op2-1) unstable; urgency=medium * New OpenPrinting 2.3.3op2 release - CVE-2020-10001: Fixed a buffer (read) overflow in the `ippReadIO` function - Drop 4 patches merged upstream * Update d/copyright authors and years cups (2.3.3op1-7) unstable; urgency=medium [ Helmut Grohne ] * Reduce Build-Depends, move dh_apparmor to B-D-A (Closes: #980104) cups (2.3.3op1-6) unstable; urgency=medium [ Till Kamppeter ] * In the AppArmor profile, allow cupsd to write to /run/systemd/notify to notify that it is up and running (systemd service type "notify") cups (2.3.3op1-5ubuntu1) hirsute; urgency=low * Merge from Debian unstable. Remaining changes: - Added extra checking when administrative requests (create queue, remove someone else's job, ...) reach cupsd. If the client is a Snap, it has to plug the cups-control interface to be allowed to do the task. Added libapparmor-dev and libsnapd-glib-dev to the build dependencies. Also added needed permissions to AppArmor profile. - Build CUPS with "SystemGroup lpadmin root" in cups-files.conf by default, as CUPS always worked this way but the new patch for supporting the "cups-control" interface of Snaps does not allow implicit permission to everything for root any more. * In the AppArmor profile allow cupsd to write to /run/systemd/notify to notify that it is up and running (systemd service type "notify"). cups (2.3.3op1-5) unstable; urgency=medium * Update Homepage and Source fields to point https://github.com/OpenPrinting/cups/ as Debian's using the OpenPrinting (friendly) fork (Closes: #979461) cups (2.3.3op1-4) unstable; urgency=medium * Drop ancient manual link-doc setting in cups-bsd.postinst * Let cups.service start after nslcd.service (Closes: #977198) cups (2.3.3op1-3ubuntu1) hirsute; urgency=low * Merge from Debian unstable. Remaining changes: - Added extra checking when administrative requests (create queue, remove someone else's job, ...) rach cupsd. If the client is a Snap, it has to plug the cups-control interface to be allowed to do the task. Added libapparmor-dev and libsnapd-glib-dev to the build dependencies. Also added needed permissions to AppArmor profile. - Build CUPS with "SystemGroup lpadmin root" in cups-files.conf by default, as CUPS always worked this way but the new patch for supporting the "cups-control" interface of Snaps does not allow implicit permission to everything for root any more. cups (2.3.3op1-3) unstable; urgency=medium [ Helge Kreutzmann ] * Update German man page (2211t) [ Didier Raboud ] * Patch configure scripts to fix FTBFS on freebsd-gnu systems cups (2.3.3op1-2) unstable; urgency=medium * Backport upstream "Force a 5 second sleep to wait for the job control file to be written" patch, to address s390x test suite timing issue cups (2.3.3op1-1) unstable; urgency=medium * Use OpenPrinting CUPS fork instead of Apple's codebase - Update d/upstream/metadata, d/watch - d/upstream/signing-key.asc: Swap Apple's with Michael R Sweet's * Large patch-suite cleanup thanks to lots of Debian proposals merged upstream; from 40 to 9; - Reorder (upstream-mergeable first, Debian-specific later) - Reword and refresh metadata for the last patches * Set Debian customizations in d/rules instead of patches; - Set --with-max-log-size=0 - Set --enable-sync-on-close - Set --with-error-policy=retry-job * Packaging cleanup; - Drop the Debian-specific systemd units' renaming, now upstream - Drop pre-oldstable postinst ConfigFilePerm handling - Add missing BSD-2-Clause block in debian/copyright - Convert debian/po files to UTF-8 - Drop --as-needed as it's now default in Debian - Drop Ubuntu-specific patch handling, in favour of compile-time option for --disable-browsing - Bump S-V to 4.5.1 without changes needed - Use debian/main as head branch; update d/gbp.conf accordingly - Drop outdated d/source/options * Refresh manpage translation pofiles for 2.3.3op1 cups (2.3.3-4) unstable; urgency=medium * Drop Ubuntu "Make lpoptions list a printer's options correctly also when CUPS is running on an alternative port" patch, refused upstream (Closes: #970725) * Use upstream-merged patches for fax numbers' fix and rastertopwg rounding cups (2.3.3-3ubuntu1) groovy; urgency=medium * Merged with Debian unstable. Remaining changes: - Added extra checking when administrative requests (create queue, remove someone else's job, ...) rach cupsd. If the client is a Snap, it has to plug the cups-control interface to be allowed to do the task. Added libapparmor-dev and libsnapd-glib-dev to the build dependencies. Also added needed permissions to AppArmor profile. * Build CUPS with "SystemGroup lpadmin root" in cups-files.conf by defualt, as CUPS always worked this way but the new patch for supporting the "cups-control" interface of Snaps does not allow implicit permission to everything for root any more. cups (2.3.3-3) unstable; urgency=medium [ Didier Raboud ] * Set lintian overrides for non-changeable upstream choices * Add missing Build-Depends-Package in symbols' files [ Till Kamppeter ] * Resolve DNS-SD-service-name-based URIs correctly also if they are from a service from localhost (like IPP-over-USB, Printer Application, ...) * Make lpoptions list a printer's options correctly also when CUPS is running on an alternative port * Fix fax numbers supplied via GTK print dialog, removing a "Custom." prefix; do not choke if the GTK dialog sends "None" as phone number or pre-dial prefix * Let the rastertopwg filter check rounding errors when calculating the page geometry cups (2.3.3-2ubuntu5) groovy; urgency=medium * In all autopkgtests modify set "LogLevel debug2" in cupsd.conf and "SystemGroup lpadmin root" in cups-files.conf and restart cupsd, the former change to more easily find out what failed and the latter as the default configuration did not allow root to create queues, making all tests fail. cups (2.3.3-2ubuntu4) groovy; urgency=medium * Let the rastertopwg filter check rounding errors when calculating the page geometry. cups (2.3.3-2ubuntu3) groovy; urgency=medium * Do not choke if the GTK dialog sends "None" as phone number or pre-dial prefix. cups (2.3.3-2ubuntu2) groovy; urgency=medium * Fix fax numbers supplied via GTK print dialog, removing a "Custom." prefix. cups (2.3.3-2ubuntu1) groovy; urgency=medium * Added extra checking when administrative requests (create queue, remove someone else's job, ...) rach cupsd. If the client is a Snap, it has to plug the cups-control interface to be allowed to do the task. Added libapparmor-dev and libsnapd-glib-dev to the build dependencies. Also added needed permissions to AppArmor profile. * Resolve DNS-SD-service-name-based URIs correctly also if they are from a service from localhost (like IPP-over-USB, Printer Application, ...) * Make lpoptions list a printer's options correctly also when CUPS is running on an alternative port. cups (2.3.3-2) unstable; urgency=medium * Add missing dh-strip-nondeterminism B-D * cups-daemon: Add ipp-usb Recommends cups (2.3.3-1) unstable; urgency=medium * New 2.3.3 upstream release, with the two -12 security patches cups (2.3.1-12) unstable; urgency=medium * Backport two security patches - CVE-2020-3898: heap-buffer-overflow in libcups’s ppdFindOption() function in ppd-mark.c - CVE-2019-8842: The `ippReadIO` function may under-read an extension field cups (2.3.1-11) unstable; urgency=medium * CI Tests: fix cups-basiccommands: - swap awk with sed; - filter stderr away from known errors - add missing cups-bsd depends to test lpr commands cups (2.3.1-10) unstable; urgency=medium * Add Requires=cups.socket to cups.service, to make sure they start in the right order * CI Tests: Add a test for all CUPS' basic commands, thanks to RedHat * Add Pre-Depends: ${misc:Pre-Depends} to cups-daemon to fix skip-systemd-native-flag-missing-pre-depends lintian flag * Add patch proposal from RedHat to fix leakage of ppd (Issue: #5738) cups (2.3.1-9) unstable; urgency=medium * CI Tests: Ensure the job files are non-empty; should detect more regressions cups (2.3.1-8) unstable; urgency=medium * Add patch to fix cupsctl when loading cupsd.conf (Issue: #5744) cups (2.3.1-7) unstable; urgency=medium * Add patch to fix conversion of PPD InputSlot choice names; this should fix printers ignoring the paper tray selection (Issue: #5740, Closes: #949315) * lintian-brush: - Set upstream metadata fields: Bug-Database, Repository, Repository-Browse - Rewrap some d/changelog entries cups (2.3.1-6) unstable; urgency=medium * Patch test suite to also ignore 'Job held' lines in error_log line counting cups (2.3.1-5) unstable; urgency=medium * Move towards driverless-centered installation: - Drop all printer-driver-* and hplip recommends/suggests * Cleanup all versions from pre- Debian stable * Bump S-V to 4.5.0 without changes needed cups (2.3.1-4) unstable; urgency=medium * Cleanup patch queue for cups' bts URLs and patch names * Update README.Debian to remove leftover SystemdIdleExit references cups (2.3.1-2) unstable; urgency=medium * Drop pwg-raster-attributes.patch * Amend 2.3.1-1 changelog entry to add missing Ubuntu package drop and CVE bug closure cups (2.3.1-1) unstable; urgency=medium [ Didier Raboud ] * New 2.3.1 upstream release: - CVE-2019-2228: The `ippSetValuetag` function did not validate the default language value (Closes: #946782) [ Steve Langasek ] * On Ubuntu i386, drop cups and cups-core-drivers (Closes: #947185) [ Helge Kreutzmann ] * Update German man page (2207t) cups (2.3.0-7) unstable; urgency=medium * Packaging cleanup: - Set upstream metadata fields: Repository - Rely on pre-initialized dpkg-architecture variables - Fix day-of-week for changelog entries 1.0.1-1 - Bump Standards-Version to 4.4.1 without changes needed - Replace dh-exec usage with manual renaming in debian/rules cups (2.3.0-6) unstable; urgency=medium [ Didier Raboud ] * Tests-drivers: Cleanup output [ intrigeri ] * AppArmor: support cups-pdf "Out" directory pointing to almost anywhere below $HOME (Closes: #940578) cups (2.3.0-5) unstable; urgency=medium * Let the test-drivers script stop waiting when a filter is allegedly failed, and give context cups (2.3.0-4) unstable; urgency=medium [ Helge Kreutzmann ] * Update German man page (2197t) cups (2.3.0-3) unstable; urgency=low * Fix autopkgtests for real; refactor lpadmin stderr filtering cups (2.3.0-2) unstable; urgency=low [ Helge Kreutzmann ] * Update German man page (2100t58f39u) [ Didier Raboud ] * Fix autopkgtest by filtering away known stderr messages cups (2.3.0-1) unstable; urgency=low * New 2.3.0 upstream release, to unstable - CVE-2019-8696 and CVE-2019-8675: Fixed SNMP buffer overflows - Fixed IPP buffer overflow - Fixed memory disclosure and DoS issues in the scheduler - CUPS is now provided under the Apache License, Version 2.0, with a GPL2/LGPL2 exception * Rewrite debian/copyright with the above license change, install the NOTICE file * Refresh manpage translations * Refresh upstream metadata * Bump S-V to 4.4 without changes needed cups (2.3~rc1-2) experimental; urgency=medium * Merge 2.2.12-1 from unstable * Add missing colon in closes line. * Set upstream metadata fields: Contact, Name. * Bump debhelper from old 11 to 12. cups (2.3~rc1-1) experimental; urgency=medium * New 2.3~rc1 upstream release: - Refresh patch queue - Refresh manpage translation files - Remove /usr/sbin/accept and /usr/sbin/reject symlinks cups (2.3~b8-4) experimental; urgency=medium * Reset the LogDebugHistory setting to upstream default (LP: #1831021) cups (2.3~b8-3) experimental; urgency=medium * Migrate to dgit-maint-debrebase workflow cups (2.3~b8-2) experimental; urgency=medium * Backport upstream patch: - Block cups-files.conf directives (Issue #5530, Closes: #923115) cups (2.3~b8-1) experimental; urgency=medium * New 2.3~b8 upstream release - Add patch to fix tests' failure * Redo manpage po4a translation infrastructure and installation * Merge 2.2.10-6 from unstable cups (2.3~b7-1) experimental; urgency=medium * New 2.3~b7 upstream release - Drop two patches now included upstream cups (2.3~b6-2) experimental; urgency=medium * Merge 2.2.10-3 * Add patch to allow building with -Werror=maybe-uninitialized * Drop now-superflous --dbgsym-migration dh_strip argument cups (2.3~b6-1) experimental; urgency=medium * New 2.3~b6 upstream pre-release - CVE-2018-4700: Linux session cookies used a predictable random number seed (Closes: #915909) - The `cupsaddsmb` program has been removed (Issue #5449) - The `cupstestdsc` program has been removed (Issue #5450) - Rebase patches * Merge 2.2.10-1 * Manpage translations update * Add patch to fix FTBFS due to wrong `usage(int)` usage * Update libcups2 symbols: +12 cupsRaster* * Cope with cupsaddsmb and cupstestdsc removals: - Remove from cups-client installed files - Remove from manpage translation infrastructure - Remove from libcups2's README.Debian cups (2.3~b5-2) experimental; urgency=medium * Merge 2.2.8-5, rebase patches cups (2.3~b5-1) experimental; urgency=medium * New 2.3~b5 upstream release * Merge 2.2.8-2 cups (2.3~b4-3) experimental; urgency=medium * Merge 2.2.7-4, rebase patches cups (2.3~b4-2) experimental; urgency=medium * Merge 2.2.7-2 * Name source lintian override file correctly cups (2.3~b4-1) experimental; urgency=medium * New 2.3~b4 upstream pre-release - NOTICE: Printer drivers are now deprecated (Issue #5270) * Add cupsEncodeOption@Base 2.3~b4 symbol in libcups2 * Refresh manpage translations cups (2.3~b3-1) experimental; urgency=medium * New 2.3~b3 upstream pre-release - The `lp` and `lpr` commands now provide better error messages when the default printer cannot be found (Issue #5096, Closes: #870463) - CUPS is now provided under the Apache License, Version 2.0 * 2.3~b3 updates: - Update manpage translation files - Add 2 libcups2 symbols introduced in 2.3~b1 - Backport patch from upstream to fix filter's installation (Issue #5247) * CUPS license change: - Add NEWS file to libcups2-dev - Rewrite debian/copyright * Add cups-daemon lintian override for WantedBy=printer.target systemd service file * Bump debhelper compat to 11 cups (2.2.12-2) unstable; urgency=medium [ Helge Kreutzmann ] * Update German man page (2193t) cups (2.2.12-1) unstable; urgency=medium * New 2.2.12 upstream release - CVE-2019-8696 and CVE-2019-8675: Fixed SNMP buffer overflows (Closes: #934957) * Remove 11 backported patches * Fix CVE-2018-4{7,8}00 typo retrospectively in d/changelog (Closes: #933985) * Refresh debian/gitlab-ci.yml * Refresh manpage translations cups (2.2.10-6) unstable; urgency=medium * Backport patch from upstream's 2.2 "stable" branch: - Fix an issue with `PreserveJobHistory` and time values (Issue #5538) (Closes: #921741) cups (2.2.10-5) unstable; urgency=medium [ Helge Kreutzmann ] * Correct error in german manpage translation [ Didier Raboud ] * Backport patches from upstream's 2.2 "stable" branch: - Add USB quirks rule for Xerox printers (Issue #5523) - Add a USB quirks rule for the DYMO 450 Turbo (Issue #5521) cups (2.2.10-4) unstable; urgency=low * Backport patches from upstream's 2.2 "stable" branch: - Protect against continuing to read from a file at EOF (Issue #5473) - Use the same requested-attributes values for all IPP Everywhere setup requests (Issue #5484) - Add a USB quirk rule for the Lexmark E120n (Issue #5478) - Updated the USB quirks rule for Zebra label printers (Issue #5395) - Fix compile error on Linux (Issue #5483) - Stop parsing the Emulators keywords in PPD files (Issue #5475) - Fix potential unaligned accesses in the string pool (Issue #5474) cups (2.2.10-3) unstable; urgency=medium * reprotest errors; cleanup patches: - Remove culprit patches refused for upstream integration: - patch to implement PRINTER_LIST printer filtering (see #3092) - patch to read embedded options from postcript (see #4344) - patch to cope with newline in device IDs (see #4345) - Update no-conffile-timestamp.patch for syntax bug cups (2.2.10-2) unstable; urgency=medium [ Helge Kreutzmann ] * Update German man page (2192t) cups (2.2.10-1) unstable; urgency=medium * New 2.2.10 upstream release - CVE-2018-4700: Linux session cookies used a predictable random number seed (Closes: #915909) * Manpage translations refresh * Drop superfluous dpkg-dev B-D cups (2.2.9-4) unstable; urgency=medium * Cherry-pick from upstream: - Fix handling of MaxJobTime 0 (Issue #5438, LP: #1804576, Closes: #915724) cups (2.2.9-3) unstable; urgency=medium * debian/control cleanup: - Refresh thanks to `cme fix dpkg-control` - Drop xpp suggest - Bump S-V to 4.2.1 without changes needed * Replace revert with upstream patch to fix `lpadmin -E` regression (Issue #5440) cups (2.2.9-2) unstable; urgency=medium * Revert 2.2.9 lpadmin fixes to circumvent 2.2.9 regression revealed by autopkgtest, see https://github.com/apple/cups/issues/5440 cups (2.2.9-1) unstable; urgency=medium * New 2.2.9 upstream release - Remove libcups{cgi1,mime1,ppdc1} packages as they are not built anymore upstream cups (2.2.8-5) unstable; urgency=high * CVE-2018-6553: Fix AppArmor cupsd sandbox bypass due to use of hard links (Closes: #903605) * All these were fixed in 2.2.8: - CVE-2018-4180 Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN) - CVE-2018-4181 Limited Local File Reads as Root via cupsd.conf Include Directive - CVE-2018-4182 cups-exec Sandbox Bypass Due to Insecure Error Handling - CVE-2018-4183 cups-exec Sandbox Bypass Due to Profile Misconfiguration cups (2.2.8-4) unstable; urgency=medium * Backport upstream patches: - Fix A4 crash in Epson 24-pin driver (Closes: #901860) cups (2.2.8-3) unstable; urgency=medium * Renumber first 2.2.8 upload as 2.2.8-1; skip -2. * Drop the "Generalize the input validation of some kinds of attributes." revert in favour of "Fix regressions in ippValidateAttribute" from upstream cups (2.2.8-1) unstable; urgency=medium * New upstream 2.2.8 release - The scheduler allowed environment variables to be specified in the `cupsd.conf` file [ Didier Raboud ] * Revert "Generalize the input validation of some kinds of attributes." Fixes FTBFS on 2.2.8, see https://github.com/apple/cups/issues/5322 * Manpage refresh after 2.2.8 [ Helge Kreutzmann ] * Update German man page (2193t) cups (2.2.7-5) unstable; urgency=medium [ Jean-Paul Guillonneau ] * Update French man page (2185t2f) (Closes: #897406) [ Didier Raboud ] * Manpage refresh after 2.2.7 cups (2.2.7-4) unstable; urgency=medium [ Helge Kreutzmann ] * Update German man page (2187t) [ Didier Raboud ] * Backport an upstream fix: - Allow cupsd daemon to exit on idle (Closes: #898745) cups (2.2.7-3) unstable; urgency=medium * Backport an upstream fix: - Fix another CUPS-Create-Local-Printer crash (Issue #5290) cups (2.2.7-2) unstable; urgency=medium * Autopkgtest: blacklist the now-deprecated 'raw' queues (Closes: #894643) cups (2.2.7-1) unstable; urgency=medium * New 2.2.7 upstream release - NOTICE: Raw print queues are now deprecated (Issue #5269) - Fixed an Avahi crash bug in the scheduler (Issue #5268, LP: #1725749) - Systemd did not restart cupsd when configuration changes were made that required a restart (Issue #5263. Closes: #861470) - The scheduler could crash while adding an IPP Everywhere printer (Issue #5258, LP: #1750514) - The `lp` and `lpr` commands now provide better error messages when the default printer cannot be found (Issue #5096, Closes: #870463) * Add cupsHashString@Base 2.2.7 symbol * Add lintian override for cups.service WantedBy=printer.target cups (2.2.6-5) unstable; urgency=medium * Bump S-V to 4.1.3 without changes needed * Update Vcs-* fields for the move to salsa.d.o cups (2.2.6-4) unstable; urgency=medium * Fix CI: indexv[3,4] Braille drivers cannot print PDF cups (2.2.6-3) unstable; urgency=medium [ Helge Kreutzmann ] * Update German man page translations [ Didier Raboud ] * Bump S-V to 4.1.2 without changes needed * Remove trailing whitespace in d/control and d/changelog * Drop duplicate priority field for cups-bsd cups (2.2.6-2) unstable; urgency=medium * Backport upstream patch from the 2.3 branch: - The `lp` and `lpr` commands now provide better error messages when the default printer cannot be found (Issue #5096, Closes: #870463) * On the repository: reduce the diff to the upstream tarball to zero to allow uploads with dgit. cups (2.2.6-1) unstable; urgency=medium * New 2.2.6 upstream release - DBUS notifications could crash the scheduler (Issue #5143) - Added USB quirks rules for Canon MP540 and Samsung ML-2160 (Issue #5148) - Localization updates (Issue #5152) * Update manpage translations * Fix DEB_HOST_ARCH_OS dpkg-architecture variable setting * Move source local-options to options cups (2.2.5-2) unstable; urgency=medium [ Helge Kreutzmann ] * Update German man page translations cups (2.2.5-1) unstable; urgency=medium * New 2.2.5 upstream release - The scheduler now creates a PID file when not running on demand with a modern service launcher (Issue #5080) - The CUPS library did not reuse domain sockets (Issue #5098, Closes: #868316) [ Didier Raboud ] * Patches rework: - Drop Debian-specific pidfile patch - Drop the 8 patches which were backported from upstream: - The `cupsGetDests` function incorrectly returned an empty list of printers if there was no default printer (Issue #5046) - Workaround for wrong resolution in PPD Generator for driverless printing setup - Fix an Avahi-related crash bug in the scheduler (Issues #5085 & #5086) - The CUPS library did not reuse domain sockets (Issue #5098) - Fix the interactions between the "print-quality" and "cupsPrintQuality" options (Issue #5090) - Fix mapping and defaulting of print-quality/cupsPrintQuality (Issue #5090) - Fix for resolution list sorting in the PPD generator which caused segfaults when generating PPDs for driverless printing. - The scheduler (incorrectly) woke up once per second to remove stale temporary queues (Issue #5100) * Stop symlinking the ssl-cert snakeoil certificates, CUPS will generate them on-demand (with a different name) * Drop superfluous autotools-dev B-D * Let cups-bsd suggest one compatible inet server: inetutils-inetd (Closes: #676472) * Refresh manpage translations * Make cups-bsd priority optional, as 'extra' is deprecated [ intrigeri ] * AppArmor: allow dac_read_search, now needed on top of dac_override (Closes: #872817) cups (2.2.4-9) unstable; urgency=medium [ Helmut Grohne ] * Fix FTCBS; fix manpage-translations.patch (Closes: #878326) cups (2.2.4-8) unstable; urgency=medium [ Didier Raboud ] * Drop superfluous dh-systemd Build-Depend * Drop --with autotools_dev and autotools-dev B-D, as these are in the default dh sequence in compat 10 [ Till Kamppeter ] * test-drivers script of autopkgtest for breakage with cups-filters 1.17.6 and later: skip gen-brf.ppd and gen-ubrl.ppd as these are test/debug PPD for Braille embossers which do not accept PDF as input format cups (2.2.4-7) unstable; urgency=medium [ Till Kamppeter ] * Backport upstream fixes: - Fix the interactions between the "print-quality" and "cupsPrintQuality" options (Issue #5090) - Fix mapping and defaulting of print-quality/cupsPrintQuality (Issue #5090) - Fix for resolution list sorting in the PPD generator which caused segfaults when generating PPDs for driverless printing - The scheduler (incorrectly) woke up once per second to remove stale temporary queues (Issue #5100) cups (2.2.4-6) unstable; urgency=medium [ intrigeri ] * AppArmor: allow dac_read_search, now needed on top of dac_override (Closes: #872817) cups (2.2.4-5) unstable; urgency=medium * Backport one upstream patch, thanks to Christoph Pleger - The CUPS library did not reuse domain sockets (Issue #5098, Closes: #868316) cups (2.2.4-4) unstable; urgency=low * Backport two upstream patches, thanks to Till Kamppeter - The IPP Everywhere PPD generator now sorts the supported resolutions before choosing them for draft, normal, and best quality modes (Issue #5091) - Fix an Avahi-related crash bug in the scheduler (Issues #5085 & #5086) cups (2.2.4-3) unstable; urgency=medium [ Helge Kreutzmann ] * Update German man page translations cups (2.2.4-2) unstable; urgency=low * Cleanup patch suite to come closer to upstream: - Remove IPP backend from CUPS 1.4 - Remove cupsd upstart support - Remove a test weakening for mips - Remove libcupsppdc dynamic linking for mipsen * Don't install the ipp14 backend * Drop all postinst code managing versions before the current oldoldstable (wheezy, 1.5.3-5) * Drop all postinst code managing versions before the current oldstable (jessie, 1.7.5-11) * Drop the Ubuntu-specific upstart patches and files * Drop Launchpad PNG_PKG_MANGLE workaround * Drop two unused lintian overrides * Allow parallel builds * Backport upstream patch: - The `cupsGetDests` function incorrectly returned an empty list of printers if there was no default printer (Issue #5046, Closes: #867818) [ Vangelis Skarmoutsos ] * Add Greek translation for debconf templates (Closes: #867339) cups (2.2.4-1) unstable; urgency=medium * New 2.2.4 upstream release * Cope with upstream documentation format change to markdown * Migrate to debhelper compat 10 * Add two new libcups2 symbols * Lintian overrides updates: - Update cups' override for the non-standard-executable-perm usb backend - Add source override for the libcups{,image}2-dev circular dependency * Make libcupsimage2-dev Multi-Arch: same * Bump Standards-Version to 4.0.0 - Make sure to update config.{sub,guess} at build time cups (2.2.3-2) unstable; urgency=low * Migrate 2.2.3 to unstable cups (2.2.3-1) experimental; urgency=medium * New 2.2.3 upstream release * Cherry-pick upstream fix for regression in job file preservation cups (2.2.2-2) experimental; urgency=medium * Use /run instead of /var/run everywhere meaningful (Closes: #858341) * /run/cups: - in debian/rules; pass --with-rundir=/run/cups - update cups.init * /run/cups/cupsd.pid: - update cups.init - update pidfile.patch * /run/cups/printcap: - in debian/rules; update --with-printcap - update cups-daemon postinst * /run/cups/cups.sock: - update cups postinst and postrm for the lpadmin calls - update the autopkgtest for the lpadmin call - update the libcups2 example script - update the upstart script * /run/cups/certs: - update cups.init - update the upstart script Thanks-To: Russell Coker <russell@coker.com.au> [ Jamie Strandboge ] * Update debian/local/apparmor-profile (Closes: #858571) - allow cupsd and cups-pdf to communicate via Unix sockets (LP: #1675503) - adjust cups-pdf log location - allow cups-pdf to read /etc/cups/ppd/*.ppd - silence noisy denials for cupsd occasionally trying to send signals to unconfined - allow capability wake_alarm (seen in LP: 1641985) cups (2.2.2-1) experimental; urgency=medium * New 2.2.2 upstream release * Refresh manpage translations * dpkg-source: update extend-diff-ignore to cope with the difference between upstream's VCS and tarball cups (2.2.1-56-ga2f30a72f-1) experimental; urgency=medium * New 2.2.1+ upstream snapshot - Updated systemd config files (Issue #4935) [ Didier Raboud ] * Merge 2.2.1-5 from unstable [ Till Kamppeter ] * Updated debian/control: CUPS does not support PPD-less printing any more, we do driverless printing instead cups (2.2.1-46-g10887d272-2) experimental; urgency=medium * Merge 2.2.1-4 from unstable. cups (2.2.1-46-g10887d272-1) experimental; urgency=medium * New 2.2.1+ upstream snapshot - Fix assymetric resolutions in IPP Everywhere and Apple Raster (Closes: #848164) cups (2.2.1-41-g49c592936-1) experimental; urgency=medium * New 2.2.1+ upstream snapshot cups (2.2.1-8) unstable; urgency=medium [ JP Guillonneau ] * French manpages translation update (Closes: #852662) cups (2.2.1-6) unstable; urgency=medium * Cherry-pick three more upstream fixes: - Add a USB quirk rule for the Kyocera Ecosys P6026cdn (Issue #4900) - Fix rastertopwg line offset bug (Issue #4942) - Fix Russian localization bug (Issue #4946) cups (2.2.1-5) unstable; urgency=medium * Cherry-pick and adapt upstream's systemd configuration update to ensure clean shutdown of CUPS (LP: #1642966) cups (2.2.1-4) unstable; urgency=medium [ Didier Raboud ] * Cleanup the cups debconf questions from 'parallel' leftovers (Closes: #848718) [ intrigeri ] * AppArmor profile: support merged-/usr (Closes: #846868) cups (2.2.1-3) unstable; urgency=low [ Helge Kreutzmann ] * Update German man page cups (2.2.1-2) unstable; urgency=medium [ Helge Kreutzmann ] * Several fixes to german manpages due to proofreading on debian-l10n-german cups (2.2.1-1) unstable; urgency=medium * New 2.2.1 upstream release - Updated man pages (PR #4885, Closes: #838854) [ Helge Kreutzmann ] * Update German man page [ Didier Raboud ] * Demote libcupsfilters{1,-dev} dependencies to recommends (Closes: #711697) * Remove lsb Depends from cups, bump cups-daemon's to 3.2-14~ [ Helmut Grohne ] * Fix FTCBFS (Closes: #837936) - Build mantohtml with the build architecture compiler - Do not execute genstrings during build cups (2.2.0-2) unstable; urgency=medium * Backport upstream patch to handle partial failures when connecting (Closes: #838434) cups (2.2.0-1) unstable; urgency=medium * New 2.2.0 upstream release - http*Connect did not work on Linux when cupsd was not running (Issue #4870) [ Helge Kreutzmann ] * Several fixes due to proofreading on debian-l10n-german [ Didier Raboud ] * Update the manpage-po4a README cups (2.2~rc1-5) experimental; urgency=medium * In tests, use variable test-environment directory CUPS_TESTBASE, thanks to Santiago Vila for the hint. * Patches: - Drop now-unneeded 'tests-use-cupsfilters.patch' patch - Refresh some patch titles - Rename Ubuntu-specific patches' directory to debian/patches-ubuntu to avoid wrong deletions when using git-dpm update-patches * Remove now-unneeded cups-filters from Build-Depends cups (2.2~rc1-4) experimental; urgency=medium * Revert unintentional Ubuntu patches removal; refresh them cups (2.2~rc1-3) experimental; urgency=medium [ Jeremy Bicha ] * Add libcups2-dev dependency on libcupsimage2-dev, as ppd.h includes raster.h (Closes: #833889) cups (2.2~rc1-2) experimental; urgency=medium * Add patch to ignore the 'Unable to write uncompressed print data: Broken pipe' error on kfreebsd * Initialize git-dpm; reword most patch descriptions from the original commits cups (2.2~rc1-1) experimental; urgency=medium * New 2.2~rc1 upstream release * Refresh patches cups (2.2~b2-1) experimental; urgency=low * New 2.2b2 upstream release * Patches: - Refresh all - Drop the wrong fix for #2763 - Udate patch to use the ipv4's 127.0.0.1 instead of localhost to also patch the ipp:// shared printer URL, that fixes the tests - Add patch to revert the addition of pdftourf usage in the test-suite * Refresh manpage translations * Rewrite debian/watch following the new upstream schema cups (2.1.4-4) unstable; urgency=medium * Patch a final lpstat call to really make the build reproducible when built in italian cups (2.1.4-3) unstable; urgency=low * Change the default ErrorPolicy from 'stop-printer' to 'retry-job' - Update documentation, manpage and manpage translations - Add a cups-daemon NEWS entry (Closes: #631025) * Patch another lpstat call to also make the build reproducible when built in italian cups (2.1.4-2) unstable; urgency=medium [ Helge Kreutzmann ] * Update German man page (2118t3f1u) [ Didier Raboud ] * Add patch to force LC_ALL=C on lpstat when grepping its output for Description; should fix the FTBFS on forced-languages reproducible builds environments cups (2.1.4-1) unstable; urgency=medium * New 2.1.4 upstream release * Update debian/watch to check for new releases on GitHub * Remove 3 patches backported from upstream, refresh some * Refresh manpage translations cups (2.1.3-6) unstable; urgency=medium [ Till Kamppeter ] * De-activate CUPS web interface when the files for it are not installed. This allows for auto-shutdown on mobile device installations. * Make CUPS with the Upstart support patch (Ubuntu-only) also build on ubuntuBSD (LP: #1582002) [ Helge Kreutzmann ] * Update German translation [ Didier Raboud ] * Backport upstream-included patch to fix malformed device-id for printers found by dnssd, thanks to Laurent Bigonville. * Bump S-V to 3.9.8 without changes needed * Drop duplicate 'using' word in libcups2's README.Debian cups (2.1.3-5) unstable; urgency=medium * Automatically generate debug package, B-D against debhelper >= 9.20160114 * Convert homepage and Vcs-Browser to https urls * Drop the patch to allow auto-shutdown on idle with active web interface, this induces a regression for web-interface users (Closes: #816490) cups (2.1.3-4) unstable; urgency=medium [ Till Kamppeter ] * Quirk rule to make Lexmark C540n work (STR #4778) * Quirk rule to make Xerox WorkCentre 3220 work (LP: #1406203, STR #4789) cups (2.1.3-3) unstable; urgency=medium * Install missing cups-snmp.8 manpage (Closes: #816316) cups (2.1.3-2) unstable; urgency=medium * Drop unused libslp-dev Build-Dependency (Closes: #815359) * Bump Standards-Version to 3.9.7 without changes needed cups (2.1.3-1) unstable; urgency=medium * New 2.1.3 upstream release: - /admin resource files (like config files of CUPS) were not served when the web interface was disabled, breaking utilities like "cupsctl" (CUPS STR #4755) cups (2.1.2-2) unstable; urgency=medium [ Till Kamppeter ] * Add patch to avoid letting pending subscriptions prevent CUPS from auto-shutdown when idle (CUPS STR#4754) * Add patch to allow auto-shutdown when idle if the web interface is not turned off in the CUPS configuration, the web interface is too important (CUPS STR #4755) [ Didier Raboud ] * Remove libpng12-dev Build-Depends alternative to libpng-dev (Closes: #810183) cups (2.1.2-1) unstable; urgency=low * New 2.1.2 upstream release * Drop patches included upstream: - usb-backend-fix-infinite-loop-when-usblp-module-attached.patch - usb-backend-delayed-closing-for-old-laserjets.patch - fix-ppd-file-load-for-ipp-printers.patch Refresh 2 other patches * Update Apple Inc. Copyright years in debian/copyright cups (2.1.0-7) unstable; urgency=medium [ Till Kamppeter ] * Removed deprecated no-op "--upstart-only" option from dh_installinit call in debian/rules (LP: #1519228) * Moved empty directories /etc/cups/ppd and /etc/cups/interfaces to the cups-core-drivers binary package * Moved mime.convs from cups-server-common to cups-core-drivers to get it onto mobile devices with level-2 printing stack (support for IPP printers with common PDLs auto-set-up by cups-browsed) cups (2.1.0-6) unstable; urgency=medium [ Till Kamppeter ] * Move /usr/lib/cups/daemom/cups-exec from the "cups" binary package to the "cups-daemon" binary package as it is already needed for basic job execution and therefore already in the level-1 (minimum) printing stack (LP: #1509423) cups (2.1.0-5) unstable; urgency=medium [ Till Kamppeter ] * Add upstream patch to fix cupsGetPPD* with IPP print queues (CUPS STR #4725) cups (2.1.0-4) unstable; urgency=medium [ Till Kamppeter ] * Corrected info header (author and Debian bug closure) of usb-backend-fix-infinite-loop-when-usblp-module-attached.patch * USB-backend: Added new quirk rules for delayed closing of the backend for several older HP LaserJet printers (CUPS STR #4549) [ Didier Raboud ] * Add maintscript stanzas to properly remove the oopstops.{convs,types} conffiles in /etc/cups that are not shipped since 1.3.10-3 (Closes: #799025) cups (2.1.0-3) unstable; urgency=medium [ Helge Kreutzmann ] * Update German man page (2114t4f1u) [ Till Kamppeter ] * The libusb-based USB backend sometimes did not unload the kernel usblp module if it was preventing the backend from accessing the printer causing an infinite loop taking 100% CPU (CUPS STR #4707) cups (2.1.0-2) unstable; urgency=low * Upload to unstable [ Helge Kreutzmann ] * Update German man page (2105t4f1u) [ Jean-Paul Guillonneau ] * Update french manual pages translations, for 2.0.3-6 (Closes: #798257) [ Didier Raboud ] * Refresh the manpage translations for 2.1.0 * Given upstream's new enforcement of ConfigFilePerm on /etc/cups/ppd/ files, make sure this is enforced on upgrade cups (2.1.0-1) experimental; urgency=medium * New 2.1.0 upstream release [ Till Kamppeter ] * Removed scheduler-create-ppd-correct-permissions.patch, included upstream * Refreshed patches with quilt for the new 2.1.0 source code [ Didier Raboud ] * Refresh manpage translations cups (2.1~rc1-4) experimental; urgency=medium [ Till Kamppeter ] * Add patch from upstream to fix scheduler and make sure that the permissions and ownerships of PPDs in /etc/cups/ppd/ are always the same (STR #4703, Closes: #784271) cups (2.1~rc1-3) experimental; urgency=medium * Remove leftover test changelog entry * Update the GetJobs patch in tests for the mips FTBFS cups (2.1~rc1-2) experimental; urgency=medium * Add patch to use the IPv4 127.0.0.1 address instead the 'localhost' name in tests, this could fix the reproducible builds cups (2.1~rc1-1) experimental; urgency=low * New 2.1~rc1 upstream version [ Helge Kreutzmann ] * Update German man page (2000t39f71u) [ Didier Raboud ] * Merge upstream version 2.0.4 - Fixed processing of server overrides without port numbers (STR #4675, Closes: #711327, #791876) * Drop patches included upstream: - str4538-fix-redirection-from-cgi-scripts.patc - str4646-fix-the-activejobs-loop-in-cupsdcheckjobs.patch - cupsd-logs-manpage-in-section-5.patch - libsystemd.patch - str4679-fix-local-domainsocket-access-checking.patch Refresh other patches cups (2.1~b1-4) experimental; urgency=medium * Merge 2.0.3-10 from unstable cups (2.1~b1-3) experimental; urgency=medium * Merge 2.0.3-8 from unstable cups (2.1~b1-2) experimental; urgency=low [ Michael Biebl ] * Transition from libsystemd-daemon to libsystemd: - Update Build-Depends - Patch the configuration system (Closes: #779770) cups (2.1~b1-1) experimental; urgency=low * New 2.1~b1 release - No longer install banner files since third-party banner filters now supply their own (STR #4518) - The scheduler no longer listens on the loopback interface unless the web interface or printer sharing are enabled - Added a PPD generator for IPP Everywhere printers (STR #4258) - Now install "default" versions of more configuration files - Added SSLOptions values to allow Diffie-Hellman key exchange and disable TLS/1.0 support. - The scheduler now supports advanced ASL and journald logging when "syslog" output is configured (STR #4474) - The scheduler now supports logging to stderr when running in the foreground (STR #4505) * Drop two patches included upstream * Refresh all patches * Refresh manpage translations * Install the cups-files.conf and snmp.conf default files in usr/share/cups cups (2.0.3-10) unstable; urgency=medium * Backport upstream patches: - Fix redirections from CGI scripts (STR: #4538) - Fix the active jobs loop (STR: #4646) cups (2.0.3-9) unstable; urgency=medium [ Helge Kreutzmann ] * Update German man page (1606t320f184u) [ Didier Raboud ] * Add patch to relax socket access checking to only check read-and-write, not execution (Closes: #792730) * Add maintscript stanzas to properly remove the mime.convs and mime.types conffiles in /etc/cups that are not shipped in this path since 1.4.0~svn8773-1~ (Closes: #792731, LP: #1475683) cups (2.0.3-8) unstable; urgency=medium * Mark the libsystemd as reported (and fixed) upstream * Translate and install the cupsd-helper.8 manpage (Closes: #792484) * Update the manpage translation infrastructure: install multiple missing new manpages * Add patch to move cupsd-logs manpage to section 5 cups (2.0.3-7) unstable; urgency=medium [ Michael Biebl ] * Transition from libsystemd-daemon to libsystemd: - Update Build-Depends - Patch the configuration system (Closes: #779770) cups (2.0.3-6) unstable; urgency=low * Fix the 'which' calls, causing uninstallation error of cups-bsd cups (2.0.3-5) unstable; urgency=low * Amend the previous changelog to reflect its upload to unstable * Add patch to make some attributes optional in the IPP-1.1 3.2.6 GetJobs test, that was causing a FTBFS on mips cups (2.0.3-4) unstable; urgency=medium * Upload to unstable [ Helge Kreutzmann ] * Update German man page (1366t464f280u) [ Didier Raboud ] * Replace full paths in maintainer scripts '[ -x ]' by 'which' calls * Refresh debian/copyright thanks to cme * Remove the superfluous XS-Testsuite header in debian/control cups (2.0.3-3) experimental; urgency=medium [ Till Kamppeter ] * Created new binary package cups-ipp-utils for the IPP utilities ippfind, ipptool, and ippserver. [ Didier Raboud ] * Install the cups-ipp-utils translated manpages in the correct package * Translate the ippserver.1 manpage too, refresh the manpage translation files * Add debian/gbp.conf to ease dch and import-orig * Update README.source with the latest branch names cups (2.0.3-2) experimental; urgency=medium [ Till Kamppeter ] * Fixed IPP Everywhere PPD generator patch. It passes the tests now. [ Helge Kreutzmann ] * Update German man page (870t789f404u) [ Didier Raboud ] * Set QUILT_PATCHES in the two README files that need it (Closes: #788481) cups (2.0.3-1) experimental; urgency=medium * New 2.0.3 upstream release - Security: Fixed CERT VU #810572 exploiting the dynamic linker (STR #4609) - CVE-2015-1158 Improper Update of Reference Count - CVE-2015-1159 Cross-Site Scripting - Security: The scheduler could hang with malformed gzip data (STR #4602) [ Didier Raboud ] * Remove the upstream fix for the FTBS on mips through reordering of IPP-1.1 tests, included in 2.0.3 * Refresh patches * Disable the IPP Everywhere PPD generator patch, as it breaks the test-suite [ Till Kamppeter ] * Fixed PPD generator (for IPP printers) to write floating-point numbers in a locale-neutral way (always with decimal point, CUPS STR #4579). * Make fix for floating point number output in the PPD generator also apply to the PageRegion option (CUPS STR #4579). * Let the PPD generator not create a ColorModel option without choices (CUPS STR #4638). * Fix values of the pwg-raster-document-types-supported attribute of ippserver, the IPP printer emulator. cups (2.0.2-3) experimental; urgency=medium [ Till Kamppeter ] * Re-introduced the patch for IdleExitTimeout under upstart, but Ubuntu-only. * Added PPD generator to support IPP Everywhere printers (Use "lpadmin -p pr -E -v ipp://... -m everywhere" or equivalent operation in the CUPS web interface). * Exclude driver "everywhere" from auto package tests as it only works with IPP URIs. * Refreshed patches with quilt. [ Didier Raboud ] * Merge Ubuntu's AppArmor profile diff in Debian's (Closes: #779901) * Import upstream fix for the FTBS on mips through reordering the IPP-1.1 tests to avoid a timing issue cups (2.0.2-2) experimental; urgency=low [ Till Kamppeter ] * Removed patches for USB quirk rules which got included upstream * Updated Ubuntu-specific patch for the AppArmor profile [ Didier Raboud ] * Drop the patch for IdleExitTimeout under upstart, as it breaks non-linux builds cups (2.0.2-1) experimental; urgency=low * New 2.0.2 upstream version - Add 2.0.2 symbols - Drop 5 upstream patches that were from the upstream 2.0 branch - Drop systemd patches as systemd support got included upstream - Drop the patch avoiding the linking against libgrypt, as it got included upstream - Add patch and dh-exec magic to rename the upstream systemd units away from org.cups.cupsd.* - Drop all references to lppasswd, as it got dropped by upstream in 2.0b1 - Refresh all patches for 2.0.2 - Rebase the manpage translation infrastructure for 2.0.2 - Refresh all test-related patches - Update debian/copyright with the updates made in 2.0.0 - Update configure arguments [ Till Kamppeter ] * Merged in more Ubuntu-specific AppArmor profile changes: - Fix peer on signal rule to use /usr/sbin/cupsd//third_party (LP: #1376611) - Temporarily use attach_disconnected to work around LP: 1373070. - Allow all signals to /usr/sbin/cupsd//third_party - Allow unix to /usr/sbin/cupsd//third_party (LP: #1382042) - Added "flags=(attach_disconnected)" to third_party profile (LP: #1413313) * Fix -h option not honoured when CUPS_SERVER variable is defined (LP: #1352809) cups (1.7.5-10) unstable; urgency=medium * Change ppd-updaters trigger to use interest-noawait instead of interest to avoid trigger cycles (Closes: #772871, #771765) cups (1.7.5-9) unstable; urgency=medium * Drop color-management patch; it got refused by upstream and is not available in non-english translations (Closes: #763517, #768163) * Drop the upstream patch to limit Get-Jobs replies to 500, as this triggers a FTBS on mips cups (1.7.5-8) unstable; urgency=medium * Add a USB quirk fix for Brother HL-1250 (Closes: #712512) * Backport upstream patch to fix random crash in TLS handling. The patch also enables coredumps.(Closes: #760475, #760476) cups (1.7.5-7) unstable; urgency=medium * Revert to not socket-activating CUPS (Closes: #747073) - Drop patch to let CUPS write the systemd.socket configuration files - Replace preinst generation of the same configuration file, delete them on upgrade - Drop the symlink enforcing the automatic configuration - Update NEWS and README.Debian to reflect that change - Create two cups socket configuration examples, document their existence in README.Debian - Update the systemd socket activation patch to include PassCredentials=true in the socket configuration, following upstream's feedback - Disable automatic idle exit timeout under systemd, as this will get activated without socket activation cups (1.7.5-6) unstable; urgency=medium * Backport several upstream patches: - Update the patch restoring the access to cupsd.conf with Upstream's latest - Fix the icon display in web interface during server restart (STR: #4475) - Enforce correct newest-to-oldest order in the completed jobs returned by the scheduler (STR: #4396) - Limit Get-Jobs replies to 500 jobs (STR: #2913) - Do not let cupsGetPPD* return a symlink if it was not readable by the user (STR: #4500). This should help with #764253. * Dropped the FINAL_CONTENT_TYPE revert, stick back to upstream, following RedHat's analysis * Add tests' patch to ignore the 'Address family not supported' that breaks the errorlines counting on buildds without a working IPv6 stack cups (1.7.5-5) unstable; urgency=medium [ Didier Raboud ] * In debian/rules, add conditionals to enable build-indep build * Bump Standards-Version to 3.9.6 without changes needed * Remove Martin Pitt, Masayuki Hatta and Jeff Licquia from the Uploaders' field; with many thanks for their past work on CUPS. [ Ondřej Surý ] * Remove libjpeg8-dev from libcupsimage2-dev (Closes: #765919) cups (1.7.5-4) unstable; urgency=medium [ intrigeri ] * In the apparmor profile, drop features yet unsupported in Debian (Closes: #763673) [ Didier Raboud ] * Add the Ubuntu-specific apparmor profile as Ubuntu-specific patch cups (1.7.5-3) unstable; urgency=medium [ Didier Raboud ] * Add two USB quirk fixes for Canon MX310 and MX320 printers (LP: #1346868, #1369547) [ Jamie Strandboge ] * Update the apparmor-profile - move Ux to Cx -> third_party and provie a third_party child profile. In this manner, we can add some modest confinement (can't change MAC policy, change_profile or mount) but more importantly it allows us to specify peer=third_party to restrict where the strictly confined cups process can send signals (LP: #1370930) - allow r of /var/cache/samba/*.tdb (LP: #1371097) - allow r of /var/{cache,lib}/samba/printing/printers.tdb cups (1.7.5-2) unstable; urgency=medium [ Helge Kreutzmann ] * Update German man page (1537t) [ Till Kamppeter ] * Updated color management extension patch to the newest version from Joseph Simon, especially to fix PPD updates via the web interface (LP: #1362321). [ Didier Raboud ] * Replace the RedHat patch restoring the access to cupsd.conf and logfiles with upstream's cups (1.7.5-1) unstable; urgency=medium * New 1.7.5 upstream release - Drop upstream-originated patches, refresh all - Refresh manpage translations for new upstream release cups (1.7.4-5) unstable; urgency=medium [ Till Kamppeter ] * Color management extensions: Added color management checkboxes to the Japanese version of the web interface, on request of Deng Pang from Ricoh. [ Didier Raboud ] * Add patch from RedHat to restore access to logfiles from the webinterface, regression from the fix for STR: #4455 (Closes: #757964) cups (1.7.4-4) unstable; urgency=medium * Add patch to ignore the 'Failed to connect to system bus' error that sometimes breaks the errorlines counting on various architectures * Refresh cupsd-write-systemd-Port patch cups (1.7.4-3) unstable; urgency=medium * In cups-daemon's postinst, remove leftover cups.patch symlink in multi-user.target.wants (Closes: #755932) * Correct default listening address used under systemd for new installations; also correct the discrepancy on upgrades (Closes: #755807) cups (1.7.4-2) unstable; urgency=medium * Install systemd's cups.path in paths.target instead of multi-user.target (Closes: #755690) * Import two upstream patches: - Fix for unsufficient permission checking for files accesses from the webinterface (STR: #4455) CVE-2014-5029 Incomplete fix CVE-2014-3537 CVE-2014-5030 Disallow symlinks for directory index files CVE-2014-5031 File/directory does not have world read permissions for directory index files - Fix for CGI scripts (STR: #4454) cups (1.7.4-1) unstable; urgency=medium * New 1.7.4 upstream release - Security: The web interface incorrectly served symlinked files and files that were not world-readable, potentially leading to a disclosure of information (STR #4450, CVE-2014-3537) - Added USB quirk rule for Lexmark E230 (STR #4448) - Fix broken links on the web homepage (STR #4453, Closes: #754243) - Refresh patches [ Helge Kreutzmann ] * Update German man page (1531t) [ Didier Raboud ] * Stop managing the rename of /etc/pam.d/cups in the cups binary package: /etc/pam.d/cups is not renamed anymore but is now just installed from a different package (cups-daemon). (Closes: #753439) Thanks to Raphaël Hertzog cups (1.7.3-6) unstable; urgency=medium * Discard lpadmin stderr in the tests' utility, fixes autopkgtests. cups (1.7.3-5) unstable; urgency=medium * Add a trap to test-drivers utility, move it to cups-client instead of cups * Run the tests using the installed test-drivers utility cups (1.7.3-4) unstable; urgency=medium * In cups-config, run krb5-config at runtime to avoid architecture differences due to the output of krb5-config; add check at build-time to avoid this happening again (Closes: #751157) * Fix dpkg-architecture calls in cups-config * Make the test-drivers utility more generic, install it in the cups package to be able to use it in other packages' autopkgtests cups (1.7.3-3) unstable; urgency=medium * Fix autopkgtests: - only use accessible files, - extend the tests to test-print all PDFs in the source test/ directory, - abstract the drivers testing script as a separate script. cups (1.7.3-2) unstable; urgency=medium [ Till Kamppeter ] * Added IPP attributes required by IPP Everywhere for PWG Raster when PWG Raster as input format is supported. This is needed for shared printers correctly emulating an IPP Everywhere printer (CUPS STR #4428) [ Didier Raboud ] * Add SystemdIdleExit and IdleExitTimeout references in cupsd.conf manpage * Rename the cups pam configfile from cups-daemon to cups (Closes: #750602) * Rewrite the autopkgtests suite: - Drop isolation-container restriction - Test cups-core-drivers with no driver for now - Test cups with all available drivers [ Jean-Paul Guillonneau ] * Update the manpages' french translation (Closes: #744987) cups (1.7.3-1) unstable; urgency=medium * New 1.7.3 upstream release - Refresh patches * Add one simple autopackagetest * In cups-daemon.preinst, only write ListenStream stanzas for 'Port' OR 'Listen localhost', not both (Closes: #742668) * Explicitly install README.Debian to libcups2, add symlinks in various other packages (Closes: #750532) cups (1.7.2-3) unstable; urgency=medium [ Till Kamppeter ] * Updated version numbers in Replaces:/Breaks: for cups-bsd to also work with updating CUPS under Ubuntu (LP: #1315766) cups (1.7.2-2) unstable; urgency=low [ Helge Kreutzmann ] * Update German man page (1526t) [ Till Kamppeter ] * Removed Ubuntu difference in the dependency of cups-deamon on avahi-daemon: avahi-daemon is a Recommends for both now; remove "on started avahi-daemon" from the "start on ..." rule in /etc/init/cups.conf upstart script (LP: #1242185, #1178172) * Add two patches for Upstart socket-triggered activation: - allow starting cupsd socket-triggered through Upstart, for on-demand starting to save resources (especially on mobile devices) - let cupsd stop after 30 seconds idle time in when started by Upstart socket-activation (if timeout is not explicitly set to another time) (Closes: #742666, LP: #1276713) cups (1.7.2-1) unstable; urgency=medium * New 1.7.2 upstream release - Security: The scheduler now blocks URLs containing embedded HTML (STR #4356) * Drop 10 patches that were backported from upstream or are now solved differently: - str4393-fix-memoryleak-in-rastertolabel - fix-cupsdgetprivateattrs-function-missing-null-check - fix-cupsenumdests-does-not-fill-in-is_default-field - cupsenumdests-does-not-set-cb - cupsd-support-avahi-daemon-restarting - prevent-dnssd-backend-exiting-too-early - fix-a-dbus-threading-issue-that-caused-the-scheduler-to-crash - ipptool-doco-updates - build-with-full-relro - fix-template.c-typo * Regenerate manpage-hyphen-minus patch to adapt to upstream changes * Refresh 9 patches with quilt to cope with upstream updates - airprint-support - color-management-extension - cupsd-idleexittimeout-systemd - cupsd-idleexittimeout - cupsd-write-systemd-Port - no-conffile-timestamp - pidfile - read-embedded-options-from-incoming-postscript-and-add-to-ipp-attrs - systemd-optional-socket-activation * Refresh manpage translation files cups (1.7.1-13) unstable; urgency=medium * Fix hyphen-used-as-minus and a typo in the lppasswd manpage patch * Build against GnuTLS 3.x (Closes: #638416, #714492) - Add Build-Conflicts against libgmp-dev (<< 2:6) to avoid license incompatibilities - Build-Depend against libgnutls28-dev - Add patch to stop build-depending on libgcrypt as nothing is used from it (STR: #4399) - Refresh affected patches * In the postinst code fixing the lack of 'compress' stanza in the logrotate for some versions, don't assume that all uncompressed files are present; also clarify when the renaming should happen (Closes: #742668) cups (1.7.1-12) unstable; urgency=medium [ Didier Raboud ] * Fix the implicit-declaration problem in the D-BUS threading patch by backporting an upstream update [ Alf Gaida ] * Create /etc/cups directory before attempting to create files in it (Closes: #743249) cups (1.7.1-11) unstable; urgency=medium [ Didier Raboud ] * Add patch on cups-config to: - let it use dpkg-architecture at runtime to make it architecture-independent (Closes: #741519) - avoid /usr/lib/triplet appearing in --ldflags output (Closes: #727058) - strip unnecessary libs from --libs output (Closes: #730838); therefore also strip libgnutls-dev and libkrb5-dev from libcups2-dev's Depends * Drop now-unused rfc2911 patch in ipptoolfile manpage as it got replaced by upstream's; fix missing backslash escape in upstream fix that broke po4a translation, thanks to Helge Kreutzmann * Add upstream patch to fix memoryleak in rastertolabel * Move the cupsd-systemd-listen.conf file creation from postinst to preinst as it is a symlink's destination. Letting said symlink be dangling for a timespan can make systemd crash, see #742322 [ Helge Kreutzmann ] * Update German man page (1525t) cups (1.7.1-10) unstable; urgency=medium [ Till Kamppeter ] * Remove upstream patch to fix race condition in cupsDoIORequest, as this does not actually solve STR #4386 and also causes STR #4391, CUPS not being able to communicate with Brother printers anymore cups (1.7.1-9) unstable; urgency=medium * Remove cupsd-systemd-listen.conf on purge (Closes: #741489) * In logrotate script, use 'compress' in addition to 'delaycompress', * thanks to Michael Biebl (Closes: #741896), re-order and compress the logs that weren't in postinst. cups (1.7.1-8) unstable; urgency=medium [ Helge Kreutzmann ] * Update German man page (1522t1f) [ Didier Raboud ] * Make libcups2-dev Multi-Arch: same (Closes: #689084) * Replace the cupsd-support-avahi-daemon-restarting patch with the latest upstream iteration (STR: #4373) * Add patch to let CUPS write its own systemd sockets configuration when configured through the webinterface; document this new behaviour in cups-daemon.NEWS and README.Debian (Closes: #740382) * Stop making lppasswd setuid root as it is only needed in specific cases - Add patch to lppasswd manpage to document how dpkg-statoverride should be used - Update translations * Move the repository from pkg-cups to printing; update the VCS-* fields accordingly [ Ansgar Burchardt ] * systemd socket activation support: add cups.socket in Requires of cups.service to ensure that the service is stopped before the socket is attempted to be started. Also add Documentation references in cups.service [ Till Kamppeter ] * Fix crash bug in the cupsEnumDests() function (STR #4380). * Import upstream patch to fix race condition in cupsDoIORequest() (STR: #4386) * Import upstream patch to fix a missing NULL check for input parameters in cupsdGetPrivateAttrs() from scheduler/policy.c (STR: #4378) * Import upstream fix to let cupsEnumDests() fill in is_default field (STR: #4332) [ Michael Biebl ] * Fix the logrotate script to use delaycompress instead of stopping and restarting cups, which spits out warnings under systemd (Closes: #740380) cups (1.7.1-7) unstable; urgency=low * systemd socket activation: - Drop ListenDatagram from cups.socket as that's now in use by cups-browsed - Drop the Debian-specific patch to make sure that the localhost web access works; Listen on 0.0.0.0 and [::] in the main patch instead * cups-bsd cleanup: - Demote update-inetd Dependency to a Suggests, add conditionals in the maintainer scripts (Closes: #590436) - Move the cupsd-lpd manpage to cups - Install the translated manpages * In postinst scripts, only chown and chmod when no dpkg-statoverrides are set (Closes: #587015) * Demote cups-client's smbclient Recommendation to a Suggests (Closes: #618545) * Drop two obsolete configuration options from dh_auto_configure * Drop boilerplate comments from all maintainer scripts cups (1.7.1-6) unstable; urgency=low * Add systemd socket activation support (Closes: #732435): - Add Gentoo patch to enable runtime-detected systemd socket activation - Build-depend on libsystemd-daemon-dev on linux-any - Build-depend on and use dh-systemd - Install cups.service, cups.path and cups.socket files in cups-daemon - Add Ubuntu patch to implement IdleExitTimeout - Add patch to let cupsd exit-on-idle after 30-seconds when started by systemd, given that systemdIdleExit is not set to Off - Add ListenStream=127.0.0.1:631 to cups.socket to ensure that http://localhost:631 works in Debian - Explain the above configuration options in cups-daemon.NEWS and README.Debian * Drop /etc/default/cups in favour of its handling by cups-filters: LOAD_LP_MODULES' configuration is moved to /etc/modules-load.d/cups-filters.conf * Update and reoder patches included upstream: - Prevent dnssd backend from exiting too early (STR: #4365) - ipptool doco updates (STR #3259, STR #4346), replaces the custom ipptoolfile manpage fix - Let cupsd cope with avahi daemon server restarts (STR: #4373) - Fix a D-BUS threading issue that caused the scheduler to crash (STR #4347), replace Fedora's fix for the multiple-threads dbus usage; require dbus >= 1.0.2 * Replace the upstream pgp keyring with an armored version in debian/upstream to cope with uscan's new default cups (1.7.1-5) unstable; urgency=medium * In cups' initscript, stop trying to restart xprint. Thanks to Damyan Ivanov (Closes: #738801) * Import Fedora patch to prevent the dnssd backend from exiting too early cups (1.7.1-4) unstable; urgency=medium [ Martin Pitt ] * debian/libcups2-dev.preinst: Move aside a /usr/include/cups/i18n.h directory during upgrades (from wheezy/precise); this directory got replaced with a file, and triggers a bug in overlayfs when dist-upgrading schroots/containers/similar. This is a hackish workaround and can be dropped again in jessie+1/trusty+1. (LP: #1272285) [ Didier Raboud ] * Fix LGPL-2 references in debian/copyright, hanks to Thorsten Alteholz * Move commandtops from cups to cups-core-drivers (Closes: #737306) cups (1.7.1-3) unstable; urgency=low [ Till Kamppeter ] * Split binary package "cups" into "cups" and "cups-core-drivers". In low-footprint (mobile) environments we can restrict the printer support to only IPP printers with known common languages (PDF, PostScript, PWG Raster, PCL) to get rid of the heavy load of drivers and PPDs for thousands of printers. From CUPS we need only the "cups-daemon" and "cups-core-drivers" (plus library packages) then. "cups-core-drivers" currently only contains the gziptoany and pstops filters. [ Didier Raboud ] * Avoid specifying mode, user and (wrong) group in the logrotate 'create' statement (LP: #1268011) * Install cups-daemon AppArmor, ufw profile and apport hooks on Debian too (Closes: #735313) * Replace custom AppArmor post{inst,rm} machinery with a dh_apparmor call * Add patch to move cupsd.conf.default from /etc/cups to /usr/share/cups as it's not a configuration file (Closes: #640124) * Reorder most patches to let those that upstream doesn't intend to fix stay on top of the pile; most also mark those reported upstream as such * Drop configure-default-browse-protocols patch, now useless * Drop update-rc.d arguments in Debian, as they are no longer supported [ Helge Kreutzmann ] * Update German man page (1518t) cups (1.7.1-2) unstable; urgency=medium * Revert "Link against OpenSSL instead of GnuTLS", reopens #714492 * Add tests' patch to ignore a kfreebsd-amd64 error that breaks the error lines counting cups (1.7.1-1) unstable; urgency=medium * New 1.7.0 upstream release - Security: the lppasswd program incorrectly used settings from ~/.cups/client.conf (STR #4319) - Some gzip'd PPD files could not be used - Cleaned up some job logging in the scheduler - ATTR messages could cause string pool memory corruption in the scheduler - Printing to a raw queue could result in corrupt output due to opportunistic compression - The "make check" test suite did not work on Linux without the cups-filters package installed (That's not fully fixed yet) - The libusb-based USB backend incorrectly used write timeouts - Using "@IF(name)" in an Allow or Deny rule did not wor (STR #4328, Closes: #674520) - The D-BUS notifier did not remove its lockfile (STR #4314) [ Didier Raboud ] * Link against OpenSSL instead of GnuTLS; mark two GnuTLS-specific symbols in libcups2 as optional (Closes: #714492) * Refresh 13 patches for 1.7.1 * Drop patches obsoleted by 1.7.1: - avoid-sign-extending-CRCs-for-gz-decompression - avoid_stale_lockfile_in_dbus_notifier - cups-dbus-utf8 - fix-job-history-logging - fix-stringpool-corruption - prevent-USB-timeouts-causing-incorrect-print-output * Refresh the testsuite patches * Rewrite tests-use-cupsfilters patch to have the whole test-suite pass [ wookey ] * Honour DEB_BUILD_OPTIONS=nocheck (Closes: #734670) cups (1.7.0-2) unstable; urgency=low [ Russell Coker ] * In the cups init script, run restorecon after creating a /var/run directory (Closes: #677580) [ Bastien ROUCARIÈS ] * Add patch to drop two dangling references in cups-lpd.man (Closes: #570157) [ Nicolas Boulenguez ] * Enhance cups' init-script(Closes: #718798) - Specify SCRIPTNAME instead of relying on N=${0##*/} bashism - Replace restart_xprint() implicit parameter (success) with an explicit first parameter for readability - Replace log_begin_msg() calls by log_daemon_msg() to use the vendor-specific formatting - Clarify exit statuses handling by making sure only the result of start-stop-daemon is returned - Don't call coldplug_usb_printers when the daemon fails to start - Use status_of_proc from lsb-base >= 3.2.14 instead of a hand-written implementation - Unimplemented actions must return 3 [ Didier Raboud ] * Let uscan verify PGP signatures on signed upstream tarballs * Update manpage-hyphen-minus.patch to fix three missing fixes in ippfind.1 * Add patch to fix expres{,s}ion typo * Fix two occurences of pointer-from-integer in the color-management extension patch * Update drop_unnecessary_dependencies patch to make sure libcupsimage2 is linked against pthread * Bump Standards-Version to 3.9.5 without changes needed cups (1.7.0-1) unstable; urgency=low * New 1.7.0 upstream release [ Till Kamppeter ] * Refresh most patches with quilt * Removed usb-backend-do-not-crash-if-usb-disabled-in-bios and cupsd-no-crash-on-avahi-threaded-poll-shutdown patches as they got applied upstream * Removed drop-arch-specifics-from-doc patch as it is not needed anymore * Updated drop_unnecessary_dependencies, manpage-hyphen-minus, manpage-translations and ppd-poll-with-client-conf patches manually to apply to the new CUPS version * Added error counting exception from usb-backend-do-not-crash-if-usb-disabled-in-bios to tests-ignore-warnings * Install the newly added ippfind utility and its manpage in cups-client * Added pwg.h to libcups2-dev package * Call dh_auto_clean only if the file Makedefs is present, to avoid a FTBFS * Added color management extensions from Joe Simon's GSoC 2013 project. * Patch cups-files.conf to activate CUPS daemon syncing of files when closing, so that config files (like printers.conf) do not mysteriously disappear (LP: #1157972) * In the AppArmor profile, allow execution of programs in /etc/cups/interfaces/, needed to make CUPS working with queues based on System V interface scripts, especially PPD-less queues auto-generated by cups-browsed from cups-filters 1.0.41 on. * Silenced AppArmor noise from udev.conf in syslog (LP: #1229766) [ Steve Langasek ] * Add cups-filters (>= 1.0.42) as alternative to foomatic-filters (which is deprecated) in package relationships [ Didier Raboud ] * Remove Roger Leigh from uploaders on his request with thanks for his past work! * Switch avahi LSB Should-Start dependency to be avahi-daemon; also bump package relationship to >= 0.6.31-3~ (Closes: #731608) * Refresh the manpage translation files * Move the USB backend quirk rules file to cups-server-common * Add 38 new 1.7.0 libcups2 symbols * Mark one C++ libcupsppdc1 symbol as optional as it isn't exported in 1.7.0 anymore * Import Fedora patches: - to avoid sign-extending CRCs in gz decompression - to build with full read-only relocations - to fix job history logging (upstream patch) - to set the internal default for SyncOnClose to Yes, instead of only configuring it to Yes - to fix a stringpool corruption issue - to prevent USB timeouts causing incorrect print output * Import Fedora patch updates: - to dont-use-dbus-from-two-threads patch so it removes a call to avahi_threaded_poll_stop() - to avoid_stale_lockfile_in_dbus_notifier patch to call _exit when handling SIGTERM * Move manpage-translations patch at the very end of the patch series to have it include all our patches cups (1.6.4-2) unstable; urgency=low * Import several patches from Fedora, thanks to Tim Waugh: - Avoid stale lockfile in dbus notifier - Stop accessing avahi through D-Bus using two threads - Fix jobs with multiple files and multiple formats - Revert upstream change to FINAL_CONTENT_TYPE in order to fix printing to remote CUPS servers * On purge, also delete the cupsd.conf.pre16-bak file to leave no traces cups (1.6.4-1) unstable; urgency=low * New 1.6.4 upstream release: - Removed some duplicate size definitions for some ISO sizes that were causing problems - The IPP backend did not add the "last-document" attribute - Added a SyncOnClose directive to cups-files.conf to force cupsd to call fsync before closing any configuration/state files it writes - Added USB quirk rule for Lexmark E238 - Closed server connections were still not always detected - The libusb-based USB backend now loads its list of quirks from files in /usr/share/cups/usb instead of using a hardcoded table - The scheduler did not properly register ICC color profiles with colord [ Adam Conrad ] * Update the cupsfilters tests patch to reflect the filter list in cups-filters 1.0.36 and fix the testsuite * Remove versioned Suggests/Recommends on ghostscript-cups (LP: #1212239) [ Till Kamppeter ] * debian/local/cups-daemon.cups.upstart: Increased timeout for waiting for the CUPS daemon to get ready before automatically configuring printers from 3 sec to 30 sec, on slower systems CUPS often needs more than 3 seconds and so the automatic printer configuration does not get done (LP: #933308). * debian/cups.dirs: Create empty /etc/cups/interfaces directory (LP: #499585). * debian/control: Use "Recommends: cups-filters (>= 1.0.36) | ghostscript-cups (>= 9.02~)" as the CUPS filters in ghostscript-cups moved to cups-filters. [ Didier Raboud ] * Don't run the dh_auto_clean command if the Makedefs doesn't exist (Closes: #724134) * Refresh patches for 1.6.4: - Drop colord-add-profile-fix.patch, fixed differently upstream - Drop usb-backend-more-quirk-rules.patch, fixed differently upstream - Refresh 9 other patches * Refresh the manpages translation files * Install the usb-quirks in cups-common * Update the tests-use-cupsfilters patch to use a patched copy of cups-filters 1.0.38's cupsfilters.convs to circumvent #712337 and allow cups-filters 1.0.38 to ship with the optimized pstops filters path * Bump cups-filters B-D to 1.0.38 to make sure the tests run as expected * Fix typo in README.Debian * On upgrade to 1.6.4, keep a copy of obsolete stanzas to let cups-browsed's postinst read them. This eases the 1.5->1.6 upgrade. [ Helge Kreutzmann ] * Update German manpages translation. cups (1.6.3-1) unstable; urgency=low * New 1.6.3 upstream release: - The lp, lpq, lpr, and lpstat now display an error message advising the use of the /version=1.1 ServerName option (<rdar://problem/14290628>) - Added documentation about the /version=1.1 option to ServerName in client.conf (<rdar://problem/14216262>) - httpStatus(HTTP_ERROR) did not return a useful error message (Closes: #645436) - The lp, lpq, lpr, and lpstat commands incorrectly ignored the default printer set in the lpoptions file (Closes: #711848) - The USB backend could crash on libusb-based systems if USB was disabled in the BIOS (LP: #1108719). - Added more USB quirks for the libusb-based backend - The scheduler no longer tries to do Kerberos authentication over the loopback interface. (Closes: #640939). [ Didier Raboud ] * Refresh patches for 1.6.3: - usb-backend-more-quirk-rules: Shrink to only Lexmark E238 that missed 1.6.3 merge window - usb-backend-do-not-crash-if-usb-disabled-in-bios: Shrink to only keep the error counting exception. - remove-unreal-printers: Drop, was from upstream. - more-verbose-http-error-message: Drop, was from upstream. - mention-ipp-version-specifier-in-man-and-ref: Drop, differently included upstream. (Closes: #711848) * Invert symlink handling in cups-client's preinst to cope with the symlink-to-directory migration for /usr/share/doc. (Closes: #716867) * Update usb backend quirks to fix Lexmark E238 printer (Closes: #716843) * Get dpkg-maintscript-helper to delete /e/c/acroread.conf and /e/c/pdftops.conf again in 1.6.2-9~ to cleanup upgrades from cups 1.5. (Closes: #711136) * Update debian/watch to cope with the new cups.org layout [ Brian Potkin ] * Rewrite README.Debian for Jessie (>= 1.6) (Closes: #714852) cups (1.6.2-10) unstable; urgency=low [ Didier Raboud ] * Mark the cups-client NEWS as released and make sure it can be installed by dropping the /usr/share/doc/cups-client symlink. Thanks to Evgeni Golov (Closes: #704238) * Backport upstream patch to remove unreal printers from the potential printers' list to avoid jobs to go to unexpected printers (Closes: #711848) * Backport upstream patch to enhance the HTTP_ERROR handling (Closes: #645436) * Bump Standards-Version to 3.9.4 without changes needed * Source package cleanup: - Drop outdated and not-applied cups-avahi.patch - Drop unused bzr-builddep configuration files - Add gitignore file to ignore .pc/ directory [ Helge Kreutzmann ] * Update German manpages translation. cups (1.6.2-9) unstable; urgency=low [ Helge Kreutzmann ] * Update German manpages translation. * In ipptoolfile manpage, mention that possible attribute-name are defined in RFC2911, for clarity. (Closes: #711709) [ Didier Raboud ] * Add a cups-client.NEWS notice, a cups-client manpage patch and amend the client.conf example file to inform about IPP default version change to 2.0 and circumvention measures. (Closes: #704238, #711192) - thanks to Brian Potkin * Reorder patches to have the manpages translation patch higher on the patch queue * Fix hyphen-correction typo * Update manpage translations with the recent changes * Drop outdated and not-applied colord-support patch. [ Alexey Galakhov ] * Add patch to fix printer icc profiles registration in colord (Closes: #711868) cups (1.6.2-8) unstable; urgency=low * Upload to unstable. [ Helge Kreutzmann ] * Update German manpages translation. cups (1.6.2-7) experimental; urgency=low * Update the patch adding libusb error handling to also discard its errors in the counting of warning messages; this should make the error-suite succeed in more cases. cups (1.6.2-6) experimental; urgency=low [ Till Kamppeter ] * In Ubuntu, let the cups-daemon binary package depend on avahi-daemon, not only recommend it, as the Upstart script for CUPS starts CUPS only after starting avahi-daemon (LP: #1133794). * In the logrotate config file: Do not remove CUPS' log files while the CUPS daemon is running. Stop CUPS, move the files, and then start it again. This avoids crashes during the log rotation process (LP: #1086019). * Add patch to add more error handling to the libusb-based USB backend, especially to avoid a crash when USB is disabled in the BIOS (LP: #1108719). cups (1.6.2-5) experimental; urgency=low * Added quirk rule for the QinHeng CH340S USB->Parallel adapter. (LP: #1000253) cups (1.6.2-4) experimental; urgency=low [ Till Kamppeter ] * Let the DNS-SD subtype "_universal" get added to the printer's DNS-SD registration; it is needed for iOS to find the printers. * Merged the quirk rule patches, added quirk rules for five additional printers: - Lexmark e250d (LP: #1084164) - Canon PIXMA iP6000D (LP: #1160638) - Canon MF4150 (LP: #1160638) - Brother HL-1450 (LP: #1000253) - Epson Stylus Color 670 (LP: #872483) [ Martin Pitt ] * Allow "audit_write" capability in AppArmor profile. (LP: #1157318) cups (1.6.2-3) experimental; urgency=low [ Didier Raboud ] * Update the upstream status of the manpage-hyphen-minus patch. * Cleanup cups-server-common cleanup. Fixes FTBFS for arch-only build. [ Till Kamppeter ] * Added rm_conffile /etc/logrotate.d/cups 1.6.2-3~ to clean up logrotate conffile if it did not get moved by the mv_conffile line (LP: #1157758) cups (1.6.2-2) experimental; urgency=low * Split architecture independent documentation and files out of cups, to cups-server-common: - Patch the documentation generation to make it fully arch-independant * Packages cleanup: - In cups-daemon, drop superfluous Suggests against lsb-base. - Add missing DEP3 headers. - Add missing 'empty-directory' lintian overrides. - Add patch to correct all hyphen-used-as-minus-sign lintian errors. cups (1.6.2-1) experimental; urgency=low * New upstream release - Adds localizations for Czech, French, and Russian - Adds several improvements to the USB backend on Linux - Fixes several printing and tool bugs * Patches: - Drop all patches previously backported from upstream - Update all remaining patches * Merge changes targeted at Wheezy: - Correct usb-backend quirk for Epson Stylus Photo 750 (Closes: #697970) * Manpage translation infrastructure: - Refresh it. - Allow the translation of the ipptool and ipptoolfile manpages. - Fix translation infrastructure typos, to get 'man cups-files.conf' localized. * More cups-daemon split cleanup: - Drop superfluous Priority snd Section settings. - Install the forgotten ipp14 backend. - Drop two unmatched lintian overrides. - Drop ipp and ipp14 from the cups backends selection; they are shipped unconditionally in cups-daemon. - Add long-description to the init script - Alter the cups-daemon short description. * In cups-client, add 'accept' and 'reject' manpage symlinks. * Bump private symbols version to latest upstream. cups (1.6.1-3) experimental; urgency=low * Wait 30 minutes for jobs to complete, hopefully fixes the mips FTBFS. * Make 'noopt' building succeed by relaxing the makeshlibs requirements in that case, thanks to Sam Lantinga. (Closes: #645329) * Add slapd and nslcd to cups' Should-Start LSB headers. (Closes: #702248) * Backport upstream documentation fix for STR#4223 "lpadmin to root privilege escalation" cups (1.6.1-2) experimental; urgency=low [ Till Kamppeter ] * In upstart, let the CUPS daemon start after avahi-daemon, to assure that the Bonjour broadcasting of shared printers works. * Import upstream patch to add support for specifying the IPP version of a remote CUPS server in /etc/cups/client.conf (LP: #1069671), refresh the other ones affected. [ Didier Raboud ] * Cherry-pick more upstream enhancements: - Add french translation (CUPS STR: #4247) * Refresh po4a translations * Merge the 1.5.3-2.14 Debian release. * Correct Replaces/Breaks versions of cups-daemon against cups to cope with recent Ubuntu releases (LP: #1099242). * Make sure /e/cups/raw.{convs,types} are deleted during purge. (Closes: #698213) * Take manpage translations out of the manpage-translations patch to ease external contributions to the .po files. * Add usb-backend quirk for Epson Stylus Photo 750 (Closes: #697970) [ Helge Kreutzmann ] * Update German manpages translation. (Closes: #698965) [ Julien Patriarca ] * Update French manpages translation. (Closes: #700295) [ Vincent McIntyre ] * Document the way to make sure LPD support, as provided by cups-bsd, is kept enabled across upgrades. (Closes: #671347) cups (1.6.1-1) experimental; urgency=low * New upstream release - Avahi-based Bonjour/DNS-SD/mDNS support - ICC-based color management with colord - IPP-Everywhere support - Moved filters not needed by Mac OS to cups-filters project at OpenPrinting. - Moved API of libcupsdrivers (driver.h) and of part of libcupsimage (image.h) to cups-filters. - cups-polld removed - Fixes: LP: #904093, LP: #1027804, Closes: #690522 [ Marc Deslauriers ] * debian/local/apport-hook.py: Also attach AppArmor information and logs. [ Jamie Strandboge ] * debian/local/apparmor-profile: deny capability block_suspend. It is noisy and doesn't seem to actually be needed. This can be revisited if it turns out it is needed. (LP: #1031583) [ Till Kamppeter ] * debian/patches/ipp-backend-cups-1.5.4-fixes.patch, debian/patches/install-sh-remove-bashism.patch, debian/patches/usb-backend-busy-loop-fix.patch, debian/patches/usb-backend-detach-usblp-earlier-crash-guards.patch, debian/patches/usb-backend-initialize-usblp-attached-state.patch, debian/patches/usb-backend-further-enhancements.patch, debian/patches/snmp-dont-stop-without-ipv6.patch, debian/patches/cups-avahi.patch, debian/patches/colord-support.patch: Removed, included upstream. * debian/patches/dnssd-reg-array-linear-search.patch: Removed, not applicable any more. * debian/patches/pidfile.patch, debian/patches/airprint-support.patch, debian/patches/no-conffile-timestamp.patch, debian/patches/drop_unnecessary_dependencies.patch, debian/patches/configure-default-browse-protocols.patch debian/patches/add-ipp-backend-of-cups-1.4.patch debian/patches/printer-filtering.patch, debian/patches/show-compile-command-lines.patch, debian/patches/pstops-based-workflow-only-for-printing-ps-on-a-ps -printer.patch, debian/patches/tests-ignore-usb-crash.patch: Manually regenerated to adapt to upstream changes. * debian/patches/debian/patches/ppd-poll-with-client-conf.patch, debian/patches/manpage-translations.patch, debian/patches/rootbackends-worldreadable.patch, debian/patches/reactivate_recommended_driver.patch, debian/patches/read-embedded-options-from-incoming-postscript-and-add-to-ipp -attrs.patch, debian/patches/do-not-broadcast-with-hostnames.patch, debian/patches/confdirperms.patch, debian/patches/log-debug-history-nearly-unlimited.patch, debian/patches/tests-ignore-warnings.patch, debian/patches/tests-ignore-usb-crash.patch, debian/patches/tests-slow-lpstat.patch, debian/patches/tests-fix-ppdLocalize-on-unclean-env.patch, debian/patches/pidfile.patch: Refreshed with quilt. * debian/patches/airprint-support.patch: Fixes in the conditionals to make AirPrint work with the new upstream Avahi support, support for iOS 6 clients (LP: #1054495). * debian/patches/network-backends-snmp-queries-optional.patch: SNMP queries by network backends can get suppressed now by adding "?snmp=false" to the end of the URI. SNMP queries to Bonjour-shared CUPS queue will get suppressed by default. * debian/patches/usb-backend-reset-after-job-only-for-specific-devices.patch: Let the USB backend only send a clean-up reset after the job if it is really needed (LP: #1032456), force-uni-directional access for Canon Pixma iP4200 (CUPS STR #4155) and iP4300 (LP: #1032385). * debian/patches/usb-backend-more-quirk-rules.patch: Added more quirk rules which are not yet committed upstream: Canon MP500 (LP: #1032456), MP510 (LP: #1050009), MP550 (CUPS STR #4155), MP560 (CUPS STR #4155), Brother HL-1430 (LP: #1038695), Oki Okipage 14ex (LP: #872483), Oki B410d (LP: #872483), all Zebra printers (LP: #1001028). * debian/patches/cupsd-conf-remove-obsolete-browse-directives.patch: Removed obsolete "BrowseOrder" and "BrowseAllow" lines from cupsd.conf. * debian/patches/get-ppd-file-for-statically-configured-bonjour-shared -queues.patch: Applications could not get the PPD file for statically-configured Bonjour- shared print queues (CUPS STR #4159) * debian/patches/get-ppd-file-for-statically-configured-ipp-shared -queues.patch: Applications could not get the PPD file for statically-configured IPP- shared print queues (CUPS STR #4178) * debian/patches/printers-c-recognize-remote-cups-queue-via-dnssd-uri.patch, Treat raw queues pointing to a CUPS server as remote queues (using PPD on server) also if they have a "dnssd://..." URI. * debian/patches/avahi-not-considered-at-some-dnssd-conditionals.patch: At some points Avahi was not considered in conditionals for DNS-SD. This broke most of the printer sharing functionality. * debian/patches/prevent-crash-due-to-null-host-name-or-fqdn-from-avahi.patch: Prevent crash due to NULL host name or FQDN from Avahi (CUPS STR #4183, LP: #1046982, LP: #1034045). * debian/patches/fix-crash-on-shutdown-caused-by-broken-avahi-config.patch: Fix crash on shutdown caused by broken Avahi config (CUPS STR #4192, LP: #1036974). * debian/patches/fix-another-spot-where-avahi-crashes-cupsd-because-it-does -not-handle-null-values-from-its-own-apis.patch: Fix another spot where Avahi crashes cupsd because it does not handle NULL values returned by its own APIs (CUPS STR #4200, LP: #1041013). * debian/patches/cupsd-no-crash-on-avahi-threaded-poll-shutdown.patch: Fixed crash which sometimes happens on shutdown of the CUPS daemom, caused by a wrong shutdown sequence for shutting down the Avahi threaded poll (CUPS STR #4213, CUPS STR #4180, LP: #1034045). * debian/patches/filter-out-all-control-characters-from-the-1284-device -id.patch: Do not only filter newline characters out of device IDs but any non-printable character (CUPS STR #4124). * debian/patches/ipp-backend-did-not-specify-the-compression-used.patch: The IPP backend did not specify the compression used (CUPS STR #4181). * debian/patches/ipp-backend-did-not-send-cancel-request-to-printers-when-a -job-was-canceled-and-printer-did-not-support-create-job.patch: The IPP backend did not send a cancel request to printers when a job was canceled and the printer did not support Create-Job. This is to improve the "ipp" backend as much as possible to reduce the ned of the "ipp14" backend ("ipp" backend of CUPS 1.4.x added to the Debian/Ubuntu package as fallback in case of regressions of the current "ipp" backend). * debian/patches/work-around-some-broken-ipp-printers.patch: Work around some broken IPP printers (CUPS STR #4190). Also catch late authentication issues so the backend doesn't just spin on a print request that will never succeed. * debian/patches/ipp-backend-abort-the-outer-loop-if-we-get-a-failure-from -send-document.patch, debian/patches/ipp-backend-could-get-stuck-in-an-endless-loop-on-certain -network-errors.patch: Prevent IPP backend from falling into an infinite loop in certain situations (CUPS STR #4194). * debian/patches/fix-make-check.patch: Fix "make check". * debian/patches/ubuntu/ubuntu-disable-browsing.patch: Updated. * debian/cups.install: Removed all references to the discontinued cups-polld. * debian/rules: Removed lines for deletion of filters, fonts and glyphs which have moved to cups-filters and also the line for commenting out conversion rules. * debian/rules, debian/cups.install, debian/cups-common.install: Do not install fonts and charsets, there are none any more in CUPS. * debian/control, debian/libcupsdriver1-dev.install, debian/libcupsdriver1.symbols, debian/libcupsdriver1.install: libcupsdriver.so got moved to cups-filters as part of libcupsfilters.so. * debian/libcupsimage2-dev.install: image.h removed, this API has moved to cups-filters. * debian/rules: Removed "--with-remote_protocols='CUPS dnssd'" from the ./configure command line and removed the "CUPS" from "--with-local_protocols='CUPS dnssd'". These settings are not supported any more in CUPS 1.6.x. * debian/rules, debian/libcups2-dev.examples: Removed references to scripting/ this subdirectory does not exist any more in CUPS 1.6.x. * debian/libcups2.symbols, debian/libcupsimage2.symbols: Refreshed using the diff of the dpkg-gensymbols output during build. * debian/cups.postinst: Clean /etc/cups/cupsd.conf from all keywords and settings which got obsolete with the dropping CUPS Broadcasting/Browsing in CUPS 1.6.x: BrowsePoll, BrowseAllow, BrowseDeny, BrowseOrder, and BrowseRemoteProtocols lines get removed and the "cups" argument gets removed from the BrowseLocalProtocols line (LP: #1052897). * Split the "cups" binary package into "cups" and "cups-daemon". Installation of "cups-daemon" without "cups" gives a CUPS environment for raw queues only, especially as a client-only mode with queues pointing to remote printers set up automatically with cups-browsed from cups-filters. This environment gives basic printing support on low-footprint mobile systems, like Ubuntu for Android. [ Martin Pitt ] * manpage-translations.patch: Update German manpage translations, thanks Helge Kreutzmann! (Closes: #670042) * manpage-translations.patch: Update French manpage translations, thanks Julien Patriarca! (Closes: #670224) * debian/README.Debian: Explain how to enable cups-lpd, thanks Vincent McIntyre. (Closes: #508941) [ Didier Raboud ] * Make sure unowned obsolete backends are removed on configure. (Closes: #683754) * Update all debconf translations to cope with the ipp14 addition and parallel and serial removals. * Add patch to force C locale when testing the (non-)localized PPD content fetch. * Re-order patches to put the tests-fixing ones earlier. * Rename tests-slow-lpstat.patch to tests-wait-on-unfinished-jobs-everytime.patch : wait on remaining jobs before each test. This fix the too slow architectures' FTBFS. * When modprobe'ing usblp, respect the blacklist. Thanks to Julien Cristau for noticing! * Use cups-filters' filters, type declarations, conversions, libraries and banners in the tests. Add cups-filters' and libcupsfilters1-dev Build-Depends, with a version bigger than 1.0.24-3~ (to pull bc in). * Convert packaging repository to Git, change VCS-* fields accordingly, update debian/README.source. * Merge releases targeted at wheezy. * Refresh all patches using "quilt -p ab". * Uploaders: - Add myself. - Remove Kenshi Muto <kmuto@debian.org> with his agreement and with great thanks for his past work! * Put under Debian Printing Team umbrella. * Drop cupsddk transitional package, was transitional in Squeeze. * Make libcupsimage2 depend on libcupsfilters1 as functions (and exported symbols) moved there. * Enable manpage translations by installing them from debian/rules when they exist. This allows the build to be more robust against non-complete translations. * Disable pstops-based-workflow-only-for-printing-ps-on-a-ps-printer.patch, as it breaks the build tests in 1.6.1. Re-opens #593338. * Remove the obsolete etc/cups/pdftops.conf and etc/cups/acroread.conf using cups.maintscript. (Closes: #645442) * Drop redundant dpkg-maintscript-helper snippets in cups maintainer scripts. * Drop redundant Priority and Section values in debian/control. * Convert packaging to debhelper 9; drop cdbs Build-Depends. * Drop all relationships to libcupsys2{,-dev} and cupsddk-drivers as they got removed before Lenny. * In tests-ignore-usb-crash.patch, also ignore "[cups-deviced] PID * (dnssd) stopped with status 1" errors. * Make sure internal libraries relationships are tight enough. * Fix STR#4223 "lpadmin to root privilege escalation" by including the * upstream heavy fix. Fixes CVE-2012-5519, Closes: #692791. * Update most patches to cope with the above change. * Make sure to drop CVS tags from all config files. * Import "The scheduler did not delete job control backup files (STR #4244)" from upstream to fix the testsuite. cups (1.5.3-4) experimental; urgency=low [ Till Kamppeter ] * debian/patches/usb-backend-further-enhancements.patch: USB backend: Do a printer reset after each job, this makes the Prolific USB -> Parallel adapter finally work (LP: #987485) and makes it unnecessary to blacklist the usblp kernel module for some printers (LP: #997040). [ Martin Pitt ] * debian/control: Have cups strictly depend on the same binary version of libcups2, to avoid crashes when later libcups2 versions remove private symbols. (Closes: #668662) * Add snmp-dont-stop-without-ipv6.patch: snmp: do not die if there is no IPv6 support available. Patch backported from upstream trunk, thanks to Pino Toscano! (first half of #680604) * tests-ignore-warnings.patch: Also ignore avahi failure -1, to fix FTBFS on hurd due to D-BUS problems. Thanks Pino Toscano! (Closes: #680604) cups (1.5.3-3) experimental; urgency=low * debian/patches/usb-backend-further-enhancements.patch: Added latest development work on the libusb-based USB backend: - Support for uni-directional devices, both protocol-1 devices and devices where no read endpoint is found. - Soft reset specific to the "PRINTER" device class. This allows a reset without reconnecting. - When closing the device, it will also get reset to its original configuration, before re-attaching the usblp kernel module. Do not restore the configuration setting when the old configuration was zero, as zero means "unconfigured". - Added option "usb-unidir" to force the backend into uni-directional mode. This allows to work around problems with bi-di communications, especially also a delay at the end of the job caused by closing the read channel (happens only for some devices, LP: #1001028). Also useful for debugging. - Added the quirk management of the usblp kernel module. So the problems of all printers which were worked around in the kernel module are also worked around in the libusb-based CUPS backend now (LP: #1000253). - Added new quirk type to quirk manager: Printers for which the usblp kernel module should not get reattached after printing a job (LP: #1000253, perhaps also LP: #995111). - Added additional quirks for the Prolific Technology USB -> Parallel adapter, as the adapter needs uni-directional mode to be forced and also does not like re-attaching the usblp kernel module after the job (last third of last page gets cut off, re-attaching probably sends a reset to the printer while there is still data to be printed in the printer's internal buffer (LP: #987485). - Added the command line option "usb-no-reattach". With the option set the usblp kernel module does not get reattached after a job has been printed. Some printers cut off the end of the job or even crash by re-attaching the module. This is a development/debug mode to test whether re-attaching was the culprit of a problem. Users should report such issues so that their printers can get added to the quirk list. - Some extra debug messages. - Added a missing libusb_free_config_descriptor(). This patch is submitted upstream as CUPS STR #4128. * debian/patches/add-ipp-backend-of-cups-1.4.patch, debian/cups.config, debian/cups.lintian-overrides, debian/cups.postinst, debian/cups.prerm, debian/cups.templates: Add the IPP backend of CUPS 1.4.x to the current CUPS package as independent backend "ipp14". Some devices (like the LiveBox 2) do not work with the current IPP backend (LP: #945028, LP: #973270, LP: #990734, LP: #992468, LP: #992982). * debian/patches/ipp-backend-cups-1.5.4-fixes.patch: Backported latest fixes on the IPP backend from upstream. * debian/local/blacklist-cups-usblp.conf, debian/cups.postinst, debian/cups.install, debian/cups.preinst, debian/cups.postinst, debian/cups.postrm: As we have vastly improved the USB backend, we try to work without blacklisting the usblp kernel module again during the development cycle of Ubuntu Quantal. cups (1.5.3-5) unstable; urgency=low * Team upload - Rebuild against a fixed libmagic1 (see #703274). - Non-NMU version, above all past 1.5.x experimental versions. * Uploaders: - Remove Kenshi Muto <kmuto@debian.org> with his agreement and with great thanks for his past work! - Add myself. cups (1.5.3-2.16) unstable; urgency=low * Backport upstream documentation fix for STR#4223 "lpadmin to root privilege escalation" * Correct usb-backend quirk for Epson Stylus Photo 750, thanks to Denis Prost (Closes: #697970) cups (1.5.3-2.15) unstable; urgency=low [ Till Kamppeter ] * Update airprint-support.patch to make AirPrint support also work for iOS 6. (Closes: #700961, LP: #1054495) - thanks to Jan Wagner. [ Didier Raboud ] * Add usb-backend quirk for Epson Stylus Photo 750 (Closes: #697970) cups (1.5.3-2.14) unstable; urgency=low * Add upstream patch to avoid using Kerberos over the local socket. Avoids having the hplip-cups upgrade asking for a root password during upgrade (Closes: #640939). * Fix Japanese and Russian templates translations typos (Closes: #698521) cups (1.5.3-2.13) unstable; urgency=low [ Helge Kreutzmann ] * Update German manpage translation (Closes: #697860). [ Didier Raboud ] * Also refresh the po4a translations infrastructure. cups (1.5.3-2.12) unstable; urgency=low [ Julien Cristau ] * In the dbus UTF8 checker: - Make sure to reset the buffer correctly. cups (1.5.3-2.11.1) unstable; urgency=low * Re-upload without spurious debian-changes-* patch. cups (1.5.3-2.11) unstable; urgency=low [ Julien Cristau ] * In the dbus UTF8 checker: - Use C.UTF-8 instead of not-certainly-available en_US.UTF-8; make cups depend on libc-bin (>= 2.13). - Make sure the buffer is really big enough. cups (1.5.3-2.10) unstable; urgency=low * Backport more upstream configuration split fixes: - Fix cupsctl man page - Generate and install cups-files.conf online help. - Fix "-t" operation that shows correct filename. - Use syslog for startup errors. - Fix installation of cupsd.conf: need to use ConfigurationFile and not ServerRoot/cupsd.conf. - Check permissions of ConfigurationFile and CupsFilesFile: should be ConfigFilePerm. cups (1.5.3-2.9) unstable; urgency=low [ Didier Raboud ] * In the configuration file split patch: - Include 'FileDevice warning fix in ipp.c:add_printer()' from Tim Waugh (RedHat). - Drop pure-comment part. * Remove cupsd.conf during purge too. (Closes: #695337) [ Bernard Massot ] * Fix lpa{t,d}min typo in cups.NEWS. cups (1.5.3-2.8) unstable; urgency=low * Bugfix the configuration stanzas split: it left some possibilities to have configuration stanzas taken from the wrong file. - Refresh affected patches too. cups (1.5.3-2.7) unstable; urgency=low * Backport upstream configuration files split to address CVE-2012-5519. - Add split-configuration-files-STR4223.patch - Refresh affected patches: - cups-deviced-allow-device-ids-with-newline.patch - default_log_settings.patch - pidfile.patch - reactivate_recommended_driver.patch - removecvstag.patch - tests-ignore-usb-crash.patch - Install the new cups-files.conf Fixes: CVE-2012-5519 (Closes: #692791) * Make cupsd.conf a non-conffile, as it is managed by cups itself. - On new installs, set it up from cupsd.conf.default. - On upgrades, move it away in preinst and move it back in postinst. - On aborted upgrades, move the file back in place. * Document the split in cups.NEWS. * Update translations for new manpage, install it. * Put under Debian Printing Team umbrella. cups (1.5.3-2.6) unstable; urgency=low * Import more fixes: - From RedHat: * USB backend quirk rule for Xerox Phaser 3124 (and maybe others). (STR #4217) * Ensure attributes are valid UTF-8 in dbus notifier. (RedHat #863387, STR #4219) - From upstream: * Fix to properly send cancel requests to printers not supporting Create-Job. * Fix to work around broken 1284 device IDs that use a newline instead of a semicolon. * Fix to avoid letting the IPP backend stuck in an endless loop on certain network errors. (STR #4194) * Tighten all internal dependencies on libcups2 to avoid any version disparity. (Closes: #668662) cups (1.5.3-2.5) unstable; urgency=low * Furhter tighten cups dependency on libcups2. (Closes: #668662) cups (1.5.3-2.4) unstable; urgency=low * Non-maintainer upload on behalf of the Printing Team. [ Till Kamppeter ] * Correctly install language-private.h as /usr/include/cups/i18n.h, .install file entries cannot rename files (LP: #1013470). [ Martin Pitt ] * Tighten cups' and cups-client's dependency to libcups2 to current binary version. They use private symbols from the libraries which the automatic dependencies from the .symbols files don't cover. (Closes: #668662, #677180) * manpage-translations.patch: Update German manpage translations, thanks Helge Kreutzmann! (Closes: #670042) * manpage-translations.patch: Update French manpage translations, thanks Julien Patriarca! (Closes: #670224) * debian/README.Debian: Explain how to enable cups-lpd, thanks Vincent McIntyre. (Closes: #508941) [ Didier Raboud ] * Backport upstream quirks for the libusb backend (Closes: #690982). * Packaging repository moved to Git, change VCS-* fields accordingly. cups (1.5.3-2.3) unstable; urgency=low * Non-maintainer upload on behalf of the Printing Team. * When modprobe'ing usblp, respect the blacklist. Thanks to Julien Cristau for noticing! cups (1.5.3-2.2) unstable; urgency=low * Non-maintainer upload on behalf of the Printing Team. * Update tests-slow-lpstat.patch to wait on remaining jobs before each test. This should fix the slow architectures' FTBFS. cups (1.5.3-2.1) unstable; urgency=low [ Didier Raboud ] * Non-maintainer upload on behalf of the Printing Team. * Revert all 1.5.3-2 changes. * Cherry-pick changes targeted at Wheezy. * Make sure unowned obsolete backends are removed on configure. (Closes: #683754) * Update all debconf translations to cope with the ipp14 addition and parallel and serial removals. * Add patch to force C locale when testing the (non-)localized PPD content fetch. [ Till Kamppeter ] * debian/patches/add-ipp-backend-of-cups-1.4.patch, debian/cups.config, debian/cups.lintian-overrides, debian/cups.postinst, debian/cups.prerm, debian/cups.templates: Add the IPP backend of CUPS 1.4.x to the current CUPS package as independent backend "ipp14". Some devices (like the LiveBox 2) do not work with the current IPP backend (LP: #945028, LP: #973270, LP: #990734, LP: #992468, LP: #992982). * debian/patches/usb-backend-further-enhancements.patch: Added latest development work on the libusb-based USB backend: - Support for uni-directional devices, both protocol-1 devices and devices where no read endpoint is found. - Soft reset specific to the "PRINTER" device class. This allows one to reset without reconnecting. - When closing the device, it will also get reset to its original configuration, before re-attaching the usblp kernel module. Do not restore the configuration setting when the old configuration was zero, as zero means "unconfigured". - Added option "usb-unidir" to force the backend into uni-directional mode. This allows one to work around problems with bi-di communications, especially also a delay at the end of the job caused by closing the read channel (happens only for some devices, LP:#1001028). Also useful for debugging. - Added the quirk management of the usblp kernel module. So the problems of all printers which were worked around in the kernel module are also worked around in the libusb-based CUPS backend now (LP: #1000253). - Added new quirk type to quirk manager: Printers for which the usblp kernel module should not get reattached after printing a job (LP: #1000253, perhaps also LP: #995111). - Added additional quirks for the Prolific Technology USB -> Parallel adapter, as the adapter needs uni-directional mode to be forced and also does not like re-attaching the usblp kernel module after the job (last third of last page gets cut off, re-attaching probably sends a reset to the printer while there is still data to be printed in the printer's internal buffer (LP: #987485). - Added the command line option "usb-no-reattach". With the option set the usblp kernel module does not get reattached after a job has been printed. Some printers cut off the end of the job or even crash by re-attaching the module. This is a development/debug mode to test whether re-attaching was the culprit of a problem. Users should report such issues so that their printers can get added to the quirk list. - debian/patches/usb-backend-further-enhancements.patch: USB backend: Do a printer reset after each job, this makes the Prolific USB -> Parallel adapter finally work (LP: #987485) and makes it unnecessary to blacklist the usblp kernel module for some printers (LP: #997040). - Some extra debug messages. - Added a missing libusb_free_config_descriptor(). This patch is submitted upstream as CUPS STR #4128. * debian/local/blacklist-cups-usblp.conf, debian/cups.maintscript, debian/cups.install, debian/control: Lift the usblp blacklist, not needed anymore with the above fixes (Closes: #630556, #635041). cups (1.5.3-2) unstable; urgency=low [ Till Kamppeter ] * debian/libcups2-dev.install, debian/rules: Correctly install language-private.h as /usr/include/cups/i18n.h, .install file entries cannot rename files (LP: #1013470). [ Martin Pitt ] * debian/local/apparmor-profile: Allow cups-pdf to read /proc/*/auxv; it's harmless information. (LP: #1009367) * debian/control: Tighten cups' and cups-client's dependency to libcups2 to current binary version. They use private symbols from the libraries which the automatic dependencies from the .symbols files don't cover. (Closes: #668662, #677180) [ Andy Whitcroft ] * debian/libcupsppdc1.symbols: add two optional symbols which are only emitted on armel and armhf architectures. cups (1.5.3-1) unstable; urgency=low [ Till Kamppeter ] * New upstream release - Numerous fixes on IPP (LP: #945028, LP: #973270, LP: #990734, LP: #992468, LP: #992982, LP: #1000172, LP: #1000758) - USB backend based on the maintained libusb 1.0.x with support for bi-directional communication - Fixes on SNMP-based supply level reporting - PostScript prtinter auto-configuration reliable now - Several fixes on PostScript, SSL, authenticated printing, and networking issues * debian/patches/ipp-fixes-1.5.3.patch, debian/patches/fix-empty-translations.patch, debian/patches/ppd-cache-fix-crash.patch, debian/patches/commandtops-make-robust-against-broken-postscript.patch, debian/patches/cups-polld-reconnect.patch, debian/patches/usb-backend-libusb-1.0.patch, debian/patches/usb-backend-backchannel-support.patch: Removed patches which got included upstream. * debian/patches/fix-supply-level-computation-for-percent-supply-unit.patch, debian/patches/fix-supply-levels-for-enumerated-prtmarkersupplieslevel.patch, debian/patches/fix-status-reports-when-supply-levels-grow.patch, debian/patches/add-status-reports-for-full-waste-trays-and-cleaner-unit-eol.patch, debian/patches/match-marker-colorants-which-use-non-standard-string.patch, debian/patches/truncate-marker-supply-names-at-comma.patch: Removed supply level report fixes. This got solved differently upstream. * debian/patches/do-not-suppress-inputslot-setting-with-empty-ap-d-inputslot.patch: Removed, problem solved differently upstream. * debian/patches/cups-avahi.patch: Manually regenerated to adapt to upstream changes. * debian/patches/ppd-poll-with-client-conf.patch, debian/patches/colord-support.patch, debian/patches/airprint-support.patch, debian/patches/no-conffile-timestamp.patch, debian/patches/drop_unnecessary_dependencies.patch, debian/patches/read-embedded-options-from-incoming-postscript-and-add-to-ipp-attrs.patch, debian/patches/show-compile-command-lines.patch: Refreshed using quilt. * debian/patches/usb-backend-busy-loop-fix.patch: Correct loops to repeat claiming interfaces on USB devices when they are busy. Before, hitting busy state made the device opening function error out without comment (LP: #987485). * debian/patches/usb-backend-detach-usblp-earlier-crash-guards.patch: Protect against crashes by checking error codes of libusb functions (LP: #997040) and detach usblp kernel module in an earlier stage when opening a device (LP: #987485, LP: #997040). * debian/patches/usb-backend-initialize-usblp-attached-state.patch: Initialize usblp_attached field in printer data structure to assure that detaching and re-attaching the usblp kernel module is always done correctly (LP: #902535, LP: #959676, LP: #960666, LP: #987485, LP: #995111, LP: #997040, LP: #1000253, LP: #1001028). * debian/patches/install-sh-remove-bashism.patch: Removed bashism. * debian/local/blacklist-cups-usblp.conf, debian/cups.postinst, debian/cups.install: Blacklist the "usblp" kernel module again. We have now a full-featured USB backend based on the maintained libusb 1.0.x and so we can acess printers always through the raw USB devices making the module deprecated. Detaching the kernel module for each access causes a lot of problems: LP: #902535, LP: #959676, LP: #960666, LP: #987485, LP: #995111, LP: #997040, LP: #1000253, LP: #1001028. * debian/watch: Fixed URL. [ Bastian Blank ] * debian/control: Support multi-arch: Mark cups, cups-client, cups-bsd, cups-common and cups-ppdc as foreign. (Closes: #672879) [ Martin Pitt ] * debian/cups.{preinst,postinst,postrm}: Drop the removal of obsolete /etc/modprobe.d/blacklist-cups-usblp.conf conffile, as this file is reintroduced now. cups (1.5.2-11) unstable; urgency=low * Add tests-slow-lpstat.patch: Wait a bit for the scheduler to catch up in the lpstat test. Fixes failures on slow architectures like armel. Thanks to Steve McIntyre! (Closes: #670878) cups (1.5.2-10) unstable; urgency=low [ Martin Pitt ] * debian/control: Drop libtiff5-dev, just use libtiff-dev. (Closes: #665646) * debian/rules: Enable all hardening flags. Thanks Simon Ruderich! (Closes: #662821) [ Steve Langasek ] * debian/local/cups.upstart: Don't wait on udevtrigger before starting cups; the only reason this is here is to let '/lib/udev/udev-configure-printer enumerate' work, but if cups does start before we've cold-plugged everything, the udev rule will call '/lib/udev/udev-configure-printer add' for each device it discovers anyway, so this is redundant. cups (1.5.2-9) unstable; urgency=low [ Till Kamppeter ] * debian/control: In the Recommends: section of the "cups" binary package replaced "cups-driver-gutenprint" by "printer-driver-gutenprint" to reflect the new name (LP: #966217). * debian/patches/cups-polld-reconnect.patch: The CUPS polling daemon did not reinitialize its connection to the remote server on errors in all cases (LP: #965124, CUPS STR #4031, Red Hat bug #799595). * debian/patches/commandtops-make-robust-against-broken-postscript.patch: Updated patch to the upstream state of commandtops. * debian/patches/ppd-cache-fix-crash.patch: Added NULL check to fix crash of cupsd on corrupted data in /var/cache/cups/ (LP: #957023, CUPS STR #4049). * debian/patches/cups-avahi.patch: Refreshed with quilt. [ Martin Pitt ] * debian/cups.postinst: Don't fall over if /etc/apparmor.d/local exists and is not a directory. (LP: #962226) cups (1.5.2-8) unstable; urgency=low [ Till Kamppeter ] * debian/patches/ipp-fixes-1.5.3.patch: Updated IPP backend to the state of the upcoming CUPS 1.5.3, fixing most of the known problems with printing to IPP printers or servers. * debian/patches/ipp-backend-fails-to-trigger-authentication-prompts.patch, debian/patches/ipp-backend-http-1.0-fallback-fix.patch, debian/patches/ipp-backend-missing-document-type.patch: Removed old patches for the IPP backend. [ Martin Pitt ] * test-i18n-nonlinux.patch: Fix typo in #if which broke the patch. Hopefully Closes: #662996 for good now. cups (1.5.2-7) unstable; urgency=low * Add fix-empty-translations.patch: Do not translate msgids to empty strings. Backported from upstream SVN. (LP: #953321) * Add test-i18n-nonlinux.patch: Do not run the CUPS_EUC_JP test case on BSD/Hurd either, as glibc's iconv behavior is different than what the test expects. (Closes: #662996) * debian/local/apparmor-profile: Allow gs to read /proc/*/auxv; it's harmless information. (LP: #936629) * debian/cups.dirs, debian/rules: Disable /usr/local/share/ppd/ directory for now, until dh_usrlocal stops failing on those. cups (1.5.2-6) unstable; urgency=low [ Till Kamppeter ] * debian/cups.postinst: Run "triggered" code porion of cups postinstall script also when configuring cups ("configure") so that when cups and a printer driver package (which triggers cups to update the PPD files of existing print queues) get updated together the PPD update for sure happens also if the driver's trigger action is not executed due to cups also being updated (LP: #932882). [ Martin Pitt ] * debian/control: Wrap dependencies. * debian/control, debian/rules: Move from hardening-wrapper to using dpkg-buildflags. Bump dpkg-dev build dependency to (>= 1.16.1~) for this. * Add tests-ignore-warnings.patch: Ignore warnings from colord and Avahi in the tests, as they change the expected number of warnings. These services are not running in a buildd environment. * debian/rules: Have package fail to build on test failures again. * debian/copyright: Convert to copyright format 1.0, and update to current license/copyrights. * debian/control: Bump Standards-Version to 3.9.3. * debian/control: Build against libpng-dev, with an alternative to the older libpng12-dev. (Closes: #662294) * debian/control: Prefer building against libtiff5-dev if available, falling back to libtiff-dev. * Add tests-ignore-usb-crash.patch: Ignore "[cups-deviced] PID 17962 (usb) crashed on signal 11!" errors in the log during the test suite. This seems to regularly happen on Debian/Ubuntu buildds. cups (1.5.2-5) unstable; urgency=low * debian/patches/commandtops-make-robust-against-broken-postscript.patch: CUPS' commandtops filter allows auto-configuration of the default option settings of PostScript printers querying the printer using PostScript commands defined in the PPD file ("*?..." entries). Problem is that if one of the query commands has a PostScript error (rather common in manufacturer-supplied PPD files) the printer errors out and ignores all subsequent queries putting the auto-configuration job into a 90-second timeout for each query. This patch protects the job against failures on broken PostScript and shortens the timeout to 10 seconds, so that as many options as possible get auto-configured in a reasonable time. Thanks to Helge Blischke for applying the needed PostScript tricks (CUPS STR #4028). Now auto-configuration of PostScript printers actually works by sending a job like "echo -en '#CUPS-COMMAND\nAutoConfigure\n' | lp -d <printer>" which could be done by a button in a printer setup tool. cups (1.5.2-4) unstable; urgency=low [ Till Kamppeter ] * debian/local/blacklist-cups-usblp.conf, debian/cups.install: Removed the blacklisting of the "usblp" kernel module. The new libusb-1.0.x- based "usb" backend automatically disconnects the module from the printer with which it communicates and reconnects it afterwards. This way we can keep the module available for third-party drivers but let the CUPS backend use the more modern libusb method, especially providing bi-di access for all printers (CUPS STR #3626). [ Martin Pitt ] * Clean up /etc/modprobe.d/blacklist-cups-usblp.conf conffile on upgrade, using dpkg-maintscript-helper. Add necessary dpkg pre-depends for this. * debian/cups.{pre,post}inst: Remove upgrade transitions for versions prior to Debian Squeeze/Ubuntu 10.04 LTS. cups (1.5.2-3) unstable; urgency=low * debian/patches/usb-backend-backchannel-support.patch: Added backchannel (bi-directional access) support to the "usb" backend. This allows things like status checks, auto-configuration (run command "echo -en '#CUPS-COMMAND\nAutoConfigure\n' | lpr -P <printer>" on USB-connected PostScript printer with manufacturer's PPD), and also use of proprietary manufacturer drivers which require read-back from printer (CUPS STR #2890). cups (1.5.2-2) unstable; urgency=low * debian/patches/series: Actually add the new patches for the IPP backend and the SNMP supply level check (LP: #879625, LP: #881843, LP: #925086, LP: #926457). cups (1.5.2-1) unstable; urgency=low [ Till Kamppeter ] * New upstream release * debian/patches/00svn_gif_overflow.patch, debian/patches/cups-driverd-recognize-cached-drv-generated-ppds.patch, debian/patches/dont-send-malformed-dbus-messages.patch, debian/patches/execute-commandtops-commands.patch, debian/patches/usb-backend-gracefully-fail-on-more-cases-of-bad-device-id.patch, debian/patches/usb-backend-skip-set-configuration-set-interface.patch: Removed, included upstream. * debian/patches/ipp-patch-r8950+.patch, debian/patches/ipp-backend-fails-to-trigger-authentication-prompts.patch, debian/patches/ipp-backend-missing-document-type.patch, debian/patches/ipp-backend-http-1.0-fallback-fix.patch: Replaced patch for downgrading to the IPP backend to the version of CUPS 1.4.x by patches for the current backend (LP: #879625, LP: #881843, CUPS STR #3985, CUPS STR #3986, CUPS STR #3988, thanks to Robert Bradley, robert dot bradley1 at gmail dot com, for the patches). * debian/patches/drop_unnecessary_dependencies.patch: Updated patch to add "-lm" to the linker command line, libcups uses the "fmod()" function now. * debian/patches/cups-avahi.patch, debian/patches/usb-backend-libusb-1.0.patch, debian/patches/printer-filtering.patch: Manually regenerated to adapt to upstream changes. * debian/patches/pidfile.patch, debian/patches/rootbackends-worldreadable.patch, debian/patches/colord-support.patch, debian/patches/airprint-support.patch, debian/patches/no-conffile-timestamp.patch, debian/patches/read-embedded-options-from-incoming-postscript-and-add-to-ipp-attrs.patch, debian/patches/do-not-broadcast-with-hostnames.patch, debian/patches/do-not-suppress-inputslot-setting-with-empty-ap-d-inputslot.patch, debian/patches/confdirperms.patch, debian/patches/show-compile-command-lines.patch, debian/patches/log-debug-history-nearly-unlimited.patch, debian/patches/dnssd-reg-array-linear-search.patch: Refreshed using quilt. * debian/patches/fix-supply-level-computation-for-percent-supply-unit.patch, debian/patches/fix-supply-levels-for-enumerated-prtmarkersupplieslevel.patch, debian/patches/fix-status-reports-when-supply-levels-grow.patch: The printer supply levels reported via SNMP, according to the printer MIB were not correctly interpreted (LP: #925086, CUPS STR #4016, thanks to Peter Hurley, peter at hurleysoftware dot com, for the patches). * debian/patches/add-status-reports-for-full-waste-trays-and-cleaner-unit-eol.patch: Added status reports for waste tray status and cleaner unit end-of-life (LP: #925086, CUPS STR #4017, thanks to Peter Hurley, peter at hurleysoftware dot com, for the patch). * debian/patches/match-marker-colorants-which-use-non-standard-string.patch: Try harder to match supply colorant values (LP: #925086, CUPS STR #4019, thanks to Peter Hurley, peter at hurleysoftware dot com, for the patch). * debian/patches/truncate-marker-supply-names-at-comma.patch: Commas in marker supply names misinterpreted as additional markers (LP: #926457, CUPS STR #4020, thanks to Peter Hurley, peter at hurleysoftware dot com, for the patch). * debian/cups.postinst, debian/cups.prerm: Updated symlinks for alias names of debconf-selectable CUPS backends. [ Martin-Éric Racine ] * Removed myself from Uploaders. [ Martin Pitt ] * debian/control: Drop now obsolete poppler-dev build dependency, thanks Pino Toscano. (Closes: #658237) * Drop do-not-emit-ps-level-3-with-poppler.patch, filter is now built by the cups-filters package. * debian/control, debian/rules: libusb-1.0 is not available on hurd. Drop build dependency on hurd and build with --disable-libusb there. Thanks Pino Toscano for the patch. (Closes: #658236) cups (1.5.0-16) unstable; urgency=low [ Till Kamppeter ] * debian/filters/, debian/local/backends/, debian/local/filters/, debian/local/cpdftocps.convs, debian/local/oopstops.convs, debian/local/oopstops.types, debian/local/postscript.ppd, debian/local/pstopdf.convs, debian/local/pstopdf.types, debian/local/text.convs, debian/local/textonly.ppd, debian/cups.install, debian/cups-common.links, debian/cups.links, debian/rules: Removed all add-on filters and backends which now get hosted by OpenPrinting in the OpenPrinting CUPS filters package (Debian package "cups-filters"). Also removed some obsolete or redundant filters/backends/PPDs: mailto, oopstops, dvipipetops, samba-to-ps, postscript.ppd, pdf.ppd. * debian/rules: Removed filters, backends, and MIME conversion rules from upstream CUPS which have now moved to the cups-filters package. * debian/rules: Do not apply the PDF filters add-on package any more as the filters are supplied by cups-filters now. Call aclocal and autoconf explicitly, as the add-on package does not call them for us any more. * debian/control: Let the cups binary package depend on cups-filters, so that the moved filters and backends stay available. * debian/control: Do not build-depend on liblcms1-dev any more. We do not have the PDF filters in this package any more. * debian/control: Do not depend on ttf-freefont any more. * debian/cups.lintian-overrides: Removed entries for serial and parallel backends. * debian/cups.postinst, debian/cups.prerm, debian/cups.templates, Updated debconf for the removal of the parallel and serial backends. * debian/patches/ubuntu/poppler-0.18.patch: Removed, as the CUPS package does not contain the PDF filters any more. [ Martin Pitt ] * debian/rules: Stop setting LC_MESSAGES, this was fixed upstream in the test suite a while ago. * Drop debian/dirs: Unnecessary. * Drop debian/suid: Not used anywhere, and the time when cups shipped suid backends is long gone. * Drop debian/docs: Redundant with debian/cups.docs. * Drop debian/patches/pdftops-testsuite.patch: Not applied, and fixed upstream. * manpage-translations.patch: Update German translations, thanks Helge Kreutzmann. (Closes: #630217) * Add Polish debconf translations, thanks Michał Kułach. (Closes: #657670) * debian/local/apparmor-profile: Allow cups-pdf to read /var/spool/cups. (LP: #923538) cups (1.5.0-15) unstable; urgency=low * debian/patches/execute-commandtops-commands.patch: When sending maintenance command files to PostScript printers the commands got printed as plain text and not executed, due to the "commandtops" filter not being executed (CUPS STR #4007). * debian/patches/series, debian/patches/usb-backend-gracefully-fail-on-more-cases-of-bad-device-id.patch, debian/patches/usb-backend-libusb-1.0.patch, debian/patches/usb-backend-skip-set-configuration-set-interface.patch: Added references to the upstream bugs under which these patches got submitted upstream as header comments. Also moved the entries in the series file to the section of patches submitted upstream. * debian/patches/usb-backend-libusb-1.0.patch: Updated the patch to correctly generate the make/model string if no device ID could be found. Before, arbitrary memory content was picked up, not only giving an ugly listing of the ID-less printer in printer setup tools but also a being a potential crash bug. cups (1.5.0-14) unstable; urgency=low [ Till Kamppeter ] * debian/patches/usb-backend-libusb-1.0.patch: Migrated the "usb" CUPS backend to libusb 1.0.x, as libusb 0.1.x is deprecated and not maintained upstream any more. Also make printers working independent of what gets reported as their device ID, including random characters or nothing. This should especially make all USB->Parallel adapters work (LP: #910272). * debian/control: Build-depend on libusb-1.0-0-dev instead of on libusb-dev. [ Martin Pitt ] * debian/local/filters/pdf-filters/pdftoopvp/OPVPOutputDev.{h,cxx}: Drop definition of drawLink(). It is not being used anywhere and uses the "Link" class which is gone in poppler 0.18. * Add debian/patches/ubuntu/poppler-0.18.patch: Port SplashFontEngine() constructor call to poppler 0.18 API. Keep it as Ubuntu patch until Debian gets poppler 0.18, too. (Closes: #645507) cups (1.5.0-13) unstable; urgency=low [ Till Kamppeter ] * debian/patches/ipp-patch-r8950+.patch: Revert the IPP backend to the state of CUPS 1.4.x, as the 1.5.x versiuon has major regressions (LP: #877958, LP: #879625, LP: #881843, LP: #883585, Closes: #638521, CUPS STR #3966, CUPS STR #3967). This patch will get removed as soon as upstream has fixed all these regressions. As upstream did not announce any new features for the IPP backend in the release notes for 1.5.x, we assume that with this step no features will get lost. * debian/patches/dont-send-malformed-dbus-messages.patch: Do not send D-Bus notifications with too few parameters when there are parameters which cannot be added to the D-Bus request, especially invalid UTF-8 strings. This made gnome-session-daemon crash (LP: #893676, CUPS STR #3984). * debian/local/filters/cpdftocps: The cpdftocps filter (used for PostScript printers and for drivers with PPDs which are not PDF-aware) did not recognize the duplex setting correctly, making duplex not working on many common printers (LP: #897723). * debian/local/filters/cpdftocps: Cleaned up the header comments. [ Martin-Éric Racine ] * [cups.postrm]: purge /etc/cups/ssl/server.[crt|key] and /etc/cups/ssl. [ Martin Pitt ] * debian/compat: Bump from 5 to 9, this apparently was forgotten in the Multi-Arch transition. cups (1.5.0-12) unstable; urgency=low [ Martin-Éric Racine ] * debian/control: cups-ppdc: move from net/optional to utils/optional to match the repository override's correct assumption. * Fixed: Lintian: W: spelling-error-in-changelog: lenght length. * Fixed: Lintian: I: conflicts-with-version: cupsddk-drivers (<< 1.4.0). * Fixed: Lintian: I: conflicts-with-version: cupsddk (<< 1.4.0). * Fixed: Lintian: W: symbols-file-contains-debian-revision: 1.5.0-0ubuntu1 (-0ubuntu1 version removed): _mimeError@Base and mimeNew@Base. * Removed |libheimdal-dev from libcups2-dev Depends. (Closes: #648105) [ Martin Pitt ] * Add debian/source/options: Ignore .bzr-builddeb/, for developers who use bzr, but not bzr-buildpackage. * debian/cups.lintian-overrides: Quiesce "possible-missing-stop" warning, we quite deliberately do not run the init script on levels 0 and 6. cups (1.5.0-11) unstable; urgency=low [ Till Kamppeter ] * debian/patches/usb-backend-gracefully-fail-on-more-cases-of-bad-device-id.patch: When reading out the device ID check also for too short lengths of the device ID and also in this case try to change the byte order of the length bytes and fail if the device ID lenght is still too short (LP: #887094). * debian/patches/usb-backend-skip-set-configuration-set-interface.patch: Avoid unneeded SET_CONFIGURATION and SET_INTERFACE requests after the printer has already been configured. This often leads to subsequent jobs coming out as garbage or not at all (CUPS STR #3965, LP: #872483). * debian/patches/usb-backend-reset-printer-before-printing.patch: Removed, as we are using the less invasive approach of CUPS STR #3965 now. This also removes the Linux specific #include, causing FTBFS on non-Linux platforms. (Closes: #647666) * debian/cups.postinst: Allow PPD updater trigger files in /usr/share/cups/ppd-updaters/ also be named printer-driver-<driver>.ppd-updater and not only <driver> or <driver>.ppd-updater. This makes it easier to provide these files in the printer driver packages when we rename all binary packages of printer drivers to "printer-driver-<driver>". [ Martin-Éric Racine ] * debian/control: + Added the Homepage field. + Cleaned up duplicate Build-Depends. * Removed |libheimdal-dev alternative from Build-Depends (Closes: #648105) cups (1.5.0-10) unstable; urgency=low * debian/cups.postinst: Allow PPD updater trigger files in /usr/share/cups/ppd-updaters/ also be named <driver>.ppd-updater and not only simply <driver>. This makes it easier to provide these files in the printer driver packages. * debian/patches/usb-backend-reset-printer-before-printing.patch: When using the "usb" CUPS backend, reset the printer before each job as otherwise on some printers subsequent jobs will come out as garbage (LP: #872483). cups (1.5.0-9) unstable; urgency=low [ Till Kamppeter ] * debian/patches/do-not-suppress-inputslot-setting-with-empty-ap-d-inputslot.patch: CUPS adds the option setting "AP_D_InputSlot=" to every job. This overrides the InputSlot option and so the InputSlot setting and even the default setting for InputSlot in the PPD get never used, rendering InputSlot useless (LP: #872527). * debian/patches/cups-avahi.patch: Updated patch from upstream (Red Hat) to fix crashes of the CUPS daemon when using the timeout function call functionality (LP: #860691, LP: #860498). [ Martin Pitt ] * debian/local/apparmor-profile: Also allow cups to map libraries under /usr/local/. (LP: #860765) * cups-avahi.patch: Make sure to guard against retrying the Avahi connection whilst already doing so. Thanks to Tim Waugh for the patch! (LP: #877967) [ Michael Vogt ] * debian/control: Add Conflicts/Replaces: libcupsys2 to ensure that the apt resolver can calculate the upgrade in a multiarch scenario where a old libcupsys2 package is installed (LP: #874835) cups (1.5.0-8) unstable; urgency=medium * Urgency medium due to security fix. The previous version wasn't in testing yet, but already matured for half of the usual period, so it will still be 10 days in sum. * Add 00svn_gif_overflow.patch: Fix heap overflow with broken/crafted GIF files. Patch taken from upstream svn. [CVE-2011-3170] cups (1.5.0-7) unstable; urgency=low [ Till Kamppeter ] * debian/patches/dnssd-reg-array-linear-search.patch: Let the array of DNS-SD-registered printers be searched linearly and not binarily by the DNS-SD service name, as due to another bug the DNS-SD service name is not correctly set in some array elements (LP: #855445). Not reporting upstream yet, as the original bug can be in the Avahi support patch. [ Martin Pitt ] * debian/local/cups.upstart: Lower the timeout for waiting for the socket to 3 seconds. Tweak the respawn count and limit to be longer than the socket poll time, so that a continuously failing cupsd process will not cause an eternal respawn loop. (LP: #854490) * debian/control: Have libcupsmime1 break pre-1.5 versions of cups as well, so that we avoid having a configured "cups" packae with an upgraded, but unconfigured libcupsmime1 package. This takes care of LP: #854490 during upgrades. * debian/rules: Configure with --enable-debug, to stop the upstream build system stripping all our binaries. This fixes the cups-dbg package. cups (1.5.0-6) unstable; urgency=low * debian/cups-client.install: Do not install the jpg/pdf/ps ipptool test files. They are quite large, and not used anywhere by cups itself. * debian/libcups2.symbols, debian/libcupsmime1.symbols: Drop revisions from new symbols of 1.5.0. * debian/local/apparmor-profile: Some third-party filters install themselves into a subdirectory of /usr/lib/cups/filter, adjust rule. (See LP #160092) * debian/control: Force libcups2 (>= 1.5) dependency on libcupsmime1, as it uses private symbols from libcups2. (Closes: #641182) * debian/libcupsmime1.symbols: Drop Debian revision suffix. * Update debconf translations (debconf-updatepo). cups (1.5.0-5) unstable; urgency=low [ Till Kamppeter ] * debian/cups.postinst: When executing the trigger on *.ppd-updater files of printer driver packages, log the modification dates of the *.ppd-updater (are more or less the build dates of the driver packages) after updating the PPDs of the existing queues for this package and only update again if the *.ppd-updater file has a different modification date (package got replaced). This avoids unnecessary updates and so long delays when one printer driver package gets updated. * debian/control: Added myself to Uploaders: to avoid Lintian warnings about unlogged NMUs. [ Martin Pitt ] * debian/control: Bump Breaks: cups version for libcups2, as cupsd seems to use internal private symbols from this library. (Closes: #638462) cups (1.5.0-4) unstable; urgency=low * debian/cups.postinst: Another fix for the PPD updater: Let the PPD updater not stop altogether in the case that for one driver there is no entry at all in the output of "lpinfo -m". This is for example the case for foomatic-db-engine if foomatic-db is not installed. cups (1.5.0-3) unstable; urgency=low * debian/patches/cups-driverd-recognize-cached-drv-generated-ppds.patch: CUPS did not recognize that the PPD files generated by *.drv are cached in ppds.dat, and when reloading them over the entries already loaded from the cache, the PPD list got totally messed up (CUPS STR #3921). * debian/cups.postinst: Clear PPD cache when upgrading from an older version to remove the buggy entries for the *.drv files. * debian/cups.postinst: Fixes on the PPD updater: o Added "return 0" at the end of the ppd_updater() function, otherwise the progrem terminates at its end and so only the first updater file in /usr/share/cups/ppd-updaters/ is treated. o Added quotes around parameter names to conserve the special characters of the regexps. o Made sure that when regexps are applied to the lines of the temporary files that the resulting lines have still single newlines at their ends. o Log for which drivers the PPDs get updated. cups (1.5.0-2) unstable; urgency=low [ Didier Raboud ] * Add a dpkg trigger to update the queues' PPDs on (cooperative) driver upgrades (Closes: #637978). [ Till Kamppeter ] * debian/patches/cups-avahi.patch: Resynced with patch upstream (Tim Waugh, Red Hat), via "git clone http://twaugh.fedorapeople.org/cups-avahi.git; cd cups-avahi, git diff origin/master origin/avahi-services-1.5 > ../cups-1.5-avahi.patch" and replacing cups-avahi.patch by the resulting patch. * debian/patches/airprint-support.patch: The changes for supporting Apple's AirPrint are not in Tim Waugh's upstream repository of cups-avahi.patch. Therefore we carry these changes in a separate patch to make syncing with Tim's patch easier. * debian/patches/no-conffile-timestamp.patch: Refreshed with quilt. * debian/patches/colord-support.patch: Added colord support. Thanks to Richard Hughes from Red Hat for the patch (LP: #787767, CUPS STR #3808). * debian/patches/no-conffile-timestamp.patch, debian/patches/read-embedded-options-from-incoming-postscript-and-add-to-ipp-attrs.patch, debian/patches/show-compile-command-lines.patch: Refreshed with quilt. * debian/control: Added "Recommends: colord" to the cups binary package. * debian/rules: Deactivated test suite failures only for this upload as the test suite must be adapted to colord. It changes the number of warnings in error_log which makes the test suite fail. * debian/local/filters/pdf-filters/pdftopdf/P2PFont.cxx, debian/local/filters/pdf-filters/pdftopdf/P2POutput.cxx, debian/local/filters/pdf-filters/pdftopdf/pdf2pdf.cxx: Several bug fixes on the pdftopdf filter from the upstream author Koji Otani. This fixes especially LP: #780935. cups (1.5.0-1) experimental; urgency=low [ Till Kamppeter ] * New upstream release * debian/patches/usb-backend-no-segfault-on-bad-device-id.patch, debian/patches/usb-backend-accept-old-usblp-uris.patch, debian/patches/use-ps2write-ghostscript-device-for-pdftops-filter.patch: Removed, included upstream. * debian/patches/poppler-based-pdftops-fixes.patch, debian/patches/do-not-emit-ps-level-3-with-poppler.patch: Replaced patch by a new one only containing the parts which remain after removing the parts included upstream. * debian/patches/pidfile.patch, debian/patches/ppd-poll-with-client-conf.patch, debian/patches/cups-avahi.patch, debian/patches/drop_unnecessary_dependencies.patch, debian/patches/do-not-broadcast-with-hostnames.patch, debian/patches/ppdc-dynamic-linking.patch, debian/patches/pstops-based-workflow-only-for-printing-ps-on-a-ps-printer.patch: Manually regenerated to adapt to upstream changes. * debian/patches/manpage-translations.patch, debian/patches/rootbackends-worldreadable.patch, debian/patches/no-conffile-timestamp.patch, debian/patches/read-embedded-options-from-incoming-postscript-and-add-to-ipp-attrs.patch, debian/patches/cups-snmp-oids-device-id-hp-ricoh.patch, debian/patches/configure-default-browse-protocols.patch, debian/patches/logfiles_adm_readable.patch, debian/patches/confdirperms.patch, debian/patches/printer-filtering.patch, debian/patches/show-compile-command-lines.patch, debian/patches/log-debug-history-nearly-unlimited.patch: Refreshed using quilt. * debian/patches/default-ripcache-size-auto.patch: Dropped, as once, Ghostscript 9.04 is ignoring the cache size value as it crashes easily otherwise (Ghostscript upstream bug #691586) and second, CUPS defaults to more reasonable 128 MB (now only used for imagetops). * debian/patches/support-gzipped-charmaps.patch: Dropped, as the SBCS and VBCS character maps are not used any more by CUPS. * debian/rules: Enable threads in the ./configure command line, as otherwise CUPS 1.5.0 does not build at all. * debian/local/filters/pdf-filters/filter/pdftoijs.cxx, debian/local/filters/pdf-filters/filter/pdftoraster.cxx, debian/local/filters/pdf-filters/pdftoopvp/pdftoopvp.cxx, debian/local/filters/pdf-filters/pdftopdf/pdftopdf.cxx: Under CUPS 1.5.x. all programs using the PPD API of CUPS need to explicitly include "<cups/ppd.h>". Updated the PDF filter add-on package. * debian/local/filters/pdf-filters/addtocups: Make the addition of the pdftopdf and pdftoopvp directories also work with CUPS 1.5.x. * debian/local/filters/pdf-filters/addtocups, debian/local/filters/pdf-filters/removefromcups: Added a symbolic link cups/i18n.h, so that texttopdf builds. * debian/cups-client.install: Install the new ipptool and its sample files and manpages. * debian/cups-client.install: Commented out lines for dropped man page translations: ipptool, lppasswd, client.conf, ipptoolfile, cupsenable, lpadmin, lpinfo, cupsreject, cupsdisable, cupsaccept * debian/cups-common.install, debian/rules: The /usr/share/cups/charmaps directory got removed from CUPS. * debian/libcups2-dev.install: cups/i18n.h got renamed to cups/language-private.h. Install this as /usr/include/cups/i18n.h. * debian/libcups2.symbols, debian/libcupsmime1.symbols: Updated. * debian/cups.lintian-overrides, debian/cups.postinst, debian/cups.prerm, debian/cups.templates, debian/local/apparmor-profile: The "scsi" CUPS backend got dropped upstream, removed its treatment from these files. [ Martin Pitt ] * Add Serbian (Cyrillic) debconf translations, thanks Zlatan Todoric. (Closes: #635105) * Add Serbian (Latin) debconf translations, thanks Zlatan Todoric. (Closes: #635108) * debian/local/apparmor-profile: Allow access to serial printers on USB adapters. (LP: #677432) cups (1.4.8-2) unstable; urgency=low * debian/control: Unbreak Maintainer: field. (Closes: #636574) cups (1.4.8-1) unstable; urgency=low [ Till Kamppeter ] * debian/filters/pstopdf: Added "-dNOINTERPOLATE" to the Ghostscript command line, this makes Ghostscript vastly faster. * debian/patches/use-ps2write-ghostscript-device-for-pdftops-filter.patch: Regenerated the patch, as we actually use it now. The "ps2write" output device produces finally DSC-conforming PostScript and so we can use Ghostscript for the pdftops filter. Made the patch also adding the "-dNOINTERPOLATE" to the Ghostscript command line. * debian/patches/series: Reactivated use-ps2write-ghostscript-device-for-pdftops-filter.patch and promoted it to the patches which should be submitted upstream. * debian/rules: Build CUPS with a Ghostscript-based pdftops filter. * debian/rules: Do not rename the pdftoraster filter of the PDF filter add-on any more as Ghostscript has the unified gstoraster filter now. Change the cost factor to make Ghostscript's filter being preferred. * debian/control: Let the "cups" package require at least version 9.02 of Ghostscript, as this version does not ship a filter named pdftoraster any more. Added Replaces/Breaks on older Ghostscript versions (ghostscript-cups binary package) for smooth updating. [ Jamie Strandboge ] * debian/local/apparmor-profile: we need to allow both /var/run and /run for upgrades (LP: #810687) [ Martin Pitt ] * New upstream bug fix release, fixing two regressions from 1.4.7. (Closes: #635842) * debian/watch: Look for tar.bz2 instead of tar.gz now. * debian/local/apparmor-profile: Explicitly deny cupsd to write /run/samba, to avoid dmesg errors. (LP: #812035) * debian/control: Slightly relax ghostscript dependency to also match current Debian version. * debian/control: Add missing ghostscript build dependency. cups (1.4.7-1ubuntu5) oneiric; urgency=low * debian/control: Added Replaces/Breaks on older Ghostscript versions (ghostscript-cups binary package) for smooth updating (LP: #815206). cups (1.4.7-1ubuntu4) oneiric; urgency=low Reupload Debian packaging trunk for the FTBFS fix (missing ghostscript build dep). [ Till Kamppeter ] * debian/filters/pstopdf: Added "-dNOINTERPOLATE" to the Ghostscript command line, this makes Ghostscript vastly faster. * debian/patches/use-ps2write-ghostscript-device-for-pdftops-filter.patch: Regenerated the patch, as we actually use it now. The "ps2write" output device produces finally DSC-conforming PostScript and so we can use Ghostscript for the pdftops filter. Made the patch also adding the "-dNOINTERPOLATE" to the Ghostscript command line. * debian/patches/series: Reactivated use-ps2write-ghostscript-device-for-pdftops-filter.patch and promoted it to the patches which should be submitted upstream. * debian/rules: Build CUPS with a Ghostscript-based pdftops filter. * debian/rules: Do not rename the pdftoraster filter of the PDF filter add-on any more as Ghostscript has the unified gstoraster filter now. Change the cost factor to make Ghostscript's filter being preferred. * debian/control: Let the "cups" package require at least version 9.02 of Ghostscript, as this version does not ship a filter named pdftoraster any more. [ Jamie Strandboge ] * debian/local/apparmor-profile: we need to allow both /var/run and /run for upgrades (LP: #810687) [ Martin Pitt ] * debian/local/apparmor-profile: Explicitly deny cupsd to write /run/samba, to avoid dmesg errors. (LP: #812035) * debian/control: Slightly relax ghostscript dependency to also match current Debian version. * debian/control: Add missing ghostscript build dependency. cups (1.4.7-1) unstable; urgency=low * New upstream version. [ Till Kamppeter ] * debian/patches/ubuntu-upstart.dpatch: Updated the patch to add support to the new device enumeration functionality of udev-configure-printer. This way we do not need to retrigger the printers. Retriggering is only needed if udev rules change. A fallback to the old behavior is provided so that this CUPS package continues to work with older versions of udev-configure-printer. [ Martin Pitt ] * Update patches for new upstream release. * Drop fix-broken-ipv6-uris.patch, applied upstream. * debian/local/apparmor-profile: /var/run → /run transition. (LP: #810270) * Drop debian/patches/ubuntu-upstart.dpatch and move the upstart script to debian/local/cups.upstart. In debian/rules, copy it to debian/, and remove that again during clean. This is a slightly easier workaround for a nonexisting "dh_installinit --sysvinit-only" option than the previous creation of the upstart file with an ubuntu specific dpatch. * debian/patches/, debian/rules, debian/control, debian/source/format: Move to source format "3.0 (quilt)" and convert our dpatches to quilt patches. Drop dpatch build dependency. * Move Ubuntu specific patches to debian/patches/ubuntu. In debian/rules, apply them when building on Ubuntu. Add "patch" build dependency. cups (1.4.6-11) unstable; urgency=low [ Till Kamppeter ] * debian/patches/cups-avahi.dpatch: Updated Avahi patch to fix places in the CUPS source code where libdns_sd is supported but not Avahi. especially accept being called with a hostname with ".local" domain so that AirPrint works without "ServerAlias *" in cupsd.conf (LP: #801306). [ Steve Langasek ] * Build for multiarch. (Closes: #631425) cups (1.4.6-10) unstable; urgency=low * debian/patches/cups-avahi.dpatch: Updated Avahi patch so that it generates the DNS-SD service names also correctly if there is a very long server name. Before it could crash if the server name was longer than AVAHI_LABEL_MAX - 4 (60) characters (LP: #793265). cups (1.4.6-9) unstable; urgency=low [ Till Kamppeter ] * debian/patches/usb-backend-accept-old-usblp-uris.dpatch: Fixed bugs in the patch which got introduced by the upstream clean-up and by the fix of a potential segfault. * debian/patches/usb-backend-accept-old-usblp-uris.dpatch: Patch got accepted upstream, replaced it by the version from the upstream trunk (1.5.x). [ Martin Pitt ] * debian/cups.postinst: Quiesce errors from rmmod. (Closes: #630109) cups (1.4.6-8) unstable; urgency=low [ Till Kamppeter ] * debian/patches/usb-backend-accept-old-usblp-uris.dpatch: Let the libusb-based "usb" backend accept also the old device URIs from the usblp-kernel-module-based "usb" backend, so that printing stays working for users who update from an old CUPS package with the usblp-based backend without needing to migrate the URIs. Warnings in error_log tell about the use of old URIs and the advantages of updating them. * debian/patches/cups-deviced-allow-device-ids-with-newline.dpatch: Fixed segfault happening sometimes when a device with a newline in its device ID is found. [ Martin Pitt ] * Drop usb-backend-both-usblp-and-libusb.dpatch. It's causing crashes, and upstream does not want it either. Instead, add a blacklist file debian/local/blacklist-cups-usblp.patch and install it into /etc/modprobe.d/; that way, we don't require kernels to disable usblp, and allow other spoolers than cups to work. * debian/cups.postinst: rmmod usblp on upgrades from earlier versions or fresh installs, to make above change effective without reboots as well. cups (1.4.6-7) unstable; urgency=low * debian/patches/cups-avahi.dpatch: Updated Avahi patch so that it does not generate too long service names which Avahi does not accept. Printers did not get advertized via DNS-SD then. (LP: #793265). * debian/patches/cups-avahi.dpatch: Updated Avahi patch to add the text field entry "URF=none" and the service subtype "_universal" so that mDNS/Bonjour-advertized printers are recognized by AirPrint clients (iPhone/iPad with iOS 4.2 or newer). (LP: #711779). * debian/patches/cups-avahi.dpatch: In contrary to the libdns_sd API the Avahi API requires port numbers in host order and not in network order. This made the Avahi-based DNS-SD broadcasting of CUPS advertizing wronmg port numbers. Updated the Avahi patch to fix it. Thanks to Tim Waugh from Red Hat on confirming this (LP: #792309). * debian/local/filters/pdf-filters/pdftopdf/P2PResources.cxx: Fixed memory leak in pdftopdf filter which made the filter taking up several gigabytes when processing certain PDF files. Thanks to upstream author Koji Otani for the quick fix (LP: #790378). * debian/local/pstopdf.convs, debian/local/pstopdf.types: Do not apply the PDF printing workflow to PostScript input coming from the Adobe Reader. If this PostScript comes from an encrypted (DRM) PDF, it cannot be converted to PDF again by Ghostscript (LP: #782309). cups (1.4.6-6) unstable; urgency=low [ Till Kamppeter ] * debian/filters/pstopdf: Let pstopdf determine the page size via the "PageSize" or "PageRegion" setting in the 5th command line argument and not via "media". The "media" setting is usually inserted by CUPS and uses a PWG name of the paper size and not the name used in the PPD file. This makes Ghostscript being called without paper size setting and so a PDF file in the default paper size (A4/Letter) is passed on, breaking any printout from applications which send jobs in PostScript and which have a non-default paper size (LP: #787635). [ Martin Pitt ] * Revert calling "convert" on the banner PNGs (r961); the file is already correct in the source. The format conversion happens in Ubuntu's pkgbinarymangler, so it does not affect Debian builds at all and also this cannot be circumvented that way. Instead, blacklist this package from pkgstripfiles. (LP: #710881) * Bump Standards-Version to 3.9.2 (no changes necessary). cups (1.4.6-5) unstable; urgency=low [ Till Kamppeter ] * debian/patches/cups-avahi.dpatch: Updated the patch to add Avahi support to the newest state of the art from http://twaugh.fedorapeople.org/cups-avahi/ (upstream of the patch), in the hope to fix CUPS crashers like LP #759031, #754567, #711875, #751770. [ Martin Pitt ] * debian/local/apparmor-profile: Add cap_dac_read_search for cups-pdf. This circumvents the sandboxing even more, but with cups-pdf's architecture there is no way around it. (LP: #295536) cups (1.4.6-4) unstable; urgency=low * debian/patches/fix-broken-ipv6-uris.dpatch: When accessing the web interface via http: (unencrypted) and one does an adminstrative task which requires encryption, on upgrading to https: (encrypted) mode IPv6 IP addresses without "[...]" get inserted into the URL and the browser cannot parse the URL correctly. Fixed with a patch from upstream (LP: #744674). * debian/rules: Convert cups.png (CUPS logo for test page) to RGBA, as the original 8-bit-per-pixel color map format leads to a crash in libpng. This prevents the CUPS test page and the banner pages from printing (LP: #710881). * debian/control: Add ImageMagick to the build dependencies, as it is needed for the CUPS logo image conversion. cups (1.4.6-3) unstable; urgency=low [ Till Kamppeter ] * debian/local/filters/pdf-filters/filter/pdftoraster.cxx: Latest bug fixes from upstream: o Respect the "*RequiresPageRegion" attribute of the PPD files in the same way as pstops does (LP: #405116). o Change default rendering intent to PERCEPTUAL. o Use external ICC color profile also with CMYK color space. * debian/local/filters/pdf-filters/pdftopdf/pdftopdf.cxx: Latest bug fixes from upstream: o Support ipp-attribute-fidelity option and MirrorPrint choice. This is needed that appropriate options in printing dialogs and printer setup tools are respected. [ Martin Pitt ] * debian/control: Downgrade smbclient to Recommends. (Closes: #618545) cups (1.4.6-2) unstable; urgency=low [ Till Kamppeter ] * debian/printer.schema: Added missing "printerType" attribute. Thanks to Mario Fetka for the hint (LP: #724980). [ Martin Pitt ] * ubuntu-upstart.dpatch: Fix start failure if apparmor-profile-load doesn't exist. Thanks Zach! (LP: #728592) [ Martin-Éric Racine ] * Added Recommends:smbclient to cups-client (Closes: #616015). cups (1.4.6-1) unstable; urgency=low * New upstream release. [ Martin Pitt ] * ppdc-dynamic-linking.dpatch: Update to new upstream version. * debian/control: Bump smbclient from Suggests to Recommends. (Closes: #595771) [ Martin-Éric Racine ] * Updated my contact info in debian/control. cups (1.4.5-3) unstable; urgency=low [ Till Kamppeter ] * debian/rules: Do not remove the /usr/share/cups/model/ directory, some manufacturer-supplied printer drivers (like from Brother) still use it. * debian/rules: Remove a cost factor change for pstops. It is not used any more and overridden by pstops-based-workflow-only-for-printing-ps-on-a-ps-printer.dpatch * debian/local/filters/pdf-filters/filter/pdftoraster.cxx, debian/local/filters/pdf-filters/conf/pdftoraster.convs, debian/local/filters/pdf-filters/README, debian/local/filters/pdf-filters/addtocups debian/local/filters/pdf-filters/conf/HP-PhotoSmart_Pro_B8300-hpijs-pdftoijs.ppd, debian/local/filters/pdf-filters/config-scripts/cups-pdf-filters.m4, debian/local/filters/pdf-filters/removefromcups: Upstream changes of the PDF filter add-on package: o Added the Poppler-based pdftoraster filter. This filter is much faster than the Ghostscript-based filter (LP: #668800). o Cleaned up the sample PPD file for pdftoijs (does not go into the Debian/Ubuntu package of CUPS). * debian/rules: Rename the newly added Poppler-based pdftoraster filter to pdftoraster-poppler to not conflict with Ghostscript's pdftoraster and lower its cost factor so that it is prioritized against Ghostscript's filter. * debian/patches/cups-avahi.dpatch: Updated to fix assertion failure (LP: #707592, Red Hat bug #672143). [ Martin Pitt ] * debian/patches/ubuntu-upstart.dpatch: Don't ignore failures from apparmor-profile-load. cups (1.4.5-2) unstable; urgency=low [ Till Kamppeter ] * debian/patches/cups-avahi.dpatch: Added patch from Tim Waugh from Red Hat to implement full Avahi support, not only for printer discovery by the "dnssd" backend but also for print queue broadcasting and browsing by the scheduler (CUPS daemon). Fixes LP: #465916. * debian/patches/dnssd-avahi.dpatch: Removed, is part of new cups-avahi.dpatch. * debian/patches/quiesce-bonjour-warning.dpatch: Removed, not needed any more with the new cups-avahi.dpatch. * debian/rules: Added "--with-local_protocols='CUPS dnssd' --with-remote_protocols='CUPS dnssd'" to the command line of "./configure". This adds support for DNS-SD-based browsing and broadcasting by default. * debian/patches/configure-default-browse-protocols.dpatch: Fixed handling of "--with-local_protocols=..." and "--with-remote_protocols=..." on the command line of "./configure". Now (quoted) values with spaces, like "CUPS dnssd" are treated correctly. * debian/patches/usb-backend-no-segfault-on-bad-device-id.dpatch: Assure that the device ID string read from a USB device can never be a mess: Try other byte order for device ID string length also if length is too small, empty the read device ID string if there is an IOCTL failure, reject ID strings with unprintable characters, clean white space in the ID string, and finally accept the empty ID string as an unknown device. This overcomes the problem that USB-to-Parallel adapter cables do not report back a usable ID string. With these changes it is at least possible to use one adapter cable per computer if the cables do not report unique serial numbers via libusb and any number of adapter cables if they do report serial numbers via libusb. Real USB printers can always be used, also if there are other printers connected with an adapter cable (LP: #468701, LP: #564917). [ Martin Pitt ] * debian/local/apparmor-profile: Explicitly deny access to ttyUSB* to silence noise. This is presumably an extra control channel for some USB printers, but cupsd can't use it anyway. (LP: #692892) * ubuntu-upstart.dpatch: Drop reloading of Samba. It didn't work in some cases, and is better fixed in samba's upstart script (start cups in its pre-start). * debian/rules: Set LC_MESSAGES=C to avoid breaking the test suite in non-English locales. This is a temporary fix until it is resolved upstream (see http://www.cups.org/str.php?L3765). [ Kees Cook ] * ubuntu-upstart.dpatch: Use AppArmor profile loading helper. (LP: #690040) cups (1.4.5-1) unstable; urgency=low [ Martin Pitt ] * New upstream bug fix/security release. The security issue (CVE-2010-2941) was already fixed by a backported patch in the previous upload. * Drop CVE-2010-2941.dpatch, upstream now. * Drop manual-section-for-drv.dpatch, obsolete with new upstream version. * dnssd-avahi.dpatch: Unfuzz for new upstream version. * debian/control: Drop xpdf-* CJK suggests, they got removed from squeeze. (Closes: #603467) * debian/control: Clean up obsolete suggests. * Update Catalan debconf translations, thanks Jordi Mallach! (Closes: #601138) * debian/cups-ppdc.install: Drop drv manpage, doesn't exist any more. [ Till Kamppeter ] * debian/local/filters/pdf-filters/pdftopdf/P2PForm.cxx, debian/local/filters/pdf-filters/pdftopdf/P2PForm.h, debian/local/filters/pdf-filters/pdftopdf/Makefile, debian/local/filters/pdf-filters/pdftopdf/P2PMatrix.h, debian/local/filters/pdf-filters/pdftopdf/P2PPage.cxx, debian/local/filters/pdf-filters/pdftopdf/P2PPage.h, debian/local/filters/pdf-filters/pdftopdf/P2PResources.cxx, debian/local/filters/pdf-filters/pdftopdf/P2PResources.h: Make pdftopdf working with PDF files which use "Form" without "Resource" dictionary. Thanks to Koji Otani for this patch and to Nicola Ruggero for reporting the problem and sending sample files. cups (1.4.4-7) unstable; urgency=low [ Till Kamppeter ] * debian/local/filters/pdf-filters/pdftopdf/parseargs.c, debian/local/filters/pdf-filters/pdftopdf/parseargs.cxx, debian/local/filters/pdf-filters/pdftopdf/parseargs.h, debian/local/filters/pdf-filters/pdftopdf/Makefile: Made pdftopdf building with Poppler 0.15.x. Thanks to Koji Otani for this patch. * debian/control: Added dependency on "cups-ppdc" package to the "cups" package, so that the PPDs of the drivers which come with CUPS get built (LP: #485383). [ Martin Pitt ] * ubuntu-upstart.dpatch: Wait until daemon is ready, to avoid race conditions with init scripts which expect cups tools to work right after restarting it. (LP: #647369) * ubuntu-upstart.dpatch: If D-BUS is not available, start on runlevels 2 to 5, so that this also works in server environments. (LP: #650893) * debian/local/apparmor-profile: Allow access to /usr/local/lib/cups/**. (LP: #160092) * debian/local/apparmor-profile: Allow reading /usr/local/**, in case third-party printer drivers need auxiliary files. * debian/local/apparmor-profile: Allow reading /var/run/**. (LP: #659961) * ubuntu-upstart.dpatch: Time out after 5 seconds when the local socket doesn't get created. Apparently a lot of users disable it in cupsd.conf. (LP: #672438) * debian/local/filters/pdf-filters/addtocups: Link pdftoijs with $(CXX), since it's a C++ program. Fixes FTBFS with gcc 4.5. * debian/local/filters/pdf-filters/pdftopdf/Makefile: Explicitly pdftopdf with -lz. gcc 4.5 does not automatically link to transitive library dependencies any more. * drop_unnecessary_dependencies.dpatch: Drop hunk for reduced krb5/gssapi linkage. With gcc 4.5, we now need -lkrb5. [ Marc Deslauriers ] * Add CVE-2010-2941.dpatch: Fix denial of service and possible code execution via invalid free. Skip over and reserve unused tags in cups/ipp.{c,h}. [CVE-2010-2941] (Closes: #603344) cups (1.4.4-6) unstable; urgency=low * debian/cups.preinst: Go back to using lsb-release, since dpkg-vendor is not installed by default (it's in dpkg-dev). Bump the version guard to this version, to reattempt the migration. (LP: #645328) cups (1.4.4-5) unstable; urgency=low [ Martin Pitt ] * ubuntu-upstart.dpatch: Drop the dependency "on starting smbd", it causes samba to hang on package upgrades or manual restarts. There doesn't seem to be a good way to express this dependency right now. (LP: #639768) Instead, send a SIGHUP to smbd if it is running, which causes it to reload printers. [ Till Kamppeter ] * pstops-based-workflow-only-for-printing-ps-on-a-ps-printer.dpatch: Let CUPS use the former PostScript-based filter chain only if the input file is PostScript and the printer is a PostScript printer with manufacturer-supplied PPD file. This avoids ugly PS->PDF->PS conversions which are bad for the performance and sometimes cause issues (Closes: #593338, requested by Ricoh). cups (1.4.4-4) unstable; urgency=low [ Till Kamppeter ] * default-ripcache-size-auto.dpatch: Replaced patch for letting CUPS default RIP_MAX_CACHE to 1/4 of the system's RAM by a patch defaulting RIP_MAX_CACHE to "auto". See LP: #628030. * debian/patches/cups-snmp-oids-device-id-hp-ricoh.dpatch: Let the "snmp" backend also use the manufacturer-specific MIBs of HP and Ricoh to obtain the device IDs of network-connected printers. This way we get more reliable information about make and model and in addition the supported page description languages, which allow to identify whether an optional PostScript add-on is installed or for an unsupported printer which generic PPD is the best choice (requested by Ricoh, thanks to Tim Waugh from Red Hat to create the patch). [ Martin Pitt ] * debian/control: Drop perl-modules dependency. The only script that uses perl is oopstops, which uses IO::Handle, and this is in perl-base. * debian/control, debian/rules, ubuntu-*.dpatch: Replace lsb_release call with dpkg-vendor, and drop lsb-release build dependency. * Upstartify for Ubuntu: - Add ubuntu-upstart.dpatch: Add debian/cups.upstart script, which now causes Samba to wait for cups to start. Don't have it in debian/ by default, since dh_installinit unconditionally prefers it over .init. - debian/rules: Call dh_installinit with --upstart-only when building on Ubuntu. - debian/cups.preinst: Remove old init script on upgrades when running on Ubuntu. * debian/cups.preinst: Remove some obsolete transitional code. * debian/cups.init.d, debian/cups.postinst: Move custom PPD directory setup from init script into postinst. No need to do that on every boot. cups (1.4.4-3) unstable; urgency=low [ Jamie Strandboge ] * debian/cups.post{inst,rm}: update for local include file * debian/local/apparmor-profile: add local include file [ Martin Pitt ] * debian/rules: Stop building with --enable-threads, since currenu GnuTLS does not work with threads. This brings back the lost SSL/TLS support. (Closes: #588234, #591509) * debian/libcups2.symbols: Readd _http{Read,Write}GNUTLS@Base symbols to ensure that autogenerated shlibs dependencies for libcups get tight enough. * manpage-translations.dpatch: Update German manpage translations, thanks Helge Kreutzmann! (Closes: #588028) * debian/rules: Set DPKG_GENSYMBOLS_CHECK_LEVEL to 4 to point out outdated .symbols files more strongly. * debian/libcups2.symbols, debian/libcupsimage2.symbols: Subsume private optional symbols into regexps. cups (1.4.4-2) unstable; urgency=low [ Till Kamppeter ] * debian/local/filters/pdf-filters/filter/fontembed/bitset.h, debian/local/filters/pdf-filters/filter/fontembed/sfnt.c, debian/local/filters/pdf-filters/filter/texttopdf.c: Fixed bug with subsetting certain composite chars (LP: #605479). * debian/local/acroread.conf, debian/local/pdftops.conf, debian/cups.install: Removed /etc/cups/acroread.conf and /etc/cups/pdftops.conf. These two files were used by the alternative pdftops filter from Helge Blischke. As we switched back to the original pdftops filter these files are not needed any more (LP: #605564). * debian/local/filters/cpdftocps: The PostScript level from the PPD file was not used, but always the default value "2" instead. This made Xerox color laser printers crash on some files. Thanks to Roel van Os for the patch (LP: #600972). [ Martin Pitt ] * debian/control: Reintroduce the libcupsys2{-dev} Provides:, since some third-party printer drivers still depend on them. (LP: #433311) * debian/control: Have libcups2 break older cups versions. (Closes: #588643) cups (1.4.4-1) unstable; urgency=medium [ Till Kamppeter ] * debian/cups.init.d: When loading kernel modules for the parallel port load also the "parport_pc" module (LP: #369850). * debian/filters/pstopdf: Fixed the problem of the UseCIEColor warning of Ghostscript correctly. The file format converter should not do any kind of color correction but simply pass the colors through (LP: #578181). * debian/patches/cups-deviced-allow-device-ids-with-newline.dpatch: Some printers have broken device IDs with newline characters inside. These break the cups-deviced printer discovery mechanism and so the printers get ignored. This patch allows newline characters in device IDs (LP: #468701). [ Martin Pitt ] * New upstream bug fix/security release. Therefore "medium" urgency. - CUPS could overwrite files as root in directories owned or writable by non-root users. [STR #3510, CVE-2010-2431] - The web interface now includes additional CSRF protection. [STR #3498, CVE-2010-0540] - The texttops filter did not check the results of allocations. [STR #3516, CVE-2010-0542] - The web admin interface could disclose the contents of memory. [STR #3577, CVE-2010-1748] * Drop select_use_after_free.dpatch: Applied upstream. * do-not-broadcast-with-hostnames.dpatch: Update to apply to new version. * debian/libcups2.symbols, debian/libcupscgi1.symbols: Update for new version. * Add support-gzipped-charmaps.dpatch: Support gzipped charset → UTF8 maps; they compress very well and take a lot of space. * debian/rules: Compress /usr/share/cups/charmaps/*.txt in cups-common. * debian/local/filters/pdf-filters/*: Reenable call of setErrorFunction() on armel, now that poppler on arm has been fixed (see #575262) * debian/cups.postinst: Drop some obsolete transition code. * debian/cups.postinst: Some versions of cups-pdf (and perhaps other packages) changed the permissions of /usr/lib/cups/backend. Fix that during upgrade. (Closes: #582942) * debian/control: Drop all the transitional cupsys* packages and the remaining provides/conflicts/replaces on them. All packages in sid are now transitioned to the new package names, and Lenny already had them. cups (1.4.3-1) unstable; urgency=low [ Till Kamppeter ] * debian/filters/pstopdf: Use "-dUseCIEColor" for the Ghostscript call in the pstopdf filter, to eliminate the warning "Set UseCIEColor for UseDeviceIndependentColor to work properly.". [ Martin Pitt ] * New upstream bug fix release. See http://www.cups.org/articles.php?L594 for details. * Drop CVE-2010-0393.dpatch, upstream now. * Update usb-backend-both-usblp-and-libusb.dpatch for new version. * select_use_after_free.dpatch: Add additional fix by Tim Waugh and Vincent Danen for CVE-2010-0302, and update tag header. (Closes: #572940) cups (1.4.2-10) unstable; urgency=low [ Till Kamppeter ] * debian/local/filters/pdf-filters/pdftopdf/P2PDoc.cxx: Output of the pdftopdf filter was not completely complying with the Adobe specs for PDF. Thanks to Duncan Lock for finding and reporting the bug and Johann Felix Soden for creating the patch to fix it (LP: #544636). [ Martin Pitt ] * Add no-conffile-timestamp.dpatch: Disable time stamps in conffiles, to avoid ever-changing files in /etc. Thanks Joey Hess! (Rejected upstream, STR#3067; Closes: #549673) * CVE-2010-0393.dpatch: Replace with patch from upstream, and tag header. (Closes: #572940) * debian/local/filters/pdf-filters/*: Disable call of setErrorFunction() on armel for now, since armel's libpoppler is broken. This works around #575262, so that cups can finally go into testing again (which is more than overdue). cups (1.4.2-9.1) unstable; urgency=high * Non-maintainer upload by the Security Team. * Fix loading of localized message string from arbitrary files through exporting the LOCALEDIR environment variable when lppasswd has a setuid bit set (CVE-2010-0393). cups (1.4.2-9) unstable; urgency=low * debian/control: Build depend on virtual libjpeg-dev package only. (Closes: #570381) * debian/cups.init.d: Fix syntax error which caused coldplug_usb_printers() to needlessly run udev-configure-printer for all USB devices. * Bump Standards-Version to 3.8.4 (no changes necesssary). * debian/libcupscgi1.symbols: Add new symbol from 1.4.2. * debian/cups.init.d: Add missing $remote_fs dependency. cups (1.4.2-8) unstable; urgency=low [ Till Kamppeter ] * dynamic-default-ripcache-size.dpatch: Fixed the copy of thr new function cupsdDefaultRIPCacheSize() which goes into the cupsfilter utility. It did not return its result and made cupsfilter segfaulting independent of the input (LP: #442283). [ Martin Pitt ] * debian/control: Update libjpeg62-dev build/binary dependency to libjpeg8-dev | libjpeg-dev. (Closes: #569230) * Acknowledge Bdale Garbee's NMU to work around bad pdftotext behaviour due to a bug in ttf-freefont. This has been worked around in texttopdf itself in the previous upload (see LP #447961). (Closes: #519643) cups (1.4.2-7) unstable; urgency=low [ Till Kamppeter ] * debian/local/filters/pdf-filters/filter/texttopdf.c: Workaround for bug in ttf-freefont which messed up the output of the texttopdf filter. Thanks to Hin-Tak Leung and Steve White to find this solution (LP: #447961). * debian/local/filters/pdf-filters/pdftopdf/P2PDoc.cxx, debian/local/filters/pdf-filters/pdftopdf/P2PGfx.cxx, debian/local/filters/pdf-filters/pdftopdf/P2PGfx.h, debian/local/filters/pdf-filters/pdftopdf/P2PObject.h, debian/local/filters/pdf-filters/pdftopdf/P2POutput.cxx: Upstream fix from Koji Otani for the following: (1) Fixed some memory leak; (2) pdftopdf now delays fetching a referenced object until when it is written to the output. This fixes memory hogging with N-up output (N pages per sheet). The fix is mainly done by (2). This fixes LP: #508731. [ Martin Pitt ] * manpage-translations.dpatch: Update to German manpage translations, thanks Helge Kreutzmann! (Closes: #502908) * debian/cups.postinst: Do not symlink snakeoil SSL certificate if server.{crt,key} already exist as broken symlinks. Thanks Andreas Büsching! (Closes: #554579) cups (1.4.2-6) unstable; urgency=medium [ Till Kamppeter ] * Urgency medium, this only fixes a highly visible crash. * debian/local/filters/pdf-filters/pdftopdf/P2PGfx.cxx: Fixed segfault of the pdftopdf filter when the input PDF file has ICC-profile-based color space inline images. Thanks to Koji Otani for the fix. Fixes: LP: #407344, LP: #466119, LP: #467919, LP: #475330, LP: #488752. [ Martin Pitt ] * debian/rules: Have a failed test suite fail the build on Ubuntu again, buildds were fixed. (LP: #447919) cups (1.4.2-5) unstable; urgency=low * debian/local/filters/pdf-filters/addtocups, debian/local/filters/pdf-filters/config-scripts/cups-pdf-filters.m4, debian/local/filters/pdf-filters/pdftoopvp/Makefile, debian/local/filters/pdf-filters/pdftoopvp/OPVPOutputDev.cxx, debian/local/filters/pdf-filters/pdftopdf/P2PGfx.cxx, debian/local/filters/pdf-filters/pdftopdf/P2PPattern.cxx: Synced the PDF CUPS filters with upstream. This introduces a change by Koji Otani to also support Poppler 0.12.2 and newer with a change in its API/ABI. This version compiles with both the new and the old Poppler, but it runs only with the Poppler with which it got compiled. This allows to build this package with both Ubuntu which ships the unchanged upstream version of Poppler 0.12.2 and Debian where the ABI changes got reverted by a Debian-only patch. cups (1.4.2-4) unstable; urgency=high * High urgency, since this fixes a security issue and should not block the already messy poppler transition any further. * pdftopdf, pdftoopvp: Revert patch to build against new upstream 0.12.2 poppler ABI, since it was reverted in poppler's -2 package. Tighten build dependency and conflict to any libpoppler5 < 0.12.2-2 now. (Closes: #558906, #559038, #559094) * Add select_use_after_free.dpatch: Fix use-after-free segfault, causing a remote DoS. (STR #3200, CVE-2009-3553, Closes: #557740) cups (1.4.2-3) unstable; urgency=low * pdftopdf, pdftoopvp: Patch to build with poppler 0.12.2, which broke ABI without bumping SONAME or even just shlibs :-(. Thanks to Jonathan Guthrie for the patch! (Closes: #558755) cups (1.4.2-2) unstable; urgency=low * debian/control, debian/rules: Drop dpkg-substvars hack for poppler-utils dependency, since 0.12 is in Debian now. Bump poppler-utils dependency. * debian/rules: Don't fail the build on test suite failure on Ubuntu, since its buildds currently can't resolve their own hostname. (See LP#447919) * poppler is now built on all architectures, so cups will build on amd64, too. (Closes: #556359) cups (1.4.2-1) unstable; urgency=low [ Till Kamppeter ] * debian/patches/log-debug-history-nearly-unlimited.dpatch: Made automatic debug logging of failed jobs (without need of "LogLevel debug") practically unlimited by raising the default limit from 200 to 99999 lines. * debian/local/filters/pdf-filters/pdftopdf/pdftopdf.cxx: pdftopdf did note collate for printers when they have "Collate" and "cupsManualCopies:True" in the PPD. Thanks to Koji Otani from BBR Japan for the fix. * debian/local/filters/cpdftocps: Fixed turning off duplex via command line (http://bugs.linux-foundation.org/show_bug.cgi?id=397). * debian/patches/usb-backend-both-usblp-and-libusb.dpatch: Fixed a bug of modifying the URI of the current print queue when comparing it with discovered URIs. Made the USB backend also compatible with URIS generated by old versions of CUPS, without serial number or with "serial=?" (LP: #450513). * debian/cups.init.d: Make cold-plugging of USB printers also correctly work if the usblp kernel module is loaded. [ Martin Pitt ] * New upstream security/bug fix release: - The CUPS web interface was vulnerable to several XSS and HTTP header/body attacks via attribute injection (STR #3367, STR #3401, CVE-2009-2820; Closes: #555666) * Drop maintain-default-option-settings.dpatch, applied upstream. * Update patches to new upstream version. * debian/control: Drop trademark stuff from package descriptions. No other package does that, and it's uninteresting here. The current ones with "easysw" were out of date, too. (Closes: #552781) * Now that poppler 0.12 is in Debian, drop disable-pdftoopvp-with-old-poppler.dpatch and bump libpoppler-dev build dependency. * poppler now ships fofi include files, which fixes the build. (Closes: #552818, #552223); rebuilding against new poppler ABI fixes uninstallability (Closes: #552456) cups (1.4.1-5) unstable; urgency=low [ Till Kamppeter ] * debian/patches/do-not-broadcast-with-hostnames.dpatch: Do not use host names for broadcasting print queues and managing print queues broadcasted from other servers by default. Many networks do not have valid host names for all machines (LP: #449586). * debian/cups.postinst: Clear cache for upgrade to CUPS 1.4.x (LP: #420490). * usb-backend-both-usblp-and-libusb.dpatch: Removed some lines which were temporarily inserted for debugging. [ Martin Pitt ] * usb-backend-both-usblp-and-libusb.dpatch: Add upstream link. * Drop: disable-pie-mipsen.dpatch: Didn't help to fix the mipsen segfault. * debian/cups.postinst: Simplify structure and avoid calling invoke-rc.d in Till's change above. * Add ppdc-dynamic-linking.dpatch: Dynamically link ppdc, to work around segfault on mipsen. Thanks to Sune Vuorela! (Closes: #548246) [ Tormod Volden ] * debian/cups.init.d: honour blacklist when loading ppdev and lp kernel modules (LP: #424795) cups (1.4.1-4) unstable; urgency=low [ Till Kamppeter ] * debian/patches/usb-backend-both-usblp-and-libusb.dpatch: Make the USB backend supporting both printer access via libusb and via the usblp kernel module. Make it also printing via libusb if the URI for the queue was generated via usblp and vice versa. This should solve most USB printing problems which occured on the transition to CUPS 1.4.x (LP: #420015, LP: #436495; Closes: #546558, #545288, #545453). [ Martin Pitt ] * debian/rules: Make the USB backend run as root again, udev rules do not cover all printers. (LP: #420015) * Drop debian/blacklist-cups.conf, and remove it on upgrade. With Till's fix from above this is not necessary any more. cups (1.4.1-3) unstable; urgency=low * Add disable-pie-mipsen.dpatch: Disable PIE on mipsen, its binutils segfaults with it. (Closes: #548246) cups (1.4.1-2) unstable; urgency=low [ Till Kamppeter ] * debian/local/filters/cpdftocps: Double-sided printing did not work on PostScript printers when the "sides" command line option for "lp"/"lpr" was used (LP: #411392). * debian/patches/maintain-default-option-settings.dpatch: For options with an underscore (or any other allowed non-alphanumeric character) in their names the default settings were not conserved when the PPD got replaced ("lpadmin -p ... -m ...", system-config-printer, automatic PPD update for existing print queues). Fixes LP: #432902 and CUPS STR #3340. [ Martin Pitt ] * debian/cups.init.d: Don't actually re-trigger udev events for printer coldplugging, since according to Scott James Remnant this slows down boot and kills kittens. Instead, just call it with --dry-run and manually call udev-configure-printer. * debian/cups.init.d: Only run udevadm if udev and the callout are actually available. Drop udev dependency to a suggests. This unbreaks cups on platforms which do not have udev, such as kfreebsd. (Closes: #546922) * debian/cups.init.d: Drop "cupsctl RIPCache" setting. It changes our conffile (causing dpkg prompts on upgrade), and overwrites the admin's setting without warning. * Add dynamic-default-ripcache-size.dpatch: Replace above functionality by setting the internal default value of RIPCache to MemTotal/4, if not given in the configuration file. * debian/rules: Do not let the usb backend run as root in Ubuntu any more, since that has a recent enough udev. Still keep it for Debian. * debian/cups-ppdc.install: Update path for Martin-Éric's section change of drv manpage. [ Martin-Éric Racine ] * Add manual-section-for-drv.dpatch: Fix incorrect man section 7 -> 1 as reported by Lintian. cups (1.4.1-1) unstable; urgency=low [ Till Kamppeter ] * debian/cups.postinst: Fixed "lpstat -r" check for the auto update of PPDs of existing queues. "lpstat -r" exits always with status 0, we must check the actual output. * debian/cups.postinst: Updated PPD auto update, so that it works with the new CUPS sample driver PPDs which are dynamically generated now. [ Martin Pitt ] * New upstream bug fix release. * Drop patches accepted upstream: - ppdc-locale-formatting.dpatch - usb-backend-infinite-loop-on-end-of-job.dpatch - dns-sd-check-typo.dpatch * debian/cups.preinst: Add cleanup of obsolete symlinks in /usr/share/ppd/. Drop cleanup from debian/cups.prerm. (Closes: #545298) * debian/control: Add udev dependency, since the init script calls udevadm. (LP: #429880) * debian/cups.postinst, debian/cups.init.d: Call client tools with "-h /var/run/cups/cups.sock" instead of "-h localhost", just in case the server isn't configured to listen on a TCP port. * dnssd-avahi.dpatch: Update to latest Fedora version, which fixes the dnssd backend so that it only reports devices once avahi resolution has completed. This makes it report Device IDs. cups (1.4.0-5) unstable; urgency=low * Drop shlibs files and add symbols files for all libraries, to avoid too weak dependencies. (Closes: #545244) * debian/control: Tighten dependencies between server, client, and -common versions. cups (1.4.0-4) unstable; urgency=low Upload 1.4 to unstable. [ Till Kamppeter ] * debian/patches/usb-backend-infinite-loop-on-end-of-job.dpatch: Fixed the patch so that the usb backend really terminates after a job (LP: #420797). * debian/local/apparmor-profile: cupsd needs also to be allowed to read the /dev/bus/usb/ directory, given with the "/" in the end. This should finally fix LP: #420015. [ Martin Pitt ] * debian/control: Drop the transitional cupsys packages. * printer-filtering.dpatch: Fix sometimes overzealous filtering, thanks to Stéphane Graber! * debian/rules: Drop autoconf call on build again, we have a proper upstream release. * debian/cups.postinst, debian/cups.init.d: Call lpstat, lpadmin, and cupsctl with "-h localhost" to avoid querying network printers set up in /etc/cups/client.conf, and asking for passwords. Thanks to Martin-Éric Racine for tracking this down and the solution! (Closes: #543468) * debian/control: Bump Standards-Version to 3.8.3 (no changes). * debian/cups.postinst: Use signal names instead of numbers for trap. Quiesces a lintian bashism warning. * Add debian/README.source. * debian/local/filters/pdf-filters/filter/fontembed/Makefile: Build libfontembed with -fPIC to also work on HPPA. (Closes: #543973) * debian/local/filters/pdf-filters/pdftoopvp/Makefile: Don't install font configuration file as executable. * debian/cups.lintian-overrides: Update for currently installed backends. * debian/control: Re-add transitional cupsys packages (except the libraries), they are still needed for upgrades from Ubuntu 8.04. Add the "You can safely remove after upgrade" note to their description. cups (1.4.0-3) experimental; urgency=low [ Till Kamppeter ] * debian/patches/usb-backend-infinite-loop-on-end-of-job.dpatch: Fixed upstream bug of the new libusb-based CUPS "usb" backend falling into an infinite loop after completing the job, blocking the next job (LP: #420797). [ Martin Pitt ] * debian/local/filters/pdf-filters/pdftopdf/P2PDoc.cxx: Update for poppler 0.11.3 API, thanks to Koji Otani <sho@bbr.jp>! * disable-pdftoopvp-with-old-poppler.dpatch: Revert above change when building with poppler 0.10.x. cups (1.4.0-2) experimental; urgency=low * Add debian/blacklist-cups.conf: Blacklist the usblp module, it's obsolete. CUPS uses libusb directly now. (LP: #420015, part 1) * debian/local/apparmor-profile: Allow cupsd to access /dev/bus/usb/. (LP: #420015, part 2) * debian/rules: Make the usb backend run as root, since /dev/bus/usb/* are root:root, and cups does not use the usblp kernel module any more. (LP: #420015, part 3) * disable-pdftoopvp-with-old-poppler.dpatch: Update. cups (1.4.0-1) experimental; urgency=low [ Martin Pitt ] * Final 1.4.0 release. * Add ppdc-locale-formatting.dpatch: Fix locale handling in ppdc to avoid broken PPD files in non-English locales. (STR#3300) [ Till Kamppeter ] * debian/control: Let the cups package only suggest cups-ppdc and not recommend it, as cups-ppdc is only interesting for developers. cups (1.4.0~svn8773-1) experimental; urgency=low * New upstream prerelease snapshot. [ Changes listed explicitly here as they are not yet available on www.cups.org ] 1. accept and reject; the accept and reject commands have been officially renamed to cupsaccept and cupsreject. The old names are still supported via symlinks. 2. cupsdisable and cupsenable; the cupsdisable command now supports a --hold option to stop printing after the current job and the cupsenable command now supports a --release option to release pending jobs for printing. 3. cupsfilter; the cupsfilter program now supports filtering of already-queued print job files and can also run printer-specific filters specified in the PPD file. 4. cupstestdsc; the cupstestdsc utility has been improved to better detect problems with PostScript print files. 5. cupstestppd; the cupstestppd utility has been improved to test new PPD keywords and better detect impossible constraints. 6. lpadmin; the lpadmin command now supports options to hold and release new jobs on a printer or all printers. 7. lpoptions; the lpoptions command now describes custom options and their parameters. 8. lppasswd; the lppasswd program is no longer installed setuid by default. 9. lpstat; the lpstat command now supports a -H option to show the current default server and no longer slows down when a printer is specified. 10. Look-n-feel; the web interface has been given a new look. 11. PHP support; the "php-cgi" program is used, when available, to process PHP pages in the CUPS web interface. 12. Printer configuration; improvements have been made to the add and modify printer pages. 13. Printer options; the Set Default Options page now provides a "query" button that queries the default and installed options from the printer. 14. Printer sharing; the "share printer" and "unshare printer" buttons are now only shown when printer sharing is enabled in the scheduler. 15. Security; the web interface has been updated to support authentication for printing of test pages and RSS subscription operations. 16. Server settings; the Administration page now provides access to common "advanced" server settings. 17. Bonjour (DNS-SD) printing support; a new mdns backend provides Bonjour-based printer discovery and the ipp, lpd, and socket backends now support Bonjour address resolution. 18. Bonjour (DNS-SD) perforance tuning; the scheduler now only uses a single file descriptor for printer sharing. It previously used one per printer. 19. Bonjour (DNS-SD) web interface registry; when remote access is enabled, the scheduler can register the web interface for easier access. 20. LPD client support; the cups-lpd mini-daemon now provides the document-name for print jobs and supports specification of a CUPS server. 21. PWG Port Monitor MIB; the snmp backend now supports the PWG Port Monitor MIB to better choose the device URI to use. 22. SNMP-based monitoring; the ipp, lpd, and socket backends now report supply levels and printer status using SNMP queries. 23. IPP/2.x support; CUPS now conforms to the draft IPP/2.0 and IPP/2.1 specifications. 24. CUPS-Add-Modify-Printer operation; the scheduler now supports setting the printer-state-reasons attribute using this operation. 25. CUPS-Get-Document operation; the scheduler now supports a "get document" operation to download files from a print job. 26. Device location; the scheduler and backend discovery interface now support a device-location attribute. 27. Hold-New-Jobs and Release-Held-New-Jobs operations; the scheduler now supports the Hold-New-Jobs and Release-Held-New-Jobs operations. 28. Access control; the scheduler now supports multiple addresses in Allow and Deny lines. It also now returns a HTTP 403 (forbidden) status when a user authenticates successfully but is not allowed to perform an operation. 29. Access logging; the scheduler now supports an AccessLogLevel directive to control what is logged in the access_log file. 30. Configuration files; the default cupsd.conf file now provides an "authenticated" policy for easy authenticated sharing of printers. 31. Default LogLevel; the default LogLevel is now "warn" instead of "info". 32. Automatic debug logging; the scheduler now records up to the last N (default 200) debug messages for failed print jobs. 33. Default paper size; the scheduler now supports a DefaultPaperSize directive to override the default paper size defined by the locale or libpaper configuration. 34. Encryption support; the scheduler now supports a SSLOptions directive to optionally support Windows clients in "FIPS" mode. It also now loads both the server and CA certificates (if present) from the ServerCertificate file. 35. Error logging; the scheduler now logs unsuccessful operations as errors in the error_log file. 36. Error policies; the scheduler now supports a retry-current-job error policy that retries the current job immediately. 37. Fatal error handling; the scheduler now supports a FatalErrors directive to control which startup errors should be considered fatal. 38. Filter command-line; the scheduer now passes the job-originating-host-name attribute as a CUPS option to filters and backends. 39. Filter environment; the scheduler now includes CUPS_JOBTYPE, PRINTER_INFO, and PRINTER_LOCATION variables in the environment passed to filters and backends. 40. Job progress; the scheduler now supports a job-media-progress attribute to track the printing progress of each page. 41. MIME database; MIME types now support a priority attribute to override the default (alphabetical) rules of precedence. 42. Page logging; the scheduler now supports a PageLogFormat directive to control the format of the page_log file. 43. PAM support; the scheduler now sets more PAM attributes to better support third-party authentication schemes. 44. PDF job ticket support; the scheduler now supports cupsJobTicket comments at the beginning of PDF print jobs. 45. Performance tuning; the scheduler now coalesces configuration and state file changes to reduce the amount of disk activity and caches printer attributes to further reduce startup time. 46. Printcap support; the scheduler no longer clears the printcap file when shutting down, and can now create XML "plist" printcap files as well. 47. RSS subscriptions; the scheduler now starts the notifier for RSS subscriptions after creation so the feed is available immediately. 48. Sandbox support; the scheduler now runs child processes using restrictive policies on Mac OS X for improved security and job isolation. 49. Test option; the scheduler now supports a test mode via the "-t" option. 50. Device discovery; the cups-deviced helper now runs backends in parallel for faster discovery and streams the results of discovery as the backends provide them. 51. Driver development kit; the CUPS DDK is now a standard part of CUPS. 52. Driver information file support; the cups-driverd helper program now directly supports PPD compiler driver information files. 53. Dynamic PPD support; drivers can now set PPD keywords dynamically using PPD: messages. 54. Generic PostScript command filter; a new CUPS command file filter for PostScript printers provides auto-configuration, self-test page, and status and supply level reporting functions. 55. New printer drivers; new generic PostScript and PCL drivers provide improved support for laser printers, the CUPS DDK drivers offer support for many HP DesignJet printers, and new label drivers offer support for Seiko and Tharo label printers. 56. PJL support; the cupsPJLDisplay PPD attribute controls the PJL commands used to display the current user and job on the printer. 57. PPD compiler improvements; the PPD compiler now supports Mac OS X .strings files, OID query strings, conditional directives, long file names, and a test mode. It also fixes many other bugs from the CUPS DDK 1.2.3 release. 58. USB printer support; the usb backend now uses libusb when available to allow it to better work with third-party scanning and printing solutions. 59. Banner filter; the bundled banner ("job-sheets") pages are now generated using a new banner filter provides easier customization and better support for UTF-8 text. 60. Image filters; the standard image filters now support image files larger than 2GB. 61. PDF filter; the pdftops filter has been replaced with a wrapper program that runs the Xpdf, poppler, or Ghostscript PDF to PostScript utilities. 62. Backend API; a new cupsBackendReport function is provided to report a device from a backend and handles any needed quoting of the make-and-model, info, device-id, and location strings. 63. Device discovery; the new cupsGetDevices function streams discovered devices to an application-provided callback function. 64. IPP API; the IPP read and write functions no longer use a large stack-based buffer when reading and writing IPP attributes. 65. PPD support; several new functions are provided: cupsGetPPD3, cupsResolveConflicts, ppdInstallableConflict, ppdLocalizeAttr, ppdLocalizeMarkerName and ppdPageSizeLimits. 66. Side-Channel API; new cupsSideChannelSNMPGet and cupsSideChannelSNMPWalk functions allow printer drivers to do SNMP queries via the standard network backends. 67. Streaming API; a new streaming request API provides asynchronous job creation and request submission. * debian/patches/freebsd.dpatch, debian/patches/manpage-typos.dpatch, debian/patches/search_mime_files_in_usr_share.dpatch, debian/patches/cupsaccept.dpatch, debian/patches/gnutls-pkgconfig.dpatch: Removed backport patches of upstream features. * debian/patches/testsuite-increase-wait-timeout.dpatch: Removed, fixed upstream. * debian/patches/removecvstag.dpatch, debian/patches/pidfile.dpatch, debian/patches/ppd-poll-with-client-conf.dpatch, debian/patches/quiesce-bonjour-warning.dpatch, debian/patches/rootbackends-worldreadable.dpatch, debian/patches/drop_unnecessary_dependencies.dpatch, debian/patches/reactivate_recommended_driver.dpatch, debian/patches/default_log_settings.dpatch, debian/patches/confdirperms.dpatch, debian/patches/printer-filtering.dpatch, debian/patches/ubuntu-disable-browsing.dpatch: Regenerated. * debian/local/backends/dnssd, debian/control, debian/cups.install, debian/rules: "dnssd" backend removed, DNS-SD discovery backend is now provided upstream. * debian/patches/dns-sd-check-typo.dpatch: Fixed typo in upstream code to check for the availability of dns_sd.h. * debian/patches/dnssd-avahi.dpatch: Added avahi support for the "dnssd" CUPS backend (patch from Fedora). CUPS' DNS-SD support does not build with the libdns_sd of avahi. * debian/patches/show-compile-command-lines.dpatch: Show compiler command lines in the output of the "make" process. * debian/control: Added libusb-dev to the build dependencies, the new USB printer backend uses libusb and not any more the usblp kernel module. * debian/control: Added libavahi-common-dev and libavahi-client-dev to the build dependencies, for the avahi patch for the DNS-SD support. * debian/control: Added new packages for the new shared libraries and also cups-ppdc for the PPD manipulation utilities of the former CUPS DDk. Added transitional package for CUPS DDK. Added Conflicts:/Replaces: as cupsddk is replaced by cups-ppdc and the files of cupsddk-drivers go into the main cups package. * debian/rules: Added "--enable-libusb" to the ./configure command line. * debian/rules: Added "--enable-avahi" to the ./configure command line. * debian/rules: Call autoconf, as we have an SVN snapshot currently. * debian/rules: Updated individual file installation and adaptation steps for the new CUPS version. * debian/libcups2-dev.install: Added new header file versioning.h. * debian/libcupscgi1-dev.install, debian/libcupscgi1.install, debian/libcupsdriver1-dev.install, debian/libcupsdriver1.install, debian/libcupsmime1-dev.install, debian/libcupsmime1.install, debian/libcupsppdc1-dev.install, debian/libcupsppdc1.install: Added install file lists for newly added libraries. * debian/cups-ppdc.install: File list for new cups-ppdc package. This package holds the PPD file manipulation tools which were in CUPS DDK formerly. * debian/cups-common.install, debian/cups.install: Updated for new CUPS version. * debian/cups.install, debian/cups-client.install, debian/cups-ppdc.install: Commented out lines for missing translated man pages. * debian/cups.postinst: Do not create the /usr/share/ppd/1-local-admin and /usr/share/ppd/2-third-party links. They are not needed with current CUPS and they also break the test procedure during package build. * debian/libcups2.postinst, debian/libcupsimage2.postinst: Removed no-op maintainer scripts. * debian/local/filters/pdf-filters/addtocups, debian/local/filters/pdf-filters/config-scripts/cups-pdf-filters.m4, debian/local/filters/pdf-filters/filter/texttopdf.c: Let ./configure script check the CUPS version so that in texttopdf.c a missing variable can get defined if CUPS is 1.4.x or newer. * debian/local/filters/pdf-filters/pdftoopvp/Makefile, debian/local/filters/pdf-filters/pdftopdf/Makefile: Added missing "unittests", "install-data", "install-headers", "install-libs", "install-exec", "libs", "apihelp", and "framedhelp" targets to the Makefiles of the PDF filters. [ Martin Pitt ] * debian/cups.install, debian/local/filters/pdf-filters/addtocups: Enable pdftoopvp filter. * Add disable-pdftoopvp-with-old-poppler.dpatch: Disable pdftoopvp if we build against a poppler older than 0.11, since pdftoopvp needs that new API. (This uses pkg-config --atleast-version in the dpatch script header.) * ubuntu-disable-browsing.dpatch: Restore Ubuntu check. * dnssd-avahi.dpatch: Add upstream bug link. * dnssd-avahi.dpatch: Do not error out of the dnssd backend if system D-Bus is not running. This unbreaks the test suite when running in a build environment. cups (1.3.11-2) unstable; urgency=low [ Till Kamppeter ] * debian/cups.init.d: Trigger udev event for all USB printers right after starting the CUPS daemon to run the udev callouts for the printers. This allows automatic print queue setup and re-enabling print queues also if the printer is cold-plugged (connected before CUPS and/or udev got started). * debian/cups.init.d: Set CUPS RIP cache to 1/4 of the total RAM when CUPS is started. This way CUPS Raster drivers get enough memory for reliable and quick operation even if large paper sizes with high resolutions are printed. * debian/local/filters/pdf-filters/pdftoopvp/OPVPOutputDev.cxx, debian/local/filters/pdf-filters/pdftoopvp/OPVPOutputDev.h, debian/local/filters/pdf-filters/pdftoopvp/pdftoopvp.cxx, debian/local/filters/pdf-filters/pdftoopvp/opvp/opvp.h, debian/local/filters/pdf-filters/pdftoopvp/opvp/opvp_0_2_0.h: Adapted pdftoopvp filter to the new API of Poppler 0.11.2. Thanks to upstream author Koji Otani for the patch. * debian/rules: Explicitly create empty file pdftoopvp/Dependencies after applying the PDF filters add-on as the build servers seem to not copy empty files. * debian/patches/default_log_warn.dpatch, debian/patches/default_log_settings.dpatch: Renamed patch for cupsd.conf logging settings and added "MaxLogSize 0" so that CUPS does not do its own log rotation, as our log rotation is much better. * debian/cups-bsd.postinst, debian/cups.postinst: Moved handling of /etc/printcap symlink from the post-install script of the cups-bsd package to the cups package. Should assure that the symlink gets also set on initial system installation (LP: #415825). * debian/local/filters/cpdftocps: Updated filter to not use the pdftops filter of CUPS, as from version 1.3.11 on CUPS' pdftops filter integrates the call of pstops, and in the PDF workflow this would duplicate the application of page management options, like N-up, even/odd pages, and even the number of copies for some printers (LP: #412709). [ Jamie Strandboge ] * debian/cups.postinst: reload individual cups profile, not all of apparmor (LP: #412745) [ Martin Pitt ] * debian/local/apparmor-profile: Allow cups-pdf to run /bin/cp. * debian/control: Drop smbclient to Suggests. (Closes: #542464) cups (1.3.11-1) unstable; urgency=low [ Till Kamppeter ] * debian/local/filters/textonly: Adding a final form feed to the job (via PPD option) did not work (LP: #396673). * debian/local/filters/pdf-filters/filter/imagetopdf.c: imagetopdf proceeded the PDF output with a blank line. This made some filters misbehave. * debian/patches/read-embedded-options-from-incoming-postscript-and-add-to-ipp-attrs.dpatch: Make CUPS read the number of copies out of Windows print jobs reliably by also considering lines like "%%BeginNonPPDFeature: NumCopies 2". Thanks to Dan Sheridan from Adelard (djs at adelard dot com) for this improvement of the patch. [ Stéphane Graber ] * Add printer-filtering.dpatch: Add support for printer filtering. With this patch, when the PRINTER_LIST environment variable is defined only the printers (comma separated) in it will be displayed. [ Martin Pitt ] * New upstream bug fix release. See http://www.cups.org/articles.php?L586 for details. * Drop pdftops-testsuite.dpatch (fixed upstream). * poppler-based-pdftops-fixes.dpatch, search_mime_files_in_usr_share.dpatch: Update to new upstream version. cups (1.3.10-5) unstable; urgency=low * debian/patches/read-embedded-options-from-incoming-postscript-and-add-to-ipp-attrs.dpatch: Make CUPS reading all option settings in PostScript print jobs and add the option settings to the filter command line before starting the filter chain. This fixes the problem that in the PDF printing workflow (where incoming PostScript gets converted to PDF by pstopdf) option settings embedded in the incoming PostScript code do not get obeyed. Especially the options of jobs from Windows clients get ignored. * debian/filters/pstopdf: Do not let Ghostscript generate multiple copies of the job if the filter command line from CUPS already supplies the correct number of copies. * debian/local/filters/pdf-filters/addtocups: The disabling of the pdftoopvp filter in cups 1.3.10-3 also disabled pdftopdf. Re-enabled pdftopdf. cups (1.3.10-4) unstable; urgency=low * Add ghostscript-cups dependency. (LP: #385606) * debian/control: Add back dropped comma, which led to the ssl-cert dependency being dropped. (Closes: #532845) * debian/local/apparmor-profile: Allow reading /proc/sys/crypto/**. (LP: #335898) * debian/local/apparmor-profile: Allow dac_override to cups-pdf. This is unfortunate, but required with some $HOME permissions; the profile is very tight, so this shouldn't actually considerably increase privileges. (LP: #224365) cups (1.3.10-3) unstable; urgency=low [ Till Kamppeter ] * debian/cups.install, debian/rules: Move added *.convs and *.types files to /usr/share/cups/mime/ so that they are not considered config files by dpkg. * debian/local/text.convs: Turn all text input formats to text/plain at a high cost, so that the text-only printer (which accepts only text/plain) accepts them (LP: #385797). * debian/rules: Switch the pdftops filter back to Poppler, as Ghostscript has a lot of problems in generating PostScript (LP: #382379). * debian/patches/poppler-based-pdftops-fixes.dpatch: Fixes for the pdftops filter in Poppler mode: Do not emit PostScript level 3 as it Poppler's PostScript level 3 output is not compatible with HP's PostScript printers (LP: #277404); Added support for the new "-origpagesizes" option of Poppler's pdftops, so that documents with pages of different sizes get correctly printed (LP: #310575). * debian/filters/pstopdf: Do not call Ghostscript with asymmetric resolutions (like 1200x600 dpi), as it leads to problems with images in some cases. See http://bugs.ghostscript.com/show_bug.cgi?id=690504. * debian/local/filters/pdf-filters/pdftopdf/P2PObject.h, debian/local/filters/pdf-filters/pdftopdf/P2POutput.cxx: Fixed infinite loop which occured for some PDF files (LP: #382880). * debian/filters/pstopdf: Make it also correctly working if PaperDimension and ImageableArea entries in the PPD have no translation strings. Thanks to Koji Otani to find the bug. * debian/local/filters/pdf-filters/pdftoopvp/, debian/local/filters/pdf-filters/README, debian/local/filters/pdf-filters/addtocups, debian/local/filters/pdf-filters/removefromcups, debian/local/filters/pdf-filters/config-scripts/cups-pdf-filters.m4: Added pdftoopvp CUPS filter as part of the PDF filter add-on. * debian/cups.install: Make /etc/fonts/conf.d/99pdftoopvp.conf of pdftoopvp be installed as part of the cups package * debian/control: Added build dependencies needed by pdftoopvp: liblcms1-dev, libfreetype6-dev, libfontconfig1-dev * debian/control: Moved dependency on cups-client to Depends:, as cups-client is needed by the post-install script for the update of the PPDs of existing print queues. * debian/cups.postinst: Case-insensitive check for model names when updating PPDs of already existing print queues. [ Martin Pitt ] * Add gnutls-pkgconfig.dpatch: Use "pkg-config gnutls" instead of deprecated libgnutls-config. (Closes: #529903) * Bump Standards-Version to 3.8.1 (no changes necessary). * debian/control: Point Vcs-Browser: to bzr.d.o. loggerhead, and use http:// URL for Vcs-Bzr. * debian/control: Drop ghostscript build dependency again, pdftops filter uses poppler again. Also Drop alternative xpdf-utils build dependency, since configure now checks for poppler's pdftops capabilities. * debian/control, debian/rules: Do a build-time check if pdftops supports -origpagesizes, and dynamically set the poppler-utils dependency. This is a hack until https://bugs.freedesktop.org/show_bug.cgi?id=19777 makes it into Debian. * debian/cups.install, debian/local/filters/pdf-filters/addtocups: Disable new pdftoopvp filter for now, since sid does not yet have poppler 0.11. Lower libpoppler-dev build dependency again. cups (1.3.10-2) unstable; urgency=low [ Till Kamppeter ] * debian/local/filters/pdf-filters/pdftopdf/P2PFont.cxx: Make the pdftopdf filter also building with Poppler 0.11.0. * debian/filters/pstopdf: Make pstopdf also reading default values from the PPD if there is no space between the colon and the value. Some programs seem to remove this space when setting the defaults. Fixes problem of Shaun Crampton in LP: #357732. [ Martin Pitt ] * debian/control: Lift cups-driver-gutenprint from Suggests to Recommends, it's needed by many printers and not very large. (Closes: #522428) * debian/control: Drop cups-bsd's Recommends: cups to a Suggests:. Client packages shouldn't pull in the server by default. (Closes: #529630) * debian/libcups2.dirs: Drop, obsolete. * debian/cups.dirs: Remove most directories, not necessary to explicitly create them. [ Martin-Éric Racine] * Cleaned Lintian errors: (source) E: debian-rules-ignores-make-clean-error W: debhelper-but-no-misc-depends W: dbg-package-missing-depends (cups) E: dir-or-file-in-var-run (cups-common) W: symlink-should-be-relative * Added Lintian overrides: (cups) W: non-standard-executable-perm usr/lib/cups/backend-available/[ipp|lpd|serial] 0744 != 0755 cups (1.3.10-1) unstable; urgency=medium [ Martin Pitt ] * New upstream security/bug fix release: - The scheduler now protects against DNS rebinding attacks. Please note that this could lead to some regressions. (CVE-2009-0164) - Fixed TIFF integer overflow in image filters. (CVE-2009-0163) - Lots of bug fixes. * Drop patches included upstream: - hpgl-regression.dpatch - runloop-backchannel-eof-spin.dpatch - png-image-int-overflow.dpatch - CVE-2008-5183.dpatch - pdftops-cups-1.4.dpatch * Add pdftops-testsuite.dpatch: Fix path to pdftops in the test suite. * debian/rules: Specify --with-pdftops=gs, so that the pdftops filter is built with intended ghostscript support. [ Till Kamppeter ] * debian/filters/pstopdf: Added support for custom page sizes to the pstopdf CUPS filter. * debian/filters/pstopdf: Call Ghostscript with the default paper size (from PPD or from CUPS filter command line) on its command line. Some applications generate PostScript without PageSize requests. Multi-page-size jobs (LP: 310575) do not get broken by this as Ghostscript uses the given page size only as default and gives priority to page sizes requested by the document (in contrary to Poppler). Fixes LP: #357732). cups (1.3.9-17) unstable; urgency=low [ Till Kamppeter ] * debian/filters/pstopdf: Added "-dDoNumCopies" to the "ps2pdf" call in the pstopdf CUPS filter, so that Ghostscript takes into account /#copies and /NumCopies when converting incoming PostScript to PDF (Ghostscript upstream bug #690355, LP: #320391). [ Martin Pitt ] * debian/control: Update section of cups-dbg to "debug". cups (1.3.9-16) unstable; urgency=low [ Till Kamppeter ] * debian/local/filters/pdf-filters/pdftopdf/P2PResources.cxx: Fixed corruption of output when generating mmultiple copies of EOG or GIMP output files (LP: #345183). * debian/cups.postinst: Silenced non-fatal error messages when post-install script updates PPDs and there are PPDs not belonging to a CUPS queue in /etc/cups/ppd/ (LP: #345866). [ Martin Pitt ] * debian/local/apparmor-profile: Drop 'm' permission for /etc/passwd and friends, which was a workaround for a kernel apparmor bug on i386. This is fixed in current kernels. Thanks to Kees Cook for pointing this out! (LP: #270663) * debian/cups.install: Do not install the unnecessary (and broken) D-BUS configuration file any more. All cupsd does is to send signals, which are allowed by default. It does not provide any D-BUS service right now. Also remove the obsolete file on upgrades in debian/cups.preinst. (Closes: #510634, LP: #318742) * Add logfiles_adm_readable.dpatch: Make log files readable by group "adm". (LP: #345953) * debian/changelog: Fix cruft at the end of file. * debian/local/apparmor-profile: Explicitly deny access to /dev/tty and writing access to /etc/krb5.conf, so that accesses to them do not create log spewage. (LP: #348556) cups (1.3.9-15) unstable; urgency=low * Add debian/local/apport-hook.py: Apport package hook, thanks to Brian Murray! Install it in debian/rules if we build for Ubuntu. (LP: #334080) * debian/rules: Move init script priority to 50, so that cups starts later in the boot sequence. There is no reason why it should start so early (before e. g. gdm). Do the transition on upgrades in debian/cups.postinst. * debian/control: Promote ttf-freefont from Recommends to Depends, since the PDF filter chain needs it. (Closes: #516335) * debian/control: Add "Breaks: foomatic-filters (<< 4.0)", and bump Recommends: version. Earlier foomatic-filters do not support the PDF filter chain. (Closes: #511009) * debian/local/apparmor-profile: Add a few missing rules for Kerberos authentication. (LP: #324645) * Add bzr-builddeb configuration (merge mode). * debian/watch: Update so that it works again. * debian/local/apparmor-profile: Allow cups to read /etc/likewise, for authentication. (LP: #303927) * Add testsuite-increase-wait-timeout.dpatch: Increase test suite's timeout for waiting for jobs to 10 minutes, for slower architectures like arm and m68k. (Closes: #518787) cups (1.3.9-14) unstable; urgency=low * debian/patches/pdftops-cups-1.4.dpatch: Revert previous change to define HAVE_PDFTOPS and CUPS_PDFTOPS, since Till says the filter should actually use ghostscript now. Add ghostscript build dependency instead. (LP: #329991) * Add drop_unnecessary_dependencies.dpatch: Do not link libcups.so and libcupsimage.so against unnecessary libraries. This avoids unnecessary package dependencies for both libcups, as well as for packages using cups-config. (Closes: #438067) * debian/control: Drop XSBC-Original-Maintainer Ubuntu-ism which accidentally crept in in r607. cups (1.3.9-13) unstable; urgency=low [ Till Kamppeter ] * debian/local/filters/pdf-filters/filter/imagetopdf.c: Added support for the new "fit-to-page" option (new, more intuitive name for "fitplot"). * debian/filters/pstopdf: Only apply paper size if the "fitplot" or the "fit-to-page" option is set. * debian/local/filters/cpdftocps: Only the last digit of the number of copies was used (LP: #309314). * debian/local/filters/pdf-filters/pdftopdf/pdftopdf.cxx: Do not preceed the PDF output with a newline (LP: #303691). Only impose the page size from the PPD file to all pages if the "fitplot" or the "fit-to-page" option is set. This prevented from automatic paper tray switching to the correct paper sizes when a multiple-page-size document is printed (partial fix for LP: #310575). * debian/patches/pdftops-cups-1.4.dpatch: Updated from CUPS 1.4 SVN. Contains fixes for multiple-page-size document printing (partial fix for LP: #310575). * debian/patches/pdftops-dont_fail_on_cancel.dpatch: Removed, should be fixed in the new upstream version of pdftops. [ Martin Pitt ] * debian/patches/pdftops-cups-1.4.dpatch: Add definition of HAVE_PDFTOPS and CUPS_PDFTOPS, so that the filter actually gets again built with pdftops support. (Fixes Till's change from above). cups (1.3.9-12) experimental; urgency=low [ Till Kamppeter ] * debian/local/filters/pdf-filters/pdftopdf/P2PPage.cxx, debian/local/filters/pdf-filters/pdftopdf/pdftopdf.cxx: Do not reposition the pages when an automatic rotation did not actually take place and do not apply the page size and margins from the PPD file or the coomand line if no manipulations affecting the printout size are done (N-up, scaling, fitplot, ...). This caused LP: #310575. * debian/cups.postinst: Let the PPD files of the existing print queues get automatically updated after each installation of this package (if they use PPDs of this package). [ Marc Deslauriers ] * SECURITY UPDATE: denial of service by adding a large number of RSS subscriptions (Closes: #506180, LP: #298241) - debian/patches/CVE-2008-5183.dpatch: gracefully handle MaxSubscriptions being reached in scheduler/{ipp.c,subscriptions.c} - CVE-2008-5183 [ Martin Pitt ] * pidfile.dpatch: Adapt to changes from MaxSubscriptions fix from above. cups (1.3.9-11) experimental; urgency=low * debian/local/filters/cpdftocps: Fixed the fix for the number of copies. In some cases it failed and pstops was called with 0 copies requested (LP: #309314, LP: #300312, LP: #286048). cups (1.3.9-10) experimental; urgency=low [ Till Kamppeter ] * debian/local/filters/pdf-filters/pdftopdf/P2PCatalog.cxx, debian/local/filters/pdf-filters/pdftopdf/P2PCatalog.h, debian/local/filters/pdf-filters/pdftopdf/P2PDoc.cxx, debian/local/filters/pdf-filters/pdftopdf/P2PDoc.h, debian/local/filters/pdf-filters/pdftopdf/P2PPage.cxx, debian/local/filters/pdf-filters/pdftopdf/P2PPage.h, debian/local/filters/pdf-filters/pdftopdf/P2PPageTree.cxx, debian/local/filters/pdf-filters/pdftopdf/P2PPageTree.h, debian/local/filters/pdf-filters/pdftopdf/pdftopdf.cxx: Fixed problem of Landscape-oriented PDF files being printed in the wrong orientation (LP: #47649, LP: #244840). * debian/local/filters/cpdftocps: Made correct number of copies being printed on PostScript printers with hardware copy handling (LP: #286048). [ Martin Pitt ] * debian/local/apparmor-profile: Allow cupsd to run Brother drivers. (LP: #237256) cups (1.3.9-9) experimental; urgency=low [ Till Kamppeter ] * debian/local/filters/pdf-filters/pdftopdf/P2PPage.cxx, debian/local/filters/pdf-filters/pdftopdf/P2PResources.cxx: Added processing of the rotate tag (LP: #300312). [ Martin Pitt ] * Add png-image-int-overflow.dpatch: Fix integer overflow in the PNG image reader (Closes: #507183, STR #2974, CVE-2008-5286) cups (1.3.9-8) experimental; urgency=low * debian/local/filters/pdf-filters/pdftopdf/P2POutputStream.cxx, debian/local/filters/pdf-filters/pdftopdf/P2POutputStream.h: Removed an endianess dependency from the pdftopdf filter, so that it also works on non-PC platforms like PowerPC (LP: #271350). This also fixes the filter on mipsel and makes the test suite, and thus the build, succeed again. (Closes: #500305) * debian/filters/pstopdf: Do not supply the margins from the PPD to the ps2pdf process, as this breaks full-bleed printing and is also disturbs the printing if PPDs have too conservative margin definitions (LP: #282186). cups (1.3.9-7) experimental; urgency=low * Previous upload had some cruft in the diff.gz which caused some changed defaults in cupsd.conf. Reupload with a clean diff.gz. *Brown paperbag* cups (1.3.9-6) experimental; urgency=low [ Till Kamppeter ] * debian/local/filters/cpdftocps: The cpdftocps filter did case-sensitive checking for CUPS options to keep them away from the pstops filter. CUPS treats such options case-insensitive, so in some cases CUPS options got applied twice (LP: #299707). [ Martin Pitt ] * debian/rules: Install the serial backend with 0744 permissions to make it run as root, since /dev/ttyS* are root:dialout and thus not accessible as user "lp". Thanks to Chanoch (Ken) Bloom. (part of #506181, LP: #154277) cups (1.3.9-5) experimental; urgency=low * hpgl-regression.dpatch: Replaced with version which got committed upstream. * Add runloop-backchannel-eof-spin.dpatch: Fix backend runloop spin on backchannel EOF (select() returns "ready for read" on EOF). This completely broke printing with e. g. HPJetDirect. Thanks to Samuel Thibault for tracking down the problem! (Closes: #489045) * debian/cups-bsd.postinst: Assume default printcap path (in /var/run/cups/) if not specified in cupsd.conf. This brings back the lost /etc/printcap for legacy applications. (Closes: #482186, LP: #282667) * debian/rules: Drop arm/armel -f-no-stack-protector workaround, since SSP works on these architectures now. (See #469517) * debian/cups-bsd.postinst: Robustify the cupsd.conf parsing for Printcap, as per suggestion from Jo Mills. * rootbackends-worldreadable.dpatch: Apply the same relaxed permission check to cups-deviced, so that backends installed as 0744 don't disappear from printer detecttion. (Closes: #503644, LP: #275407) cups (1.3.9-4) experimental; urgency=low [ Till Kamppeter ] * debian/local/filters/pdf-filters/conf/pdftoraster.convs, debian/local/filters/pdf-filters/filter/pdftoraster.cxx, debian/local/filters/pdf-filters/README, debian/local/filters/pdf-filters/addtocups, debian/local/filters/pdf-filters/removefromcups, debian/rules, debian/copyright: Removed Poppler-based pdftoraster filter. It will be replaced by a Ghostscript-based pdftoraster filter filter provided by the Ghostscript package, requested via Debian bug #505282 (fixes LP: #290395). * debian/filters/pstopdf: Fixed debug output. cups (1.3.9-3) experimental; urgency=low [ Till Kamppeter ] * debian/filters/pstopdf: Fixed several bugs in the pstopdf filter. First, removed the use of CUPS' pstops filter for inserting option settings. This also inserts PJL headers and then Ghostscript cannot convert the PostScript to PDF in the next step. Fixed also the sed magic so that the paper size and the margins get really read from the PPD and fixed the calculation of the top and bottom margins, they were exchanged. Fixes LP: #289759, LP: #292690, LP: #282186. Possible fix for LP #293883. [ Martin Pitt ] * debian/local/apparmor-profile: Allow dnssd backend to create various less common network protocols (x25, appletalk, etc.) for detection. Also allow it to read /proc/*/net/, which the bonjour avahi library apparently uses. (LP: #254022) cups (1.3.9-2) experimental; urgency=low * debian/local/filters/cpdftocps, debian/filters/pstopdf: Avoid duplicate execution of the number of copies. Sending a PostScript job to a non-PostScript printer produced n*n copies instead of n copies, also sending a non-PostScript job to a PostScript printer. A PostScript job sent to a PostScript printer could even produce n*n*n copies (LP: #286048). cups (1.3.9-1) experimental; urgency=low * New upstream security/bug fix release: - The HP-GL/2 filter did not range check pen numbers. [CVE-2008-3641] - The SGI image file reader did not range check 16-bit run lengths. [CVE-2008-3639] - The text filter did not range check cpi, lpi, or column values. [CVE-2008-3640] - Fix incompatibility with Firefox 3.0 when using SSL. - Update the French admin.tmpl, to have the missing "Find new printer" button and the "Subscriptions" section. Thanks to Yves-Alexis Perez! (Closes: #475270) - Lots of other bug fixes, see http://www.cups.org/articles.php?L575. * Drop patches accepted upstream: - cupsfilter-path-typo.dpatch - pjl-display-ready-message.dpatch - dont-chown-symlinked-ssl.dpatch * Add hpgl-regression.dpatch: Revert the SP_select_pen() enumeration change introduced in STR #2911, because it changes the color mapping (e. g. "SP1" would now select a white pen instead of a black one, and "SP0" would not be valid at all any more). Also fix a remaining off-by-one loop. (STR #2966) cups (1.3.8-13) experimental; urgency=low [ Till Kamppeter ] * debian/local/filters/pdf-filters/pdftopdf/P2PCatalog.cxx, debian/local/filters/pdf-filters/pdftopdf/P2PCatalog.h, debian/local/filters/pdf-filters/pdftopdf/P2PDoc.cxx, debian/local/filters/pdf-filters/pdftopdf/P2PDoc.h, debian/local/filters/pdf-filters/pdftopdf/P2PPageTree.cxx, debian/local/filters/pdf-filters/pdftopdf/P2PPageTree.h, debian/local/filters/pdf-filters/pdftopdf/pdftopdf.cxx: When N-up printing and selection of only the even or odd pages (for manual duplex) was used together the pages were selected the wrong way (number-up=2 page-set=even with an 8-page document gave 2+4, 6+8 and should give 3+4, 7+8). This is fixed now. The behavior of pdftopdf is now exactly the same as of pstops. [ Martin Pitt ] * debian/local/apparmor-profile: Allow locking on /var/cache/cups/**. (Mentioned in LP #270046) cups (1.3.8-12) experimental; urgency=low [ Till Kamppeter ] * debian/filters/pstopdf, debian/local/filters/pdf-filters/filter/pdftoraster.cxx, debian/local/filters/pdf-filters/pdftopdf/*: Fixed paper size handling of pstopdf, pdftopdf, and pdftoraster which led SpliX to crash (LP: #261363, LP: #268510), fixed monochrome CUPS Raster output of pdftoraster which led to black pages being printed (LP: #269691). cups (1.3.8-11) experimental; urgency=low * debian/rules: Explicitly configure with --with-dbusdir. For some obscure reason, the automatic check fails on the buildds, causing the D-BUS configuratin not to be installed. Fixes FTBFS. (Closes: #498664) cups (1.3.8-10) experimental; urgency=low [ Martin Pitt ] * rootbackends-worldreadable.dpatch: Do not run backends as root if they are group or world writable (this is by and large a paranoia fix, though). * dont-chown-symlinked-ssl.dpatch: Replace patch with the upstream committed version, which is more general. * debian/control: Package development moved to bzr, update Vcs- tags. * cupsaccept.dpatch: Replaced with the more comprehensive solution upstream committed to 1.4 trunk. Removed debian/cups-client.links, since the links are now installed by upstream. Adapt manpage-translations.dpatch accordingly. * Move installation of D-BUS configuration files from debian/rules to debian/cups.install. * debian/libcups2-dev.install: Add missing sidechannel.h. [ Johan Kiviniemi ] * debian/filters/pstopdf: Apply PPD settings (resolution, page size, page margins) to the conversion (LP: #263049). * debian/control: cups Depends: bc (for margin calculation). cups (1.3.8-9) experimental; urgency=low * Previous upload had some cruft in the diff.gz which caused some changed defaults in cupsd.conf. Reupload with a clean diff.gz. *Brown paperbag* cups (1.3.8-8) experimental; urgency=low * Remove debian/patches/dont_force_ssl.dpatch; gnome-cups-manager is ancient and removed from Debian, and newer GUIs like system-config-printer get along fine with the default setting. * Add quiesce-bonjour-warning.dpatch: Silence the "Apple Bonjour compatibility layer of Avahi" warning, since it can cause SIGPIPE crashes when being issued in a child process without stderr. (Closes: #497492) * confdirperms.dpatch, manpage-translations.dpatch: Revert note that Debian doesn't install lppasswd suid root, since we do. (Closes: #478280) * debian/control: Drop the "It can be safely removed from your system" from the old package names, since that is untrue until the transition is actually complete. (Closes: #489246) * debian/control: Bump Standards-Version (no actual changes necessary). * Remove classes_crash.dpatch, it has been fixed upstream a while ago. * cupsaccept.dpatch: Rewrite to be consistent with current upstream code, and send it upstream. * Drop quiesce_ipp_logging.dpatch: It was only necessary for the polling from gnome-cups-icon, but fortunately gnome-cups-manager has been removed now. * confdirperms.dpatch: Remove a few hunks which were only relevant for running cups as system user. Remove the SSL certificate bits as well, rewrite it to be upstream compatible, split it out to dont-chown-symlinked-ssl.dpatch, reported it upstream. * Remove device_uri.dpatch, does not seem to be necessary any more. * Add rootbackends-worldreadable.dpatch: Install root backends world-readable, to comply to Debian Policy and because it is both nonsensical to to not do so, and also breaks system checkers, bug reporting, etc. (Closes: #410171) cups (1.3.8-7) experimental; urgency=low * Previous upload had some cruft in the diff.gz which caused some changed defaults in cupsd.conf. Reupload with a clean diff.gz. cups (1.3.8-6) experimental; urgency=low [ Till Kamppeter ] * debian/local/filters/pdf-filters/filter/texttopdf.c, debian/local/filters/pdf-filters/filter/pdfutils.c, debian/local/filters/pdf-filters/filter/test_pdf2.c, debian/local/filters/pdf-filters/filter/fontembed/test_ps.c, debian/local/filters/pdf-filters/filter/fontembed/test_pdf.c, debian/local/filters/pdf-filters/filter/fontembed/sfnt.h, debian/local/filters/pdf-filters/filter/fontembed/main.c, debian/local/filters/pdf-filters/filter/fontembed/iofn.h, debian/local/filters/pdf-filters/filter/fontembed/fontfile.h, debian/local/filters/pdf-filters/filter/fontembed/fontfile.c, debian/local/filters/pdf-filters/filter/fontembed/embed.h, debian/local/filters/pdf-filters/filter/fontembed/embed.c, debian/local/filters/pdf-filters/filter/fontembed/Makefile, debian/local/filters/pdf-filters/addtocups: Fixed crashes of texttopdf on bad or missing fonts, make texttopdf also working without configuration of the fonts (at least for ASCII). * debian/local/filters/pdf-filters/filter/pdftoijs.cxx, debian/local/filters/pdf-filters/conf/HP-PhotoSmart_Pro_B8300-hpijs-pdftoijs.ppd debian/local/filters/pdf-filters/addtocups, debian/local/filters/pdf-filters/config-scripts/cups-pdf-filters.m4, debian/local/filters/pdf-filters/removefromcups, debian/local/filters/pdf-filters/README, debian/control, debian/rules: Added pdftoijs filter. [ Johan Kiviniemi ] * debian/filters/pstopdf: - Adobe Reader generates DRM-infested PostScript from encrypted PDF files. This PostScript contains code which stops Ghostscript with an error when one tries to convert it to (now unencrypted) PDF. Change the filter to normalize such PostScript using ps2ps before conversion. [ Martin Pitt ] * Add alternative dependency "gsfonts-x11" for ttf-freefonts. (Closes: #495598) * debian/patches/: Update the status of patches, add some upstream references, update status in 00list. * Drop obsolete include_krb5_h_in_job_h.dpatch, package builds fine in current unstable. * debian/rules: Enable PIE and other compiler flags security enhancements with DEB_BUILD_HARDENING=1. Add hardening-wrapper build dependency. Thanks to Kees Cook! * Add debian/local/cups.ufw.profile: "ufw" firewall profile. Install it for Ubuntu builds only for now, until ufw enters Debian as well. Thanks to Didier Roche and Jamie Strandboge! (https://launchpad.net/bugs/261903) cups (1.3.8-5) experimental; urgency=low [ Till Kamppeter ] * debian/local/filters/pdf-filters/filter/texttopdf.c: Added bug fix from upstream so that texttopdf does not segfault on missing or bad fonts any more. Backed out Johan Kiviniemi's patch of replacing Courier by FreeMono. * Remove hardcoded -march=pentium from texttopdf Makefile. (Closes: #495220) * debian/local/filters/pdf-filters/conf/imagetopdf.convs: Reduced cost factor to prefer this filter instead of imagetops. [ Johan Kiviniemi ] * debian/local/filters/cpdftocps, debian/local/cpdftocps.convs, debian/cups.install, debian/rules: - Add an application/vnd.cups-pdf → application/vnd.cups-postscript filter, thus making the PDF filter chain possible for PostScript printers. - The filter’s cost is 22, making the total cost of pstopdf → pdftopdf → cpdftocps 66 after the following change. * debian/local/filters/pdf-filters/conf/pdftopdf.convs, debian/local/pstopdf.convs, debian/rules: - Change filter costs to prefer the PDF chain over pstops. • pdftopdf: 22 instead of 66. • pstopdf: 22 instead of 100. • pstops: 100 instead of 66. * Add pjl-display-ready-message.dpatch: - According to the PJL spec, one should use "" (not "READY") to return the display to the normal ready message. cups (1.3.8-4) experimental; urgency=low [ Till Kamppeter ] * debian/control, debian/rules, debian/local/filters/pdf-filters/filter/pdfutils.h, debian/local/filters/pdf-filters/filter/texttopdf.c, debian/local/filters/pdf-filters/filter/fontembed, debian/local/filters/pdf-filters/filter/test.sh, debian/local/filters/pdf-filters/filter/test_pdf1.c, debian/local/filters/pdf-filters/filter/test_pdf2.c, debian/local/filters/pdf-filters/filter/pdfutils.c, debian/local/filters/pdf-filters/conf/texttopdf.convs, debian/local/filters/pdf-filters/AUTHORS, debian/local/filters/pdf-filters/addtocups, debian/local/filters/pdf-filters/data, debian/local/filters/pdf-filters/data/pdf.utf-8.simple, debian/local/filters/pdf-filters/data/pdf.utf-8.heavy, debian/local/filters/pdf-filters/removefromcups, debian/local/filters/pdf-filters/README: Added texttopdf filter. Added "Depends: ttf-freefont" for the cups package, as the texttopdf filter needs these fonts. [ Johan Kiviniemi ] * Add cupsfilter-path-typo.dpatch: Fix a typo in scheduler/cupsfilter.c, which caused filters not to have /bin in their PATH. * debian/filters/pstopdf: - Do not log to /tmp/pstopdf.log. A user running the filter (e.g. via cupsfilter) made all other users (including cups itself) unable to run the filter because of no permission to open the logfile. - Put unquoted variables into quotes where appropriate. - Never create an outfile in the same directory as the given infile; the process might not have write access there. - set -e. * debian/local/filters/pdf-filters/filter/texttopdf.c: - Use FreeMono instead of Courier, since texttopdf requires a TrueType font. [ Martin Pitt ] * Bump shlibs version for libcups2 and libcupsimage2. (Closes: #494168) cups (1.3.8-3) experimental; urgency=low [ Till Kamppeter ] * debian/local/filters/pdf-filters/addtocups, debian/local/filters/pdf-filters/removefromcups, debian/local/filters/pdf-filters/config-scripts/cups-pdf-filters.m4, pdftopdf/Makefile: Avoid that all executables and libraries of CUPS get linked against libpoppler. This especially leads to all packages dependent on CUPS needing libpoppler, even for building. cups (1.3.8-2) experimental; urgency=low [ Till Kamppeter ] * debian/local/filters/pdf-filters/, debian/local/pstopdf.convs, debian/rules, debian/control, debian/copyright, debian/cups.install: Introduced the first bunch of infrastructure for using PDF as standard print job format. Added CUPS filters imagetopdf, pstopdf, pdftopdf, pdftoraster, added build dependency on libpoppler-dev, as the new filters are Poppler-based. texttopdf and pdftoijs will be added soon. All this is temporary, as the filters are planned to be added to the upstream package of CUPS (CUPS STR #2897, #1595). * debian/patches/search_mime_files_in_usr_share.dpatch: Replaced by the changes which were done for this purpose in CUPS 1.4. In addition to the introduction of /usr/share/cups/mime for installing file detection and conversion rules as non-conffiles it also changes the reading order to all *.types files and the all *.convs files (instead of all in /usr/share/cups/mime and then all in /etc/cups). This way /usr/share/cups/mime can contain conversion rules based on file types defined by files in /etc/cups (CUPS STR #2719, CUPS SVN revs #7670 and #7694). [ Martin Pitt ] * Add missing CVE and more verbose descriptions to security fixes to 1.3.6-1 changelog. cups (1.3.8-1) unstable; urgency=low * New upstream release: some 20 bug fixes, no new features (see http://www.cups.org/articles.php?L562 for details). - Fixes remote DoS through RSS subscriptions. (CVE-2008-5184) * Dropped patches, accepted upstream: - empty_option_value_crash.dpatch - CVE-2008-1722.dpatch - glibc2.8_build.dpatch - HostNameLookups_values.dpatch * manpage-typos.dpatch: Most of this got applied to 1.3.8. The ".Sh" -> ".SS" fix only got applied to trunk, so backport these remaining ones. * manpage-translations.dpatch: Update to new upstream version. cups (1.3.7-9) unstable; urgency=low [ Martin Pitt ] * Update Turkish debconf translations, thanks Mert Dirik! (Closes: #489408) [ Till Kamppeter ] * Updated "Suggests:" for the "cups" package, replacing obsolete foomatic-filters-ppds by foomatic-db and foomatic-db-engine. (Closes: #286127) cups (1.3.7-8) unstable; urgency=medium * Urgency medium due to RC bug fix (#487606). * debian/cups.init.d: Restart xprint on start/stop/reload. (Closes: #285332) * Add empty_option_value_crash.dpatch: Fix crash on cupsd.conf options without a value. (Closes: #250848) * Add glibc2.8_build.dpatch: Fix building with glibc 2.8. * debian/patches/00list: Sort patches by upstream status. * Add HostNameLookups_values.dpatch: Make possible values of HostNameLookups consistent to manpage and to other options in cupsd.conf. (Closes: #379014) * debian/patches/confdirperms.dpatch: Fix typo, thanks Nicolas François! * Add manpage-typos.dpatch: Fix various typos in manpages, thanks Nicolas François! (part of #478597) * Add manpage-translations.dpatch: Provide po4a infrastructure for translating mangpages, and add French manpage translations. Add po4a build dependency, and add translated manpages to debian/*.install. Thanks to Nicolas François! (Closes: #478597) * Add Slovak debconf translations, thanks to Ivan Masár. (Closes: #488906) * Add Romanian debconf translations, thanks to Eddy Petrișor. (Closes: #488597) * debian/cups.init.d: Test for executability of daemon, not merely its existence. (Closes: #488843) * debian/cups.prerm: Do not delete the /usr/lib/cups/backend/smb symlink on removal, it is owned by smbclient, not cups. (Closes: #487606) cups (1.3.7-7) unstable; urgency=low * Provide transitional cupsys-common package, to ease apt-get dist-upgrade. * debian/cups.preinst: Run conffile transition for "install" as well, not just for "upgrade" (brown paperback for this thinko!), and also remove the old rc.d symlinks for cupsys. (Closes: #485514) * debian/control: Drop obsolete "gs-esp" alternative dependency. cups (1.3.7-6) unstable; urgency=low * Rename the package to cups. This is the proper upstream name. Upstream has made it clear that the usual distro patches are not a trademark violation. This unbreaks all the documentation out there, which refers to "cups", not "cupsys" (including names of the init script), as well as unbreaks dependencies of openprinting.org's LSB printer driver packages. (Closes: #482296, LP: #233790) * debian/cups.{config,postinst}: Remove some old cruft. * debian/cups.preinst: Move conffiles to new names on upgrades, in a dpkg conffile question avoiding manner. * debian/cupsys.install: Install oopstops.{convs,types} in /etc/cups, they do not work in /usr/share/cups/mime (loaded too early). (Closes: #474109) cupsys (1.3.7-5) unstable; urgency=low * debian/cupsys-bsd.install: Remove daemon/cups-lpd. It really does not belong into -bsd. * debian/control: Add appropriate Conflicts/Replaces to older cupsys-bsd which shipped daemon/cups-lpd. (Closes: #477392) cupsys (1.3.7-4) unstable; urgency=high * debian/rules: Do not fail the build when the test suite fails on m68k and arm. It is currently unclear why these tests fail on these architectures, but that shouldn't block testing migration (given that the actual bugs existed before as well, they just didn't get caught during build). cupsys (1.3.7-3) unstable; urgency=low * debian/copyright: Update to current reality. (Closes: #474176) * Drop usage of dh_movefiles, rename the remaining debian/*.files to debian/*.install. This also brings back the lost /usr/lib/cups/daemon/cups-lpd. * debian/libcupsimage2-dev.install: Add cups/i18n.h from upstream (not installed by upstream Makefiles any more). (Closes: #474922) * debian/rules: Drop lintian magic, current debhelper (dh_lintian) and cdbs support that now. Rename .lintian -> .lintian-overrides for this. * debian/cupsys.doc-base: Fix section. cupsys (1.3.7-2) unstable; urgency=high [ Martin Pitt ] * debian/control: Add missing build dependency lsb-release. (LP: #211375) Also wrap long fields, so that they are easier to edit. * Drop pdftops-wait-eintr.dpatch, an improved version has been committed upstream. Integrate the upstream solution into pdftops-cups-1.4.dpatch. * Add pdftops-dont_fail_on_cancel.dpatch: Fix behavioural change in patch from STR #2780 which broke the test suite: When a job is cancelled, do not report a failure in the exit code of pdftops. * Rebuild against fixed debhelper to properly compress manpages again (see #470913). (Closes: #475887, #476495) [ Nico Golde ] * Add debian/patches/CVE-2008-1722.dpatch: Two integer overflows in png image filter allow a denial of service attack and possibly arbitrary code execution. [STR #2790, CVE-2008-1722] (Closes: #476305). cupsys (1.3.7-1) unstable; urgency=medium * Urgency medium due to security fix. * New upstream bugfix/security update release. For a detailled list of changes see http://www.cups.org/articles.php?L537. - CUPS GIF image filter overflow [CVE-2008-1373, STR #2765]. * Drop patches which are now upstream: - cgiCompileSearch_buffer_overflow.dpatch - testsuite-exit-code.dpatch - pbmprint.dpatch * search_mime_files_in_usr_share.dpatch: Drop log message about missing /usr/share/cups/mime/ from error to info, since it is not really an error, and causing the test suite to fail due to error log count mismatch. * pdftops-cups-1.4.dpatch: Apply r7391 from SVN head to fix missing error message newlines (STR #2743). * debian/rules: Remove cleaning of test suite HTML reports in test/, they are written to /tmp now. * Add pdftops-wait-eintr.dpatch: Handle EINTR in pdftops' wait() call. (Caught by test suite.) * debian/libcupsys2-dev.files: Drop i18n.h, it's an internal interface and not installed by upstream any more. * debian/control: Add poppler-utils | xpdf-utils build dependency, so that the test suite works during build. cupsys (1.3.6-3) unstable; urgency=high [ Till Kamppeter ] * pdftops-cups-1.4.dpatch: Updated to Mike Sweet's patch version from CUPS STR #2716. * debian/patches/ppd-poll-with-client-conf.dpatch: If there is a client.conf pointing to a remote server, clients were not able to poll the PPD options from printers on that server (CUPS STRs #2731, #2763) [ Martin Pitt ] * Urgency high due to security fix. * debian/local/apparmor-profile: Allow cups-pdf to read files in ~/PDF/, so that it can overwrite files. (LP: #161222) * Add cgiCompileSearch_buffer_overflow.dpatch: Fix buffer overflow in cgiCompileSearch() using crafted search expressions. Exploitable if printer sharing is enabled. (CVE-2008-0047, STR #2729, Closes: #472105) cupsys (1.3.6-2) unstable; urgency=low * debian/rules: Configure with default log file permissions 0640. (Closes: #469853) * debian/control: Mention "lpr" in the description of -bsd, for easier apt-cache search catching. (Closes: #426519) * Remove debian/NEWS, there's nothing new since Etch's release. (Closes: #376580) * Add debian/patches/pbmprint.dpatch: Fix printing of PBM files, thanks to Eugeniy Meshcheryakov! (Closes: #313536) * debian/cupsys.preinst: Only chown /var/run/cups if it exists. (LP #156634) * Move scripting examples from cupsys to libcupsys2-dev. No need to install those 1.3 MB by default on every system, this is much more developer oriented. Mention this in the package description. * debian/rules: Explicitly build with -fno-stack-protector on arm and armel, since the compiler produces segfaulting binaries. Works around #469517. * search_mime_files_in_usr_share.dpatch: Do not fatally fail if DataDir/mime does not exist. This both makes much more sense (since /etc/cups is the canonical dir which must exist, and /usr/share/cups/mime is optional), and also unbreaks the test suite (which does not create this directory by default). * pidfile.dpatch: Specify PidFile in temporary directory in the self test's cupsd.conf. * debian/rules clean: Remove test suite HTML reports. * Add testsuite-exit-code.dpatch: Exit with nonzero if the test suite fails, so that it is easier to integrate into package building. * pdftops-cups-1.4.dpatch: Update pdftops location in test suite, too, so that it does not fail the PDF printing test. (Forwarded to STR #2759) * debian/rules: Run test suite on build. This will fail the build if any tests fail, so that problems on particular platforms will be caught easily. * debian/control: Add alternative (build-)depends to heimdal-dev. * debian/rules, debian/cupsys.postinst: Call update-rc.d to not install stop symlinks for runlevels 0 and 6, since they just needlessly slow down shutdown. Remove the obsolete kill symlinks on upgrade. Patch adopted from the Ubuntu branch, but without using the Ubuntu-only 'multiuser' mode of update-rc.d. * Add debian/local/apparmor-profile: AppArmor profile (taken from Ubuntu branch). Install it in debian/rules if package is built on Ubuntu (tested with lsb_release -is). Reload AppArmor in debian/cupsys.postinst if both the cupsys profile and AppArmor itself are present. * Add debian/patches/ubuntu-disable-browsing.dpatch: Disable Browsing by default when building on Ubuntu. * Add debian/patches/ubuntu-default-error-policy-retry-job.dpatch: Set default job error policy to "Retry", since it is less confusing and a better default on desktop machines. This is only applied when building on Ubuntu. * debian/control: Add Vcs-{Svn,Browser} fields. cupsys (1.3.6-1) unstable; urgency=low * New upstream bugfix release. - Fixes buffer overflows in filter/hpgl-input.c, possibly exploitable to run arbitrary code with crafted HP-GL files. (CVE-2008-0053) - Fixes double free vulnerability in process_browse_data(), exploitable to remote DoS. (CVE-2008-0882, bug #467653) * Remove the following patches which are upstream now: - fix_regression_reactivate_net_ifaces_changes_detection.dpatch - web-interface-breaks-default-auth-setting.dpatch * search_mime_files_in_usr_share.dpatch: Greatly simplified the patch by using mimeMerge(), so that it is more robust against upstream changes. Forwarded to STR#2719. * Dropped cupsd.conf-AllowLocal.dpatch; it does not do anything good any more for the current web and GUI administration tools (they handle this fine by themselves), so it's obsolete now. * Drop enable{sharing,browsing} and {sharing,browsing}_status scripts. They have never been used in Debian, not used any more in Ubuntu, and the current frontends (web, system-config-printer, etc.) do this in a much better way. * debian/docs: Remove redundant LICENSE.txt. * debian/rules: Add a generic rule to install lintian overrides in debian/packagename.lintian. * Add lintian overrides for unjustified/wontfix complaints about libcupsys2 and cupsys. * debian/cupsys.doc-base: Remove erroneous whitespace in the section separator. * debian/rules: Remove *.o and *.so files from PHP scripting examples directory (it's /usr/share after all). * debian/cupsys.init.d: Add Short-Description. * debian/rules: Do not ship an empty /usr/share/cups/model/ directory. cupsys (1.3.5-2) unstable; urgency=low [ Martin Pitt ] * debian/cupsys.init.d: Add Should-Start: avahi. (Closes: #459662) [ Till Kamppeter ] * debian/patches/pdftops-cups-1.4.dpatch, debian/local/filters/pdftops: Replaced Helge Blischke's alternative pdftops wrapper by the pdftops of CUPS 1.4. The old pdftops wrapper did not work with the pdftops filter of Poppler, the new one works with the pdftops filters of both Poppler and XPDF (Closes: #457810; Ubuntu LP: #182379). * debian/patches/web-interface-breaks-default-auth-setting.dpatch: When modifying server settings with the CUPS web interface, the setting for the default authentication got overwritten with gibberish (Closes: #461331; CUPS STR #2703, Ubuntu LP: #188426). * debian/local/backends/dnssd: Updated dnssd to filter out IPv6 entries, as they clutter the lists of detected printers and make the network printer discovery process taking more time than needed. Applied also a bug fix and the possibility of querying one IP address by calling the dnssd backend with the IP as command line argument (like the snmp CUPS backend). cupsys (1.3.5-1) unstable; urgency=high [ Kenshi Muto] * New upstream release - cups-stops-broadcasting-on-HUP-with-explicit-BrowseAddress patch is merged. - Fix that SNMP backend did not check for negative string lengths. (CVE-2007-5849, closes: #457453). * Update pdftops.pl to 1.20. It fixes overwriting arbitary files via symlink attack. (CVE-2007-6358, closes: #456960) [ Till Kamppeter ] * debian/patches/fix_regression_reactivate_net_ifaces_changes_detection.dpatch : Fix a regression in upstream code that has removed the network interface update poll (CUPS STR #2631, LP: #177075). Thanks to Hugues Fournier (hugues dot fournier at gmail dot com) for the patch. cupsys (1.3.4-4) unstable; urgency=high [ Kenshi Muto] * cupsys depends on "ghostscript | gs-esp", not "ghostscript | gsp-esp"! I should punish myself. (closes: #456455) cupsys (1.3.4-3) unstable; urgency=high [ Martin Pitt ] * debian/control: Bump Standards-Version to 3.7.3 (no changes necessary). [ Till Kamppeter ] * debian/patches/cups-stops-broadcasting-on-HUP-with-explicit-BrowseAddress.dpatch: CUPS stopped broadcasting on a HUP signal when using a fixed BrowseAddress (CUPS STR #2618, Ubuntu LP: #173470). * debian/local/backends/dnssd: Updated dnssd to support Mac OS X servers which broadcast their print queues only via DNS-SD and require clients to create raw IPP queues pointing to the server's queues manually. [ Kenshi Muto] * Debconf translation - French (closes: #456272) - do update-debconfpo. Update all translations to use the msgstr 'dnssd' for msgid 'dnssd'. * cupsys depends on "ghostscript | gs-esp", to ease testing transition and upgrades from etch (closes: #456455). cupsys (1.3.4-2) unstable; urgency=low [ Kenshi Muto ] * Bumps up shlibs to 1.3.4. [ Martin Pitt ] * debian/control: Remove gs-esp alternative dependency, it's just "ghostscript" nowadays. * debian/control: Slightly bump the C/R: for -common; it's a pointless delta to Ubuntu and it doesn't hurt us. * debian/cupsys-bsd.postinst: Symlink cupsys-bsd's doc directory to cupsys-common's, not cupsys', since the latter is not a dependency. * debian/control: Demote cups-pdf from Recommends: to Suggests: to match the semantics (apt installs recommends by default now). * debian/cupsys.init.d: Add LSB header, thanks to Petter Reinholdtsen! (closes: #337640) * debian/rules: Configure with default printcap in /var/run/cups/. (closes: #452446) [ Till Kamppeter ] * Add debian/local/backends/dnssd: Printer discovery backend for several cheaper printers, like the HP Color LaserJet 2600n, are not discovered by the "snmp" backend. In addition, this backend extracts more info from the printers than the "snmp" backend, like for example available page description languages. This leads to better driver choices for unknown printer models. * debian/cupsys.install, debian/cupsys.{prerm,postinst,templates,rules}: Install new backend. * debian/control: Add Recommends: to avahi-utils; if it is installed, the dnssd backend can actually work. * debian/postinst: Activate new backends (since Etch) by default on upgrades. This affects snmp, scsi, serial, and dnssd. cupsys (1.3.4-1) unstable; urgency=high * New upstream release. - Fixes CVE-2007-4351 IPP Tags Memory Corruption Vulnerability (closes: #448866) [ Martin Pitt ] * debian/cupsys.postinst: Drop ancient code to remove root from group lpadmin. [ Kenshi Muto ] * Debconf translation - Finnish (closes: #446740) cupsys (1.3.2-1) unstable; urgency=low * New upstream bug fix release. - Fixes web interface for many browsers. (STR#2472, Closes: #440589) * Remove str2488-fix-localedir.dpatch, str2505_localize.dpatch, str2508-dont_kill_edit-config.tmpl.dpatch: Fixed upstream. cupsys (1.3.0-4) unstable; urgency=low * Install PO files again, but this time under /usr/share/cups/locale. cups has its own crazy PO file parser. * Add debian/patches/str2488-fix-localedir.dpatch: Make the --localedir configure option actually work (taken from upstream SVN, STR#2488) * debian/rules: Add --enable-gssapi to ensure that the package is built with Kerberos support. * debian/rules: Use -Wl,--as-needed linker flag. This drops a few unnecessary dependencies and should make checklib much happier. * Add debian/patches/str2508-dont_kill_edit-config.tmpl.dpatch: Do not kill edit-config.tmpl on distclean. Forwarded upstream as STR#2508. (Closes: #441697) * Add debian/patches/str2505_localize.dpatch: Fix localization of web interface (STR#2505, Closes: #440256) cupsys (1.3.0-3) unstable; urgency=low [ Martin Pitt ] * debian/control: Allow 'ghostscript' as alternative dependency to gs-esp. * debian/cupsys.dirs: Create /usr/lib/cups/backend/ (regression from the big debian/rules cleanup). (closes: #438432) * debian/cupsys.preinst: Bump the version comparison for the file owner cleanup, since some log files were still left as owned by 'cupsys' until #437536 was fixed. * debian/cupsys-common.files: Do not install the .po files, cups does not use them at runtime. (closes: #438625) [ Till Kamppeter ] * debian/local/postscript.ppd: New generic PostScript PPD file for unknown PostScript printers added. cupsys (1.3.0-2) unstable; urgency=low * debian/control: Re-add erroneously dropped adduser dependencies to cupsys and cupsys-client. Still needed for addgroup lpadmin. (closes: #437951) * debian/control: Add missing libkrb5-dev dependency to libcupsys2-dev. cupsys (1.3.0-1) unstable; urgency=low [ Till Kamppeter ] * New upstream release (first release of 1.3.x generation) * 90_include_krb5_h_in_job_h.dpatch: Added a missing "#include <krb5.h>" to the scheduler/job.h file (upstream bug). * Regenerated patches: 44_fixconfdirperms.dpatch, 47_pid.dpatch, 70_reactivate_recommended_driver.dpatch. * Removed patches (fixed upstream): 53_usr_share_ppd_support.dpatch, 55_ppd_okidata_name.dpatch, 68_edit-config.dpatch * debian/control: Added "libkrb5-dev", and "libavahi-compat-libdnssd-dev" to the build dependencies, so that the new Kerberos and DNS Service Discovery support of CUPS gets compiled. * debian/libcupsys2-dev.files: Removed /usr/include/cups/md5.h This file is not provided any more by CUPS * debian/cupsys.install, debian/cupsys-client.files: Added new files. * debian/rules: Added more files to "clean::" rule which upstream has forgotten in "make clean". [ Martin Pitt ] * Bump library shlibs to >= 1.3.0. * Drop 02_configure.dpatch, upstream configure does not set rpath any more for prefix=/usr. * Drop 54_cups-config_modeldir.dpatch, --modeldir was never actually used anywhere and not documented, and LSB prescribes /usr/share/ppd/ anyway. * Drop 56_dirsvc.dpatch, which was fixed upstream long ago and disabled in 00list anyway since then. * Drop 67_printcap.dpatch: /var/run/cups/printcap is now the implicit default upstream. * debian/patches: Drop number prefixes from patches. The enumeration is not useful at all any more since it both got inflated and is not sorted by any category. With dpatch we also do not need number prefixes. cupsys (1.2.12-4) unstable; urgency=low [ Martin Pitt ] * cupsys.logrotate: Fix last occurence of 'cupsys' user. (closes: #437536) * Moved all Debian specific filters to debian/local/filters. * Cleaned up debian/rules, moved some file installs to debian/cupsys.install. * Merge debian/cupsys.files into debian/cupsys.install and remove the former. Two different files are just too confusing. * debian/local/filters/pdftops: Do not pass /etc/cups/pdftops.conf to pdftops if it does not exist (poppler-utils does not have this file). (https://launchpad.net/bugs/125300) [ Martin-Éric Racine ] * Corrected download URL in debian/copyright. * Added debian/watch file using that URL. * Revised the Uploaders in debian/control: - Fixed the name for Masayuki Hatta. - Added Roger Leigh. * Removed cupsys-driver-gimpprint alternative in debian/control; superseded by cupsys-driver-gutenprint since Etch. cupsys (1.2.12-3) unstable; urgency=low [ Martin-Éric Racine ] * Added presubj script to warn bug reporters to avoid filing Poppler or XPDF security issues, since we don't use that codebase; we call external programs who do and that's where the bug should be filed. [ Martin Pitt ] * cupsys.init.d: Remove stray chown'ing to 'cupsys' which does not exist any more. (closes: #436662) * cupsys.init.d: Fix detection of parallel printers when 'lp' is already loaded. (https://launchpad.net/bugs/29050) * debian/cupsys.init.d: Put back 'reload'. cupsys (1.2.12-2) unstable; urgency=low [ Kenshi Muto ] * Added scripting directory to /usr/share/doc/cupsys/examples. This directory contains the binding code from Java, Perl, and PHP to CUPS. (closes: #193076) Although we Debian CUPS team cannot afford to maintain them, some of you may want them. * Added 'Recommends: cupsys' to cupsys-bsd. (closes: #426521) * Changed cupsys-client from 'Recommends: cupsys-bsd' to 'Suggests: cupsys-bsd.' because cupsys-bsd isn't so necessary for cupsys-client. * Fixed to use 'cupsys' instead of 'cups' for PAM on cups-check-pam-auth. (though Debian CUPS doesn't use this daemon) (closes: #425701) * Added debconf-2.0 to the dependency of cupsys-bsd. (closes: #415684) [ Martin Pitt ] * Drop the derooting changes. It still has some regressions, and with upstream not even acknowledging the need for improving cupsys' security we will sit on this forever. This will be replaced by an AppArmor/SELinux profiles in the future. - Drop derooting related patches: 06_disable_backend_setuid.dpatch 10_external_pam_helper.dpatch 09_runasuser.dpatch 09_runasuser_autoconf.dpatch - debian/cupsys{,-client}.postinst: Drop the 'cupsys' user setup and file permission juggling. - debian/rules: + Drop --with-cups-user configure option. + Do not modify the upstream default backend permissions. - debian/cupsys.init.d: Do not touch log file permissions any more. - debian/cupsys.files: Drop cups-check-pam-auth. - debian/NEWS: Drop description of derooting changes. - debian/control: Drop adduser dependency. * debian/patches/44_fixconfdirperms.dpatch: Do not create /var/run/cups/certs as lp:lpadmin, but as root:lpadmin, so that cupsd does not need CAP_DAC_OVERRIDE. This will make it possible to create a sensible AppArmor/SELinux profile. * debian/cupsys.preinst: Fix file permissions on upgrades (owner cupsys -> root). * debian/control, debian/rules: Remove references to libcupsys2-gnutls10, since it's a transitional package in Etch and not relevant any more in Lenny. * debian/cupsys.{pre,post}inst: Remove obsolete transition bits. * Remove obsolete debian/patches/05_avoidunknowngroup.dpatch. * Use ssl-cert's "snakeoil" SSL certificate by default: (Closes: #402370) - debian/control: Add ssl-cert dependency. - debian/cupsys.postinst: Symlink snakeoil SSL certificate if present, and there is none present yet. * debian/control: Replace obsolete ${Source-Version} with ${binary:Version}. [ Till Kamppeter ] * Add debian/local/textonly.{ppd,filter}: Text-only printer driver from Red Hat. Install it in debian/rules. * debian/rules: Install the D-Bus config file so that CUPS reports job progress to dbus clients (like sytem-config-printer). * Add debian/local/oopstops.{.pl,types,convs}: Helge Bliscke's oopstops filter to work around the bugs in the PostScript output of OpenOffice.org (from http://www.srz.de/Members/bla/cups/filter/oopstops). Install them in debian/rules. cupsys (1.2.12-1) unstable; urgency=low * New upstream release * removed unnecessary dependency against patch package (Closes: #431069) * Debconf translation - Danish (Closes: #426772) - Vietnamese (Closes: #426822) - Spanish (Closes: #430004) * Disabled external_pam_helper due to #425944 and Ubuntu#112803. (closes: #425944) cupsys (1.2.11-3) unstable; urgency=medium * debian/rules: Disable privilege dropping for now until we fixed the backend invocation to become compatible to upstream's behaviour again. This unbreaks third-party backends again for now. (Closes: #427559) cupsys (1.2.11-2) unstable; urgency=low * debian/rules: Latest cups installs the ipp backend with 0700 permissions, which makes it inaccessible to both the cups daemon (Closes: #423972) and unreadable for users (Closes: #415872) cupsys (1.2.11-1) unstable; urgency=low [ Kenshi Muto ] * Applied templates improvement patch contributed by debian-l10n-english team. (closes: #416350) * Debconf translation - Japanese - Galician (closes: #416357) - Swedish (closes: #416356) - Catalan (closes: #416367) - Basque (closes: #416385) - Norwegian (closes: #416401) - Italian (closes: #416407) * New upstream version 1.2.11: - 56_dirsvc patch is merged. [ Christian Perrier ] * Debconf translation - Czech (closes: #416939) - German (closes: #416994) - Brazilian Portuguese (closes: #417249) - French - Malayalam. (closes: #418030) - Russian. (closes: #417874) - Dutch. (closes: #418135) - Portuguese (closes: #418299) [ Martin Pitt ] * New upstream bugfix release (closes: #421899). Synchronize patches with Ubuntu and new upstream version 1.2.10: * Drop patches which are fixed upstream: 00_00str2111.dpatch, 00_01str2137.dpatch, 00_02str2144.dpatch, 00_03str2106.dpatch, 00_04str2117.dpatch, 00_05str2133.dpatch, 00_06str2121.dpatch, 00_07str2123.dpatch, 00_08str2135.dpatch, 00_09str2198.dpatch, 03_clean.dpatch, 65_detect_http_shutdown.dpatch * Remove a few obsolete patches: 08_cupsd.conf.conf.d.dpatch, 26_modprobe.dpatch, 48_stdlib.dpatch, 61_job_c_strangeloop.dpatch, 08_cupsd.conf.conf.d.dpatch, 64_driverfolder.dpatch. * Add debian/patches/14_dont_force_ssl.dpatch: Do not require SSL for /admin pages, since gnome-cups-manager (and most probably other GUI frontends) does not support this. * Add debian/patches/58_cupsd.conf-AllowLocal.dpatch: Allow access to local ethernet by default. This just affects the ACL, for actually enabling access cupsd needs to be switched to not only listen on localhost. With that, this setting does not need to be configured in two different places. * Add debian/patches/70_reactivate_recommended_driver.dpatch: Upstream CUPS filters the "(recommended)" marking from the NickNames of the PPD files when listing PPDs. These are an important orientation for the user and they are also made use of by some printer setup tools. We need them at least until a better solution for recommending drivers gets available. * Add debian/patches/98_search_mime_files_in_usr_share.dpatch: Let CUPS also search for *.types and *.convs files in /usr/share/cups/mime. This way packages can provide *.types and *.convs files which do not get considered as conffiles. (See https://launchpad.net/36532 for details). * debian/patches/*.dpatch: Forwarded a lot of patches to upstream bug tracker, add STR URLs to dpatch DP: headers. Synchronize packaging with Ubuntu: * debian/control: Drop transitional libcupsys2-gnutls10 package, it was only required for Sarge->Etch upgrades. * debian/control: Change netbase dependency to update-inetd, since that lives in its own package now. * debian/local/enable_sharing: Also match on 127.0.0.1 IP adresses in addition to 'localhost'. * debian/rules: Most of the clean:: rule is obsolete, only two files are left behind now. These two have been reported upstream in http://www.cups.org/str.php?L2366. * debian/cupsys.templates: Activate SCSI, serial, and SNMP backends by default. With these backends activated, many printers can be easily set up with the printer setup tools. Especially network printers get auto-detected and the correct URI gets assigned to them (doing this manually is a non-trivial task for most users). * debian/cupsys.dirs: Add /usr/share/ppd/custom/, a place where lpadmins can store additional PPDs (this functionality is e. g. provided in gnome-cups-manager's "Custom driver..." file dialog). * debian/cupsys.init.d: Give proper permissions to /usr/share/ppd/custom/: root:lpadmin 3775. Drop the obsolete chmod/chowning of /usr/share/cups/model. * Run the backend as non-root system user to confine the impact of security vulnerabilities: - Add debian/patches/10_external_pam_helper.dpatch: + Add a helper program 'cups-check-pam-auth' which performs PAM authentication and returns the status as exit code. + scheduler/auth.c, cupsdAuthorize(): Attempt to use cups-check-pam-auth before trying native PAM. + With this we do not need to put the cupsys user into the shadow group. - debian/cupsys.files: Install PAM helper. - debian/cupsys.postinst: Set permissions of PAM helper to cupsys:shadow 2754, alter permissions of some configuration files and directories to work with non-root cupsd. - debian/cupsys.postinst: Fix /var/cache/cups/ permissions for upgrades which might have written cache files as root. - debian/cupsys.logrotate: Save log files as cupsys:lpadmin. - debian/cupsys.init.d: Disable 'reload'; change force-reload to restart, since cupsd cannot reload as non-root. - debian/cupsys.init.d: Set up proper permissions of log files. - debian/rules: Enable --enable-privilege-dropping configure option. - debian/rules: Install lpd backend suid root, so that it can bind to ports < 1024 (really silly, but required for RFC compliance). - debian/cupsys-client.postinst, debian/cupsys.postinst: Set up cupsys system user. * debian/NEWS: Describe derooting. cupsys (1.2.7-4) unstable; urgency=high [ Kenshi Muto ] * Use dh_usrlocal to install files in /usr/local in the maintainer scripts, instead of shipping them in the deb. This was policy violation (closes: #409335) cupsys (1.2.7-3) unstable; urgency=high [ Kenshi Muto ] * removed STR2137 patch. This patch corruted some Postscript files. (closes: #403703) This was a release critical bug. * Provides /usr/local/share/ppd and /opt/share/ppd to satisfy LSB 3.2. (closes: #408154) * Applied upstream patch: - STR2198: The scheduler still loaded the remote printer cache, even when browsing was disabled * Debconf translation - Portuguese (closes: #408332) - Norwegian (closes: #406253) cupsys (1.2.7-2) unstable; urgency=high [ Kenshi Muto ] * Applied upstream patches to fix some (include RC) bugs as dpatch style: - STR2106: Raw PBM files did not print correctly - STR2111: The PostScript filter did not properly output document setup commands for reversed output (closes: Bug#403703) - STR2117: The scheduler did not parse IPv6 netmask properly - STR2121: cupsDoAuthentication() did not translate the password prompt - STR2123: The backends incorrectly used STATUS: media-tray-empty-error messages for out-of-paper conditions - STR2133: httpGetLength2() did not handle error messages without content correctly - STR2135: cupsMarkOptions() did not handle the multiple-document-handling option - STR2137: Collated output produced by the PostScript filter could lose some options - STR2144: job-hold-until with time values for the next day would be held for 60 days * 67_printcap: Add Printcap/PrintcapFormat/PrintcapGUI variables to cupsd.conf file. (closes: #401981) * cupsys makes /var/run/cups/certs. Although CUPS daemon can make it automatically, the daemon logs an warning. * 68_edit-config: Provide same cupsd.conf as initial package installation. cupsys (1.2.7-1) unstable; urgency=low * New upstream release - Added Italian translation [ Kenshi Muto ] * Add printer.schema to /usr/share/doc/cupsys/examples for LDAP. (closes: #399122) cupsys (1.2.6-2) unstable; urgency=low [ Kenshi Muto ] * Debconf translation - Brazillian Portuguese (closes: #397842) - Basque (closes: #398574) * 00_r6100: Apply SVN r6100. - Fixed an inefficiency in the SNMP IPP detection code (closes: #397833) cupsys (1.2.6-1) unstable; urgency=low * New upstream release Fixes bugs include - "lpc status" did not show the number of queued jobs for disabled queues - The lpstat program could hang cupsys (1.2.5-1) unstable; urgency=medium * New upstream release. [ Kenshi Muto ] * 00_r6052: Apply SVN r6052 to pass the compile with libpaper. * provides /etc/pam.d/cupsys correctly. (closes: #392142) (renamed debian/pam to debian/cupsys.pam) * fixed "ppd API fails to discover printer nickname and options" problem" by upstream (closes: #394255) cupsys (1.2.4-2) unstable; urgency=low [ Kenshi Muto ] * PPD transition to /usr/share/ppd is mostly finished. Now I remove old symlink /usr/share/ppd/cups-transitional-dir and /usr/share/cups/cups-included. (closes: #381266, #383291) * Update debconf translations: - Brazilian Portuguese (closes: #389222) * Tried to solve the backend permission problem. CUPS scheduler uses a permission and owner information of backend program. - Install ipp and lpd as mode 0700. - Create backend links as hardlink instead of symlink. cupsys (1.2.4-1) unstable; urgency=medium * New upstream release - The web interface change settings and edit configuration file buttons would truncate the cupsd.conf file (STR #1976, closes: #389093) Because this bug seems critical, we upload this fixed version as urgency=medium. [ Martin Pitt ] * debian/patches/56_dirsvc.dpatch: Update patch so that a patch/unpatch cycle restores the source properly instead of breaking dirsvc.c in two different places. [ Kenshi Muto ] * debian/patches/65_detect_http_shutdown.dpatch: avoid that gnome-cups-manager eats CPU 100%. (closes: #377640) cupsys (1.2.3-1) unstable; urgency=medium * New upstream release - The parallel and USB backends no longer wait for the printer to go on-line - this caused problems with certain printers that don't follow with the IEEE-1284 standard (STR #1738, closes: #383091) - fixed Printer options were not always honored when printing from Windows clients (STR#1839, closes: #385605) [ Martin Pitt ] * Add appropriate Replaces: to cupsys-common to unbreak upgrades. * debian/patches/44_fixconfdirperms.dpatch: Fix file mode specification: 3755 -> 03755 (regression of svn commit 353). [ Kenshi Muto ] * Apply upstream svn r5958. * check modprobe command and /proc/modules dir exist before running modprobe (closes: #387176). * 62_classes_crash: fix incorrect code. old code returned an error even if user use the correct class configuration. (closes: #380663, #384654) * bump up libcupsys2.shlibs version to 1.2.3. (closes: #385724) * Merge old separated style configuration to the single format only if user upgraded from an affected version. (closes: #386551) * Provide /usr/share/cups/drivers to contain Windows drivers. * 57_cupsaddsmb: original cupsaddsmb easily goes infinite and DoS-like loop. Debian cupsaddsmb ends soon when it catches an error. cupsys (1.2.2-2) unstable; urgency=high [ Kenshi Muto ] * Apply upstream svn change r5845. - BrowseRelay didn't work on Debian (closes: #372855) 61_job_c_strangeloop.dpatch: I don't make sure but job.c of r5818 causes strange CPU busy when it gets printing jobs. This patch avoids it. * 12_quiesce_ipp_logging: some part are merged into the upstream source. updated. * libcupsys2 conflicts cupsys version 1.1. libcupsys2 version 1.2 changed its private API. This breaks old cupsys 1.1, but we believe cupsys is only one application is affected by this change. (closes: #380619) * Provide an new package, "cupsys-dbg" to help chasing the problems at user's environment. * Increment compat to 5. * 44_fixconfdirperms: set owner lp for /etc/cups directory. And modify lppasswd.man to mention about Debian specific changes. lppasswd command now work. (closes: #378062) * 62_classes_crash: when class hasn't any printers, cupsd will crash immedieately after receiving a job. This patch avoids a crash. * Update debconf translations: - Spanish (closes: #383087) cupsys (1.2.2-1) unstable; urgency=medium * New upstream release [ Martin Pitt ] * Adapt patches to new upstream version. * debian/cupsys.init.d: If lp module loading is requested, also load the 'ppdev' module to fix the name and model detection of parallel printers on newer kernels. * Revive debian/patches/56_dirsvc.dpatch; it's still not fixed upstream. * debian/patches/09_runasuser.dpatch: Do not drop additional group privileges in scheduler/process.c. This should fix a range of bugs concerning detection of parallel port printers and other 'permission denied' bugs if privilege dropping is enabled (it is disabled by default in Debian). * debian/patches/44_fixconfdirperms.dpatch: Do not change owner and mode of SSL certificate, in order to not break permissions of customized global ones (like the one from the ssl-cert package). Grrr, cups, no, you cannot own the world! * debian/patches/54_cups-config_modeldir.dpatch: Add --modeldir to cups-config so that other packages can use it to figure out the correct PPD base path. * debian/cupsys.examples: Do not ship .svn files (upstream Makefiles install them). * debian/local/{enable_browsing,browsing_status}: Adapt to single-file configuration file style. * Add debian/local/{enable_sharing,sharing_status}: Similar to enable_browsing and browsing_status, this switches between "Listen localhost:631" and "Port 631" (just as the web interface does). Install files in debian/rules. cupsys (1.2.1-4) unstable; urgency=medium [Kenshi Muto] * Include changelogs during 1.1.23-13 - 1.1.23-15. (closes: #374494) * Apply upstream svn change r5754. - Fix negotiation problem between unstable clients and sarge servers. (closes: #375359) * 58_fixdestc: avoid build failure of r5754 (add ipp-private.h include). * 59_de_docroot: install German translation/images. Although upstream SVN has, Debian diff structure can't handle a binary diff. This patch will be removed when 1.2.2 is released. * Add snmp to backend choices. Because I don't make sure this backend is stable, the default is disabled. Use dpkg-reconfigure cupsys to enable. (closes: #376496) * Don't remove backend symlinks during reconfigure/upgrade process. (closes: #376499) * Check Include directive with case insensitive. (closes: #376883) * libcupsys2 has /etc/cups directory to allow admin put own client.conf. (closes: #370788) * Include sample client.conf in libcupsys2. You can copy /usr/share/ doc/libcupsys2/examples/client.conf to /etc/cups or ~/.cups and modify for your environment. (closes: #376840) * Split locale files to new package "cupsys-common". (closes: #378659) This package is used by cupsys and cupsys-client/cupsys-bsd. * removed 26_modprobe: because parallel backend executes with user 'lp' permission, modprobe can't work. We CUPS team believe it's better that lp module is loaded by discover or any other hardware detection programs instead of CUPS. We provide a module loader by init script for user's convenience at this time. * 60_device_uri: preserve old URI during the printer configuration on Web interface. cupsys (1.2.1-3) unstable; urgency=low [Kenshi Muto] * Apply upstream svn change r5673. - Remove unnecessary %s from dirsvc.c and will solve a mysterious cupsd crash. Thanks Neil. (closes: #372696, #370611) - Support again * character as IP address. (closes: #372291) - Fixes wrong command line arguments to backend. (closes: #372586, #373839) * Improve the wording of NEWS file, thanks Tomas (closes: #372256) * 53_usr_share_ppd_support: Use /usr/share/ppd as PPD path. (closes: #365300, #373722) Make symlink /usr/share/ppd/cups-transitional-dir -> /usr/share/cups/ppd for keeping a compatibility. We'll migrate all of PPD files to /usr/share/ppd in the future. * Revert to use single /etc/cups/cupsd.conf file for the configuration instead of using separate files in /etc/cups/cups.d. The migration will be done automatically. (closes: #345973, #372727) * Apply correct permission modes to the files under /etc/cups at postinst stage. * Update debconf translations: - Danish (closes: #371170) - French (closes: #372714) - Italian (closes: #372198) cupsys (1.2.1-2) unstable; urgency=low [Kenshi Muto] * Provides /etc/cups/ssl directory for SSL. (closes: #370407, #370450) * Add an newline after 'Starting ...' message by appending log_end_msg to /etc/init.d/cupsys. (closes: #370460) cupsys (1.2.1-1) unstable; urgency=low [Kenshi Muto] * New upstream release 1.2.1 for Debian unstable/testing. * 00_r5610: Apply patches from upstream r5610. * Re-update Dutch debconf translation (closes: #369004) * Pump up shlibs to >=1.2.1 for compatibility safe. cupsys (1.2.1-0exp1) experimental; urgency=low [Kenshi Muto] * New upstream release 1.2.1. * Update Dutch debconf translation (closes: #369004) * Update Italian debconf translation (closes: #367943) * Includes the installation guide of dvi filter to /usr/share/doc/ cupsys/examples/filters/dvipipetops.INSTALL is contributed by Francesco Potort. This is partial fix for Bug#368450. [Martin Pitt] * New upstream release 1.2.0. * Update patches for new upstream release. * Remove debian/patches/01_cupsimage.dpatch, fixed upstream. * Remove debian/patches/20_httpGetHostname_crash.dpatch, fixed upstream. * debian/patches/55_ppd_okidata_name.dpatch: Change "Oki" manufacturer name to "Okidata" to be consistent with other PPD files. * Implement http://wiki.debian.org/PpdFileStructureSpecification: - debian/dirs: Create /usr/share/ppd/cups-included/. - debian/rules: Install shipped PPDs into /usr/share/ppd/cups-included/<Manufacturer>/ and provide a symlink to the old /usr/share/cups/model directory for backwards compatibility. * debian/cupsys.dirs: Ship /usr/lib/cups/driver/ to avoid error messages if it's missing. * debian/patches/09_runasuser.dpatch, scheduler/cert.c: Change root certificate permissions from 0440 to 0240, so that the CGI programs cannot read it any more. Without this patch, cupsd presented its own certificate to itself, and *every* user could do admin tasks without authentication. * debian/cupsys-client.links: Fix cupsenable/cupsdisable manpage link. Closes: #364447 * debian/patches/08_cupsd.conf.conf.d.dpatch: - Set "BrowseAddress @LOCAL"; without this, sending browsing information does not work (Browsing still has to be enabled). - Add some comments to point out that the Port and Browsing settings are moved to /etc/cups/cups.d/. * debian/cupsys.postrm: Clean up passwd.md5 on purge. cupsys (1.1.99.rc2-0exp1) experimental; urgency=low [ Kenshi Muto ] * New upstream release 1.2RC2. - Because -fpie config becomes optional, compiler works on amd64 and other architectures. (closes: #335199) * Enable LDAP support. * Remove duplicated update-rc.d (closes: #356911) * Stopped asking admin password because it works only if user chooses digest authentication. The default configuration of Debian uses PAM and basic authentication. * Enable dbus support. * 03_clean.dpatch: Remove produced and remained files during build. * Now CUPS uses 'lp' user/group privilege to call backend or any other programs. CUPS SystemGroup is 'lpadmin'. You need to add users who are allowed to add/modify/remove printers/jobs/classes. * Remove image.h.patch from source. It is no longer needed. * 02_configure.dpath: Remove -rpath from configure. * Fix typo in cupsys-bsd description. (closes: #362070) * Add Galician debconf translation. (closes: #361258) * Update Danish debconf translation. (closes: #357969) * Use 'reload' during logrotate instead of 'restart'. It looks safe on CUPS 1.2. (though job-restart problem still remains) * set TZ in init script only if TZ isn't defined yet. * Use if-fi structure style for postrotate of logrotate script. It solves error when cupsys is not running. (closes: #347641) * Unset TMPDIR environment variable before running daemon. (closes: #347829) * Removed /etc/cups/pdftops.conf because it was for pdftops of upstream version. Debian CUPS uses xpdf-utils wrapper and doesn't need pdftops.conf. * Notice: /etc/cups/client.conf has been removed upstream. * Notice: {dis,en}able have been renamed to cups{dis,en}able. [ Martin Pitt ] * debian/patches/48_stdlib.dpatch: Adapted to new upstream version. * debian/cupsys.init.d: - Fix arguments of start-stop-daemon and remove the hideous kill algorithm. - Ensure that /var/run/cupsd exists; this makes the init script work with /var/run mounted on a tmpfs. * debian/libcupsys2-dev.files, debian/libcupsimage2-dev.files: Remove static library; upstream does not build them any more, and they are useless anyway. * Add debian/patches/06_disable_backend_setuid.dpatch: Remove the uid changing in scheduler/cups-deviced.c which was introduced recently in upstream. It totally breaks device node access (e. g. /dev/lp0 is root:lp 0660, which is inaccessible for a process which runs as lp:root). * debian/rules: Remove --with-cups-user, upstream does not support it any more. * debian/patches/09_runasuser_fixes.dpatch: RunAsUser was removed upstream; rename the patch to 09_runasuser.dpatch and rewrite it: - Enclose all changes in an #if CUPS_DROP_PRIVILEGES, so that it is easy to enable this feature. - scheduler/main.c: Drop privileges after initialization. - scheduler/conf.c: If we build with CUPS_DROP_PRIVILEGES, set RunUser to User instead of getuid(), since at that point we will always run as root (privileges cannot yet be dropped at that point). - config-scripts/cups-defaults.m4: Add --enable-privilege-dropping option. - config.h.in: Add CUPS_DROP_PRIVILEGES option template. * Add debian/patches/09_runasuser_autoconf.dpatch: autoconf changes for 09_runasuser_fixes.dpatch changes. * debian/pdftops: Fix reading from stdin (https://launchpad.net/bugs/17124) * debian/cupsys.preinst: Remove dangling /etc/cups/pdftops.conf symlink on upgrades to unbreak printing with poppler-utils. * debian/control: Add poppler-utils alternative for xpdf-utils dependency. * Add debian/patches/12_quiesce_ipp_logging.dpatch: - Drop successful IPP messages to log level 'debug' and unsuccessful ones to 'info'. - Do not flood access_log with successful CUPS-Get-Printers and Get-Printer-Attributes queries (which are generated by e. g. gnome-cups-icon every 3 seconds). - Closes: #280718 * Add debian/patches/13_default_log_warn.dpatch: Raise default log severity to 'warning' to not log gazillions of IPP requests by default. (other part of #280718) * debian/rules, debian/cupsys.postinst: Remove obsolete /etc/cups/certs and /var/lib/cups/certs (certificates are managed in /var/run/certs now). * debian/cupsys.preinst: Remove obsolete /etc/cups/certs symlink on upgrades. * debian/cupsys-client.files: Install cupstestdsc and manpage. * debian/cupsd.init: Have force-reload to reload, not restart. * debian/cupsys.logrotate: Use force-reload instead of reload, since the latter is not required to exist by Debian Policy. * debian/rules: Ship browsing_status and enable_browsing. * debian/patches/20_httpGetHostname_crash.dpatch: Add some robustifications to httpGetHostname() to hopefully fix a reported crash. cupsys (1.1.99.b1.r4885-1) experimental; urgency=low [ Kenshi Muto ] * New SVN release taken from rr4885. * Updated Russian debconf translation, taken from cupsys trunk. * Downgrade port and browse question to low. * Add timeout routine to avoid lockup. * debian/patches/08_cupsd.conf.conf.d.dpatch: - Commented out Port/Listen/Browsing from cupsd.conf.in. CUPS crashes when there is a duplicate definition. * Updated Swedish debconf translation. * Set seen false flag when ports configuration is failed. * Allow '*' for hostname in ports.conf. * Use /bin/echo instead of shell built-in echo. * Improve cupsys.templates. * Updated Russian, German, Czech,French, Vietnamese debconf translation. * Removed example descriptions from init.d script. * Fix IPv4 validation. [ Martin Pitt ] * Adapt debian/patches/02_configure.dpatch to r4885. * Move forcefully killing of cupsd if start-stop-daemon fails from postinst to init script, where it belongs to. Do not kill all running cupsd processes, but only the one in the pid file; this will unbreak cupsd behaviour in chroots. * debian/cupsys.default: Remove obsolete FORCE_RESTART option. * Resurrect debian/patches/01_cupsimage.dpatch (formerly 03_cupsimage.dpatch), as we get unresolved symbols if libcupsimage isn't properly linked to libcupsys, causing other packages to FTBFS. Thanks to Adam Conrad. * debian/cupsys.init.d: Add --oknodo to not fail if cupsd is already running. * debian/rules: In clean rule, clean up a lot of files that are left behind by 'make clean'. cupsys (1.1.99.b1.r4876-1) unstable; urgency=low [ Martin Pitt ] * debian/local/{enable_browsing,browsing_status}: Adapt configuration file locations to new conf.d structure. * debian/cupsys.templates: Fix default value for cupsys/browse: 'yes' is an invalid bool option, change to true. * debian/cupsys.init.d: Use LSB init functions. Add lsb-base package dependency. * debian/cupsys.postinst: Wait a second between kill -9'ing cupsys and checking if the process still exists to avoid false positives and upgrade failures. * Clean up support for /etc/cups/conf.d: - Add debian/patches/08_cupsd.conf.conf.d.dpatch: Add include commands to default cupsd.conf file. - debian/cupsys.postinst: Remove fiddling with cupsd.conf. - This will ensure that cupsd.conf will remain an unchanged conffile. * debian/rules: Remove empty debian/patched on clean. * debian/patches/10_cupsd.conf2.dpatch: Re-enable listening to localhost to make the web interface work. * debian/patches/44_fixconfdirperms.dpatch: - Put configuration files into group root instead of nobody to avoid privilege escalation of nobody/nogroup and comply to Debian standards. - Use CUPS_DEFAULT_GROUP instead of 'nobody' as the default group for setgid'ing to and conffiles which must be writable for cupsd. - Disable changing permissions of cupsd.conf conffile. * Add debian/patches/09_runasuser_fixes.dpatch: - scheduler/main.c: Generate a certificate even when running as user, just as in 1.1.x; this unbreaks local certificate authorization for cupsd when it runs as normal user. - scheduler/main.c: When running as non-root, call initgroups() instead of setgroups() to allow auxiliary groups. These are required to access different device types (lp for USB/parallel printers, dialout for serial printers, etc.) [ Kenshi Muto ] * New SVN release taken from r4876. cupsys (1.1.99.b1.r4841-1) experimental; urgency=low * EXPERIMENTAL * New SVN release taken from r4841. * Remove -pie and -fpie from compiler option. pie option causes a problem with Debian binutils. I hope this change avoids FTBFS on sparc and others. (closes: #339120) cupsys (1.1.99.b1.r4748-4) experimental; urgency=low * EXPERIMENTAL * 00_r4835.dpatch: Taken from r4835. Well, r4835 removes some files. It means dpkg-buildpackage always fails when we rebuild source. Maybe it's time to change orig source. Moved obsolete patches to patches/obsolete. * 48_stdlib.dpatch: Fix FTBFS for arm, mips, and mipsel. * 03_manext.dpatch: Don't use upstream's manpage file handling. Debian uses dh_installman. * 04_freebsd.dpatch: Apply Brian's patch to support GNU/kFreeBSD (closes: #338266) * Install lppasswd as owner 'lp'. cupsys (1.1.99.b1.r4748-3) experimental; urgency=low * EXPERIMENTAL * 47_pid.dpatch: Modified to allow to configure location of pid file. (closes: #337093) You can change this location by PidFile directive at your cupsd.conf. * Remove example comments from init script. (closes: #334842) cupsys (1.1.99.b1.r4748-2) experimental; urgency=medium * EXPERIMENTAL * 02_configure.dpatch: Modified to remove -pie/-fpie if arch = x86_64. (closes: #335199) cupsys (1.1.99.b1.r4748-1) experimental; urgency=low * EXPERIMENTAL * CUPS 1.2 snapshot (r4748) from SVN. cupsys (1.1.23-15) unstable; urgency=high [Kenshi Muto] * Allow '*' for hostname in ports.conf. (closes: #340975) * Fix IPv4 address validation. * Use /bin/echo instead of shell built-in echo. (closes: #343566) * Improve cupsys.templates. (closes: #343498) * Updated Swedish debconf translation. * Updated Russian debconf translation. * Updated German debconf translation. * Updated Czech debconf translation. (closes: #343716) * Updated French debconf translation. (closes: #344116) * Updated Vietnamese debconf translation. * Removed example descriptions from init.d script. (closes: #334842) * Apply kFreeBSD patch. (closes: 338266) cupsys (1.1.23-14) unstable; urgency=high [Kenshi Muto] * Downgrade port and browse question to low. (closes: #343341) * debian/patches/08_cupsd.conf.conf.d.dpatch: - Commented out Port/Listen/Browsing in cupsd.conf.in because CUPS crashes when there is a duplicate definition! (closes: #343251, #343279, ##343285, #343292) * Added NEWS to explain how to fix this for 1.1.23-13 users: Tweaking cupsd.conf via postinst is a bad idea, so I gave up trying to correct this automatically. Instead, comment out the Port/Listen/Browsing lines in /etc/cups/cupsd.conf if you had already replaced this file by the one from 1.1.23-13. * Updated Swedish debconf translation. (closes: #343397) * Set seen false flag when ports configuration is failed. (closes: #343400) [Martin-Éric Racine] * Added debian/watch file. cupsys (1.1.23-13) unstable; urgency=high * 38_pdftopscan.dpatch: Apply CAN-2005-0064, CAN-2004-0888, and CAN-2005-2097 patches. (closes: #324459, #324460, #324464) Because Debian cupsys uses xpdf wrapper instead of forked pdftops, so users aren't affected these security problems. This patch is just for users who want to create own pdftops from source. * Move Port/Listen and Browsing configurations from /etc/cups/ cupsd.conf to /etc/cups/cups.d/. /etc/cups/cups.d/ports.conf: Port/Listen configuration. /etc/cups/cups.d/browse.conf: Browsing configuration You can configure these values by using "dpkg-reconfigure cupsys". (closes: #235906, #297695, #178838, #288838) * Added Swedish debconf translation (closes: #338545). Thanks Daniel. * Updated Russian debconf translation (closes: #340626). Thanks Yuri. * Applied xpdf patch to fix buffer overflows [pdftops/Stream.cxx, pdftops/Stream.h, CAN-2005-3191, CAN-2005-3192, 48_security_CAN-2005-3191.dpatch] Because Debian cupsys uses xpdf wrapper instead of forked pdftops, so users aren't affected these security problems. This patch is just for users who want to create own pdftops from source. cupsys (1.1.23-12) unstable; urgency=medium * foomatic-rip may be treated as recommended tool. Modified control file. (closes: #320196) * Add debconf-2.0 as debconf alternative. * Migrated to libgnutls12. (closes: #322087) libcupsys2 backed as real library. libcupsys2-gnutls10 became transitional package. (closes: #322018) * Add procps to Depends: of cupsys. ps command is used by cupsys.postinst. * 47_pid.dpatch: Added a patch to make forked PID file. Now init script use this file instead of one created by start-stop-daemon. I hope this solves Samba starting bug. (closes: #315017) * Back gs-esp to Depends:. (closes: #312244) PostScript printer owners may claim this, but currently we Debian CUPS Maintainers team have massive complains about missing gs-esp dependency. It's current best workaround to avoid such printing problems. cupsys (1.1.23-11) unstable; urgency=low * "At Debconf 5" release. * Now CUPS is maintained by Debian CUPS Maintainers Team. <pkg-cups-devel@lists.alioth.deban.org> * Do "sleep 2" to wait daemon's wake up. (this is just workaround... needs better solution, for #309794 and #315017) * Added Vietnamese translation. (closes: #310152) * Check whether daemon is running or not before restart in logrotate. (closes: #310535) * Add description about foomatic-rip (in foomatic-filters package) to README.Debian. (closes: #309399) * Remove unnecessary comment from debian/po/de.po (closes: #314135) * Apply status option for init script (closes: #312683). Thanks Stephen. * Suggests cupsys-driver-gutenprint, this package is new name of cupsys-driver-gimpprint. * 46_ppdsdat: Move /etc/cups/ppds.dat to /var/lib/cups/ppds.dat and make symlink. (closes: #317905) * Unapply NOAUTH handling from 33_jobauthorize. A user warns me it's dangerous to use. cupsys (1.1.23-10) unstable; urgency=high * Recovered http backend. -8 and -9 missed it. (closes: #305169) * Use absolete path for doc-root instead of relative path. (closes: #305339) cupsys (1.1.23-9) unstable; urgency=medium * Remove unnecessary and toxic space in doc-base file. (closes: #305084) cupsys (1.1.23-8) unstable; urgency=medium * "Brush up for Sarge" release. * Introduced dpatch for source management. * Included Spanish man pages. * 43_filtercost: Applied a patch for wrong computation of cost (closes: #304205) * Applied many part of ubuntu patch, http://people.ubuntu.com/~scott/patches/cupsys/cupsys_1.1.23-7ubuntu1.patch. (User 'cupsys' feature and Browsing feature aren't applied at this time. They are post-Sarge things) * Applied improved dvifilter patch. (Although you need to modify /etc/cups/mime.convs and some other files to use it) (closes: #198100) * Provides /var/run/cups/cupsd.pid. (closes: #301804) * Added cupsys documentation to doc-base structure. (closes: #171396, #304333) * Included filter for PostScript from Windows PostScript driver, created by Matt Swift <swift@alum.mit.edu>. If you want to use, put /usr/share/doc/cupsys/examples/filters/samba-postscript.* to /etc/cups, and put /usr/share/doc/cupsys/examples/filters/samba-ps-to-ps to /usr/lib/cups/filter. (closes: #246577) cupsys (1.1.23-7) unstable; urgency=low * Drop /etc/cups/printers.conf and /etc/cups/classes.conf from configuration files. (closes: #298103) Migration will be done automatically. * Add /etc/default/cupsys. You can change force stop behavior by changing FORCE_RESTART in this file. (closes: #298040) * Add hplip to Suggests:. (closes: #297776) cupsys (1.1.23-6) unstable; urgency=medium * Fix missing adduser dependency in cupsys-client. (closes: #296849) * Apply parallel backend improvement patch. - don't receive signal during writing (closes: #296222) - fix 64bit problem (closes: #296223) cupsys (1.1.23-5) unstable; urgency=low * Improve postinst message (closes: #295642). Thanks Adam. cupsys (1.1.23-4) unstable; urgency=low * 20defaultport.patch is merged in upstream source. * ARGH, libcupsys2-dev should conflict/replace against <<1.1.22-3. Fix control file. (closes: #292879) * Remove obsolete README_fr.txt. (closes: #293274) cupsys (1.1.23-3) unstable; urgency=low * Remove $Id$ from config file: 07cvsremovetag.patch (closes: #291629) * Fix 'lppasswd does not work with nonexisting passwd file' by mpitt's patch: 41lppasswdnoexistingconf.patch (closes: 290011) cupsys (1.1.23-2) unstable; urgency=medium * Move defvalue declaration to begin block for compile on backports environment. Thanks Massimiliano. * Fix Cyclades serial port name: 40cycladeserial.patch (closes: #270375) * Upgrade shlibs of libcupsys2-gnutls10. cupsys-client needs newest libcupsys2-gnutls10 (closes: #289930, #289939). cupsys (1.1.23-1) unstable; urgency=low * New upstream release * lprng disabled ipp feature since 3.8.26-1. Remove conflicts: lprng of cupsys. (closes: #288531) cupsys (1.1.22-8) unstable; urgency=high * Fix another security vulnerability since 1.1.21. Sigh... (closes: #287835) cupsys (1.1.22-7) unstable; urgency=medium * Use Depends: xpdf-utils instead of Recommends:. This is RC fix (closes: #287921) cupsys (1.1.22-6) unstable; urgency=high * Replaced upstream pdftops (derived from Xpdf) with pdftops.pl wrapper. pdftops.pl is made by Helge Blischke, GNU GPL licensed. CUPS 1.1.22 should enter to Sarge ASAP by some security reasons, but upstream pdftops prevents to enter because it has libgcc_s.so dependency and current gcc 3.4 faces difficult 'unwind' problem. Now I believe cupsys 1.1.22-6 can enter soon without waiting gcc problem. If you want to print PDF files directly, you need to install xpdf-utils. pdftops.pl calls pdftops in xpdf-utils package. * Fix typo in control file. cupsys (1.1.22-5) unstable; urgency=high * Apply upstream CVS patch (00cvs20041229.patch) This includes fix of buffer overflow possibility in scheduler. cupsys (1.1.22-4) unstable; urgency=high * Add Replaces migration for libcupsys2-dev. It solves 'libcupsys2-dev overwrite a file in cupsys' problem. (closes: #287609) cupsys (1.1.22-3) unstable; urgency=medium * Remove unwanted ldflag: Back 02configure.patch (closes: #286450) * Move fr/cups-config.1 to libcupsys2-dev (closes: #286449) Thanks for your above two bug reports, Henrique. * Note: [CAN-2004-1125] "xpdf buffer overflows" is already fixed in previous Debian revision (1.1.22-2) with upstream patch. cupsys (1.1.22-2) unstable; urgency=medium * Apply security fix patches from 1.1.23rc1. * Revert logrotate to use 'reload'. (closes: #271872) cupsys (1.1.22-1) unstable; urgency=low * New upstream release for unstable. Time is over, sarge isn't shipped. I checked 1.1.21 to 1.1.22 migration doesn't break ABI quickly, but I'm still scared... * Apply gcc-4.0 patch for amd64: 37gfxfont.patch (closes: #285601) * Do 'restart' instead of 'reload' when log is rotated. 'reload' sometime causes just shutdown daemon. (Unknown problem) * Fix equation in cupsys.postscript. (closes: #285205) * Apply Russell's patch: 38httpwait.patch (closes: #284829) (This is trial. If there is any grave problem by this, I'll off this patch) - Made http_wait() handle EINTR. This bug was causing cups to print multiple copies of reports on remote printers. - Lengthed the wait in ipp_http_read to handle connections running over the internet. The short wait was causing unwated multiple copies of reports to be printed. - While both these bugs need to be fixed, neither completely solves the original multiple copies problem. To solve that no data should be printed if there was a read error. * Add dependency version of smbclient. (closes: #284733) * Fix SIGSEGV when remote destination goes timeout: 39remotetimeout.patch (closes: #283500) cupsys (1.1.22-0.experimental4) experimental; urgency=low * "I'm tired waiting Sarge forever" release. I'm considering to upload 1.1.22 to unstable. * I forgot to copy files from unstable version... FTBFS is solved. (closes: #284574) * Downgrade gs-esp dependency to Recommends. I'm bore with attacks from stingy people. cupsys (1.1.22-0.experimental3) experimental; urgency=low * Rebuild with -sa. cupsys (1.1.22-0.experimental2) experimental; urgency=low * New upstream release cupsys (1.1.21-0.experimental2) experimental; urgency=low * Fix typo in templates and unfuzzied po files. (closes: Bug#274851) * Update German translation (closes: Bug#274828) * Make pam.d/cupsys standard @include style (closes: Bug#265299) * Set up group lpadmin in postinst instead of rules. Because lpadmin isn't there on initial build environemnt (closes: Bug#274985) cupsys (1.1.21-0.experimental1) experimental; urgency=low * Experimental. * new upstream version. cupsys (1.1.20final+rc1-8) unstable; urgency=medium * Apply GNU Hurd configure patch for fix FTBFS. (closes: Bug#274599) * Improve patch test routine. (closes: Bug#272952, Bug#274564) cupsys (1.1.20final+rc1-7) unstable; urgency=medium * Fix french debconf translation (closes: Bug#272520). This update is important because previous version shows illegal debconf choice in French. cupsys (1.1.20final+rc1-6) unstable; urgency=high * Applied patch from Alvaro Martinez Echevarria <ame@acm.org> to fix daniel of service [scheduler/dirsvc.c, CAN-2004-0558] * Apply GNU/Hurd patch (closes: Bug#263526) * Update pt_PR debconf translation (closes: Bug#264096) * Remove directory before making symlink (closes: Bug#270741) cupsys (1.1.20final+rc1-5) unstable; urgency=low * Apply anonymous patch for /jobs. This patch avoids many client-error-forbidden. (closes: Bug#184361) cupsd.conf will be automatically modified to use basic user authentication (Add <Location /jobs>AuthType Basic AuthType User</Location>). cupsys (1.1.20final+rc1-4) unstable; urgency=medium * Wait 10 seconds after reload for samba restart problem. (closes: Bug#260969) * Update Czech debconf translation (closes: Bug#260862) * Built against libtiff4. * Build against libgnutls11. (Though package name is still libcupsys2-gnutls10) cupsys (1.1.20final+rc1-3) unstable; urgency=high * Change guess order of USB device name for FHS compliant. (closes: Bug#259965) cupsys (1.1.20final+rc1-2) unstable; urgency=medium * Replace set-as-default icon of Japanese. Thanks Tomo-p. * Provides libcupsys2 dummy package for smooth transition. (closes: #259378) cupsys (1.1.20final+rc1-1) unstable; urgency=low * Apply a patch for fixing typo in DE templates. (Closes: Bug#250883) * New upstream source, 2004-07-03 CVS. * Add netbase dependency for cupsys-bsd. * Move certs files to /var/lib/cups/certs. (Closes: Bug#254153) cupsys (1.1.20final+cvs20040330-4) unstable; urgency=medium * Now libgnutls10 migration starts at 'unstable'/'testing'. Packages depending libcupsys2 should be rebuit with newer libcupsys2-dev. * Fix log rotation problem by adding 'sharedscripts' to /etc/logrotate.d/cupsys. (Closes: Bug#249023) cupsys (1.1.20final+cvs20040330-3experimental2) experimental; urgency=medium * Rename libcupsys2 to libcupsys2-gnutls10. This package doesn't 'Provides: libcupsys2' to migrate libgnutls10. Sebastien Bacher plans cups/libgnutls10 migration. * Add notes about backend configuration to README.Debian. * Fix (I hope) log rotation problem by adding sharedscripts to /etc/logrotate.d/cupsys. (Closes: Bug#249024) cupsys (1.1.20final+cvs20040330-3) unstable; urgency=low * Remove EXPORT_SSLLIBS variable from cups-config (Closes: Bug#246102). -lgnutls isn't necessary by software using libcups. * Apply PJL detection patch from upstream. * Translations - Updated Turkish debconf messages (Closes: Bug#246075). Thanks Recai and Gurkan. cupsys (1.1.20final+cvs20040330-2) unstable; urgency=low * Fix typo in HOWTO_BUGREPORT.txt. * Translations - Update Dutch debconf messages (Closes: Bug#242260). Thanks Tim. cupsys (1.1.20final+cvs20040330-1) unstable; urgency=low * New upstream CVS * Revert pstops to old 1.1.20. (Closes: Bug#240792) * Translations - Updated Danish debconf messages. cupsys (1.1.20final+cvs20040317-4) unstable; urgency=low * Chagnge backend question priority to low. (Closes: Bug#238847) When you use PPC, parallel backend will be removed from default choice automatically. If you want to use parallel (and you know what you will do), please run 'dpkg-reconfigure cupsys'. * Translations - Updated Danish debconf messages (Closes: Bug#239256). Thanks Claus. - Updated French debconf messages (Closes: Bug#239756). Thanks Christian. cupsys (1.1.20final+cvs20040317-3) unstable; urgency=low * Remove sysvinit. This package is essential. Thanks Thomas. * Now choice menu is translatable (Closes: Bug#238821). * Updated French debconf messages. Thanks Christian. * Add socket to default choice. I think this backend doesn't cause hang up anywhere. cupsys (1.1.20final+cvs20040317-2) unstable; urgency=medium * Add sysvinit in dependency. (Closes: Bug#238763) * Updated Brazilian Portuguese debconf messages. Thanks Andre. * Fix printers.cgi crash (Closes: Bug#238800) * Updated Japanese templates & images. cupsys (1.1.20final+cvs20040317-1) unstable; urgency=low * New CVS release. * Add asking about backend program. This is not best way to solve PPC crash / i386 serial hang-up, but at least user can choose what he/she want to use. serial backend becomes 'not use' by default. Add notice about 'parallel of PPC may cause a problem'. (closes: Bug#237613, Bug#233529, Bug#211677, Bug#224760) * Updated Spanish debconf messages (closes: Bug#236470). Thanks Carlos. * Updated Danish debconf messages. Thanks Claus. * Updated French debconf messages. Thanks Christian. * Updated Czech debconf messages. Thanks Miroslav. cupsys (1.1.20final-16) unstable; urgency=low * Improved init.d/cupsys message (closes: Bug#235693). Thanks Lee. * Add Czech debconf messages (closes: Bug#236276). Thanks Miroslav. cupsys (1.1.20final-15) unstable; urgency=low * Add conflicts lprng for avoid conflicting ipp support. * Add Danish debconf messages (closes: Bug#233067). Thanks Claus. * Apply current CVS patch. cupsys (1.1.20final-14) unstable; urgency=medium * Apply loop avoid patch. (closes: Bug#231676) Thanks Ray. cupsys (1.1.20final-13) unstable; urgency=medium * Use pidof instead of start-stop-daemon for stopping cupsys. I hope this will fix Bug#228967. cupsys (1.1.20final-12) unstable; urgency=low * Fix incorrect root detection routine (closes: Bug#227733). THanks David. * Continue to install whether deluser is failed (for NIS/LDAP). * 22ipprewrite.patch has critical bug. Fixed by better patch. (closes: Bug#162613) cupsys (1.1.20final-11) unstable; urgency=low * Improved cupsys stop check. * Apply username patch for Solaris lpd printing (closes: Bug#228078). Thanks Lionel. cupsys (1.1.20final-10) unstable; urgency=low * Apply Brazilian Portuguese debconf message (closes: Bug#227445). Thanks Andre. * Show verbose message when cups won't stop. cupsys (1.1.20final-9) unstable; urgency=low * Apply patch for avoid infinite loop (closes: Bug#225625). * Apply patch for http password authenticaion cache (closes: Bug#227143). cupsys (1.1.20final-8) unstable; urgency=low * Fix typo in lpadmin.8.gz (one of Bug#226149). Thanks Dan. * Unfortunately, I heard cupsys won't stop when upgrading. I implemented Force-stop routine into postinst (closes: Bug#222464, Bug#226140). cupsys (1.1.20final-7) unstable; urgency=low * Argh, I forgot to apply default port patch. cupsys (1.1.20final-6) unstable; urgency=low * Apply Dutch debconf translation (closes: Bug#225410). Thanks Tim. * Set default port when any Port/Listen isn't defined (closes: Bug#225208). cupsys (1.1.20final-5) unstable; urgency=low * Add pdftops.conf into /etc/cups/. This file is symlink to /etc/xpdf/xpdfrc, and configuration for pdftops tool. cupsys (1.1.20final-4) unstable; urgency=low * Fix cups* commands don't work (closes: Bug#224585). Thanks Rainer. cupsys (1.1.20final-3) unstable; urgency=low * Apply patch into lpd.c for true compatible with RFC1179 (closes: Bug#223432). Thanks Lionel. * Hmm, PJL patch causes a problem. Since I don't have any PJL printers, I simply unapply PJL patch and reopen Bug#220611 (closes: Bug#223748) cupsys (1.1.20final-2) unstable; urgency=low * Apply PJL patch (closes: Bug#220611). Thanks Zed. cupsys (1.1.20final-1) unstable; urgency=low * New upstream release * cupsys set UTF-8 as defaultCharset, but it causes some browsing problem, and looks don't need indeed. I changed defaultCharset to invalid value. It will fix French screen (closes: Bug#221904). * Fix dependency with libgnutls7 by dirty trick. I hope libgnutls7 maintainer will fix Bug#221309. cupsys (1.1.20candidate6-6) unstable; urgency=low * Set fixed version into Depends for cupsys, cupsys-client. cupsys (1.1.20candidate6-5) unstable; urgency=high * I'm sorry but openssl license conflicts. I use libgnutls (closes: Bug#220902). * Add euc-jp text. cupsys (1.1.20candidate6-4) unstable; urgency=low * Add French translation (closes: Bug#220805). Thanks, Christian. * openssl, popular SSL implementation, becomes Debian main, so I think it is no reason for using libgnutls. I changed depends openssl instead of libgnutls. cupsys (1.1.20candidate6-3) unstable; urgency=low * Remove -Wl from configure (closes: Bug#194353) * Remove /etc/sups/raw.* when purged (closes: Bug#198126) * Remove always Content-Type charset header. This is test (and ad-hoc) case. I'll unapply if this patch causes a problem. * Add Japanese resource. cupsys (1.1.20candidate6-2) unstable; urgency=medium * Fix FTBFS build error (closes: Bug#220534) cupsys (1.1.20candidate6-1) unstable; urgency=low * New upstream. * Rename filter, backend man page (closes: Bug#220500). cupsys (1.1.19final-4) unstable; urgency=low * "Welcome patch" release. * Transited packaging system to CDBS. This release wll be final version for 1.1.19. I'll upload 1.1.20candidate version at next time. * libcupsimage2.so.2 links libcupsys.so.2. (closes: Bug#193618) cupsys (1.1.19final-3) unstable; urgency=low * Fix check routine of Printcap. (closes: Bug#200278) * Removed "suggests qtcups". (closes: Bug#197267) cupsys (1.1.19final-2) unstable; urgency=low * lpadmin group included root user, but I didn't understand why it needs. This may cause security problem, so I remove this process and remove root from lpadmin group. (closes: Bug#214746) * Support large file. (closes: Bug#215568) * Support log rotation. (closes: Bug#200704) * Force enable PAM (closes: Bug#183211, Bug#181512) cupsys (1.1.19final-1.5) unstable; urgency=low * New maintainer (acknowledged from Jeff Licquia). Thanks Jeff! * Changed templates.* to po-debconf style (closes: Bug#199236). * Added Japanese debconf translation (closes: Bug#202273). cupsys (1.1.19final-1.4) unstable; urgency=low * Non-maintainer upload * Removed '#include <config.h>' line from image.h from the version in libcupsimage2-dev with debian/image.h.patch (Closes: #200427) cupsys (1.1.19final-1.3) unstable; urgency=low * Non-maintainer upload * cupsys Replaces: and Conflicts: cupsys-pstoraster (Closes: #206547) NOTE: the Conflicts: was made versioned (<< 2) not to Conflict with gs-esp which provides cupsys-pstoraster. * Build-Depends: libpam0g-dev (new) instead of libpam-dev (removed from archive) cupsys (1.1.19final-1.2) unstable; urgency=low * NMU. * Completely remove dependency on libgnutls5-dev. cupsys (1.1.19final-1.1) unstable; urgency=low * NMU. * Built against libgnutls7-dev instead of (obsolete) libgnutls5-dev. Closes: #203059. cupsys (1.1.19final-1) unstable; urgency=high * New upstream final release. DoS attack fixed; thus the urgency. * Rebuilt with the latest libpng-dev, and fixed the explicit deps in the control file. * Removed rpath statment from output of cups-config --ldflags. Closes: #194262. cupsys (1.1.19candidate4-1) unstable; urgency=low * New upstream release candidate. * Includes upstream fix to the problem with 100% CPU consumption. Closes: #189795. * Added a dh_makeshlibs call for libcupsimage2. * Made libcupsys2 conflict with cupsys-driver-gimpprint versions built before the libcupsimage split. Closes: #189175. * Move /etc/printcap.cups to /var/run/cups/printcap, since it's generated and non-editable. Also, take care of the /etc/printcap symlink. Closes: #187954. * Per suggestion from the KDE project, suggest the kdeprint package instead of the kdelibs3-cups package. cupsys (1.1.19candidate1-3) unstable; urgency=low * Make libcupsys2 conflict with gs-esp versions built before the libcupsimage split. This is part of the fix for bug 189175. * Add a dep on libgnutls-dev for libcupsys2-dev. Closes: #190877. cupsys (1.1.19candidate1-2) unstable; urgency=low * Set Replaces: on cupsys-client to cover the move of the French man page for cupstestppd. Closes: #189737, #190042. * Add cupsys-pt and xpp to Suggests for cupsys-client. Closes: #168399, #170929. * Added some more example filters: mailto and pstopdf. Closes: #152001. * Pass --system to addgroup when adding the lpadmin group. Closes: #189835. * Set section for the -dev packages to "libdevel". * Fix shlibs files for libcupsys2 and libcupsimage2 to reference the right package versions. Closes: #174391. cupsys (1.1.19candidate1-1) unstable; urgency=low * New upstream version. I will try to follow upstream's new release policy by uploading release candidate versions to unstable. * Wrote a new GNU TLS patch, which was accepted by upstream. Re-enable SSL support based on this. * Based on recent upstream work, wrote a libpaper patch which has also been accepted upstream. Closes: #60035, #88597, #101591. * Upstream fix included to allow SLP-only browsing support to work. Closes: #178380. * Updated the Spanish debconf template for cupsys-bsd. Closes: #167171. * Added cupstestppd to cupsys-client. Closes: #176941. * Don't respect TMPDIR if we don't have write permissions to that directory. Closes: #176725. cupsys (1.1.18-3) unstable; urgency=low * Split libcupsimage into its own package. Closes: #187897. * Added versioned build-dep on debhelper >= 2. cupsys (1.1.18-2) unstable; urgency=high * Disable SSL again. Inexplicably, the GNU TLS people put the OpenSSL compatibility layer under the GPL, not the LGPL. This forces the effective license on libcupsys2 to GPL, which I'm not comfortable with. The urgency reflects possible license conflicts for apps that link to libcupsys2. Closes: #168056. * Add a debconf question to ask whether unrecognized application/octet-stream jobs should be printed as raw jobs. * Forward-port some of the security fixes from woody. * Set the default group for lppasswd to "lpadmin", in keeping with the default in cupsd. Closes: #172842. * Replaced the conflict with manpages-fr, versioned this time to allow for easy upgrades. Also added a Replaces entry for it. cupsys (1.1.18-1) unstable; urgency=high * New upstream version. This is a security update for problems that include remote root exploits - thus the urgency. * Remove the conflict with manpages-fr per reports that the offending files are now all gone. Closes: #158500. cupsys (1.1.16-4) unstable; urgency=low * Documentation updates. * Change the GNU TLS patch to more explicitly control which SSL library is linked to, and support switching SSL libraries in the build. By default, the package will not use OpenSSL, so autobuilders won't accidentally build it that way. Closes: #167489. * Add libgnutls-dev to the Dependencies for libcupsys2-dev. * Set the proper permissions on cupsys-client man pages. cupsys (1.1.16-3) unstable; urgency=low * Totally nuke all script modifications for dh_installinit; do it all manually instead. Closes: #166878. cupsys (1.1.16-2) unstable; urgency=low * Add libpam-dev to Build-Depends. Closes: #166556. * Update clean target in debian/rules to clean a few more files that are missed by the Makefiles. * Remove SFont.cxx and T1Font.cxx from the pdftops Makefile; these two files aren't needed, and including them would pull in a build dep on xlibs-dev, which is bad news. Closes: #166716. * Tell dh_installdocs to not mess with the postinst/prerm, so the compatibility symlinks aren't created. cupsys (1.1.16-1) unstable; urgency=low * New upstream version... Closes: #165631. * ...which includes bugfixes to several BSD utilities to avoid segfaulting when certain options are misused. Closes: #159597. * Add upstream patch to scheduler that fixes certain printer operations in the web interface. * Re-enabled SSL support using the OpenSSL compatibility library in libgnutls. Closes: #150600. * Use our own logic for stopping/restarting cupsd on upgrade, instead of relying on dh_installinit. Closes: #160345, #164435. * Make cupsys-client Recommend cupsys-bsd. Closes: #157974. * Make sure we remove everything in /var/spool/cups on purge. Closes: #163571. * Make force-reload send SIGHUP, since policy prefers that mode of operation. * Add dependencies for libcupsys2-dev on the image libraries we need. Closes: #166451. cupsys (1.1.15-4) unstable; urgency=low * Fix segfault in lp when passing "-q" by itself as the last option. Closes: #150819. * Make the switch to libpng3, now that woody is out. Closes: #156622. * It seemed that the rastertoepson filter occasionally lost its cookies under certain circumstances and passed NULL for a field. Cancel the pending job if that happens. Closes: #147119. * Remove .cvsignore files. * Turned browsing back on by default. With no BrowseAddresses set, no broadcast packets will go out, but cupsd will recognize and accept incoming packets. Closes: #155574. cupsys (1.1.15-3) unstable; urgency=low * Reorganized the French man pages so they appear in the proper packages. * Declared a Conflict between cupsys-bsd and manpages-fr, as the latter package includes man pages for lpr, lpq, and lprm. * Move lpinfo and lpmove utilities to cupsys-client, where they belong. * Added patch from upstream that fixes some problems with Orientation settings made by some PostScript generators. Closes: #155534. * Fixed compiler settings for the static and shared versions of libcupsys2. cupsys (1.1.15-2) unstable; urgency=high * Removed SSL support again due to license infection problems. Closes: #154792. * Removed the preformatted French man pages. cupsys (1.1.15-1) unstable; urgency=low * New upstream version. * Removed cupsys-pstoraster (since it's no longer provided in CUPS), and rely on gs-esp instead for its functionality. * Enabled SSL support and updated copyright file to reflect license change. Closes: #150600. * Applied patch from upstream that causes the cupsd foreground process to wait until the daemon is ready before exiting. Also, changed init script to wait on the daemon before continuing. Closes: #150426. * Moved /etc/cups/certs to /var/spool/cups/certs. Closes: #144887. * Split out German and Portugese debconf templates into separate files, and added French, Russian, and Spanish files. Closes: #137630, #138068, #142904. * Make cupsys Recommend smbclient, and handle symlinking smbspool to /usr/lib/cups/backend/smb if it's available. Closes: #82690. * Make cupsys Suggest foomatic-bin for cupsomatic, so that linuxprinting.org PPDs work. Closes: #146655. * Add examples/filters directory to cupsys and added the contributed DVI filter to it. Users can copy the filter and config files into place themselves to get the functionality. Closes: #55013, #136496. * Fixed a bug where "-" filters are rejected in some cases. cupsys (1.1.14-3) unstable; urgency=low * Changed libpng dependency to "libpng2 | libpng" to accomodate the current libpng policy. * Changed adduser dep so that the proper adduser (that does root) is available for the postinst. Closes: #133709. * Removed spaces from init script output. Closes: #133262. * Set TZ in init script to REALLY fix timezone problem. Closes: #130676. cupsys (1.1.14-2) unstable; urgency=high * Remove all the stuff about setting the lpd backend setuid; per upstream, we don't need it anymore, and it's a security hole. cupsys (1.1.14-1) unstable; urgency=high * New upstream version. * Fixes more buffer overflows not covered in the previous patch; thus the urgency. cupsys (1.1.13-2) unstable; urgency=high * Fix potentially exploitable buffer overflow in cups/ipp.c. cupsys (1.1.13-1) unstable; urgency=low * New upstream version. * Silly me. fopen() returns NULL, not non-NULL, when it fails. :-) Closes: #130532, #131433. cupsys (1.1.12-5) unstable; urgency=low * Fix man page references so, e.g., references go from backend(1) to cups-backend(1). Closes: #126811. * Oops! Debian has time_t->tm_gmtoff, which is defined to have the opposite sign of timezone. Is it that way on BSD? Anyway, reverse the sense of the sign for time_t->tm_gmtoff if we use that. Closes: #126195. * Add header for gs_malloc to pstoraster/gscrdp.c, to prevent problems with implicit declaration on 64-bit systems. Closes: #126002. * cgi-bin/admin.c: Be a little bit more paranoid about one's ability to write to tempfiles. Closes: #122324. * Enabled OpenSLP support. * Cleaned up Priorities and Sections. cupsys (1.1.12-4) unstable; urgency=low * Move cups-lpd man page to cupsys-bsd. Closes: #122311. * Oops! Lost the patch to allow "cupsaccept", etc. commands. Closes: #123280. * Minor change to the init script output. Closes: #121938. * Changed choose-uri.tmpl to be a little more clear. Closes: #117376. * Moved CUPS document root from /usr/share/doc/cupsys to /usr/share/cups/doc-root, and created a symlink from /u/s/d/cupsys/online-docs to it. It turns out that serving files via CUPS from /usr/share/doc is a policy violation. Closes: #120923. * Fixed a small problem when upgrading from potato libcupsys1-dev to current libcupsys2-dev. cupsys (1.1.12-3) unstable; urgency=low * Fix libcupsys2 shlibs file to provide the proper dependency information. Closes: #121405. * Oops! Make sure SSL support isn't built yet. cupsys (1.1.12-2) unstable; urgency=low * It helps to run autoconf after making a change to the configure script. :-) CXX=$CC change wasn't propagated, making the build fail on hppa. cupsys (1.1.12-1) unstable; urgency=low * New upstream version. Closes: #119162. * Updated Standards-Version. * Made cupsys depend on debconf. * Removed -Wl,rpath from config-scripts/cups-sharedlibs.m4. * Removed explicit libcupsys dep from cupsys. * Removed "CXX=$CC" from config-scripts/cups-compiler.m4. * Removed .SILENT from Makedefs so the build isn't silent anymore. * On devfs, look in /dev/printers as well as /dev/parallel. (Do we still need /dev/parallel?) Closes: #114063. * Changed internal file: device URI type to test:, since (per upstream) it's not intended for anything other than to test filters. See bug #115252 or README.Debian for more info. cupsys (1.1.10-4) unstable; urgency=low * Switched cupsenable and cupsdisable symlinks to always point to /usr/sbin/accept to prevent them from breaking when files move around (as they did recently). Closes: #114006. * It turns out that libcupsys needs to make temp files in /var/spool/cups/tmp, so that dir needs to be in the package. Closes: #115154. * Related to the above, when creating temp files, don't loop when the open fails unless the return value is EEXIST. Thanks to Brian Ristuccia for the suggestion. * Honor the DEB_BUILD_OPTTIONS "debug" setting. * Per policy, make sure we build with -D_REENTRANT. * Don't remove /var/spool/cups in the cupsys postrm when purging. * Added German description to template. Closes: #113604. * Added Portuguese description to cupsys-bsd template. Closes: #106131. cupsys (1.1.10-3) unstable; urgency=low * Scale back a bit on aggressiveness on purging cupsys, as it can cause us to remove the cupsys-client conffile. * It turns out that client.conf is parsed by libcupsys2, not cupsys-client, so it needs to switch packages. * Changed PAM code so it attempts to open the "cupsys" PAM config file, instead of the "cups" one. Not sure how this broke again. Closes: #110651. * Per request, implemented the "reload" option in the init script. cupsys (1.1.10-2) unstable; urgency=low * Added Conflicts: on cupsys-pstoraster with older cupsys packages because of moved files. Closes: #106107. * Fixed bug concerning update-inetd handling; it was removing the inetd entry for the lpd server in cupsys-bsd with every upgrade. Closes: #109298. cupsys (1.1.10-1) unstable; urgency=low * New upstream version - with Makefile oops fixed (1.1.10-1 upstream). * Fixed lpadmin group creation so NIS-style lpadmin group is recognized. Closes: #78895, #107744. * Replaced kups with kdelibs3-cups in Suggests: lines, and reorganized Suggests line. Closes: #109695. * Moved Suggests for all add-on clients to cupsys-client. * Fixed purge so /etc/cups is completely cleaned out. Closes: #108488. * Moved filter and backend man pages to cups-filter and cups-backend to avoid conflicts with other packages. Closes: #107629. * Made the lpd backend non-setuid, and created a low-priority debconf question to handle the few who really need it setuid. Closes: #77617. * Altered cupsys-bsd postinst; always remove any inetd lines when removing the package (we'll put it back later if we're just upgrading). cupsys (1.1.9-1.1) unstable; urgency=low * NMU * Fix gcc 3.0/hppa build problems. Closes: #104620, #105308. cupsys (1.1.9-1) unstable; urgency=low * Return of the Maintainer. :-) * New upstream version. * Added dep on adduser (fixed bug #105382). cupsys (1.1.8-0.1) unstable; urgency=low * Non-maintainer upload. * i think anyone who wants cupsys in woody will be happy by this nmu * New upstream release (Closes: #80895, #100156, #94364) * With the new upstream release the problem with cgi-bin has been fixed (Closes: #96055, #98264, #96530, #96055, #99914, #100707, #103095) * Added cupsys-pstoraster package. * Added the LOGDIR option to install rule (Closes: #94502) * Suggests cupsys-driver-gimpprint | cupsomatic-ppd (Closes: #99146) * Moved to DH_COMPAT=2 * Added a pointer to http://localhost:631/admin to README.Debian (Closes: #97964) * Removed the extra </Location> from cupsd.conf (Closes: #96012) * Not installing copyright for libcupsys2-dev, it will have a link pointing to libcupsys2 anyways (Closes: #94504) * Removed maintainer postinst and prerm scripts from cupsys-client and libcupsys2-dev, by purging either of them you would have removed your cups documentation. * added German translation of debconf template to cupsys-bsd by Sebastian Feltel (Closes: #101467, #100901) * changed rm -f to rm -rf from cupsys-bsd prerm, and removed the link handling for /usr/doc, let debhelper worry about that. (Closes: #94539, #100501, #102669) cupsys (1.1.6-0.1) unstable; urgency=low * Non-maintainer upload * New upstream release, fixing multiple vulnerabilities (Closes: Bug#88932) * cupsys removes only its own configuration files upon purge (Closes: Bug#84341) * fixed postinst, so it does not fail when the lpadmin group already exists (Closes: Bug#84443) * added a helpful URL to README.Debian (Closes: Bug#63590) * Suggests gtklp | kups | qtcups (Closes: Bug#82974) cupsys (1.1.4-3) unstable; urgency=low * Fixed PAM module name confusion (closes bugs #76457, #77114). * Fixed broken deps w.r.t. cupsys-client Replacing older cupsys versions (closes bug #75241). * Fixed broken deps surrounding cupsys-dev (closes bug #75242). * My shlibs file was badly broken; it referred to the cupsys package instead of the libcupsys2 package (closes bug #78485). * Fixed problem with upgrading; --oknodo wasn't passed to start-stop-daemon, causing the prerm to fail if cupsd wasn't running (closes bug #70698). cupsys (1.1.4-2) unstable; urgency=high * Fix misconfiguration in default config; cupsd now refuses connections to printers and printer classes from all hosts except localhost by default. The previous default was to allow all hosts to connect to all printers - not a terribly secure default. :-) cupsys (1.1.4-1) unstable; urgency=low * New upstream version. * Fixed SystemGroup to point to lpadmin again (closes bug #72155). cupsys (1.1.2-4) unstable; urgency=low * The scheduler will now accept up to 128 characters for a password (closes bug #70946). cupsys (1.1.2-3) unstable; urgency=low * Re-add ppd directory to build (when did it drop out?) (closes bug #70448). cupsys (1.1.2-2) unstable; urgency=low * Added debhelper to build deps (closes bug #69677). * Fixed PAM configuration file (closes bug #69787). cupsys (1.1.2-1) unstable; urgency=low * Another new upstream version. * More build fixes. cupsys (1.1.1-1) unstable; urgency=low * New upstream version - non-beta this time. * Fixed up build process to reflect upstream changes. * Removed lots of Debian-specific stuff that isn't needed anymore. cupsys (1.1.0-0b3d1) unstable; urgency=low * New upstream version. * Daemon 'cups-lpd' (new to this version) added to cupsys-bsd, with appropriate update-inetd calls, so cupsys-bsd is now a complete replacement for lpr. cupsys (1.0.4-8) stable; urgency=high * Security fix: the default configuration now no longer allows people to connect to printers except from localhost. The previous default configuration allowed anyone to connect to any printer from any location; not a smart security move. cupsys (1.0.4-7) frozen unstable; urgency=high * Additional DoS fixes, included in Easy Software Products' patch for the bug below. As these are DoS bugs, I HIGHLY recommend including this in potato. cupsys (1.0.4-6) frozen unstable; urgency=high * Fixed denial-of-service bug; POSTing non-IPP data would cause the server to crash. Closes bug #65576 (severity: critical). cupsys (1.0.4-5) frozen unstable; urgency=low * Backported 1.0.5 bugfix: adding a printer would fail if /usr/share/cups were mounted on a different partition than /etc/cups. Closes bug #62267 (severity: grave). cupsys (1.0.4-4) frozen unstable; urgency=low * Makefile in conf was attempting to remove /etc/printcap during build, and fails to build if this fails (which it will under fakeroot); disabled this. Closes bug #60455 (severity: important). cupsys (1.0.4-3) frozen unstable; urgency=low * Oops - ppd directory move fails in preinst if /var/lib/cups/ppd is empty. Reported as bug #59993, fixed. * Missed the library Build-Depends. Closes bug #60090. * Postrm during purge now removes /etc/cups properly. * Documentation updates. cupsys (1.0.4-2) frozen unstable; urgency=low * Fixed documentation corruption in HTML docs (closes bug #59063). * Moved /var/lib/cups/ppd/* config files (printer definitions) to /etc/cups/ppd (closes bug #59263). * Fixed shlibs for libcupsys1 (erroneous information) preventing packages that link to it from depending properly. * Changed default for browsing to Off to keep cupsd from probing the local network continuously (closes bug #59277). cupsys (1.0.4-1) unstable; urgency=low * New upstream version. * Changed policy version & tweaked for conformance. * Fixed symlinks for cupsys-bsd, including /usr/doc symlinks. * Reverted lp -h hack in favor of upstream fix. cupsys (1.0.2-2) unstable; urgency=low * Added quick hack to allow for -h option to lp (closes bug #52050). * Set the lpd backend suid after quick audit; it doesn't appear to have any egregious errors (closes part of bug #52381). * Move /var/lib/cups/conf files to /etc/cups, with a symlink in place of the old location (closes bug #52318). * Added "Authentication failed" message when authorizing after the first auth failure (which is likely before the first password request) (closes rest of bug #50264). * Made cupsys-bsd doc dir a symlink to the cupsys doc files, per policy section 6.6 (closes bug #51958). * Symlinked /var/lib/cups/logs to /var/log/cups (closes bug #51957). cupsys (1.0.2-1) unstable; urgency=low * New upstream version. * Conflict with lprng, since lprng includes some SysV printing commands (closes bug #50539). * Added "cupsenable", "cupsdisable", "cupsaccept", and "cupsreject" commands as part of an ongoing effort to reduce namespace pollution. (addresses part of bug #50661 and #50384) * Set both the default user and group to "lp" (for permissions fixes). * Created "lpadmin" group and set SystemGroup to this. This will fix problems with CUPS not being usable initially. As soon as bug #50620 gets fixed, I'll set up to add root to the group, which will make root able to configure CUPS immediately after installation. cupsys (1.0.1-3) unstable; urgency=low * Fixed wrong symlinks. (closes bug #50279) * Stopped compression of .pdf files; they didn't gain much, broke the links in the HTML, and generally caused confusion. (closes part of bug #50264) cupsys (1.0.1-2) unstable; urgency=low * cupsys-bsd should conflict with lpr, not "lpd" (whatever that is) (closes: #50047) * Changed priority to "extra". cupsys (1.0.1-1) unstable; urgency=low * Initial Release.	2023-10-26 10:30:42 +08:00