lp:debian/squeeze/cups

Created by James Westby and last modified
Get this branch:
bzr branch lp:debian/squeeze/cups
Members of Ubuntu branches can upload to this branch. Log in for directions.

Related bugs

Related blueprints

Branch information

Owner:
Ubuntu branches
Status:
Development

Recent revisions

37. By Didier Raboud

[ Didier Raboud ]
* Ship cups-files.conf's manpage in cups (Closes: #697543)
  - Update the configuration files split patch to also build the
    manpage;
  - Install the english manpage.
* Generate translated cups-files.conf's manpage in the po4a
  infrastructure.
* Minimally update French manpage translation

[ Helge Kreutzmann ]
* Update German manpage translation. (Closes: #697860)

36. By Yves-Alexis Perez <email address hidden>

* Non-maintainer upload by the Security Team.
* debian/patches:
  - str3867 added, fix an infinite loop / heap-based buffer overflow in the
    gif_read_lzw() function (CVE-2011-2896)
  - str3914 added, complete the fix for the previous issue (CVE-2011-3170).

35. By Martin Pitt

[ Till Kamppeter ]
* debian/local/filters/pdf-filters/pdftopdf/parseargs.c,
  debian/local/filters/pdf-filters/pdftopdf/parseargs.cxx,
  debian/local/filters/pdf-filters/pdftopdf/parseargs.h,
  debian/local/filters/pdf-filters/pdftopdf/Makefile: Made pdftopdf
  building with Poppler 0.15.x. Thanks to Koji Otani for this patch.
* debian/control: Added dependency on "cups-ppdc" package to the "cups"
  package, so that the PPDs of the drivers which come with CUPS get built
  (LP: #485383).

[ Martin Pitt ]
* ubuntu-upstart.dpatch: Wait until daemon is ready, to avoid race
  conditions with init scripts which expect cups tools to work right after
  restarting it. (LP: #647369)
* ubuntu-upstart.dpatch: If D-BUS is not available, start on runlevels 2 to
  5, so that this also works in server environments. (LP: #650893)
* debian/local/apparmor-profile: Allow access to /usr/local/lib/cups/**.
  (LP: #160092)
* debian/local/apparmor-profile: Allow reading /usr/local/**, in case
  third-party printer drivers need auxiliary files.
* debian/local/apparmor-profile: Allow reading /var/run/**. (LP: #659961)
* ubuntu-upstart.dpatch: Time out after 5 seconds when the local socket
  doesn't get created. Apparently a lot of users disable it in cupsd.conf.
  (LP: #672438)
* debian/local/filters/pdf-filters/addtocups: Link pdftoijs with $(CXX),
  since it's a C++ program. Fixes FTBFS with gcc 4.5.
* debian/local/filters/pdf-filters/pdftopdf/Makefile: Explicitly pdftopdf
  with -lz. gcc 4.5 does not automatically link to transitive library
  dependencies any more.
* drop_unnecessary_dependencies.dpatch: Drop hunk for reduced krb5/gssapi
  linkage. With gcc 4.5, we now need -lkrb5.

[ Marc Deslauriers ]
* Add CVE-2010-2941.dpatch: Fix denial of service and possible code execution
  via invalid free. Skip over and reserve unused tags in cups/ipp.{c,h}.
  [CVE-2010-2941]

34. By Martin Pitt

debian/cups.preinst: Go back to using lsb-release, since dpkg-vendor is
not installed by default (it's in dpkg-dev). Bump the version guard to
this version, to reattempt the migration. (LP: #645328)

33. By Martin Pitt

[ Martin Pitt ]
* ubuntu-upstart.dpatch: Drop the dependency "on starting smbd", it causes
  samba to hang on package upgrades or manual restarts. There doesn't seem
  to be a good way to express this dependency right now. (LP: #639768)
  Instead, send a SIGHUP to smbd if it is running, which causes it to reload
  printers.

[ Till Kamppeter ]
* pstops-based-workflow-only-for-printing-ps-on-a-ps-printer.dpatch:
  Let CUPS use the former PostScript-based filter chain only if the input
  file is PostScript and the printer is a PostScript printer with
  manufacturer-supplied PPD file. This avoids ugly PS->PDF->PS conversions
  which are bad for the performance and sometimes cause issues
  (Closes: #593338, requested by Ricoh).

32. By Martin Pitt

[ Till Kamppeter ]
* default-ripcache-size-auto.dpatch: Replaced patch for letting CUPS default
  RIP_MAX_CACHE to 1/4 of the system's RAM by a patch defaulting
  RIP_MAX_CACHE to "auto". See LP: #628030.
* debian/patches/cups-snmp-oids-device-id-hp-ricoh.dpatch: Let the "snmp"
  backend also use the manufacturer-specific MIBs of HP and Ricoh to
  obtain the device IDs of network-connected printers. This way we get more
  reliable information about make and model and in addition the supported
  page description languages, which allow to identify whether an optional
  PostScript add-on is installed or for an unsupported printer which
  generic PPD is the best choice (requested by Ricoh, thanks to Tim Waugh
  from Red Hat to create the patch).

[ Martin Pitt ]
* debian/control: Drop perl-modules dependency. The only script that uses
  perl is oopstops, which uses IO::Handle, and this is in perl-base.
* debian/control, debian/rules, ubuntu-*.dpatch: Replace lsb_release call
  with dpkg-vendor, and drop lsb-release build dependency.
* Upstartify for Ubuntu:
  - Add ubuntu-upstart.dpatch: Add debian/cups.upstart script, which now
    causes Samba to wait for cups to start. Don't have it in debian/ by
    default, since dh_installinit unconditionally prefers it over .init.
  - debian/rules: Call dh_installinit with --upstart-only when building on
    Ubuntu.
  - debian/cups.preinst: Remove old init script on upgrades when running on
    Ubuntu.
* debian/cups.preinst: Remove some obsolete transitional code.
* debian/cups.init.d, debian/cups.postinst: Move custom PPD directory setup
  from init script into postinst. No need to do that on every boot.

31. By Martin Pitt

[ Jamie Strandboge ]
* debian/cups.post{inst,rm}: update for local include file
* debian/local/apparmor-profile: add local include file

[ Martin Pitt ]
* debian/rules: Stop building with --enable-threads, since currenu GnuTLS
  does not work with threads. This brings back the lost SSL/TLS support.
  (Closes: #588234, #591509)
* debian/libcups2.symbols: Readd _http{Read,Write}GNUTLS@Base symbols to
  ensure that autogenerated shlibs dependencies for libcups get tight
  enough.
* manpage-translations.dpatch: Update German manpage translations, thanks
  Helge Kreutzmann! (Closes: #588028)
* debian/rules: Set DPKG_GENSYMBOLS_CHECK_LEVEL to 4 to point out outdated
  .symbols files more strongly.
* debian/libcups2.symbols, debian/libcupsimage2.symbols: Subsume private
  optional symbols into regexps.

30. By Martin Pitt

[ Till Kamppeter ]
* debian/local/filters/pdf-filters/filter/fontembed/bitset.h,
  debian/local/filters/pdf-filters/filter/fontembed/sfnt.c,
  debian/local/filters/pdf-filters/filter/texttopdf.c: Fixed bug with
  subsetting certain composite chars (LP: #605479).
* debian/local/acroread.conf, debian/local/pdftops.conf, debian/cups.install:
  Removed /etc/cups/acroread.conf and /etc/cups/pdftops.conf. These two files
  were used by the alternative pdftops filter from Helge Blischke. As we
  switched back to the original pdftops filter these files are not needed any
  more (LP: #605564).
* debian/local/filters/cpdftocps: The PostScript level from the PPD file
  was not used, but always the default value "2" instead. This made Xerox
  color laser printers crash on some files. Thanks to Roel van Os for the
  patch (LP: #600972).

[ Martin Pitt ]
* debian/control: Reintroduce the libcupsys2{-dev} Provides:, since some
  third-party printer drivers still depend on them. (LP: #433311)
* debian/control: Have libcups2 break older cups versions. (Closes: #588643)

29. By Martin Pitt

[ Till Kamppeter ]
* debian/cups.init.d: When loading kernel modules for the parallel port
  load also the "parport_pc" module (LP: #369850).
* debian/filters/pstopdf: Fixed the problem of the UseCIEColor warning of
  Ghostscript correctly. The file format converter should not do any kind
  of color correction but simply pass the colors through (LP: #578181).
* debian/patches/cups-deviced-allow-device-ids-with-newline.dpatch: Some
  printers have broken device IDs with newline characters inside. These
  break the cups-deviced printer discovery mechanism and so the printers
  get ignored. This patch allows newline characters in device IDs
  (LP: #468701).

[ Martin Pitt ]
* New upstream bug fix/security release. Therefore "medium" urgency.
  - CUPS could overwrite files as root in directories owned or writable by
    non-root users. [STR #3510, CVE-2010-2431]
  - The web interface now includes additional CSRF protection.
    [STR #3498, CVE-2010-0540]
  - The texttops filter did not check the results of allocations.
    [STR #3516, CVE-2010-0542]
  - The web admin interface could disclose the contents of memory.
    [STR #3577, CVE-2010-1748]
* Drop select_use_after_free.dpatch: Applied upstream.
* do-not-broadcast-with-hostnames.dpatch: Update to apply to new version.
* debian/libcups2.symbols, debian/libcupscgi1.symbols: Update for new
  version.
* Add support-gzipped-charmaps.dpatch: Support gzipped charset → UTF8 maps;
  they compress very well and take a lot of space.
* debian/rules: Compress /usr/share/cups/charmaps/*.txt in cups-common.
* debian/local/filters/pdf-filters/*: Reenable call of setErrorFunction() on
  armel, now that poppler on arm has been fixed (see #575262)
* debian/cups.postinst: Drop some obsolete transition code.
* debian/cups.postinst: Some versions of cups-pdf (and perhaps other
  packages) changed the permissions of /usr/lib/cups/backend. Fix that
  during upgrade. (Closes: #582942)
* debian/control: Drop all the transitional cupsys* packages and the
  remaining provides/conflicts/replaces on them. All packages in sid are now
  transitioned to the new package names, and Lenny already had them.

28. By Martin Pitt

[ Till Kamppeter ]
* debian/filters/pstopdf: Use "-dUseCIEColor" for the Ghostscript call in the
  pstopdf filter, to eliminate the warning "Set UseCIEColor for
  UseDeviceIndependentColor to work properly.".

[ Martin Pitt ]
* New upstream bug fix release. See http://www.cups.org/articles.php?L594
  for details.
* Drop CVE-2010-0393.dpatch, upstream now.
* Update usb-backend-both-usblp-and-libusb.dpatch for new version.
* select_use_after_free.dpatch: Add additional fix by Tim Waugh and Vincent
  Danen for CVE-2010-0302, and update tag header. (Closes: #572940)

Branch metadata

Branch format:
Branch format 7
Repository format:
Bazaar repository format 2a (needs bzr 1.16 or later)
This branch contains Public information 
Everyone can see this information.

Subscribers