cups (1.4.4-7+squeeze10) squeeze-lts; urgency=medium * Fix buffer overflow on size allocation of texttopdf. Updated debian/local/filters/pdf-filters/filter/texttopdf.c - CVE-2015-3258: Heap-based buffer overflow in the WriteProlog function. - CVE-2015-3279: Integer overflow. -- Santiago Ruano Rincón Wed, 23 Sep 2015 21:58:32 -0300 cups (1.4.4-7+squeeze9) squeeze-lts; urgency=medium * Add the previous patch name into debian/patches/00list, it wasn't applied -- Didier Raboud Sat, 18 Jul 2015 12:40:10 +0200 cups (1.4.4-7+squeeze8) squeeze-lts; urgency=medium * Import 1.4 upstream fix for CERT VU#810572: Privilege escalation through dynamic linker and isolated vulnerabilities: STR: #4609, VU#810572 - CVE-2015-1158 - Improper Update of Reference Count - CVE-2015-1159 - Cross-Site Scripting -- Didier Raboud Tue, 09 Jun 2015 10:05:40 +0200 cups (1.4.4-7+squeeze7) squeeze-lts; urgency=medium * Backport upstream patches to fix: - Buffer overflow in cupsRasterReadPixels (STR #4551), fixes CVE-2014-2679 -- Ben Hutchings Fri, 27 Feb 2015 03:19:52 +0000 cups (1.4.4-7+squeeze6) squeeze-lts; urgency=medium * Backport upstream patches to fix: - insufficient checking when allowing files download from the webinterface (STR #4455), fixes CVE-2014-5029, CVE-2014-5030 and CVE-2014-5031 - privilege escalation through the CUPS webinterface (STR #4450), fixes CVE-2014-3537. -- Didier Raboud Wed, 30 Jul 2014 09:02:13 +0200 cups (1.4.4-7+squeeze5) oldstable; urgency=low * Import upstream patch to fix XSS in the CUPS webinterface (STR #4356), fixes CVE-2014-2856 -- Didier Raboud Sat, 03 May 2014 15:43:50 +0200 cups (1.4.4-7+squeeze4) oldstable-security; urgency=high * Backport security fix from cups-filters 1.0.47: pdftoopvp: SECURITY FIX for CVE-2013-6474, CVE-2013-6475, and CVE-2013-6476: Introduction of gmallocn and gmallocn3 to protect against arbitrary code execution with the privileges of the "lp" user via malicious PDF files. Also restrict the directory from where OPVP drivers can get loaded (Closes: #741333) -- Didier Raboud Tue, 11 Mar 2014 14:42:08 +0100 cups (1.4.4-7+squeeze3) stable; urgency=low [ Didier Raboud ] * Ship cups-files.conf's manpage in cups (Closes: #697543) - Update the configuration files split patch to also build the manpage; - Install the english manpage. * Generate translated cups-files.conf's manpage in the po4a infrastructure. * Minimally update French manpage translation [ Helge Kreutzmann ] * Update German manpage translation. (Closes: #697860) -- Didier Raboud Sat, 12 Jan 2013 17:46:27 +0100 cups (1.4.4-7+squeeze2) stable-security; urgency=high * Backport upstream configuration files split: - Add split-configuration-files-STR4223.dpatch - Install the new cups-files.conf Fixes: CVE-2012-5519 (Closes: #692791) * Make cupsd.conf a non-conffile, as it is managed by cups itself. - On new installs, set it up from cupsd.conf.default. - On upgrades, move it away in preinst and move it back in postinst. - On aborted upgrades, move the file back in place. - On purge, delete it too. * Document changes in cups.NEWS. -- Didier Raboud Sat, 29 Dec 2012 12:33:27 +0100 cups (1.4.4-7+squeeze1) stable-security; urgency=high * Non-maintainer upload by the Security Team. * debian/patches: - str3867 added, fix an infinite loop / heap-based buffer overflow in the gif_read_lzw() function (CVE-2011-2896) - str3914 added, complete the fix for the previous issue (CVE-2011-3170). -- Yves-Alexis Perez Mon, 28 Nov 2011 15:07:37 +0100 cups (1.4.4-7) unstable; urgency=low [ Till Kamppeter ] * debian/local/filters/pdf-filters/pdftopdf/parseargs.c, debian/local/filters/pdf-filters/pdftopdf/parseargs.cxx, debian/local/filters/pdf-filters/pdftopdf/parseargs.h, debian/local/filters/pdf-filters/pdftopdf/Makefile: Made pdftopdf building with Poppler 0.15.x. Thanks to Koji Otani for this patch. * debian/control: Added dependency on "cups-ppdc" package to the "cups" package, so that the PPDs of the drivers which come with CUPS get built (LP: #485383). [ Martin Pitt ] * ubuntu-upstart.dpatch: Wait until daemon is ready, to avoid race conditions with init scripts which expect cups tools to work right after restarting it. (LP: #647369) * ubuntu-upstart.dpatch: If D-BUS is not available, start on runlevels 2 to 5, so that this also works in server environments. (LP: #650893) * debian/local/apparmor-profile: Allow access to /usr/local/lib/cups/**. (LP: #160092) * debian/local/apparmor-profile: Allow reading /usr/local/**, in case third-party printer drivers need auxiliary files. * debian/local/apparmor-profile: Allow reading /var/run/**. (LP: #659961) * ubuntu-upstart.dpatch: Time out after 5 seconds when the local socket doesn't get created. Apparently a lot of users disable it in cupsd.conf. (LP: #672438) * debian/local/filters/pdf-filters/addtocups: Link pdftoijs with $(CXX), since it's a C++ program. Fixes FTBFS with gcc 4.5. * debian/local/filters/pdf-filters/pdftopdf/Makefile: Explicitly pdftopdf with -lz. gcc 4.5 does not automatically link to transitive library dependencies any more. * drop_unnecessary_dependencies.dpatch: Drop hunk for reduced krb5/gssapi linkage. With gcc 4.5, we now need -lkrb5. [ Marc Deslauriers ] * Add CVE-2010-2941.dpatch: Fix denial of service and possible code execution via invalid free. Skip over and reserve unused tags in cups/ipp.{c,h}. [CVE-2010-2941] -- Martin Pitt Fri, 12 Nov 2010 11:07:33 +0100 cups (1.4.4-6) unstable; urgency=low * debian/cups.preinst: Go back to using lsb-release, since dpkg-vendor is not installed by default (it's in dpkg-dev). Bump the version guard to this version, to reattempt the migration. (LP: #645328) -- Martin Pitt Thu, 23 Sep 2010 08:47:11 +0200 cups (1.4.4-5) unstable; urgency=low [ Martin Pitt ] * ubuntu-upstart.dpatch: Drop the dependency "on starting smbd", it causes samba to hang on package upgrades or manual restarts. There doesn't seem to be a good way to express this dependency right now. (LP: #639768) Instead, send a SIGHUP to smbd if it is running, which causes it to reload printers. [ Till Kamppeter ] * pstops-based-workflow-only-for-printing-ps-on-a-ps-printer.dpatch: Let CUPS use the former PostScript-based filter chain only if the input file is PostScript and the printer is a PostScript printer with manufacturer-supplied PPD file. This avoids ugly PS->PDF->PS conversions which are bad for the performance and sometimes cause issues (Closes: #593338, requested by Ricoh). -- Martin Pitt Thu, 16 Sep 2010 18:57:06 +0200 cups (1.4.4-4) unstable; urgency=low [ Till Kamppeter ] * default-ripcache-size-auto.dpatch: Replaced patch for letting CUPS default RIP_MAX_CACHE to 1/4 of the system's RAM by a patch defaulting RIP_MAX_CACHE to "auto". See LP: #628030. * debian/patches/cups-snmp-oids-device-id-hp-ricoh.dpatch: Let the "snmp" backend also use the manufacturer-specific MIBs of HP and Ricoh to obtain the device IDs of network-connected printers. This way we get more reliable information about make and model and in addition the supported page description languages, which allow to identify whether an optional PostScript add-on is installed or for an unsupported printer which generic PPD is the best choice (requested by Ricoh, thanks to Tim Waugh from Red Hat to create the patch). [ Martin Pitt ] * debian/control: Drop perl-modules dependency. The only script that uses perl is oopstops, which uses IO::Handle, and this is in perl-base. * debian/control, debian/rules, ubuntu-*.dpatch: Replace lsb_release call with dpkg-vendor, and drop lsb-release build dependency. * Upstartify for Ubuntu: - Add ubuntu-upstart.dpatch: Add debian/cups.upstart script, which now causes Samba to wait for cups to start. Don't have it in debian/ by default, since dh_installinit unconditionally prefers it over .init. - debian/rules: Call dh_installinit with --upstart-only when building on Ubuntu. - debian/cups.preinst: Remove old init script on upgrades when running on Ubuntu. * debian/cups.preinst: Remove some obsolete transitional code. * debian/cups.init.d, debian/cups.postinst: Move custom PPD directory setup from init script into postinst. No need to do that on every boot. -- Martin Pitt Tue, 14 Sep 2010 18:49:39 +0200 cups (1.4.4-3) unstable; urgency=low [ Jamie Strandboge ] * debian/cups.post{inst,rm}: update for local include file * debian/local/apparmor-profile: add local include file [ Martin Pitt ] * debian/rules: Stop building with --enable-threads, since currenu GnuTLS does not work with threads. This brings back the lost SSL/TLS support. (Closes: #588234, #591509) * debian/libcups2.symbols: Readd _http{Read,Write}GNUTLS@Base symbols to ensure that autogenerated shlibs dependencies for libcups get tight enough. * manpage-translations.dpatch: Update German manpage translations, thanks Helge Kreutzmann! (Closes: #588028) * debian/rules: Set DPKG_GENSYMBOLS_CHECK_LEVEL to 4 to point out outdated .symbols files more strongly. * debian/libcups2.symbols, debian/libcupsimage2.symbols: Subsume private optional symbols into regexps. -- Martin Pitt Wed, 11 Aug 2010 19:03:01 +0200 cups (1.4.4-2) unstable; urgency=low [ Till Kamppeter ] * debian/local/filters/pdf-filters/filter/fontembed/bitset.h, debian/local/filters/pdf-filters/filter/fontembed/sfnt.c, debian/local/filters/pdf-filters/filter/texttopdf.c: Fixed bug with subsetting certain composite chars (LP: #605479). * debian/local/acroread.conf, debian/local/pdftops.conf, debian/cups.install: Removed /etc/cups/acroread.conf and /etc/cups/pdftops.conf. These two files were used by the alternative pdftops filter from Helge Blischke. As we switched back to the original pdftops filter these files are not needed any more (LP: #605564). * debian/local/filters/cpdftocps: The PostScript level from the PPD file was not used, but always the default value "2" instead. This made Xerox color laser printers crash on some files. Thanks to Roel van Os for the patch (LP: #600972). [ Martin Pitt ] * debian/control: Reintroduce the libcupsys2{-dev} Provides:, since some third-party printer drivers still depend on them. (LP: #433311) * debian/control: Have libcups2 break older cups versions. (Closes: #588643) -- Martin Pitt Sat, 24 Jul 2010 19:38:50 +0200 cups (1.4.4-1) unstable; urgency=medium [ Till Kamppeter ] * debian/cups.init.d: When loading kernel modules for the parallel port load also the "parport_pc" module (LP: #369850). * debian/filters/pstopdf: Fixed the problem of the UseCIEColor warning of Ghostscript correctly. The file format converter should not do any kind of color correction but simply pass the colors through (LP: #578181). * debian/patches/cups-deviced-allow-device-ids-with-newline.dpatch: Some printers have broken device IDs with newline characters inside. These break the cups-deviced printer discovery mechanism and so the printers get ignored. This patch allows newline characters in device IDs (LP: #468701). [ Martin Pitt ] * New upstream bug fix/security release. Therefore "medium" urgency. - CUPS could overwrite files as root in directories owned or writable by non-root users. [STR #3510, CVE-2010-2431] - The web interface now includes additional CSRF protection. [STR #3498, CVE-2010-0540] - The texttops filter did not check the results of allocations. [STR #3516, CVE-2010-0542] - The web admin interface could disclose the contents of memory. [STR #3577, CVE-2010-1748] * Drop select_use_after_free.dpatch: Applied upstream. * do-not-broadcast-with-hostnames.dpatch: Update to apply to new version. * debian/libcups2.symbols, debian/libcupscgi1.symbols: Update for new version. * Add support-gzipped-charmaps.dpatch: Support gzipped charset → UTF8 maps; they compress very well and take a lot of space. * debian/rules: Compress /usr/share/cups/charmaps/*.txt in cups-common. * debian/local/filters/pdf-filters/*: Reenable call of setErrorFunction() on armel, now that poppler on arm has been fixed (see #575262) * debian/cups.postinst: Drop some obsolete transition code. * debian/cups.postinst: Some versions of cups-pdf (and perhaps other packages) changed the permissions of /usr/lib/cups/backend. Fix that during upgrade. (Closes: #582942) * debian/control: Drop all the transitional cupsys* packages and the remaining provides/conflicts/replaces on them. All packages in sid are now transitioned to the new package names, and Lenny already had them. -- Martin Pitt Tue, 29 Jun 2010 19:03:39 +0200 cups (1.4.3-1) unstable; urgency=low [ Till Kamppeter ] * debian/filters/pstopdf: Use "-dUseCIEColor" for the Ghostscript call in the pstopdf filter, to eliminate the warning "Set UseCIEColor for UseDeviceIndependentColor to work properly.". [ Martin Pitt ] * New upstream bug fix release. See http://www.cups.org/articles.php?L594 for details. * Drop CVE-2010-0393.dpatch, upstream now. * Update usb-backend-both-usblp-and-libusb.dpatch for new version. * select_use_after_free.dpatch: Add additional fix by Tim Waugh and Vincent Danen for CVE-2010-0302, and update tag header. (Closes: #572940) -- Martin Pitt Fri, 09 Apr 2010 16:19:16 +0200 cups (1.4.2-10) unstable; urgency=low [ Till Kamppeter ] * debian/local/filters/pdf-filters/pdftopdf/P2PDoc.cxx: Output of the pdftopdf filter was not completely complying with the Adobe specs for PDF. Thanks to Duncan Lock for finding and reporting the bug and Johann Felix Soden for creating the patch to fix it (LP: #544636). [ Martin Pitt ] * Add no-conffile-timestamp.dpatch: Disable time stamps in conffiles, to avoid ever-changing files in /etc. Thanks Joey Hess! (Rejected upstream, STR#3067; Closes: #549673) * CVE-2010-0393.dpatch: Replace with patch from upstream, and tag header. (Closes: #572940) * debian/local/filters/pdf-filters/*: Disable call of setErrorFunction() on armel for now, since armel's libpoppler is broken. This works around #575262, so that cups can finally go into testing again (which is more than overdue). -- Martin Pitt Wed, 24 Mar 2010 16:50:56 +0100 cups (1.4.2-9.1) unstable; urgency=high * Non-maintainer upload by the Security Team. * Fix loading of localized message string from arbitrary files through exporting the LOCALEDIR environment variable when lppasswd has a setuid bit set (CVE-2010-0393). -- Nico Golde Wed, 03 Mar 2010 21:28:13 +0100 cups (1.4.2-9) unstable; urgency=low * debian/control: Build depend on virtual libjpeg-dev package only. (Closes: #570381) * debian/cups.init.d: Fix syntax error which caused coldplug_usb_printers() to needlessly run udev-configure-printer for all USB devices. * Bump Standards-Version to 3.8.4 (no changes necesssary). * debian/libcupscgi1.symbols: Add new symbol from 1.4.2. * debian/cups.init.d: Add missing $remote_fs dependency. -- Martin Pitt Thu, 18 Feb 2010 15:16:26 +0100 cups (1.4.2-8) unstable; urgency=low [ Till Kamppeter ] * dynamic-default-ripcache-size.dpatch: Fixed the copy of thr new function cupsdDefaultRIPCacheSize() which goes into the cupsfilter utility. It did not return its result and made cupsfilter segfaulting independent of the input (LP: #442283). [ Martin Pitt ] * debian/control: Update libjpeg62-dev build/binary dependency to libjpeg8-dev | libjpeg-dev. (Closes: #569230) * Acknowledge Bdale Garbee's NMU to work around bad pdftotext behaviour due to a bug in ttf-freefont. This has been worked around in texttopdf itself in the previous upload (see LP #447961). (Closes: #519643) -- Till Kamppeter Thu, 11 Feb 2010 14:26:33 +0100 cups (1.4.2-7) unstable; urgency=low [ Till Kamppeter ] * debian/local/filters/pdf-filters/filter/texttopdf.c: Workaround for bug in ttf-freefont which messed up the output of the texttopdf filter. Thanks to Hin-Tak Leung and Steve White to find this solution (LP: #447961). * debian/local/filters/pdf-filters/pdftopdf/P2PDoc.cxx, debian/local/filters/pdf-filters/pdftopdf/P2PGfx.cxx, debian/local/filters/pdf-filters/pdftopdf/P2PGfx.h, debian/local/filters/pdf-filters/pdftopdf/P2PObject.h, debian/local/filters/pdf-filters/pdftopdf/P2POutput.cxx: Upstream fix from Koji Otani for the following: (1) Fixed some memory leak; (2) pdftopdf now delays fetching a referenced object until when it is written to the output. This fixes memory hogging with N-up output (N pages per sheet). The fix is mainly done by (2). This fixes LP: #508731. [ Martin Pitt ] * manpage-translations.dpatch: Update to German manpage translations, thanks Helge Kreutzmann! (Closes: #502908) * debian/cups.postinst: Do not symlink snakeoil SSL certificate if server.{crt,key} already exist as broken symlinks. Thanks Andreas Büsching! (Closes: #554579) -- Martin Pitt Wed, 27 Jan 2010 09:19:32 +0100 cups (1.4.2-6) unstable; urgency=medium [ Till Kamppeter ] * Urgency medium, this only fixes a highly visible crash. * debian/local/filters/pdf-filters/pdftopdf/P2PGfx.cxx: Fixed segfault of the pdftopdf filter when the input PDF file has ICC-profile-based color space inline images. Thanks to Koji Otani for the fix. Fixes: LP: #407344, LP: #466119, LP: #467919, LP: #475330, LP: #488752. [ Martin Pitt ] * debian/rules: Have a failed test suite fail the build on Ubuntu again, buildds were fixed. (LP: #447919) -- Martin Pitt Mon, 21 Dec 2009 10:19:44 +0100 cups (1.4.2-5) unstable; urgency=low * debian/local/filters/pdf-filters/addtocups, debian/local/filters/pdf-filters/config-scripts/cups-pdf-filters.m4, debian/local/filters/pdf-filters/pdftoopvp/Makefile, debian/local/filters/pdf-filters/pdftoopvp/OPVPOutputDev.cxx, debian/local/filters/pdf-filters/pdftopdf/P2PGfx.cxx, debian/local/filters/pdf-filters/pdftopdf/P2PPattern.cxx: Synced the PDF CUPS filters with upstream. This introduces a change by Koji Otani to also support Poppler 0.12.2 and newer with a change in its API/ABI. This version compiles with both the new and the old Poppler, but it runs only with the Poppler with which it got compiled. This allows to build this package with both Ubuntu which ships the unchanged upstream version of Poppler 0.12.2 and Debian where the ABI changes got reverted by a Debian-only patch. -- Till Kamppeter Wed, 09 Dec 2009 15:04:39 +0100 cups (1.4.2-4) unstable; urgency=high * High urgency, since this fixes a security issue and should not block the already messy poppler transition any further. * pdftopdf, pdftoopvp: Revert patch to build against new upstream 0.12.2 poppler ABI, since it was reverted in poppler's -2 package. Tighten build dependency and conflict to any libpoppler5 < 0.12.2-2 now. (Closes: #558906, #559038, #559094) * Add select_use_after_free.dpatch: Fix use-after-free segfault, causing a remote DoS. (STR #3200, CVE-2009-3553, Closes: #557740) -- Martin Pitt Wed, 02 Dec 2009 09:39:28 +0100 cups (1.4.2-3) unstable; urgency=low * pdftopdf, pdftoopvp: Patch to build with poppler 0.12.2, which broke ABI without bumping SONAME or even just shlibs :-(. Thanks to Jonathan Guthrie for the patch! (Closes: #558755) -- Martin Pitt Mon, 30 Nov 2009 22:58:04 +0100 cups (1.4.2-2) unstable; urgency=low * debian/control, debian/rules: Drop dpkg-substvars hack for poppler-utils dependency, since 0.12 is in Debian now. Bump poppler-utils dependency. * debian/rules: Don't fail the build on test suite failure on Ubuntu, since its buildds currently can't resolve their own hostname. (See LP#447919) * poppler is now built on all architectures, so cups will build on amd64, too. (Closes: #556359) -- Martin Pitt Tue, 17 Nov 2009 07:13:55 -0600 cups (1.4.2-1) unstable; urgency=low [ Till Kamppeter ] * debian/patches/log-debug-history-nearly-unlimited.dpatch: Made automatic debug logging of failed jobs (without need of "LogLevel debug") practically unlimited by raising the default limit from 200 to 99999 lines. * debian/local/filters/pdf-filters/pdftopdf/pdftopdf.cxx: pdftopdf did note collate for printers when they have "Collate" and "cupsManualCopies:True" in the PPD. Thanks to Koji Otani from BBR Japan for the fix. * debian/local/filters/cpdftocps: Fixed turning off duplex via command line (http://bugs.linux-foundation.org/show_bug.cgi?id=397). * debian/patches/usb-backend-both-usblp-and-libusb.dpatch: Fixed a bug of modifying the URI of the current print queue when comparing it with discovered URIs. Made the USB backend also compatible with URIS generated by old versions of CUPS, without serial number or with "serial=?" (LP: #450513). * debian/cups.init.d: Make cold-plugging of USB printers also correctly work if the usblp kernel module is loaded. [ Martin Pitt ] * New upstream security/bug fix release: - The CUPS web interface was vulnerable to several XSS and HTTP header/body attacks via attribute injection (STR #3367, STR #3401, CVE-2009-2820; Closes: #555666) * Drop maintain-default-option-settings.dpatch, applied upstream. * Update patches to new upstream version. * debian/control: Drop trademark stuff from package descriptions. No other package does that, and it's uninteresting here. The current ones with "easysw" were out of date, too. (Closes: #552781) * Now that poppler 0.12 is in Debian, drop disable-pdftoopvp-with-old-poppler.dpatch and bump libpoppler-dev build dependency. * poppler now ships fofi include files, which fixes the build. (Closes: #552818, #552223); rebuilding against new poppler ABI fixes uninstallability (Closes: #552456) -- Martin Pitt Thu, 12 Nov 2009 15:03:41 +0100 cups (1.4.1-5) unstable; urgency=low [ Till Kamppeter ] * debian/patches/do-not-broadcast-with-hostnames.dpatch: Do not use host names for broadcasting print queues and managing print queues broadcasted from other servers by default. Many networks do not have valid host names for all machines (LP: #449586). * debian/cups.postinst: Clear cache for upgrade to CUPS 1.4.x (LP: #420490). * usb-backend-both-usblp-and-libusb.dpatch: Removed some lines which were temporarily inserted for debugging. [ Martin Pitt ] * usb-backend-both-usblp-and-libusb.dpatch: Add upstream link. * Drop: disable-pie-mipsen.dpatch: Didn't help to fix the mipsen segfault. * debian/cups.postinst: Simplify structure and avoid calling invoke-rc.d in Till's change above. * Add ppdc-dynamic-linking.dpatch: Dynamically link ppdc, to work around segfault on mipsen. Thanks to Sune Vuorela! (Closes: #548246) [ Tormod Volden ] * debian/cups.init.d: honour blacklist when loading ppdev and lp kernel modules (LP: #424795) -- Martin Pitt Tue, 13 Oct 2009 09:57:11 +0200 cups (1.4.1-4) unstable; urgency=low [ Till Kamppeter ] * debian/patches/usb-backend-both-usblp-and-libusb.dpatch: Make the USB backend supporting both printer access via libusb and via the usblp kernel module. Make it also printing via libusb if the URI for the queue was generated via usblp and vice versa. This should solve most USB printing problems which occured on the transition to CUPS 1.4.x (LP: #420015, LP: #436495; Closes: #546558, #545288, #545453). [ Martin Pitt ] * debian/rules: Make the USB backend run as root again, udev rules do not cover all printers. (LP: #420015) * Drop debian/blacklist-cups.conf, and remove it on upgrade. With Till's fix from above this is not necessary any more. -- Martin Pitt Wed, 30 Sep 2009 15:17:53 +0200 cups (1.4.1-3) unstable; urgency=low * Add disable-pie-mipsen.dpatch: Disable PIE on mipsen, its binutils segfaults with it. (Closes: #548246) -- Martin Pitt Tue, 29 Sep 2009 09:22:12 +0200 cups (1.4.1-2) unstable; urgency=low [ Till Kamppeter ] * debian/local/filters/cpdftocps: Double-sided printing did not work on PostScript printers when the "sides" command line option for "lp"/"lpr" was used (LP: #411392). * debian/patches/maintain-default-option-settings.dpatch: For options with an underscore (or any other allowed non-alphanumeric character) in their names the default settings were not conserved when the PPD got replaced ("lpadmin -p ... -m ...", system-config-printer, automatic PPD update for existing print queues). Fixes LP: #432902 and CUPS STR #3340. [ Martin Pitt ] * debian/cups.init.d: Don't actually re-trigger udev events for printer coldplugging, since according to Scott James Remnant this slows down boot and kills kittens. Instead, just call it with --dry-run and manually call udev-configure-printer. * debian/cups.init.d: Only run udevadm if udev and the callout are actually available. Drop udev dependency to a suggests. This unbreaks cups on platforms which do not have udev, such as kfreebsd. (Closes: #546922) * debian/cups.init.d: Drop "cupsctl RIPCache" setting. It changes our conffile (causing dpkg prompts on upgrade), and overwrites the admin's setting without warning. * Add dynamic-default-ripcache-size.dpatch: Replace above functionality by setting the internal default value of RIPCache to MemTotal/4, if not given in the configuration file. * debian/rules: Do not let the usb backend run as root in Ubuntu any more, since that has a recent enough udev. Still keep it for Debian. * debian/cups-ppdc.install: Update path for Martin-Éric's section change of drv manpage. [ Martin-Éric Racine ] * Add manual-section-for-drv.dpatch: Fix incorrect man section 7 -> 1 as reported by Lintian. -- Martin Pitt Wed, 23 Sep 2009 23:58:15 +0200 cups (1.4.1-1) unstable; urgency=low [ Till Kamppeter ] * debian/cups.postinst: Fixed "lpstat -r" check for the auto update of PPDs of existing queues. "lpstat -r" exits always with status 0, we must check the actual output. * debian/cups.postinst: Updated PPD auto update, so that it works with the new CUPS sample driver PPDs which are dynamically generated now. [ Martin Pitt ] * New upstream bug fix release. * Drop patches accepted upstream: - ppdc-locale-formatting.dpatch - usb-backend-infinite-loop-on-end-of-job.dpatch - dns-sd-check-typo.dpatch * debian/cups.preinst: Add cleanup of obsolete symlinks in /usr/share/ppd/. Drop cleanup from debian/cups.prerm. (Closes: #545298) * debian/control: Add udev dependency, since the init script calls udevadm. (LP: #429880) * debian/cups.postinst, debian/cups.init.d: Call client tools with "-h /var/run/cups/cups.sock" instead of "-h localhost", just in case the server isn't configured to listen on a TCP port. * dnssd-avahi.dpatch: Update to latest Fedora version, which fixes the dnssd backend so that it only reports devices once avahi resolution has completed. This makes it report Device IDs. -- Martin Pitt Tue, 15 Sep 2009 11:30:07 +0200 cups (1.4.0-5) unstable; urgency=low * Drop shlibs files and add symbols files for all libraries, to avoid too weak dependencies. (Closes: #545244) * debian/control: Tighten dependencies between server, client, and -common versions. -- Martin Pitt Sun, 06 Sep 2009 13:17:12 +0200 cups (1.4.0-4) unstable; urgency=low Upload 1.4 to unstable. [ Till Kamppeter ] * debian/patches/usb-backend-infinite-loop-on-end-of-job.dpatch: Fixed the patch so that the usb backend really terminates after a job (LP: #420797). * debian/local/apparmor-profile: cupsd needs also to be allowed to read the /dev/bus/usb/ directory, given with the "/" in the end. This should finally fix LP: #420015. [ Martin Pitt ] * debian/control: Drop the transitional cupsys packages. * printer-filtering.dpatch: Fix sometimes overzealous filtering, thanks to Stéphane Graber! * debian/rules: Drop autoconf call on build again, we have a proper upstream release. * debian/cups.postinst, debian/cups.init.d: Call lpstat, lpadmin, and cupsctl with "-h localhost" to avoid querying network printers set up in /etc/cups/client.conf, and asking for passwords. Thanks to Martin-Éric Racine for tracking this down and the solution! (Closes: #543468) * debian/control: Bump Standards-Version to 3.8.3 (no changes). * debian/cups.postinst: Use signal names instead of numbers for trap. Quiesces a lintian bashism warning. * Add debian/README.source. * debian/local/filters/pdf-filters/filter/fontembed/Makefile: Build libfontembed with -fPIC to also work on HPPA. (Closes: #543973) * debian/local/filters/pdf-filters/pdftoopvp/Makefile: Don't install font configuration file as executable. * debian/cups.lintian-overrides: Update for currently installed backends. * debian/control: Re-add transitional cupsys packages (except the libraries), they are still needed for upgrades from Ubuntu 8.04. Add the "You can safely remove after upgrade" note to their description. -- Martin Pitt Sat, 05 Sep 2009 15:31:07 +0200 cups (1.4.0-3) experimental; urgency=low [ Till Kamppeter ] * debian/patches/usb-backend-infinite-loop-on-end-of-job.dpatch: Fixed upstream bug of the new libusb-based CUPS "usb" backend falling into an infinite loop after completing the job, blocking the next job (LP: #420797). [ Martin Pitt ] * debian/local/filters/pdf-filters/pdftopdf/P2PDoc.cxx: Update for poppler 0.11.3 API, thanks to Koji Otani ! * disable-pdftoopvp-with-old-poppler.dpatch: Revert above change when building with poppler 0.10.x. -- Martin Pitt Tue, 01 Sep 2009 09:44:33 +0200 cups (1.4.0-2) experimental; urgency=low * Add debian/blacklist-cups.conf: Blacklist the usblp module, it's obsolete. CUPS uses libusb directly now. (LP: #420015, part 1) * debian/local/apparmor-profile: Allow cupsd to access /dev/bus/usb/. (LP: #420015, part 2) * debian/rules: Make the usb backend run as root, since /dev/bus/usb/* are root:root, and cups does not use the usblp kernel module any more. (LP: #420015, part 3) * disable-pdftoopvp-with-old-poppler.dpatch: Update. -- Martin Pitt Mon, 31 Aug 2009 17:34:48 +0200 cups (1.4.0-1) experimental; urgency=low [ Martin Pitt ] * Final 1.4.0 release. * Add ppdc-locale-formatting.dpatch: Fix locale handling in ppdc to avoid broken PPD files in non-English locales. (STR#3300) [ Till Kamppeter ] * debian/control: Let the cups package only suggest cups-ppdc and not recommend it, as cups-ppdc is only interesting for developers. -- Martin Pitt Sun, 30 Aug 2009 21:20:46 +0200 cups (1.4.0~svn8773-1) experimental; urgency=low * New upstream prerelease snapshot. [ Changes listed explicitly here as they are not yet available on www.cups.org ] 1. accept and reject; the accept and reject commands have been officially renamed to cupsaccept and cupsreject. The old names are still supported via symlinks. 2. cupsdisable and cupsenable; the cupsdisable command now supports a --hold option to stop printing after the current job and the cupsenable command now supports a --release option to release pending jobs for printing. 3. cupsfilter; the cupsfilter program now supports filtering of already-queued print job files and can also run printer-specific filters specified in the PPD file. 4. cupstestdsc; the cupstestdsc utility has been improved to better detect problems with PostScript print files. 5. cupstestppd; the cupstestppd utility has been improved to test new PPD keywords and better detect impossible constraints. 6. lpadmin; the lpadmin command now supports options to hold and release new jobs on a printer or all printers. 7. lpoptions; the lpoptions command now describes custom options and their parameters. 8. lppasswd; the lppasswd program is no longer installed setuid by default. 9. lpstat; the lpstat command now supports a -H option to show the current default server and no longer slows down when a printer is specified. 10. Look-n-feel; the web interface has been given a new look. 11. PHP support; the "php-cgi" program is used, when available, to process PHP pages in the CUPS web interface. 12. Printer configuration; improvements have been made to the add and modify printer pages. 13. Printer options; the Set Default Options page now provides a "query" button that queries the default and installed options from the printer. 14. Printer sharing; the "share printer" and "unshare printer" buttons are now only shown when printer sharing is enabled in the scheduler. 15. Security; the web interface has been updated to support authentication for printing of test pages and RSS subscription operations. 16. Server settings; the Administration page now provides access to common "advanced" server settings. 17. Bonjour (DNS-SD) printing support; a new mdns backend provides Bonjour-based printer discovery and the ipp, lpd, and socket backends now support Bonjour address resolution. 18. Bonjour (DNS-SD) perforance tuning; the scheduler now only uses a single file descriptor for printer sharing. It previously used one per printer. 19. Bonjour (DNS-SD) web interface registry; when remote access is enabled, the scheduler can register the web interface for easier access. 20. LPD client support; the cups-lpd mini-daemon now provides the document-name for print jobs and supports specification of a CUPS server. 21. PWG Port Monitor MIB; the snmp backend now supports the PWG Port Monitor MIB to better choose the device URI to use. 22. SNMP-based monitoring; the ipp, lpd, and socket backends now report supply levels and printer status using SNMP queries. 23. IPP/2.x support; CUPS now conforms to the draft IPP/2.0 and IPP/2.1 specifications. 24. CUPS-Add-Modify-Printer operation; the scheduler now supports setting the printer-state-reasons attribute using this operation. 25. CUPS-Get-Document operation; the scheduler now supports a "get document" operation to download files from a print job. 26. Device location; the scheduler and backend discovery interface now support a device-location attribute. 27. Hold-New-Jobs and Release-Held-New-Jobs operations; the scheduler now supports the Hold-New-Jobs and Release-Held-New-Jobs operations. 28. Access control; the scheduler now supports multiple addresses in Allow and Deny lines. It also now returns a HTTP 403 (forbidden) status when a user authenticates successfully but is not allowed to perform an operation. 29. Access logging; the scheduler now supports an AccessLogLevel directive to control what is logged in the access_log file. 30. Configuration files; the default cupsd.conf file now provides an "authenticated" policy for easy authenticated sharing of printers. 31. Default LogLevel; the default LogLevel is now "warn" instead of "info". 32. Automatic debug logging; the scheduler now records up to the last N (default 200) debug messages for failed print jobs. 33. Default paper size; the scheduler now supports a DefaultPaperSize directive to override the default paper size defined by the locale or libpaper configuration. 34. Encryption support; the scheduler now supports a SSLOptions directive to optionally support Windows clients in "FIPS" mode. It also now loads both the server and CA certificates (if present) from the ServerCertificate file. 35. Error logging; the scheduler now logs unsuccessful operations as errors in the error_log file. 36. Error policies; the scheduler now supports a retry-current-job error policy that retries the current job immediately. 37. Fatal error handling; the scheduler now supports a FatalErrors directive to control which startup errors should be considered fatal. 38. Filter command-line; the scheduer now passes the job-originating-host-name attribute as a CUPS option to filters and backends. 39. Filter environment; the scheduler now includes CUPS_JOBTYPE, PRINTER_INFO, and PRINTER_LOCATION variables in the environment passed to filters and backends. 40. Job progress; the scheduler now supports a job-media-progress attribute to track the printing progress of each page. 41. MIME database; MIME types now support a priority attribute to override the default (alphabetical) rules of precedence. 42. Page logging; the scheduler now supports a PageLogFormat directive to control the format of the page_log file. 43. PAM support; the scheduler now sets more PAM attributes to better support third-party authentication schemes. 44. PDF job ticket support; the scheduler now supports cupsJobTicket comments at the beginning of PDF print jobs. 45. Performance tuning; the scheduler now coalesces configuration and state file changes to reduce the amount of disk activity and caches printer attributes to further reduce startup time. 46. Printcap support; the scheduler no longer clears the printcap file when shutting down, and can now create XML "plist" printcap files as well. 47. RSS subscriptions; the scheduler now starts the notifier for RSS subscriptions after creation so the feed is available immediately. 48. Sandbox support; the scheduler now runs child processes using restrictive policies on Mac OS X for improved security and job isolation. 49. Test option; the scheduler now supports a test mode via the "-t" option. 50. Device discovery; the cups-deviced helper now runs backends in parallel for faster discovery and streams the results of discovery as the backends provide them. 51. Driver development kit; the CUPS DDK is now a standard part of CUPS. 52. Driver information file support; the cups-driverd helper program now directly supports PPD compiler driver information files. 53. Dynamic PPD support; drivers can now set PPD keywords dynamically using PPD: messages. 54. Generic PostScript command filter; a new CUPS command file filter for PostScript printers provides auto-configuration, self-test page, and status and supply level reporting functions. 55. New printer drivers; new generic PostScript and PCL drivers provide improved support for laser printers, the CUPS DDK drivers offer support for many HP DesignJet printers, and new label drivers offer support for Seiko and Tharo label printers. 56. PJL support; the cupsPJLDisplay PPD attribute controls the PJL commands used to display the current user and job on the printer. 57. PPD compiler improvements; the PPD compiler now supports Mac OS X .strings files, OID query strings, conditional directives, long file names, and a test mode. It also fixes many other bugs from the CUPS DDK 1.2.3 release. 58. USB printer support; the usb backend now uses libusb when available to allow it to better work with third-party scanning and printing solutions. 59. Banner filter; the bundled banner ("job-sheets") pages are now generated using a new banner filter provides easier customization and better support for UTF-8 text. 60. Image filters; the standard image filters now support image files larger than 2GB. 61. PDF filter; the pdftops filter has been replaced with a wrapper program that runs the Xpdf, poppler, or Ghostscript PDF to PostScript utilities. 62. Backend API; a new cupsBackendReport function is provided to report a device from a backend and handles any needed quoting of the make-and-model, info, device-id, and location strings. 63. Device discovery; the new cupsGetDevices function streams discovered devices to an application-provided callback function. 64. IPP API; the IPP read and write functions no longer use a large stack-based buffer when reading and writing IPP attributes. 65. PPD support; several new functions are provided: cupsGetPPD3, cupsResolveConflicts, ppdInstallableConflict, ppdLocalizeAttr, ppdLocalizeMarkerName and ppdPageSizeLimits. 66. Side-Channel API; new cupsSideChannelSNMPGet and cupsSideChannelSNMPWalk functions allow printer drivers to do SNMP queries via the standard network backends. 67. Streaming API; a new streaming request API provides asynchronous job creation and request submission. * debian/patches/freebsd.dpatch, debian/patches/manpage-typos.dpatch, debian/patches/search_mime_files_in_usr_share.dpatch, debian/patches/cupsaccept.dpatch, debian/patches/gnutls-pkgconfig.dpatch: Removed backport patches of upstream features. * debian/patches/testsuite-increase-wait-timeout.dpatch: Removed, fixed upstream. * debian/patches/removecvstag.dpatch, debian/patches/pidfile.dpatch, debian/patches/ppd-poll-with-client-conf.dpatch, debian/patches/quiesce-bonjour-warning.dpatch, debian/patches/rootbackends-worldreadable.dpatch, debian/patches/drop_unnecessary_dependencies.dpatch, debian/patches/reactivate_recommended_driver.dpatch, debian/patches/default_log_settings.dpatch, debian/patches/confdirperms.dpatch, debian/patches/printer-filtering.dpatch, debian/patches/ubuntu-disable-browsing.dpatch: Regenerated. * debian/local/backends/dnssd, debian/control, debian/cups.install, debian/rules: "dnssd" backend removed, DNS-SD discovery backend is now provided upstream. * debian/patches/dns-sd-check-typo.dpatch: Fixed typo in upstream code to check for the availability of dns_sd.h. * debian/patches/dnssd-avahi.dpatch: Added avahi support for the "dnssd" CUPS backend (patch from Fedora). CUPS' DNS-SD support does not build with the libdns_sd of avahi. * debian/patches/show-compile-command-lines.dpatch: Show compiler command lines in the output of the "make" process. * debian/control: Added libusb-dev to the build dependencies, the new USB printer backend uses libusb and not any more the usblp kernel module. * debian/control: Added libavahi-common-dev and libavahi-client-dev to the build dependencies, for the avahi patch for the DNS-SD support. * debian/control: Added new packages for the new shared libraries and also cups-ppdc for the PPD manipulation utilities of the former CUPS DDk. Added transitional package for CUPS DDK. Added Conflicts:/Replaces: as cupsddk is replaced by cups-ppdc and the files of cupsddk-drivers go into the main cups package. * debian/rules: Added "--enable-libusb" to the ./configure command line. * debian/rules: Added "--enable-avahi" to the ./configure command line. * debian/rules: Call autoconf, as we have an SVN snapshot currently. * debian/rules: Updated individual file installation and adaptation steps for the new CUPS version. * debian/libcups2-dev.install: Added new header file versioning.h. * debian/libcupscgi1-dev.install, debian/libcupscgi1.install, debian/libcupsdriver1-dev.install, debian/libcupsdriver1.install, debian/libcupsmime1-dev.install, debian/libcupsmime1.install, debian/libcupsppdc1-dev.install, debian/libcupsppdc1.install: Added install file lists for newly added libraries. * debian/cups-ppdc.install: File list for new cups-ppdc package. This package holds the PPD file manipulation tools which were in CUPS DDK formerly. * debian/cups-common.install, debian/cups.install: Updated for new CUPS version. * debian/cups.install, debian/cups-client.install, debian/cups-ppdc.install: Commented out lines for missing translated man pages. * debian/cups.postinst: Do not create the /usr/share/ppd/1-local-admin and /usr/share/ppd/2-third-party links. They are not needed with current CUPS and they also break the test procedure during package build. * debian/libcups2.postinst, debian/libcupsimage2.postinst: Removed no-op maintainer scripts. * debian/local/filters/pdf-filters/addtocups, debian/local/filters/pdf-filters/config-scripts/cups-pdf-filters.m4, debian/local/filters/pdf-filters/filter/texttopdf.c: Let ./configure script check the CUPS version so that in texttopdf.c a missing variable can get defined if CUPS is 1.4.x or newer. * debian/local/filters/pdf-filters/pdftoopvp/Makefile, debian/local/filters/pdf-filters/pdftopdf/Makefile: Added missing "unittests", "install-data", "install-headers", "install-libs", "install-exec", "libs", "apihelp", and "framedhelp" targets to the Makefiles of the PDF filters. [ Martin Pitt ] * debian/cups.install, debian/local/filters/pdf-filters/addtocups: Enable pdftoopvp filter. * Add disable-pdftoopvp-with-old-poppler.dpatch: Disable pdftoopvp if we build against a poppler older than 0.11, since pdftoopvp needs that new API. (This uses pkg-config --atleast-version in the dpatch script header.) * ubuntu-disable-browsing.dpatch: Restore Ubuntu check. * dnssd-avahi.dpatch: Add upstream bug link. * dnssd-avahi.dpatch: Do not error out of the dnssd backend if system D-Bus is not running. This unbreaks the test suite when running in a build environment. -- Martin Pitt Tue, 25 Aug 2009 22:07:17 +0200 cups (1.3.11-2) unstable; urgency=low [ Till Kamppeter ] * debian/cups.init.d: Trigger udev event for all USB printers right after starting the CUPS daemon to run the udev callouts for the printers. This allows automatic print queue setup and re-enabling print queues also if the printer is cold-plugged (connected before CUPS and/or udev got started). * debian/cups.init.d: Set CUPS RIP cache to 1/4 of the total RAM when CUPS is started. This way CUPS Raster drivers get enough memory for reliable and quick operation even if large paper sizes with high resolutions are printed. * debian/local/filters/pdf-filters/pdftoopvp/OPVPOutputDev.cxx, debian/local/filters/pdf-filters/pdftoopvp/OPVPOutputDev.h, debian/local/filters/pdf-filters/pdftoopvp/pdftoopvp.cxx, debian/local/filters/pdf-filters/pdftoopvp/opvp/opvp.h, debian/local/filters/pdf-filters/pdftoopvp/opvp/opvp_0_2_0.h: Adapted pdftoopvp filter to the new API of Poppler 0.11.2. Thanks to upstream author Koji Otani for the patch. * debian/rules: Explicitly create empty file pdftoopvp/Dependencies after applying the PDF filters add-on as the build servers seem to not copy empty files. * debian/patches/default_log_warn.dpatch, debian/patches/default_log_settings.dpatch: Renamed patch for cupsd.conf logging settings and added "MaxLogSize 0" so that CUPS does not do its own log rotation, as our log rotation is much better. * debian/cups-bsd.postinst, debian/cups.postinst: Moved handling of /etc/printcap symlink from the post-install script of the cups-bsd package to the cups package. Should assure that the symlink gets also set on initial system installation (LP: #415825). * debian/local/filters/cpdftocps: Updated filter to not use the pdftops filter of CUPS, as from version 1.3.11 on CUPS' pdftops filter integrates the call of pstops, and in the PDF workflow this would duplicate the application of page management options, like N-up, even/odd pages, and even the number of copies for some printers (LP: #412709). [ Jamie Strandboge ] * debian/cups.postinst: reload individual cups profile, not all of apparmor (LP: #412745) [ Martin Pitt ] * debian/local/apparmor-profile: Allow cups-pdf to run /bin/cp. * debian/control: Drop smbclient to Suggests. (Closes: #542464) -- Martin Pitt Sat, 22 Aug 2009 17:49:59 +0200 cups (1.3.11-1) unstable; urgency=low [ Till Kamppeter ] * debian/local/filters/textonly: Adding a final form feed to the job (via PPD option) did not work (LP: #396673). * debian/local/filters/pdf-filters/filter/imagetopdf.c: imagetopdf proceeded the PDF output with a blank line. This made some filters misbehave. * debian/patches/read-embedded-options-from-incoming-postscript-and-add-to-ipp-attrs.dpatch: Make CUPS read the number of copies out of Windows print jobs reliably by also considering lines like "%%BeginNonPPDFeature: NumCopies 2". Thanks to Dan Sheridan from Adelard (djs at adelard dot com) for this improvement of the patch. [ Stéphane Graber ] * Add printer-filtering.dpatch: Add support for printer filtering. With this patch, when the PRINTER_LIST environment variable is defined only the printers (comma separated) in it will be displayed. [ Martin Pitt ] * New upstream bug fix release. See http://www.cups.org/articles.php?L586 for details. * Drop pdftops-testsuite.dpatch (fixed upstream). * poppler-based-pdftops-fixes.dpatch, search_mime_files_in_usr_share.dpatch: Update to new upstream version. -- Martin Pitt Sat, 11 Jul 2009 17:27:03 +0200 cups (1.3.10-5) unstable; urgency=low * debian/patches/read-embedded-options-from-incoming-postscript-and-add-to-ipp-attrs.dpatch: Make CUPS reading all option settings in PostScript print jobs and add the option settings to the filter command line before starting the filter chain. This fixes the problem that in the PDF printing workflow (where incoming PostScript gets converted to PDF by pstopdf) option settings embedded in the incoming PostScript code do not get obeyed. Especially the options of jobs from Windows clients get ignored. * debian/filters/pstopdf: Do not let Ghostscript generate multiple copies of the job if the filter command line from CUPS already supplies the correct number of copies. * debian/local/filters/pdf-filters/addtocups: The disabling of the pdftoopvp filter in cups 1.3.10-3 also disabled pdftopdf. Re-enabled pdftopdf. -- Till Kamppeter Mon, 15 Jun 2009 10:50:33 +0200 cups (1.3.10-4) unstable; urgency=low * Add ghostscript-cups dependency. (LP: #385606) * debian/control: Add back dropped comma, which led to the ssl-cert dependency being dropped. (Closes: #532845) * debian/local/apparmor-profile: Allow reading /proc/sys/crypto/**. (LP: #335898) * debian/local/apparmor-profile: Allow dac_override to cups-pdf. This is unfortunate, but required with some $HOME permissions; the profile is very tight, so this shouldn't actually considerably increase privileges. (LP: #224365) -- Martin Pitt Fri, 12 Jun 2009 11:32:28 +0200 cups (1.3.10-3) unstable; urgency=low [ Till Kamppeter ] * debian/cups.install, debian/rules: Move added *.convs and *.types files to /usr/share/cups/mime/ so that they are not considered config files by dpkg. * debian/local/text.convs: Turn all text input formats to text/plain at a high cost, so that the text-only printer (which accepts only text/plain) accepts them (LP: #385797). * debian/rules: Switch the pdftops filter back to Poppler, as Ghostscript has a lot of problems in generating PostScript (LP: #382379). * debian/patches/poppler-based-pdftops-fixes.dpatch: Fixes for the pdftops filter in Poppler mode: Do not emit PostScript level 3 as it Poppler's PostScript level 3 output is not compatible with HP's PostScript printers (LP: #277404); Added support for the new "-origpagesizes" option of Poppler's pdftops, so that documents with pages of different sizes get correctly printed (LP: #310575). * debian/filters/pstopdf: Do not call Ghostscript with asymmetric resolutions (like 1200x600 dpi), as it leads to problems with images in some cases. See http://bugs.ghostscript.com/show_bug.cgi?id=690504. * debian/local/filters/pdf-filters/pdftopdf/P2PObject.h, debian/local/filters/pdf-filters/pdftopdf/P2POutput.cxx: Fixed infinite loop which occured for some PDF files (LP: #382880). * debian/filters/pstopdf: Make it also correctly working if PaperDimension and ImageableArea entries in the PPD have no translation strings. Thanks to Koji Otani to find the bug. * debian/local/filters/pdf-filters/pdftoopvp/, debian/local/filters/pdf-filters/README, debian/local/filters/pdf-filters/addtocups, debian/local/filters/pdf-filters/removefromcups, debian/local/filters/pdf-filters/config-scripts/cups-pdf-filters.m4: Added pdftoopvp CUPS filter as part of the PDF filter add-on. * debian/cups.install: Make /etc/fonts/conf.d/99pdftoopvp.conf of pdftoopvp be installed as part of the cups package * debian/control: Added build dependencies needed by pdftoopvp: liblcms1-dev, libfreetype6-dev, libfontconfig1-dev * debian/control: Moved dependency on cups-client to Depends:, as cups-client is needed by the post-install script for the update of the PPDs of existing print queues. * debian/cups.postinst: Case-insensitive check for model names when updating PPDs of already existing print queues. [ Martin Pitt ] * Add gnutls-pkgconfig.dpatch: Use "pkg-config gnutls" instead of deprecated libgnutls-config. (Closes: #529903) * Bump Standards-Version to 3.8.1 (no changes necessary). * debian/control: Point Vcs-Browser: to bzr.d.o. loggerhead, and use http:// URL for Vcs-Bzr. * debian/control: Drop ghostscript build dependency again, pdftops filter uses poppler again. Also Drop alternative xpdf-utils build dependency, since configure now checks for poppler's pdftops capabilities. * debian/control, debian/rules: Do a build-time check if pdftops supports -origpagesizes, and dynamically set the poppler-utils dependency. This is a hack until https://bugs.freedesktop.org/show_bug.cgi?id=19777 makes it into Debian. * debian/cups.install, debian/local/filters/pdf-filters/addtocups: Disable new pdftoopvp filter for now, since sid does not yet have poppler 0.11. Lower libpoppler-dev build dependency again. -- Martin Pitt Thu, 11 Jun 2009 12:19:33 +0200 cups (1.3.10-2) unstable; urgency=low [ Till Kamppeter ] * debian/local/filters/pdf-filters/pdftopdf/P2PFont.cxx: Make the pdftopdf filter also building with Poppler 0.11.0. * debian/filters/pstopdf: Make pstopdf also reading default values from the PPD if there is no space between the colon and the value. Some programs seem to remove this space when setting the defaults. Fixes problem of Shaun Crampton in LP: #357732. [ Martin Pitt ] * debian/control: Lift cups-driver-gutenprint from Suggests to Recommends, it's needed by many printers and not very large. (Closes: #522428) * debian/control: Drop cups-bsd's Recommends: cups to a Suggests:. Client packages shouldn't pull in the server by default. (Closes: #529630) * debian/libcups2.dirs: Drop, obsolete. * debian/cups.dirs: Remove most directories, not necessary to explicitly create them. [ Martin-Éric Racine] * Cleaned Lintian errors: (source) E: debian-rules-ignores-make-clean-error W: debhelper-but-no-misc-depends W: dbg-package-missing-depends (cups) E: dir-or-file-in-var-run (cups-common) W: symlink-should-be-relative * Added Lintian overrides: (cups) W: non-standard-executable-perm usr/lib/cups/backend-available/[ipp|lpd|serial] 0744 != 0755 -- Martin Pitt Thu, 21 May 2009 19:01:37 +0200 cups (1.3.10-1) unstable; urgency=medium [ Martin Pitt ] * New upstream security/bug fix release: - The scheduler now protects against DNS rebinding attacks. Please note that this could lead to some regressions. (CVE-2009-0164) - Fixed TIFF integer overflow in image filters. (CVE-2009-0163) - Lots of bug fixes. * Drop patches included upstream: - hpgl-regression.dpatch - runloop-backchannel-eof-spin.dpatch - png-image-int-overflow.dpatch - CVE-2008-5183.dpatch - pdftops-cups-1.4.dpatch * Add pdftops-testsuite.dpatch: Fix path to pdftops in the test suite. * debian/rules: Specify --with-pdftops=gs, so that the pdftops filter is built with intended ghostscript support. [ Till Kamppeter ] * debian/filters/pstopdf: Added support for custom page sizes to the pstopdf CUPS filter. * debian/filters/pstopdf: Call Ghostscript with the default paper size (from PPD or from CUPS filter command line) on its command line. Some applications generate PostScript without PageSize requests. Multi-page-size jobs (LP: 310575) do not get broken by this as Ghostscript uses the given page size only as default and gives priority to page sizes requested by the document (in contrary to Poppler). Fixes LP: #357732). -- Martin Pitt Fri, 17 Apr 2009 11:53:48 +0200 cups (1.3.9-17) unstable; urgency=low [ Till Kamppeter ] * debian/filters/pstopdf: Added "-dDoNumCopies" to the "ps2pdf" call in the pstopdf CUPS filter, so that Ghostscript takes into account /#copies and /NumCopies when converting incoming PostScript to PDF (Ghostscript upstream bug #690355, LP: #320391). [ Martin Pitt ] * debian/control: Update section of cups-dbg to "debug". -- Martin Pitt Sun, 05 Apr 2009 18:04:33 -0700 cups (1.3.9-16) unstable; urgency=low [ Till Kamppeter ] * debian/local/filters/pdf-filters/pdftopdf/P2PResources.cxx: Fixed corruption of output when generating mmultiple copies of EOG or GIMP output files (LP: #345183). * debian/cups.postinst: Silenced non-fatal error messages when post-install script updates PPDs and there are PPDs not belonging to a CUPS queue in /etc/cups/ppd/ (LP: #345866). [ Martin Pitt ] * debian/local/apparmor-profile: Drop 'm' permission for /etc/passwd and friends, which was a workaround for a kernel apparmor bug on i386. This is fixed in current kernels. Thanks to Kees Cook for pointing this out! (LP: #270663) * debian/cups.install: Do not install the unnecessary (and broken) D-BUS configuration file any more. All cupsd does is to send signals, which are allowed by default. It does not provide any D-BUS service right now. Also remove the obsolete file on upgrades in debian/cups.preinst. (Closes: #510634, LP: #318742) * Add logfiles_adm_readable.dpatch: Make log files readable by group "adm". (LP: #345953) * debian/changelog: Fix cruft at the end of file. * debian/local/apparmor-profile: Explicitly deny access to /dev/tty and writing access to /etc/krb5.conf, so that accesses to them do not create log spewage. (LP: #348556) -- Martin Pitt Fri, 27 Mar 2009 09:35:56 +0100 cups (1.3.9-15) unstable; urgency=low * Add debian/local/apport-hook.py: Apport package hook, thanks to Brian Murray! Install it in debian/rules if we build for Ubuntu. (LP: #334080) * debian/rules: Move init script priority to 50, so that cups starts later in the boot sequence. There is no reason why it should start so early (before e. g. gdm). Do the transition on upgrades in debian/cups.postinst. * debian/control: Promote ttf-freefont from Recommends to Depends, since the PDF filter chain needs it. (Closes: #516335) * debian/control: Add "Breaks: foomatic-filters (<< 4.0)", and bump Recommends: version. Earlier foomatic-filters do not support the PDF filter chain. (Closes: #511009) * debian/local/apparmor-profile: Add a few missing rules for Kerberos authentication. (LP: #324645) * Add bzr-builddeb configuration (merge mode). * debian/watch: Update so that it works again. * debian/local/apparmor-profile: Allow cups to read /etc/likewise, for authentication. (LP: #303927) * Add testsuite-increase-wait-timeout.dpatch: Increase test suite's timeout for waiting for jobs to 10 minutes, for slower architectures like arm and m68k. (Closes: #518787) -- Martin Pitt Tue, 10 Mar 2009 13:46:19 +0100 cups (1.3.9-14) unstable; urgency=low * debian/patches/pdftops-cups-1.4.dpatch: Revert previous change to define HAVE_PDFTOPS and CUPS_PDFTOPS, since Till says the filter should actually use ghostscript now. Add ghostscript build dependency instead. (LP: #329991) * Add drop_unnecessary_dependencies.dpatch: Do not link libcups.so and libcupsimage.so against unnecessary libraries. This avoids unnecessary package dependencies for both libcups, as well as for packages using cups-config. (Closes: #438067) * debian/control: Drop XSBC-Original-Maintainer Ubuntu-ism which accidentally crept in in r607. -- Martin Pitt Mon, 16 Feb 2009 18:05:21 +0100 cups (1.3.9-13) unstable; urgency=low [ Till Kamppeter ] * debian/local/filters/pdf-filters/filter/imagetopdf.c: Added support for the new "fit-to-page" option (new, more intuitive name for "fitplot"). * debian/filters/pstopdf: Only apply paper size if the "fitplot" or the "fit-to-page" option is set. * debian/local/filters/cpdftocps: Only the last digit of the number of copies was used (LP: #309314). * debian/local/filters/pdf-filters/pdftopdf/pdftopdf.cxx: Do not preceed the PDF output with a newline (LP: #303691). Only impose the page size from the PPD file to all pages if the "fitplot" or the "fit-to-page" option is set. This prevented from automatic paper tray switching to the correct paper sizes when a multiple-page-size document is printed (partial fix for LP: #310575). * debian/patches/pdftops-cups-1.4.dpatch: Updated from CUPS 1.4 SVN. Contains fixes for multiple-page-size document printing (partial fix for LP: #310575). * debian/patches/pdftops-dont_fail_on_cancel.dpatch: Removed, should be fixed in the new upstream version of pdftops. [ Martin Pitt ] * debian/patches/pdftops-cups-1.4.dpatch: Add definition of HAVE_PDFTOPS and CUPS_PDFTOPS, so that the filter actually gets again built with pdftops support. (Fixes Till's change from above). -- Martin Pitt Sun, 15 Feb 2009 18:39:03 +0100 cups (1.3.9-12) experimental; urgency=low [ Till Kamppeter ] * debian/local/filters/pdf-filters/pdftopdf/P2PPage.cxx, debian/local/filters/pdf-filters/pdftopdf/pdftopdf.cxx: Do not reposition the pages when an automatic rotation did not actually take place and do not apply the page size and margins from the PPD file or the coomand line if no manipulations affecting the printout size are done (N-up, scaling, fitplot, ...). This caused LP: #310575. * debian/cups.postinst: Let the PPD files of the existing print queues get automatically updated after each installation of this package (if they use PPDs of this package). [ Marc Deslauriers ] * SECURITY UPDATE: denial of service by adding a large number of RSS subscriptions (Closes: #506180, LP: #298241) - debian/patches/CVE-2008-5183.dpatch: gracefully handle MaxSubscriptions being reached in scheduler/{ipp.c,subscriptions.c} - CVE-2008-5183 [ Martin Pitt ] * pidfile.dpatch: Adapt to changes from MaxSubscriptions fix from above. -- Till Kamppeter Sun, 25 Jan 2009 12:05:44 +0100 cups (1.3.9-11) experimental; urgency=low * debian/local/filters/cpdftocps: Fixed the fix for the number of copies. In some cases it failed and pstops was called with 0 copies requested (LP: #309314, LP: #300312, LP: #286048). -- Till Kamppeter Fri, 19 Dec 2008 15:58:55 +0100 cups (1.3.9-10) experimental; urgency=low [ Till Kamppeter ] * debian/local/filters/pdf-filters/pdftopdf/P2PCatalog.cxx, debian/local/filters/pdf-filters/pdftopdf/P2PCatalog.h, debian/local/filters/pdf-filters/pdftopdf/P2PDoc.cxx, debian/local/filters/pdf-filters/pdftopdf/P2PDoc.h, debian/local/filters/pdf-filters/pdftopdf/P2PPage.cxx, debian/local/filters/pdf-filters/pdftopdf/P2PPage.h, debian/local/filters/pdf-filters/pdftopdf/P2PPageTree.cxx, debian/local/filters/pdf-filters/pdftopdf/P2PPageTree.h, debian/local/filters/pdf-filters/pdftopdf/pdftopdf.cxx: Fixed problem of Landscape-oriented PDF files being printed in the wrong orientation (LP: #47649, LP: #244840). * debian/local/filters/cpdftocps: Made correct number of copies being printed on PostScript printers with hardware copy handling (LP: #286048). [ Martin Pitt ] * debian/local/apparmor-profile: Allow cupsd to run Brother drivers. (LP: #237256) -- Martin Pitt Wed, 17 Dec 2008 07:46:04 +0100 cups (1.3.9-9) experimental; urgency=low [ Till Kamppeter ] * debian/local/filters/pdf-filters/pdftopdf/P2PPage.cxx, debian/local/filters/pdf-filters/pdftopdf/P2PResources.cxx: Added processing of the rotate tag (LP: #300312). [ Martin Pitt ] * Add png-image-int-overflow.dpatch: Fix integer overflow in the PNG image reader (Closes: #507183, STR #2974, CVE-2008-5286) -- Martin Pitt Mon, 01 Dec 2008 15:47:10 -0800 cups (1.3.9-8) experimental; urgency=low * debian/local/filters/pdf-filters/pdftopdf/P2POutputStream.cxx, debian/local/filters/pdf-filters/pdftopdf/P2POutputStream.h: Removed an endianess dependency from the pdftopdf filter, so that it also works on non-PC platforms like PowerPC (LP: #271350). This also fixes the filter on mipsel and makes the test suite, and thus the build, succeed again. (Closes: #500305) * debian/filters/pstopdf: Do not supply the margins from the PPD to the ps2pdf process, as this breaks full-bleed printing and is also disturbs the printing if PPDs have too conservative margin definitions (LP: #282186). -- Till Kamppeter Wed, 26 Nov 2008 15:14:57 +0100 cups (1.3.9-7) experimental; urgency=low * Previous upload had some cruft in the diff.gz which caused some changed defaults in cupsd.conf. Reupload with a clean diff.gz. *Brown paperbag* -- Martin Pitt Thu, 20 Nov 2008 18:49:46 +0100 cups (1.3.9-6) experimental; urgency=low [ Till Kamppeter ] * debian/local/filters/cpdftocps: The cpdftocps filter did case-sensitive checking for CUPS options to keep them away from the pstops filter. CUPS treats such options case-insensitive, so in some cases CUPS options got applied twice (LP: #299707). [ Martin Pitt ] * debian/rules: Install the serial backend with 0744 permissions to make it run as root, since /dev/ttyS* are root:dialout and thus not accessible as user "lp". Thanks to Chanoch (Ken) Bloom. (part of #506181, LP: #154277) -- Martin Pitt Thu, 20 Nov 2008 13:43:27 +0100 cups (1.3.9-5) experimental; urgency=low * hpgl-regression.dpatch: Replaced with version which got committed upstream. * Add runloop-backchannel-eof-spin.dpatch: Fix backend runloop spin on backchannel EOF (select() returns "ready for read" on EOF). This completely broke printing with e. g. HPJetDirect. Thanks to Samuel Thibault for tracking down the problem! (Closes: #489045) * debian/cups-bsd.postinst: Assume default printcap path (in /var/run/cups/) if not specified in cupsd.conf. This brings back the lost /etc/printcap for legacy applications. (Closes: #482186, LP: #282667) * debian/rules: Drop arm/armel -f-no-stack-protector workaround, since SSP works on these architectures now. (See #469517) * debian/cups-bsd.postinst: Robustify the cupsd.conf parsing for Printcap, as per suggestion from Jo Mills. * rootbackends-worldreadable.dpatch: Apply the same relaxed permission check to cups-deviced, so that backends installed as 0744 don't disappear from printer detecttion. (Closes: #503644, LP: #275407) -- Martin Pitt Mon, 17 Nov 2008 08:50:34 +0100 cups (1.3.9-4) experimental; urgency=low [ Till Kamppeter ] * debian/local/filters/pdf-filters/conf/pdftoraster.convs, debian/local/filters/pdf-filters/filter/pdftoraster.cxx, debian/local/filters/pdf-filters/README, debian/local/filters/pdf-filters/addtocups, debian/local/filters/pdf-filters/removefromcups, debian/rules, debian/copyright: Removed Poppler-based pdftoraster filter. It will be replaced by a Ghostscript-based pdftoraster filter filter provided by the Ghostscript package, requested via Debian bug #505282 (fixes LP: #290395). * debian/filters/pstopdf: Fixed debug output. -- Till Kamppeter Tue, 11 Nov 2008 13:46:55 +0100 cups (1.3.9-3) experimental; urgency=low [ Till Kamppeter ] * debian/filters/pstopdf: Fixed several bugs in the pstopdf filter. First, removed the use of CUPS' pstops filter for inserting option settings. This also inserts PJL headers and then Ghostscript cannot convert the PostScript to PDF in the next step. Fixed also the sed magic so that the paper size and the margins get really read from the PPD and fixed the calculation of the top and bottom margins, they were exchanged. Fixes LP: #289759, LP: #292690, LP: #282186. Possible fix for LP #293883. [ Martin Pitt ] * debian/local/apparmor-profile: Allow dnssd backend to create various less common network protocols (x25, appletalk, etc.) for detection. Also allow it to read /proc/*/net/, which the bonjour avahi library apparently uses. (LP: #254022) -- Martin Pitt Wed, 29 Oct 2008 11:41:38 +0100 cups (1.3.9-2) experimental; urgency=low * debian/local/filters/cpdftocps, debian/filters/pstopdf: Avoid duplicate execution of the number of copies. Sending a PostScript job to a non-PostScript printer produced n*n copies instead of n copies, also sending a non-PostScript job to a PostScript printer. A PostScript job sent to a PostScript printer could even produce n*n*n copies (LP: #286048). -- Till Kamppeter Mon, 20 Oct 2008 08:18:20 +0200 cups (1.3.9-1) experimental; urgency=low * New upstream security/bug fix release: - The HP-GL/2 filter did not range check pen numbers. [CVE-2008-3641] - The SGI image file reader did not range check 16-bit run lengths. [CVE-2008-3639] - The text filter did not range check cpi, lpi, or column values. [CVE-2008-3640] - Fix incompatibility with Firefox 3.0 when using SSL. - Update the French admin.tmpl, to have the missing "Find new printer" button and the "Subscriptions" section. Thanks to Yves-Alexis Perez! (Closes: #475270) - Lots of other bug fixes, see http://www.cups.org/articles.php?L575. * Drop patches accepted upstream: - cupsfilter-path-typo.dpatch - pjl-display-ready-message.dpatch - dont-chown-symlinked-ssl.dpatch * Add hpgl-regression.dpatch: Revert the SP_select_pen() enumeration change introduced in STR #2911, because it changes the color mapping (e. g. "SP1" would now select a white pen instead of a black one, and "SP0" would not be valid at all any more). Also fix a remaining off-by-one loop. (STR #2966) -- Martin Pitt Fri, 10 Oct 2008 11:07:17 +0200 cups (1.3.8-13) experimental; urgency=low [ Till Kamppeter ] * debian/local/filters/pdf-filters/pdftopdf/P2PCatalog.cxx, debian/local/filters/pdf-filters/pdftopdf/P2PCatalog.h, debian/local/filters/pdf-filters/pdftopdf/P2PDoc.cxx, debian/local/filters/pdf-filters/pdftopdf/P2PDoc.h, debian/local/filters/pdf-filters/pdftopdf/P2PPageTree.cxx, debian/local/filters/pdf-filters/pdftopdf/P2PPageTree.h, debian/local/filters/pdf-filters/pdftopdf/pdftopdf.cxx: When N-up printing and selection of only the even or odd pages (for manual duplex) was used together the pages were selected the wrong way (number-up=2 page-set=even with an 8-page document gave 2+4, 6+8 and should give 3+4, 7+8). This is fixed now. The behavior of pdftopdf is now exactly the same as of pstops. [ Martin Pitt ] * debian/local/apparmor-profile: Allow locking on /var/cache/cups/**. (Mentioned in LP #270046) -- Martin Pitt Wed, 08 Oct 2008 11:19:36 +0200 cups (1.3.8-12) experimental; urgency=low [ Till Kamppeter ] * debian/filters/pstopdf, debian/local/filters/pdf-filters/filter/pdftoraster.cxx, debian/local/filters/pdf-filters/pdftopdf/*: Fixed paper size handling of pstopdf, pdftopdf, and pdftoraster which led SpliX to crash (LP: #261363, LP: #268510), fixed monochrome CUPS Raster output of pdftoraster which led to black pages being printed (LP: #269691). -- Martin Pitt Mon, 06 Oct 2008 16:33:02 +0200 cups (1.3.8-11) experimental; urgency=low * debian/rules: Explicitly configure with --with-dbusdir. For some obscure reason, the automatic check fails on the buildds, causing the D-BUS configuratin not to be installed. Fixes FTBFS. (Closes: #498664) -- Martin Pitt Sat, 13 Sep 2008 10:59:31 +0200 cups (1.3.8-10) experimental; urgency=low [ Martin Pitt ] * rootbackends-worldreadable.dpatch: Do not run backends as root if they are group or world writable (this is by and large a paranoia fix, though). * dont-chown-symlinked-ssl.dpatch: Replace patch with the upstream committed version, which is more general. * debian/control: Package development moved to bzr, update Vcs- tags. * cupsaccept.dpatch: Replaced with the more comprehensive solution upstream committed to 1.4 trunk. Removed debian/cups-client.links, since the links are now installed by upstream. Adapt manpage-translations.dpatch accordingly. * Move installation of D-BUS configuration files from debian/rules to debian/cups.install. * debian/libcups2-dev.install: Add missing sidechannel.h. [ Johan Kiviniemi ] * debian/filters/pstopdf: Apply PPD settings (resolution, page size, page margins) to the conversion (LP: #263049). * debian/control: cups Depends: bc (for margin calculation). -- Martin Pitt Thu, 11 Sep 2008 13:43:34 +0200 cups (1.3.8-9) experimental; urgency=low * Previous upload had some cruft in the diff.gz which caused some changed defaults in cupsd.conf. Reupload with a clean diff.gz. *Brown paperbag* -- Martin Pitt Sun, 07 Sep 2008 00:22:23 +0200 cups (1.3.8-8) experimental; urgency=low * Remove debian/patches/dont_force_ssl.dpatch; gnome-cups-manager is ancient and removed from Debian, and newer GUIs like system-config-printer get along fine with the default setting. * Add quiesce-bonjour-warning.dpatch: Silence the "Apple Bonjour compatibility layer of Avahi" warning, since it can cause SIGPIPE crashes when being issued in a child process without stderr. (Closes: #497492) * confdirperms.dpatch, manpage-translations.dpatch: Revert note that Debian doesn't install lppasswd suid root, since we do. (Closes: #478280) * debian/control: Drop the "It can be safely removed from your system" from the old package names, since that is untrue until the transition is actually complete. (Closes: #489246) * debian/control: Bump Standards-Version (no actual changes necessary). * Remove classes_crash.dpatch, it has been fixed upstream a while ago. * cupsaccept.dpatch: Rewrite to be consistent with current upstream code, and send it upstream. * Drop quiesce_ipp_logging.dpatch: It was only necessary for the polling from gnome-cups-icon, but fortunately gnome-cups-manager has been removed now. * confdirperms.dpatch: Remove a few hunks which were only relevant for running cups as system user. Remove the SSL certificate bits as well, rewrite it to be upstream compatible, split it out to dont-chown-symlinked-ssl.dpatch, reported it upstream. * Remove device_uri.dpatch, does not seem to be necessary any more. * Add rootbackends-worldreadable.dpatch: Install root backends world-readable, to comply to Debian Policy and because it is both nonsensical to to not do so, and also breaks system checkers, bug reporting, etc. (Closes: #410171) -- Martin Pitt Sat, 06 Sep 2008 18:21:01 +0200 cups (1.3.8-7) experimental; urgency=low * Previous upload had some cruft in the diff.gz which caused some changed defaults in cupsd.conf. Reupload with a clean diff.gz. -- Martin Pitt Tue, 02 Sep 2008 12:27:18 +0200 cups (1.3.8-6) experimental; urgency=low [ Till Kamppeter ] * debian/local/filters/pdf-filters/filter/texttopdf.c, debian/local/filters/pdf-filters/filter/pdfutils.c, debian/local/filters/pdf-filters/filter/test_pdf2.c, debian/local/filters/pdf-filters/filter/fontembed/test_ps.c, debian/local/filters/pdf-filters/filter/fontembed/test_pdf.c, debian/local/filters/pdf-filters/filter/fontembed/sfnt.h, debian/local/filters/pdf-filters/filter/fontembed/main.c, debian/local/filters/pdf-filters/filter/fontembed/iofn.h, debian/local/filters/pdf-filters/filter/fontembed/fontfile.h, debian/local/filters/pdf-filters/filter/fontembed/fontfile.c, debian/local/filters/pdf-filters/filter/fontembed/embed.h, debian/local/filters/pdf-filters/filter/fontembed/embed.c, debian/local/filters/pdf-filters/filter/fontembed/Makefile, debian/local/filters/pdf-filters/addtocups: Fixed crashes of texttopdf on bad or missing fonts, make texttopdf also working without configuration of the fonts (at least for ASCII). * debian/local/filters/pdf-filters/filter/pdftoijs.cxx, debian/local/filters/pdf-filters/conf/HP-PhotoSmart_Pro_B8300-hpijs-pdftoijs.ppd debian/local/filters/pdf-filters/addtocups, debian/local/filters/pdf-filters/config-scripts/cups-pdf-filters.m4, debian/local/filters/pdf-filters/removefromcups, debian/local/filters/pdf-filters/README, debian/control, debian/rules: Added pdftoijs filter. [ Johan Kiviniemi ] * debian/filters/pstopdf: - Adobe Reader generates DRM-infested PostScript from encrypted PDF files. This PostScript contains code which stops Ghostscript with an error when one tries to convert it to (now unencrypted) PDF. Change the filter to normalize such PostScript using ps2ps before conversion. [ Martin Pitt ] * Add alternative dependency "gsfonts-x11" for ttf-freefonts. (Closes: #495598) * debian/patches/: Update the status of patches, add some upstream references, update status in 00list. * Drop obsolete include_krb5_h_in_job_h.dpatch, package builds fine in current unstable. * debian/rules: Enable PIE and other compiler flags security enhancements with DEB_BUILD_HARDENING=1. Add hardening-wrapper build dependency. Thanks to Kees Cook! * Add debian/local/cups.ufw.profile: "ufw" firewall profile. Install it for Ubuntu builds only for now, until ufw enters Debian as well. Thanks to Didier Roche and Jamie Strandboge! (https://launchpad.net/bugs/261903) -- Martin Pitt Tue, 02 Sep 2008 11:34:54 +0200 cups (1.3.8-5) experimental; urgency=low [ Till Kamppeter ] * debian/local/filters/pdf-filters/filter/texttopdf.c: Added bug fix from upstream so that texttopdf does not segfault on missing or bad fonts any more. Backed out Johan Kiviniemi's patch of replacing Courier by FreeMono. * Remove hardcoded -march=pentium from texttopdf Makefile. (Closes: #495220) * debian/local/filters/pdf-filters/conf/imagetopdf.convs: Reduced cost factor to prefer this filter instead of imagetops. [ Johan Kiviniemi ] * debian/local/filters/cpdftocps, debian/local/cpdftocps.convs, debian/cups.install, debian/rules: - Add an application/vnd.cups-pdf → application/vnd.cups-postscript filter, thus making the PDF filter chain possible for PostScript printers. - The filter’s cost is 22, making the total cost of pstopdf → pdftopdf → cpdftocps 66 after the following change. * debian/local/filters/pdf-filters/conf/pdftopdf.convs, debian/local/pstopdf.convs, debian/rules: - Change filter costs to prefer the PDF chain over pstops. • pdftopdf: 22 instead of 66. • pstopdf: 22 instead of 100. • pstops: 100 instead of 66. * Add pjl-display-ready-message.dpatch: - According to the PJL spec, one should use "" (not "READY") to return the display to the normal ready message. -- Martin Pitt Fri, 15 Aug 2008 15:54:36 +0200 cups (1.3.8-4) experimental; urgency=low [ Till Kamppeter ] * debian/control, debian/rules, debian/local/filters/pdf-filters/filter/pdfutils.h, debian/local/filters/pdf-filters/filter/texttopdf.c, debian/local/filters/pdf-filters/filter/fontembed, debian/local/filters/pdf-filters/filter/test.sh, debian/local/filters/pdf-filters/filter/test_pdf1.c, debian/local/filters/pdf-filters/filter/test_pdf2.c, debian/local/filters/pdf-filters/filter/pdfutils.c, debian/local/filters/pdf-filters/conf/texttopdf.convs, debian/local/filters/pdf-filters/AUTHORS, debian/local/filters/pdf-filters/addtocups, debian/local/filters/pdf-filters/data, debian/local/filters/pdf-filters/data/pdf.utf-8.simple, debian/local/filters/pdf-filters/data/pdf.utf-8.heavy, debian/local/filters/pdf-filters/removefromcups, debian/local/filters/pdf-filters/README: Added texttopdf filter. Added "Depends: ttf-freefont" for the cups package, as the texttopdf filter needs these fonts. [ Johan Kiviniemi ] * Add cupsfilter-path-typo.dpatch: Fix a typo in scheduler/cupsfilter.c, which caused filters not to have /bin in their PATH. * debian/filters/pstopdf: - Do not log to /tmp/pstopdf.log. A user running the filter (e.g. via cupsfilter) made all other users (including cups itself) unable to run the filter because of no permission to open the logfile. - Put unquoted variables into quotes where appropriate. - Never create an outfile in the same directory as the given infile; the process might not have write access there. - set -e. * debian/local/filters/pdf-filters/filter/texttopdf.c: - Use FreeMono instead of Courier, since texttopdf requires a TrueType font. [ Martin Pitt ] * Bump shlibs version for libcups2 and libcupsimage2. (Closes: #494168) -- Martin Pitt Fri, 15 Aug 2008 08:02:32 +0200 cups (1.3.8-3) experimental; urgency=low [ Till Kamppeter ] * debian/local/filters/pdf-filters/addtocups, debian/local/filters/pdf-filters/removefromcups, debian/local/filters/pdf-filters/config-scripts/cups-pdf-filters.m4, pdftopdf/Makefile: Avoid that all executables and libraries of CUPS get linked against libpoppler. This especially leads to all packages dependent on CUPS needing libpoppler, even for building. -- Martin Pitt Mon, 11 Aug 2008 16:48:59 +0200 cups (1.3.8-2) experimental; urgency=low [ Till Kamppeter ] * debian/local/filters/pdf-filters/, debian/local/pstopdf.convs, debian/rules, debian/control, debian/copyright, debian/cups.install: Introduced the first bunch of infrastructure for using PDF as standard print job format. Added CUPS filters imagetopdf, pstopdf, pdftopdf, pdftoraster, added build dependency on libpoppler-dev, as the new filters are Poppler-based. texttopdf and pdftoijs will be added soon. All this is temporary, as the filters are planned to be added to the upstream package of CUPS (CUPS STR #2897, #1595). * debian/patches/search_mime_files_in_usr_share.dpatch: Replaced by the changes which were done for this purpose in CUPS 1.4. In addition to the introduction of /usr/share/cups/mime for installing file detection and conversion rules as non-conffiles it also changes the reading order to all *.types files and the all *.convs files (instead of all in /usr/share/cups/mime and then all in /etc/cups). This way /usr/share/cups/mime can contain conversion rules based on file types defined by files in /etc/cups (CUPS STR #2719, CUPS SVN revs #7670 and #7694). [ Martin Pitt ] * Add missing CVE and more verbose descriptions to security fixes to 1.3.6-1 changelog. -- Martin Pitt Sat, 9 Aug 2008 23:48:59 +0200 cups (1.3.8-1) unstable; urgency=low * New upstream release: some 20 bug fixes, no new features (see http://www.cups.org/articles.php?L562 for details). - Fixes remote DoS through RSS subscriptions. (CVE-2008-5184) * Dropped patches, accepted upstream: - empty_option_value_crash.dpatch - CVE-2008-1722.dpatch - glibc2.8_build.dpatch - HostNameLookups_values.dpatch * manpage-typos.dpatch: Most of this got applied to 1.3.8. The ".Sh" -> ".SS" fix only got applied to trunk, so backport these remaining ones. * manpage-translations.dpatch: Update to new upstream version. -- Martin Pitt Wed, 23 Jul 2008 08:58:57 +0200 cups (1.3.7-9) unstable; urgency=low [ Martin Pitt ] * Update Turkish debconf translations, thanks Mert Dirik! (Closes: #489408) [ Till Kamppeter ] * Updated "Suggests:" for the "cups" package, replacing obsolete foomatic-filters-ppds by foomatic-db and foomatic-db-engine. (Closes: #286127) -- Martin Pitt Fri, 11 Jul 2008 09:49:08 +0200 cups (1.3.7-8) unstable; urgency=medium * Urgency medium due to RC bug fix (#487606). * debian/cups.init.d: Restart xprint on start/stop/reload. (Closes: #285332) * Add empty_option_value_crash.dpatch: Fix crash on cupsd.conf options without a value. (Closes: #250848) * Add glibc2.8_build.dpatch: Fix building with glibc 2.8. * debian/patches/00list: Sort patches by upstream status. * Add HostNameLookups_values.dpatch: Make possible values of HostNameLookups consistent to manpage and to other options in cupsd.conf. (Closes: #379014) * debian/patches/confdirperms.dpatch: Fix typo, thanks Nicolas François! * Add manpage-typos.dpatch: Fix various typos in manpages, thanks Nicolas François! (part of #478597) * Add manpage-translations.dpatch: Provide po4a infrastructure for translating mangpages, and add French manpage translations. Add po4a build dependency, and add translated manpages to debian/*.install. Thanks to Nicolas François! (Closes: #478597) * Add Slovak debconf translations, thanks to Ivan Masár. (Closes: #488906) * Add Romanian debconf translations, thanks to Eddy Petrișor. (Closes: #488597) * debian/cups.init.d: Test for executability of daemon, not merely its existence. (Closes: #488843) * debian/cups.prerm: Do not delete the /usr/lib/cups/backend/smb symlink on removal, it is owned by smbclient, not cups. (Closes: #487606) -- Martin Pitt Wed, 02 Jul 2008 11:58:47 +0200 cups (1.3.7-7) unstable; urgency=low * Provide transitional cupsys-common package, to ease apt-get dist-upgrade. * debian/cups.preinst: Run conffile transition for "install" as well, not just for "upgrade" (brown paperback for this thinko!), and also remove the old rc.d symlinks for cupsys. (Closes: #485514) * debian/control: Drop obsolete "gs-esp" alternative dependency. -- Martin Pitt Tue, 10 Jun 2008 16:32:33 +0200 cups (1.3.7-6) unstable; urgency=low * Rename the package to cups. This is the proper upstream name. Upstream has made it clear that the usual distro patches are not a trademark violation. This unbreaks all the documentation out there, which refers to "cups", not "cupsys" (including names of the init script), as well as unbreaks dependencies of openprinting.org's LSB printer driver packages. (Closes: #482296, LP: #233790) * debian/cups.{config,postinst}: Remove some old cruft. * debian/cups.preinst: Move conffiles to new names on upgrades, in a dpkg conffile question avoiding manner. * debian/cupsys.install: Install oopstops.{convs,types} in /etc/cups, they do not work in /usr/share/cups/mime (loaded too early). (Closes: #474109) -- Martin Pitt Fri, 23 May 2008 00:32:17 +0200 cupsys (1.3.7-5) unstable; urgency=low * debian/cupsys-bsd.install: Remove daemon/cups-lpd. It really does not belong into -bsd. * debian/control: Add appropriate Conflicts/Replaces to older cupsys-bsd which shipped daemon/cups-lpd. (Closes: #477392) -- Martin Pitt Wed, 23 Apr 2008 11:00:41 +0200 cupsys (1.3.7-4) unstable; urgency=high * debian/rules: Do not fail the build when the test suite fails on m68k and arm. It is currently unclear why these tests fail on these architectures, but that shouldn't block testing migration (given that the actual bugs existed before as well, they just didn't get caught during build). -- Martin Pitt Tue, 22 Apr 2008 18:34:35 +0200 cupsys (1.3.7-3) unstable; urgency=low * debian/copyright: Update to current reality. (Closes: #474176) * Drop usage of dh_movefiles, rename the remaining debian/*.files to debian/*.install. This also brings back the lost /usr/lib/cups/daemon/cups-lpd. * debian/libcupsimage2-dev.install: Add cups/i18n.h from upstream (not installed by upstream Makefiles any more). (Closes: #474922) * debian/rules: Drop lintian magic, current debhelper (dh_lintian) and cdbs support that now. Rename .lintian -> .lintian-overrides for this. * debian/cupsys.doc-base: Fix section. -- Martin Pitt Tue, 22 Apr 2008 12:28:25 +0200 cupsys (1.3.7-2) unstable; urgency=high [ Martin Pitt ] * debian/control: Add missing build dependency lsb-release. (LP: #211375) Also wrap long fields, so that they are easier to edit. * Drop pdftops-wait-eintr.dpatch, an improved version has been committed upstream. Integrate the upstream solution into pdftops-cups-1.4.dpatch. * Add pdftops-dont_fail_on_cancel.dpatch: Fix behavioural change in patch from STR #2780 which broke the test suite: When a job is cancelled, do not report a failure in the exit code of pdftops. * Rebuild against fixed debhelper to properly compress manpages again (see #470913). (Closes: #475887, #476495) [ Nico Golde ] * Add debian/patches/CVE-2008-1722.dpatch: Two integer overflows in png image filter allow a denial of service attack and possibly arbitrary code execution. [STR #2790, CVE-2008-1722] (Closes: #476305). -- Martin Pitt Mon, 21 Apr 2008 19:06:55 +0200 cupsys (1.3.7-1) unstable; urgency=medium * Urgency medium due to security fix. * New upstream bugfix/security update release. For a detailled list of changes see http://www.cups.org/articles.php?L537. - CUPS GIF image filter overflow [CVE-2008-1373, STR #2765]. * Drop patches which are now upstream: - cgiCompileSearch_buffer_overflow.dpatch - testsuite-exit-code.dpatch - pbmprint.dpatch * search_mime_files_in_usr_share.dpatch: Drop log message about missing /usr/share/cups/mime/ from error to info, since it is not really an error, and causing the test suite to fail due to error log count mismatch. * pdftops-cups-1.4.dpatch: Apply r7391 from SVN head to fix missing error message newlines (STR #2743). * debian/rules: Remove cleaning of test suite HTML reports in test/, they are written to /tmp now. * Add pdftops-wait-eintr.dpatch: Handle EINTR in pdftops' wait() call. (Caught by test suite.) * debian/libcupsys2-dev.files: Drop i18n.h, it's an internal interface and not installed by upstream any more. * debian/control: Add poppler-utils | xpdf-utils build dependency, so that the test suite works during build. -- Martin Pitt Wed, 02 Apr 2008 11:03:37 +0200 cupsys (1.3.6-3) unstable; urgency=high [ Till Kamppeter ] * pdftops-cups-1.4.dpatch: Updated to Mike Sweet's patch version from CUPS STR #2716. * debian/patches/ppd-poll-with-client-conf.dpatch: If there is a client.conf pointing to a remote server, clients were not able to poll the PPD options from printers on that server (CUPS STRs #2731, #2763) [ Martin Pitt ] * Urgency high due to security fix. * debian/local/apparmor-profile: Allow cups-pdf to read files in ~/PDF/, so that it can overwrite files. (LP: #161222) * Add cgiCompileSearch_buffer_overflow.dpatch: Fix buffer overflow in cgiCompileSearch() using crafted search expressions. Exploitable if printer sharing is enabled. (CVE-2008-0047, STR #2729, Closes: #472105) -- Martin Pitt Sat, 22 Mar 2008 12:37:57 +0100 cupsys (1.3.6-2) unstable; urgency=low * debian/rules: Configure with default log file permissions 0640. (Closes: #469853) * debian/control: Mention "lpr" in the description of -bsd, for easier apt-cache search catching. (Closes: #426519) * Remove debian/NEWS, there's nothing new since Etch's release. (Closes: #376580) * Add debian/patches/pbmprint.dpatch: Fix printing of PBM files, thanks to Eugeniy Meshcheryakov! (Closes: #313536) * debian/cupsys.preinst: Only chown /var/run/cups if it exists. (LP #156634) * Move scripting examples from cupsys to libcupsys2-dev. No need to install those 1.3 MB by default on every system, this is much more developer oriented. Mention this in the package description. * debian/rules: Explicitly build with -fno-stack-protector on arm and armel, since the compiler produces segfaulting binaries. Works around #469517. * search_mime_files_in_usr_share.dpatch: Do not fatally fail if DataDir/mime does not exist. This both makes much more sense (since /etc/cups is the canonical dir which must exist, and /usr/share/cups/mime is optional), and also unbreaks the test suite (which does not create this directory by default). * pidfile.dpatch: Specify PidFile in temporary directory in the self test's cupsd.conf. * debian/rules clean: Remove test suite HTML reports. * Add testsuite-exit-code.dpatch: Exit with nonzero if the test suite fails, so that it is easier to integrate into package building. * pdftops-cups-1.4.dpatch: Update pdftops location in test suite, too, so that it does not fail the PDF printing test. (Forwarded to STR #2759) * debian/rules: Run test suite on build. This will fail the build if any tests fail, so that problems on particular platforms will be caught easily. * debian/control: Add alternative (build-)depends to heimdal-dev. * debian/rules, debian/cupsys.postinst: Call update-rc.d to not install stop symlinks for runlevels 0 and 6, since they just needlessly slow down shutdown. Remove the obsolete kill symlinks on upgrade. Patch adopted from the Ubuntu branch, but without using the Ubuntu-only 'multiuser' mode of update-rc.d. * Add debian/local/apparmor-profile: AppArmor profile (taken from Ubuntu branch). Install it in debian/rules if package is built on Ubuntu (tested with lsb_release -is). Reload AppArmor in debian/cupsys.postinst if both the cupsys profile and AppArmor itself are present. * Add debian/patches/ubuntu-disable-browsing.dpatch: Disable Browsing by default when building on Ubuntu. * Add debian/patches/ubuntu-default-error-policy-retry-job.dpatch: Set default job error policy to "Retry", since it is less confusing and a better default on desktop machines. This is only applied when building on Ubuntu. * debian/control: Add Vcs-{Svn,Browser} fields. -- Martin Pitt Sun, 16 Mar 2008 22:34:50 +0100 cupsys (1.3.6-1) unstable; urgency=low * New upstream bugfix release. - Fixes buffer overflows in filter/hpgl-input.c, possibly exploitable to run arbitrary code with crafted HP-GL files. (CVE-2008-0053) - Fixes double free vulnerability in process_browse_data(), exploitable to remote DoS. (CVE-2008-0882, bug #467653) * Remove the following patches which are upstream now: - fix_regression_reactivate_net_ifaces_changes_detection.dpatch - web-interface-breaks-default-auth-setting.dpatch * search_mime_files_in_usr_share.dpatch: Greatly simplified the patch by using mimeMerge(), so that it is more robust against upstream changes. Forwarded to STR#2719. * Dropped cupsd.conf-AllowLocal.dpatch; it does not do anything good any more for the current web and GUI administration tools (they handle this fine by themselves), so it's obsolete now. * Drop enable{sharing,browsing} and {sharing,browsing}_status scripts. They have never been used in Debian, not used any more in Ubuntu, and the current frontends (web, system-config-printer, etc.) do this in a much better way. * debian/docs: Remove redundant LICENSE.txt. * debian/rules: Add a generic rule to install lintian overrides in debian/packagename.lintian. * Add lintian overrides for unjustified/wontfix complaints about libcupsys2 and cupsys. * debian/cupsys.doc-base: Remove erroneous whitespace in the section separator. * debian/rules: Remove *.o and *.so files from PHP scripting examples directory (it's /usr/share after all). * debian/cupsys.init.d: Add Short-Description. * debian/rules: Do not ship an empty /usr/share/cups/model/ directory. -- Martin Pitt Tue, 26 Feb 2008 14:23:50 +0100 cupsys (1.3.5-2) unstable; urgency=low [ Martin Pitt ] * debian/cupsys.init.d: Add Should-Start: avahi. (Closes: #459662) [ Till Kamppeter ] * debian/patches/pdftops-cups-1.4.dpatch, debian/local/filters/pdftops: Replaced Helge Blischke's alternative pdftops wrapper by the pdftops of CUPS 1.4. The old pdftops wrapper did not work with the pdftops filter of Poppler, the new one works with the pdftops filters of both Poppler and XPDF (Closes: #457810; Ubuntu LP: #182379). * debian/patches/web-interface-breaks-default-auth-setting.dpatch: When modifying server settings with the CUPS web interface, the setting for the default authentication got overwritten with gibberish (Closes: #461331; CUPS STR #2703, Ubuntu LP: #188426). * debian/local/backends/dnssd: Updated dnssd to filter out IPv6 entries, as they clutter the lists of detected printers and make the network printer discovery process taking more time than needed. Applied also a bug fix and the possibility of querying one IP address by calling the dnssd backend with the IP as command line argument (like the snmp CUPS backend). -- Martin Pitt Mon, 25 Feb 2008 11:13:15 +0100 cupsys (1.3.5-1) unstable; urgency=high [ Kenshi Muto] * New upstream release - cups-stops-broadcasting-on-HUP-with-explicit-BrowseAddress patch is merged. - Fix that SNMP backend did not check for negative string lengths. (CVE-2007-5849, closes: #457453). * Update pdftops.pl to 1.20. It fixes overwriting arbitary files via symlink attack. (CVE-2007-6358, closes: #456960) [ Till Kamppeter ] * debian/patches/fix_regression_reactivate_net_ifaces_changes_detection.dpatch : Fix a regression in upstream code that has removed the network interface update poll (CUPS STR #2631, LP: #177075). Thanks to Hugues Fournier (hugues dot fournier at gmail dot com) for the patch. -- Kenshi Muto Wed, 19 Dec 2007 17:07:05 +0900 cupsys (1.3.4-4) unstable; urgency=high [ Kenshi Muto] * cupsys depends on "ghostscript | gs-esp", not "ghostscript | gsp-esp"! I should punish myself. (closes: #456455) -- Kenshi Muto Tue, 18 Dec 2007 07:49:17 +0900 cupsys (1.3.4-3) unstable; urgency=high [ Martin Pitt ] * debian/control: Bump Standards-Version to 3.7.3 (no changes necessary). [ Till Kamppeter ] * debian/patches/cups-stops-broadcasting-on-HUP-with-explicit-BrowseAddress.dpatch: CUPS stopped broadcasting on a HUP signal when using a fixed BrowseAddress (CUPS STR #2618, Ubuntu LP: #173470). * debian/local/backends/dnssd: Updated dnssd to support Mac OS X servers which broadcast their print queues only via DNS-SD and require clients to create raw IPP queues pointing to the server's queues manually. [ Kenshi Muto] * Debconf translation - French (closes: #456272) - do update-debconfpo. Update all translations to use the msgstr 'dnssd' for msgid 'dnssd'. * cupsys depends on "ghostscript | gs-esp", to ease testing transition and upgrades from etch (closes: #456455). -- Kenshi Muto Mon, 17 Dec 2007 10:25:02 +0900 cupsys (1.3.4-2) unstable; urgency=low [ Kenshi Muto ] * Bumps up shlibs to 1.3.4. [ Martin Pitt ] * debian/control: Remove gs-esp alternative dependency, it's just "ghostscript" nowadays. * debian/control: Slightly bump the C/R: for -common; it's a pointless delta to Ubuntu and it doesn't hurt us. * debian/cupsys-bsd.postinst: Symlink cupsys-bsd's doc directory to cupsys-common's, not cupsys', since the latter is not a dependency. * debian/control: Demote cups-pdf from Recommends: to Suggests: to match the semantics (apt installs recommends by default now). * debian/cupsys.init.d: Add LSB header, thanks to Petter Reinholdtsen! (closes: #337640) * debian/rules: Configure with default printcap in /var/run/cups/. (closes: #452446) [ Till Kamppeter ] * Add debian/local/backends/dnssd: Printer discovery backend for several cheaper printers, like the HP Color LaserJet 2600n, are not discovered by the "snmp" backend. In addition, this backend extracts more info from the printers than the "snmp" backend, like for example available page description languages. This leads to better driver choices for unknown printer models. * debian/cupsys.install, debian/cupsys.{prerm,postinst,templates,rules}: Install new backend. * debian/control: Add Recommends: to avahi-utils; if it is installed, the dnssd backend can actually work. * debian/postinst: Activate new backends (since Etch) by default on upgrades. This affects snmp, scsi, serial, and dnssd. -- Martin Pitt Fri, 30 Nov 2007 18:42:15 +0100 cupsys (1.3.4-1) unstable; urgency=high * New upstream release. - Fixes CVE-2007-4351 IPP Tags Memory Corruption Vulnerability (closes: #448866) [ Martin Pitt ] * debian/cupsys.postinst: Drop ancient code to remove root from group lpadmin. [ Kenshi Muto ] * Debconf translation - Finnish (closes: #446740) -- Kenshi Muto Fri, 02 Nov 2007 21:32:29 +0900 cupsys (1.3.2-1) unstable; urgency=low * New upstream bug fix release. - Fixes web interface for many browsers. (STR#2472, Closes: #440589) * Remove str2488-fix-localedir.dpatch, str2505_localize.dpatch, str2508-dont_kill_edit-config.tmpl.dpatch: Fixed upstream. -- Martin Pitt Tue, 18 Sep 2007 08:15:17 +0200 cupsys (1.3.0-4) unstable; urgency=low * Install PO files again, but this time under /usr/share/cups/locale. cups has its own crazy PO file parser. * Add debian/patches/str2488-fix-localedir.dpatch: Make the --localedir configure option actually work (taken from upstream SVN, STR#2488) * debian/rules: Add --enable-gssapi to ensure that the package is built with Kerberos support. * debian/rules: Use -Wl,--as-needed linker flag. This drops a few unnecessary dependencies and should make checklib much happier. * Add debian/patches/str2508-dont_kill_edit-config.tmpl.dpatch: Do not kill edit-config.tmpl on distclean. Forwarded upstream as STR#2508. (Closes: #441697) * Add debian/patches/str2505_localize.dpatch: Fix localization of web interface (STR#2505, Closes: #440256) -- Martin Pitt Tue, 11 Sep 2007 22:43:06 +0200 cupsys (1.3.0-3) unstable; urgency=low [ Martin Pitt ] * debian/control: Allow 'ghostscript' as alternative dependency to gs-esp. * debian/cupsys.dirs: Create /usr/lib/cups/backend/ (regression from the big debian/rules cleanup). (closes: #438432) * debian/cupsys.preinst: Bump the version comparison for the file owner cleanup, since some log files were still left as owned by 'cupsys' until #437536 was fixed. * debian/cupsys-common.files: Do not install the .po files, cups does not use them at runtime. (closes: #438625) [ Till Kamppeter ] * debian/local/postscript.ppd: New generic PostScript PPD file for unknown PostScript printers added. -- Martin Pitt Mon, 20 Aug 2007 16:23:58 +0200 cupsys (1.3.0-2) unstable; urgency=low * debian/control: Re-add erroneously dropped adduser dependencies to cupsys and cupsys-client. Still needed for addgroup lpadmin. (closes: #437951) * debian/control: Add missing libkrb5-dev dependency to libcupsys2-dev. -- Martin Pitt Wed, 15 Aug 2007 09:22:29 +0200 cupsys (1.3.0-1) unstable; urgency=low [ Till Kamppeter ] * New upstream release (first release of 1.3.x generation) * 90_include_krb5_h_in_job_h.dpatch: Added a missing "#include " to the scheduler/job.h file (upstream bug). * Regenerated patches: 44_fixconfdirperms.dpatch, 47_pid.dpatch, 70_reactivate_recommended_driver.dpatch. * Removed patches (fixed upstream): 53_usr_share_ppd_support.dpatch, 55_ppd_okidata_name.dpatch, 68_edit-config.dpatch * debian/control: Added "libkrb5-dev", and "libavahi-compat-libdnssd-dev" to the build dependencies, so that the new Kerberos and DNS Service Discovery support of CUPS gets compiled. * debian/libcupsys2-dev.files: Removed /usr/include/cups/md5.h This file is not provided any more by CUPS * debian/cupsys.install, debian/cupsys-client.files: Added new files. * debian/rules: Added more files to "clean::" rule which upstream has forgotten in "make clean". [ Martin Pitt ] * Bump library shlibs to >= 1.3.0. * Drop 02_configure.dpatch, upstream configure does not set rpath any more for prefix=/usr. * Drop 54_cups-config_modeldir.dpatch, --modeldir was never actually used anywhere and not documented, and LSB prescribes /usr/share/ppd/ anyway. * Drop 56_dirsvc.dpatch, which was fixed upstream long ago and disabled in 00list anyway since then. * Drop 67_printcap.dpatch: /var/run/cups/printcap is now the implicit default upstream. * debian/patches: Drop number prefixes from patches. The enumeration is not useful at all any more since it both got inflated and is not sorted by any category. With dpatch we also do not need number prefixes. -- Martin Pitt Tue, 14 Aug 2007 21:10:50 +0200 cupsys (1.2.12-4) unstable; urgency=low [ Martin Pitt ] * cupsys.logrotate: Fix last occurence of 'cupsys' user. (closes: #437536) * Moved all Debian specific filters to debian/local/filters. * Cleaned up debian/rules, moved some file installs to debian/cupsys.install. * Merge debian/cupsys.files into debian/cupsys.install and remove the former. Two different files are just too confusing. * debian/local/filters/pdftops: Do not pass /etc/cups/pdftops.conf to pdftops if it does not exist (poppler-utils does not have this file). (https://launchpad.net/bugs/125300) [ Martin-Éric Racine ] * Corrected download URL in debian/copyright. * Added debian/watch file using that URL. * Revised the Uploaders in debian/control: - Fixed the name for Masayuki Hatta. - Added Roger Leigh. * Removed cupsys-driver-gimpprint alternative in debian/control; superseded by cupsys-driver-gutenprint since Etch. -- Martin-Éric Racine Sun, 12 Aug 2007 13:36:30 +0300 cupsys (1.2.12-3) unstable; urgency=low [ Martin-Éric Racine ] * Added presubj script to warn bug reporters to avoid filing Poppler or XPDF security issues, since we don't use that codebase; we call external programs who do and that's where the bug should be filed. [ Martin Pitt ] * cupsys.init.d: Remove stray chown'ing to 'cupsys' which does not exist any more. (closes: #436662) * cupsys.init.d: Fix detection of parallel printers when 'lp' is already loaded. (https://launchpad.net/bugs/29050) * debian/cupsys.init.d: Put back 'reload'. -- Martin Pitt Thu, 09 Aug 2007 20:47:42 +0200 cupsys (1.2.12-2) unstable; urgency=low [ Kenshi Muto ] * Added scripting directory to /usr/share/doc/cupsys/examples. This directory contains the binding code from Java, Perl, and PHP to CUPS. (closes: #193076) Although we Debian CUPS team cannot afford to maintain them, some of you may want them. * Added 'Recommends: cupsys' to cupsys-bsd. (closes: #426521) * Changed cupsys-client from 'Recommends: cupsys-bsd' to 'Suggests: cupsys-bsd.' because cupsys-bsd isn't so necessary for cupsys-client. * Fixed to use 'cupsys' instead of 'cups' for PAM on cups-check-pam-auth. (though Debian CUPS doesn't use this daemon) (closes: #425701) * Added debconf-2.0 to the dependency of cupsys-bsd. (closes: #415684) [ Martin Pitt ] * Drop the derooting changes. It still has some regressions, and with upstream not even acknowledging the need for improving cupsys' security we will sit on this forever. This will be replaced by an AppArmor/SELinux profiles in the future. - Drop derooting related patches: 06_disable_backend_setuid.dpatch 10_external_pam_helper.dpatch 09_runasuser.dpatch 09_runasuser_autoconf.dpatch - debian/cupsys{,-client}.postinst: Drop the 'cupsys' user setup and file permission juggling. - debian/rules: + Drop --with-cups-user configure option. + Do not modify the upstream default backend permissions. - debian/cupsys.init.d: Do not touch log file permissions any more. - debian/cupsys.files: Drop cups-check-pam-auth. - debian/NEWS: Drop description of derooting changes. - debian/control: Drop adduser dependency. * debian/patches/44_fixconfdirperms.dpatch: Do not create /var/run/cups/certs as lp:lpadmin, but as root:lpadmin, so that cupsd does not need CAP_DAC_OVERRIDE. This will make it possible to create a sensible AppArmor/SELinux profile. * debian/cupsys.preinst: Fix file permissions on upgrades (owner cupsys -> root). * debian/control, debian/rules: Remove references to libcupsys2-gnutls10, since it's a transitional package in Etch and not relevant any more in Lenny. * debian/cupsys.{pre,post}inst: Remove obsolete transition bits. * Remove obsolete debian/patches/05_avoidunknowngroup.dpatch. * Use ssl-cert's "snakeoil" SSL certificate by default: (Closes: #402370) - debian/control: Add ssl-cert dependency. - debian/cupsys.postinst: Symlink snakeoil SSL certificate if present, and there is none present yet. * debian/control: Replace obsolete ${Source-Version} with ${binary:Version}. [ Till Kamppeter ] * Add debian/local/textonly.{ppd,filter}: Text-only printer driver from Red Hat. Install it in debian/rules. * debian/rules: Install the D-Bus config file so that CUPS reports job progress to dbus clients (like sytem-config-printer). * Add debian/local/oopstops.{.pl,types,convs}: Helge Bliscke's oopstops filter to work around the bugs in the PostScript output of OpenOffice.org (from http://www.srz.de/Members/bla/cups/filter/oopstops). Install them in debian/rules. -- Martin Pitt Mon, 06 Aug 2007 15:47:33 +0200 cupsys (1.2.12-1) unstable; urgency=low * New upstream release * removed unnecessary dependency against patch package (Closes: #431069) * Debconf translation - Danish (Closes: #426772) - Vietnamese (Closes: #426822) - Spanish (Closes: #430004) * Disabled external_pam_helper due to #425944 and Ubuntu#112803. (closes: #425944) -- Kenshi Muto Sat, 14 Jul 2007 14:56:24 +0900 cupsys (1.2.11-3) unstable; urgency=medium * debian/rules: Disable privilege dropping for now until we fixed the backend invocation to become compatible to upstream's behaviour again. This unbreaks third-party backends again for now. (Closes: #427559) -- Martin Pitt Fri, 08 Jun 2007 11:15:12 +0200 cupsys (1.2.11-2) unstable; urgency=low * debian/rules: Latest cups installs the ipp backend with 0700 permissions, which makes it inaccessible to both the cups daemon (Closes: #423972) and unreadable for users (Closes: #415872) -- Martin Pitt Wed, 16 May 2007 09:06:44 +0200 cupsys (1.2.11-1) unstable; urgency=low [ Kenshi Muto ] * Applied templates improvement patch contributed by debian-l10n-english team. (closes: #416350) * Debconf translation - Japanese - Galician (closes: #416357) - Swedish (closes: #416356) - Catalan (closes: #416367) - Basque (closes: #416385) - Norwegian (closes: #416401) - Italian (closes: #416407) * New upstream version 1.2.11: - 56_dirsvc patch is merged. [ Christian Perrier ] * Debconf translation - Czech (closes: #416939) - German (closes: #416994) - Brazilian Portuguese (closes: #417249) - French - Malayalam. (closes: #418030) - Russian. (closes: #417874) - Dutch. (closes: #418135) - Portuguese (closes: #418299) [ Martin Pitt ] * New upstream bugfix release (closes: #421899). Synchronize patches with Ubuntu and new upstream version 1.2.10: * Drop patches which are fixed upstream: 00_00str2111.dpatch, 00_01str2137.dpatch, 00_02str2144.dpatch, 00_03str2106.dpatch, 00_04str2117.dpatch, 00_05str2133.dpatch, 00_06str2121.dpatch, 00_07str2123.dpatch, 00_08str2135.dpatch, 00_09str2198.dpatch, 03_clean.dpatch, 65_detect_http_shutdown.dpatch * Remove a few obsolete patches: 08_cupsd.conf.conf.d.dpatch, 26_modprobe.dpatch, 48_stdlib.dpatch, 61_job_c_strangeloop.dpatch, 08_cupsd.conf.conf.d.dpatch, 64_driverfolder.dpatch. * Add debian/patches/14_dont_force_ssl.dpatch: Do not require SSL for /admin pages, since gnome-cups-manager (and most probably other GUI frontends) does not support this. * Add debian/patches/58_cupsd.conf-AllowLocal.dpatch: Allow access to local ethernet by default. This just affects the ACL, for actually enabling access cupsd needs to be switched to not only listen on localhost. With that, this setting does not need to be configured in two different places. * Add debian/patches/70_reactivate_recommended_driver.dpatch: Upstream CUPS filters the "(recommended)" marking from the NickNames of the PPD files when listing PPDs. These are an important orientation for the user and they are also made use of by some printer setup tools. We need them at least until a better solution for recommending drivers gets available. * Add debian/patches/98_search_mime_files_in_usr_share.dpatch: Let CUPS also search for *.types and *.convs files in /usr/share/cups/mime. This way packages can provide *.types and *.convs files which do not get considered as conffiles. (See https://launchpad.net/36532 for details). * debian/patches/*.dpatch: Forwarded a lot of patches to upstream bug tracker, add STR URLs to dpatch DP: headers. Synchronize packaging with Ubuntu: * debian/control: Drop transitional libcupsys2-gnutls10 package, it was only required for Sarge->Etch upgrades. * debian/control: Change netbase dependency to update-inetd, since that lives in its own package now. * debian/local/enable_sharing: Also match on 127.0.0.1 IP adresses in addition to 'localhost'. * debian/rules: Most of the clean:: rule is obsolete, only two files are left behind now. These two have been reported upstream in http://www.cups.org/str.php?L2366. * debian/cupsys.templates: Activate SCSI, serial, and SNMP backends by default. With these backends activated, many printers can be easily set up with the printer setup tools. Especially network printers get auto-detected and the correct URI gets assigned to them (doing this manually is a non-trivial task for most users). * debian/cupsys.dirs: Add /usr/share/ppd/custom/, a place where lpadmins can store additional PPDs (this functionality is e. g. provided in gnome-cups-manager's "Custom driver..." file dialog). * debian/cupsys.init.d: Give proper permissions to /usr/share/ppd/custom/: root:lpadmin 3775. Drop the obsolete chmod/chowning of /usr/share/cups/model. * Run the backend as non-root system user to confine the impact of security vulnerabilities: - Add debian/patches/10_external_pam_helper.dpatch: + Add a helper program 'cups-check-pam-auth' which performs PAM authentication and returns the status as exit code. + scheduler/auth.c, cupsdAuthorize(): Attempt to use cups-check-pam-auth before trying native PAM. + With this we do not need to put the cupsys user into the shadow group. - debian/cupsys.files: Install PAM helper. - debian/cupsys.postinst: Set permissions of PAM helper to cupsys:shadow 2754, alter permissions of some configuration files and directories to work with non-root cupsd. - debian/cupsys.postinst: Fix /var/cache/cups/ permissions for upgrades which might have written cache files as root. - debian/cupsys.logrotate: Save log files as cupsys:lpadmin. - debian/cupsys.init.d: Disable 'reload'; change force-reload to restart, since cupsd cannot reload as non-root. - debian/cupsys.init.d: Set up proper permissions of log files. - debian/rules: Enable --enable-privilege-dropping configure option. - debian/rules: Install lpd backend suid root, so that it can bind to ports < 1024 (really silly, but required for RFC compliance). - debian/cupsys-client.postinst, debian/cupsys.postinst: Set up cupsys system user. * debian/NEWS: Describe derooting. -- Martin Pitt Mon, 14 May 2007 09:23:16 +0200 cupsys (1.2.7-4) unstable; urgency=high [ Kenshi Muto ] * Use dh_usrlocal to install files in /usr/local in the maintainer scripts, instead of shipping them in the deb. This was policy violation (closes: #409335) -- Kenshi Muto Fri, 2 Feb 2007 18:16:24 +0900 cupsys (1.2.7-3) unstable; urgency=high [ Kenshi Muto ] * removed STR2137 patch. This patch corruted some Postscript files. (closes: #403703) This was a release critical bug. * Provides /usr/local/share/ppd and /opt/share/ppd to satisfy LSB 3.2. (closes: #408154) * Applied upstream patch: - STR2198: The scheduler still loaded the remote printer cache, even when browsing was disabled * Debconf translation - Portuguese (closes: #408332) - Norwegian (closes: #406253) -- Kenshi Muto Thu, 1 Feb 2007 10:17:30 +0000 cupsys (1.2.7-2) unstable; urgency=high [ Kenshi Muto ] * Applied upstream patches to fix some (include RC) bugs as dpatch style: - STR2106: Raw PBM files did not print correctly - STR2111: The PostScript filter did not properly output document setup commands for reversed output (closes: Bug#403703) - STR2117: The scheduler did not parse IPv6 netmask properly - STR2121: cupsDoAuthentication() did not translate the password prompt - STR2123: The backends incorrectly used STATUS: media-tray-empty-error messages for out-of-paper conditions - STR2133: httpGetLength2() did not handle error messages without content correctly - STR2135: cupsMarkOptions() did not handle the multiple-document-handling option - STR2137: Collated output produced by the PostScript filter could lose some options - STR2144: job-hold-until with time values for the next day would be held for 60 days * 67_printcap: Add Printcap/PrintcapFormat/PrintcapGUI variables to cupsd.conf file. (closes: #401981) * cupsys makes /var/run/cups/certs. Although CUPS daemon can make it automatically, the daemon logs an warning. * 68_edit-config: Provide same cupsd.conf as initial package installation. -- Kenshi Muto Wed, 6 Dec 2006 22:42:34 +0000 cupsys (1.2.7-1) unstable; urgency=low * New upstream release - Added Italian translation [ Kenshi Muto ] * Add printer.schema to /usr/share/doc/cupsys/examples for LDAP. (closes: #399122) -- Kenshi Muto Sat, 18 Nov 2006 10:03:30 +0900 cupsys (1.2.6-2) unstable; urgency=low [ Kenshi Muto ] * Debconf translation - Brazillian Portuguese (closes: #397842) - Basque (closes: #398574) * 00_r6100: Apply SVN r6100. - Fixed an inefficiency in the SNMP IPP detection code (closes: #397833) -- Kenshi Muto Tue, 14 Nov 2006 22:29:08 +0900 cupsys (1.2.6-1) unstable; urgency=low * New upstream release Fixes bugs include - "lpc status" did not show the number of queued jobs for disabled queues - The lpstat program could hang -- Kenshi Muto Tue, 7 Nov 2006 21:09:33 +0900 cupsys (1.2.5-1) unstable; urgency=medium * New upstream release. [ Kenshi Muto ] * 00_r6052: Apply SVN r6052 to pass the compile with libpaper. * provides /etc/pam.d/cupsys correctly. (closes: #392142) (renamed debian/pam to debian/cupsys.pam) * fixed "ppd API fails to discover printer nickname and options" problem" by upstream (closes: #394255) -- Kenshi Muto Sat, 21 Oct 2006 01:18:34 +0000 cupsys (1.2.4-2) unstable; urgency=low [ Kenshi Muto ] * PPD transition to /usr/share/ppd is mostly finished. Now I remove old symlink /usr/share/ppd/cups-transitional-dir and /usr/share/cups/cups-included. (closes: #381266, #383291) * Update debconf translations: - Brazilian Portuguese (closes: #389222) * Tried to solve the backend permission problem. CUPS scheduler uses a permission and owner information of backend program. - Install ipp and lpd as mode 0700. - Create backend links as hardlink instead of symlink. -- Kenshi Muto Sat, 30 Sep 2006 14:56:29 +0900 cupsys (1.2.4-1) unstable; urgency=medium * New upstream release - The web interface change settings and edit configuration file buttons would truncate the cupsd.conf file (STR #1976, closes: #389093) Because this bug seems critical, we upload this fixed version as urgency=medium. [ Martin Pitt ] * debian/patches/56_dirsvc.dpatch: Update patch so that a patch/unpatch cycle restores the source properly instead of breaking dirsvc.c in two different places. [ Kenshi Muto ] * debian/patches/65_detect_http_shutdown.dpatch: avoid that gnome-cups-manager eats CPU 100%. (closes: #377640) -- Kenshi Muto Sun, 24 Sep 2006 09:54:44 +0000 cupsys (1.2.3-1) unstable; urgency=medium * New upstream release - The parallel and USB backends no longer wait for the printer to go on-line - this caused problems with certain printers that don't follow with the IEEE-1284 standard (STR #1738, closes: #383091) - fixed Printer options were not always honored when printing from Windows clients (STR#1839, closes: #385605) [ Martin Pitt ] * Add appropriate Replaces: to cupsys-common to unbreak upgrades. * debian/patches/44_fixconfdirperms.dpatch: Fix file mode specification: 3755 -> 03755 (regression of svn commit 353). [ Kenshi Muto ] * Apply upstream svn r5958. * check modprobe command and /proc/modules dir exist before running modprobe (closes: #387176). * 62_classes_crash: fix incorrect code. old code returned an error even if user use the correct class configuration. (closes: #380663, #384654) * bump up libcupsys2.shlibs version to 1.2.3. (closes: #385724) * Merge old separated style configuration to the single format only if user upgraded from an affected version. (closes: #386551) * Provide /usr/share/cups/drivers to contain Windows drivers. * 57_cupsaddsmb: original cupsaddsmb easily goes infinite and DoS-like loop. Debian cupsaddsmb ends soon when it catches an error. -- Kenshi Muto Fri, 8 Sep 2006 11:28:12 +0200 cupsys (1.2.2-2) unstable; urgency=high [ Kenshi Muto ] * Apply upstream svn change r5845. - BrowseRelay didn't work on Debian (closes: #372855) 61_job_c_strangeloop.dpatch: I don't make sure but job.c of r5818 causes strange CPU busy when it gets printing jobs. This patch avoids it. * 12_quiesce_ipp_logging: some part are merged into the upstream source. updated. * libcupsys2 conflicts cupsys version 1.1. libcupsys2 version 1.2 changed its private API. This breaks old cupsys 1.1, but we believe cupsys is only one application is affected by this change. (closes: #380619) * Provide an new package, "cupsys-dbg" to help chasing the problems at user's environment. * Increment compat to 5. * 44_fixconfdirperms: set owner lp for /etc/cups directory. And modify lppasswd.man to mention about Debian specific changes. lppasswd command now work. (closes: #378062) * 62_classes_crash: when class hasn't any printers, cupsd will crash immedieately after receiving a job. This patch avoids a crash. * Update debconf translations: - Spanish (closes: #383087) -- Kenshi Muto Thu, 27 Jul 2006 23:40:54 +0900 cupsys (1.2.2-1) unstable; urgency=medium * New upstream release [ Martin Pitt ] * Adapt patches to new upstream version. * debian/cupsys.init.d: If lp module loading is requested, also load the 'ppdev' module to fix the name and model detection of parallel printers on newer kernels. * Revive debian/patches/56_dirsvc.dpatch; it's still not fixed upstream. * debian/patches/09_runasuser.dpatch: Do not drop additional group privileges in scheduler/process.c. This should fix a range of bugs concerning detection of parallel port printers and other 'permission denied' bugs if privilege dropping is enabled (it is disabled by default in Debian). * debian/patches/44_fixconfdirperms.dpatch: Do not change owner and mode of SSL certificate, in order to not break permissions of customized global ones (like the one from the ssl-cert package). Grrr, cups, no, you cannot own the world! * debian/patches/54_cups-config_modeldir.dpatch: Add --modeldir to cups-config so that other packages can use it to figure out the correct PPD base path. * debian/cupsys.examples: Do not ship .svn files (upstream Makefiles install them). * debian/local/{enable_browsing,browsing_status}: Adapt to single-file configuration file style. * Add debian/local/{enable_sharing,sharing_status}: Similar to enable_browsing and browsing_status, this switches between "Listen localhost:631" and "Port 631" (just as the web interface does). Install files in debian/rules. -- Kenshi Muto Mon, 24 Jul 2006 10:59:27 +0200 cupsys (1.2.1-4) unstable; urgency=medium [Kenshi Muto] * Include changelogs during 1.1.23-13 - 1.1.23-15. (closes: #374494) * Apply upstream svn change r5754. - Fix negotiation problem between unstable clients and sarge servers. (closes: #375359) * 58_fixdestc: avoid build failure of r5754 (add ipp-private.h include). * 59_de_docroot: install German translation/images. Although upstream SVN has, Debian diff structure can't handle a binary diff. This patch will be removed when 1.2.2 is released. * Add snmp to backend choices. Because I don't make sure this backend is stable, the default is disabled. Use dpkg-reconfigure cupsys to enable. (closes: #376496) * Don't remove backend symlinks during reconfigure/upgrade process. (closes: #376499) * Check Include directive with case insensitive. (closes: #376883) * libcupsys2 has /etc/cups directory to allow admin put own client.conf. (closes: #370788) * Include sample client.conf in libcupsys2. You can copy /usr/share/ doc/libcupsys2/examples/client.conf to /etc/cups or ~/.cups and modify for your environment. (closes: #376840) * Split locale files to new package "cupsys-common". (closes: #378659) This package is used by cupsys and cupsys-client/cupsys-bsd. * removed 26_modprobe: because parallel backend executes with user 'lp' permission, modprobe can't work. We CUPS team believe it's better that lp module is loaded by discover or any other hardware detection programs instead of CUPS. We provide a module loader by init script for user's convenience at this time. * 60_device_uri: preserve old URI during the printer configuration on Web interface. -- Kenshi Muto Wed, 21 Jun 2006 15:06:02 +0000 cupsys (1.2.1-3) unstable; urgency=low [Kenshi Muto] * Apply upstream svn change r5673. - Remove unnecessary %s from dirsvc.c and will solve a mysterious cupsd crash. Thanks Neil. (closes: #372696, #370611) - Support again * character as IP address. (closes: #372291) - Fixes wrong command line arguments to backend. (closes: #372586, #373839) * Improve the wording of NEWS file, thanks Tomas (closes: #372256) * 53_usr_share_ppd_support: Use /usr/share/ppd as PPD path. (closes: #365300, #373722) Make symlink /usr/share/ppd/cups-transitional-dir -> /usr/share/cups/ppd for keeping a compatibility. We'll migrate all of PPD files to /usr/share/ppd in the future. * Revert to use single /etc/cups/cupsd.conf file for the configuration instead of using separate files in /etc/cups/cups.d. The migration will be done automatically. (closes: #345973, #372727) * Apply correct permission modes to the files under /etc/cups at postinst stage. * Update debconf translations: - Danish (closes: #371170) - French (closes: #372714) - Italian (closes: #372198) -- Kenshi Muto Sun, 11 Jun 2006 11:51:01 +0000 cupsys (1.2.1-2) unstable; urgency=low [Kenshi Muto] * Provides /etc/cups/ssl directory for SSL. (closes: #370407, #370450) * Add an newline after 'Starting ...' message by appending log_end_msg to /etc/init.d/cupsys. (closes: #370460) -- Kenshi Muto Mon, 5 Jun 2006 22:44:55 +0900 cupsys (1.2.1-1) unstable; urgency=low [Kenshi Muto] * New upstream release 1.2.1 for Debian unstable/testing. * 00_r5610: Apply patches from upstream r5610. * Re-update Dutch debconf translation (closes: #369004) * Pump up shlibs to >=1.2.1 for compatibility safe. -- Kenshi Muto Wed, 31 May 2006 13:17:16 +0000 cupsys (1.2.1-0exp1) experimental; urgency=low [Kenshi Muto] * New upstream release 1.2.1. * Update Dutch debconf translation (closes: #369004) * Update Italian debconf translation (closes: #367943) * Includes the installation guide of dvi filter to /usr/share/doc/ cupsys/examples/filters/dvipipetops.INSTALL is contributed by Francesco Potort. This is partial fix for Bug#368450. [Martin Pitt] * New upstream release 1.2.0. * Update patches for new upstream release. * Remove debian/patches/01_cupsimage.dpatch, fixed upstream. * Remove debian/patches/20_httpGetHostname_crash.dpatch, fixed upstream. * debian/patches/55_ppd_okidata_name.dpatch: Change "Oki" manufacturer name to "Okidata" to be consistent with other PPD files. * Implement http://wiki.debian.org/PpdFileStructureSpecification: - debian/dirs: Create /usr/share/ppd/cups-included/. - debian/rules: Install shipped PPDs into /usr/share/ppd/cups-included// and provide a symlink to the old /usr/share/cups/model directory for backwards compatibility. * debian/cupsys.dirs: Ship /usr/lib/cups/driver/ to avoid error messages if it's missing. * debian/patches/09_runasuser.dpatch, scheduler/cert.c: Change root certificate permissions from 0440 to 0240, so that the CGI programs cannot read it any more. Without this patch, cupsd presented its own certificate to itself, and *every* user could do admin tasks without authentication. * debian/cupsys-client.links: Fix cupsenable/cupsdisable manpage link. Closes: #364447 * debian/patches/08_cupsd.conf.conf.d.dpatch: - Set "BrowseAddress @LOCAL"; without this, sending browsing information does not work (Browsing still has to be enabled). - Add some comments to point out that the Port and Browsing settings are moved to /etc/cups/cups.d/. * debian/cupsys.postrm: Clean up passwd.md5 on purge. -- Kenshi Muto Sun, 28 May 2006 13:07:36 +0000 cupsys (1.1.99.rc2-0exp1) experimental; urgency=low [ Kenshi Muto ] * New upstream release 1.2RC2. - Because -fpie config becomes optional, compiler works on amd64 and other architectures. (closes: #335199) * Enable LDAP support. * Remove duplicated update-rc.d (closes: #356911) * Stopped asking admin password because it works only if user chooses digest authentication. The default configuration of Debian uses PAM and basic authentication. * Enable dbus support. * 03_clean.dpatch: Remove produced and remained files during build. * Now CUPS uses 'lp' user/group privilege to call backend or any other programs. CUPS SystemGroup is 'lpadmin'. You need to add users who are allowed to add/modify/remove printers/jobs/classes. * Remove image.h.patch from source. It is no longer needed. * 02_configure.dpath: Remove -rpath from configure. * Fix typo in cupsys-bsd description. (closes: #362070) * Add Galician debconf translation. (closes: #361258) * Update Danish debconf translation. (closes: #357969) * Use 'reload' during logrotate instead of 'restart'. It looks safe on CUPS 1.2. (though job-restart problem still remains) * set TZ in init script only if TZ isn't defined yet. * Use if-fi structure style for postrotate of logrotate script. It solves error when cupsys is not running. (closes: #347641) * Unset TMPDIR environment variable before running daemon. (closes: #347829) * Removed /etc/cups/pdftops.conf because it was for pdftops of upstream version. Debian CUPS uses xpdf-utils wrapper and doesn't need pdftops.conf. * Notice: /etc/cups/client.conf has been removed upstream. * Notice: {dis,en}able have been renamed to cups{dis,en}able. [ Martin Pitt ] * debian/patches/48_stdlib.dpatch: Adapted to new upstream version. * debian/cupsys.init.d: - Fix arguments of start-stop-daemon and remove the hideous kill algorithm. - Ensure that /var/run/cupsd exists; this makes the init script work with /var/run mounted on a tmpfs. * debian/libcupsys2-dev.files, debian/libcupsimage2-dev.files: Remove static library; upstream does not build them any more, and they are useless anyway. * Add debian/patches/06_disable_backend_setuid.dpatch: Remove the uid changing in scheduler/cups-deviced.c which was introduced recently in upstream. It totally breaks device node access (e. g. /dev/lp0 is root:lp 0660, which is inaccessible for a process which runs as lp:root). * debian/rules: Remove --with-cups-user, upstream does not support it any more. * debian/patches/09_runasuser_fixes.dpatch: RunAsUser was removed upstream; rename the patch to 09_runasuser.dpatch and rewrite it: - Enclose all changes in an #if CUPS_DROP_PRIVILEGES, so that it is easy to enable this feature. - scheduler/main.c: Drop privileges after initialization. - scheduler/conf.c: If we build with CUPS_DROP_PRIVILEGES, set RunUser to User instead of getuid(), since at that point we will always run as root (privileges cannot yet be dropped at that point). - config-scripts/cups-defaults.m4: Add --enable-privilege-dropping option. - config.h.in: Add CUPS_DROP_PRIVILEGES option template. * Add debian/patches/09_runasuser_autoconf.dpatch: autoconf changes for 09_runasuser_fixes.dpatch changes. * debian/pdftops: Fix reading from stdin (https://launchpad.net/bugs/17124) * debian/cupsys.preinst: Remove dangling /etc/cups/pdftops.conf symlink on upgrades to unbreak printing with poppler-utils. * debian/control: Add poppler-utils alternative for xpdf-utils dependency. * Add debian/patches/12_quiesce_ipp_logging.dpatch: - Drop successful IPP messages to log level 'debug' and unsuccessful ones to 'info'. - Do not flood access_log with successful CUPS-Get-Printers and Get-Printer-Attributes queries (which are generated by e. g. gnome-cups-icon every 3 seconds). - Closes: #280718 * Add debian/patches/13_default_log_warn.dpatch: Raise default log severity to 'warning' to not log gazillions of IPP requests by default. (other part of #280718) * debian/rules, debian/cupsys.postinst: Remove obsolete /etc/cups/certs and /var/lib/cups/certs (certificates are managed in /var/run/certs now). * debian/cupsys.preinst: Remove obsolete /etc/cups/certs symlink on upgrades. * debian/cupsys-client.files: Install cupstestdsc and manpage. * debian/cupsd.init: Have force-reload to reload, not restart. * debian/cupsys.logrotate: Use force-reload instead of reload, since the latter is not required to exist by Debian Policy. * debian/rules: Ship browsing_status and enable_browsing. * debian/patches/20_httpGetHostname_crash.dpatch: Add some robustifications to httpGetHostname() to hopefully fix a reported crash. -- Kenshi Muto Sun, 16 Apr 2006 17:49:57 +0900 cupsys (1.1.99.b1.r4885-1) experimental; urgency=low [ Kenshi Muto ] * New SVN release taken from rr4885. * Updated Russian debconf translation, taken from cupsys trunk. * Downgrade port and browse question to low. * Add timeout routine to avoid lockup. * debian/patches/08_cupsd.conf.conf.d.dpatch: - Commented out Port/Listen/Browsing from cupsd.conf.in. CUPS crashes when there is a duplicate definition. * Updated Swedish debconf translation. * Set seen false flag when ports configuration is failed. * Allow '*' for hostname in ports.conf. * Use /bin/echo instead of shell built-in echo. * Improve cupsys.templates. * Updated Russian, German, Czech,French, Vietnamese debconf translation. * Removed example descriptions from init.d script. * Fix IPv4 validation. [ Martin Pitt ] * Adapt debian/patches/02_configure.dpatch to r4885. * Move forcefully killing of cupsd if start-stop-daemon fails from postinst to init script, where it belongs to. Do not kill all running cupsd processes, but only the one in the pid file; this will unbreak cupsd behaviour in chroots. * debian/cupsys.default: Remove obsolete FORCE_RESTART option. * Resurrect debian/patches/01_cupsimage.dpatch (formerly 03_cupsimage.dpatch), as we get unresolved symbols if libcupsimage isn't properly linked to libcupsys, causing other packages to FTBFS. Thanks to Adam Conrad. * debian/cupsys.init.d: Add --oknodo to not fail if cupsd is already running. * debian/rules: In clean rule, clean up a lot of files that are left behind by 'make clean'. -- Kenshi Muto Fri, 23 Dec 2005 06:33:05 +0000 cupsys (1.1.99.b1.r4876-1) unstable; urgency=low [ Martin Pitt ] * debian/local/{enable_browsing,browsing_status}: Adapt configuration file locations to new conf.d structure. * debian/cupsys.templates: Fix default value for cupsys/browse: 'yes' is an invalid bool option, change to true. * debian/cupsys.init.d: Use LSB init functions. Add lsb-base package dependency. * debian/cupsys.postinst: Wait a second between kill -9'ing cupsys and checking if the process still exists to avoid false positives and upgrade failures. * Clean up support for /etc/cups/conf.d: - Add debian/patches/08_cupsd.conf.conf.d.dpatch: Add include commands to default cupsd.conf file. - debian/cupsys.postinst: Remove fiddling with cupsd.conf. - This will ensure that cupsd.conf will remain an unchanged conffile. * debian/rules: Remove empty debian/patched on clean. * debian/patches/10_cupsd.conf2.dpatch: Re-enable listening to localhost to make the web interface work. * debian/patches/44_fixconfdirperms.dpatch: - Put configuration files into group root instead of nobody to avoid privilege escalation of nobody/nogroup and comply to Debian standards. - Use CUPS_DEFAULT_GROUP instead of 'nobody' as the default group for setgid'ing to and conffiles which must be writable for cupsd. - Disable changing permissions of cupsd.conf conffile. * Add debian/patches/09_runasuser_fixes.dpatch: - scheduler/main.c: Generate a certificate even when running as user, just as in 1.1.x; this unbreaks local certificate authorization for cupsd when it runs as normal user. - scheduler/main.c: When running as non-root, call initgroups() instead of setgroups() to allow auxiliary groups. These are required to access different device types (lp for USB/parallel printers, dialout for serial printers, etc.) [ Kenshi Muto ] * New SVN release taken from r4876. -- Kenshi Muto Thu, 8 Dec 2005 21:26:22 +0900 cupsys (1.1.99.b1.r4841-1) experimental; urgency=low * EXPERIMENTAL * New SVN release taken from r4841. * Remove -pie and -fpie from compiler option. pie option causes a problem with Debian binutils. I hope this change avoids FTBFS on sparc and others. (closes: #339120) -- Kenshi Muto Wed, 16 Nov 2005 12:27:27 +0000 cupsys (1.1.99.b1.r4748-4) experimental; urgency=low * EXPERIMENTAL * 00_r4835.dpatch: Taken from r4835. Well, r4835 removes some files. It means dpkg-buildpackage always fails when we rebuild source. Maybe it's time to change orig source. Moved obsolete patches to patches/obsolete. * 48_stdlib.dpatch: Fix FTBFS for arm, mips, and mipsel. * 03_manext.dpatch: Don't use upstream's manpage file handling. Debian uses dh_installman. * 04_freebsd.dpatch: Apply Brian's patch to support GNU/kFreeBSD (closes: #338266) * Install lppasswd as owner 'lp'. -- Kenshi Muto Fri, 4 Nov 2005 13:56:27 +0000 cupsys (1.1.99.b1.r4748-3) experimental; urgency=low * EXPERIMENTAL * 47_pid.dpatch: Modified to allow to configure location of pid file. (closes: #337093) You can change this location by PidFile directive at your cupsd.conf. * Remove example comments from init script. (closes: #334842) -- Kenshi Muto Thu, 3 Nov 2005 11:39:07 +0000 cupsys (1.1.99.b1.r4748-2) experimental; urgency=medium * EXPERIMENTAL * 02_configure.dpatch: Modified to remove -pie/-fpie if arch = x86_64. (closes: #335199) -- Kenshi Muto Mon, 24 Oct 2005 11:42:59 +0000 cupsys (1.1.99.b1.r4748-1) experimental; urgency=low * EXPERIMENTAL * CUPS 1.2 snapshot (r4748) from SVN. -- Kenshi Muto Wed, 5 Oct 2005 12:54:27 +0000 cupsys (1.1.23-15) unstable; urgency=high [Kenshi Muto] * Allow '*' for hostname in ports.conf. (closes: #340975) * Fix IPv4 address validation. * Use /bin/echo instead of shell built-in echo. (closes: #343566) * Improve cupsys.templates. (closes: #343498) * Updated Swedish debconf translation. * Updated Russian debconf translation. * Updated German debconf translation. * Updated Czech debconf translation. (closes: #343716) * Updated French debconf translation. (closes: #344116) * Updated Vietnamese debconf translation. * Removed example descriptions from init.d script. (closes: #334842) * Apply kFreeBSD patch. (closes: 338266) -- Kenshi Muto Fri, 16 Dec 2005 21:05:47 +0900 cupsys (1.1.23-14) unstable; urgency=high [Kenshi Muto] * Downgrade port and browse question to low. (closes: #343341) * debian/patches/08_cupsd.conf.conf.d.dpatch: - Commented out Port/Listen/Browsing in cupsd.conf.in because CUPS crashes when there is a duplicate definition! (closes: #343251, #343279, ##343285, #343292) * Added NEWS to explain how to fix this for 1.1.23-13 users: Tweaking cupsd.conf via postinst is a bad idea, so I gave up trying to correct this automatically. Instead, comment out the Port/Listen/Browsing lines in /etc/cups/cupsd.conf if you had already replaced this file by the one from 1.1.23-13. * Updated Swedish debconf translation. (closes: #343397) * Set seen false flag when ports configuration is failed. (closes: #343400) [Martin-Éric Racine] * Added debian/watch file. -- Kenshi Muto Thu, 15 Dec 2005 06:00:09 +0900 cupsys (1.1.23-13) unstable; urgency=high * 38_pdftopscan.dpatch: Apply CAN-2005-0064, CAN-2004-0888, and CAN-2005-2097 patches. (closes: #324459, #324460, #324464) Because Debian cupsys uses xpdf wrapper instead of forked pdftops, so users aren't affected these security problems. This patch is just for users who want to create own pdftops from source. * Move Port/Listen and Browsing configurations from /etc/cups/ cupsd.conf to /etc/cups/cups.d/. /etc/cups/cups.d/ports.conf: Port/Listen configuration. /etc/cups/cups.d/browse.conf: Browsing configuration You can configure these values by using "dpkg-reconfigure cupsys". (closes: #235906, #297695, #178838, #288838) * Added Swedish debconf translation (closes: #338545). Thanks Daniel. * Updated Russian debconf translation (closes: #340626). Thanks Yuri. * Applied xpdf patch to fix buffer overflows [pdftops/Stream.cxx, pdftops/Stream.h, CAN-2005-3191, CAN-2005-3192, 48_security_CAN-2005-3191.dpatch] Because Debian cupsys uses xpdf wrapper instead of forked pdftops, so users aren't affected these security problems. This patch is just for users who want to create own pdftops from source. -- Kenshi Muto Mon, 22 Aug 2005 18:50:26 +0900 cupsys (1.1.23-12) unstable; urgency=medium * foomatic-rip may be treated as recommended tool. Modified control file. (closes: #320196) * Add debconf-2.0 as debconf alternative. * Migrated to libgnutls12. (closes: #322087) libcupsys2 backed as real library. libcupsys2-gnutls10 became transitional package. (closes: #322018) * Add procps to Depends: of cupsys. ps command is used by cupsys.postinst. * 47_pid.dpatch: Added a patch to make forked PID file. Now init script use this file instead of one created by start-stop-daemon. I hope this solves Samba starting bug. (closes: #315017) * Back gs-esp to Depends:. (closes: #312244) PostScript printer owners may claim this, but currently we Debian CUPS Maintainers team have massive complains about missing gs-esp dependency. It's current best workaround to avoid such printing problems. -- Kenshi Muto Thu, 28 Jul 2005 11:35:27 +0900 cupsys (1.1.23-11) unstable; urgency=low * "At Debconf 5" release. * Now CUPS is maintained by Debian CUPS Maintainers Team. * Do "sleep 2" to wait daemon's wake up. (this is just workaround... needs better solution, for #309794 and #315017) * Added Vietnamese translation. (closes: #310152) * Check whether daemon is running or not before restart in logrotate. (closes: #310535) * Add description about foomatic-rip (in foomatic-filters package) to README.Debian. (closes: #309399) * Remove unnecessary comment from debian/po/de.po (closes: #314135) * Apply status option for init script (closes: #312683). Thanks Stephen. * Suggests cupsys-driver-gutenprint, this package is new name of cupsys-driver-gimpprint. * 46_ppdsdat: Move /etc/cups/ppds.dat to /var/lib/cups/ppds.dat and make symlink. (closes: #317905) * Unapply NOAUTH handling from 33_jobauthorize. A user warns me it's dangerous to use. -- Kenshi Muto Fri, 20 May 2005 11:07:42 +0900 cupsys (1.1.23-10) unstable; urgency=high * Recovered http backend. -8 and -9 missed it. (closes: #305169) * Use absolete path for doc-root instead of relative path. (closes: #305339) -- Kenshi Muto Tue, 19 Apr 2005 20:47:49 +0900 cupsys (1.1.23-9) unstable; urgency=medium * Remove unnecessary and toxic space in doc-base file. (closes: #305084) -- Kenshi Muto Mon, 18 Apr 2005 08:08:03 +0900 cupsys (1.1.23-8) unstable; urgency=medium * "Brush up for Sarge" release. * Introduced dpatch for source management. * Included Spanish man pages. * 43_filtercost: Applied a patch for wrong computation of cost (closes: #304205) * Applied many part of ubuntu patch, http://people.ubuntu.com/~scott/patches/cupsys/cupsys_1.1.23-7ubuntu1.patch. (User 'cupsys' feature and Browsing feature aren't applied at this time. They are post-Sarge things) * Applied improved dvifilter patch. (Although you need to modify /etc/cups/mime.convs and some other files to use it) (closes: #198100) * Provides /var/run/cups/cupsd.pid. (closes: #301804) * Added cupsys documentation to doc-base structure. (closes: #171396, #304333) * Included filter for PostScript from Windows PostScript driver, created by Matt Swift . If you want to use, put /usr/share/doc/cupsys/examples/filters/samba-postscript.* to /etc/cups, and put /usr/share/doc/cupsys/examples/filters/samba-ps-to-ps to /usr/lib/cups/filter. (closes: #246577) -- Kenshi Muto Wed, 16 Mar 2005 10:01:57 +0900 cupsys (1.1.23-7) unstable; urgency=low * Drop /etc/cups/printers.conf and /etc/cups/classes.conf from configuration files. (closes: #298103) Migration will be done automatically. * Add /etc/default/cupsys. You can change force stop behavior by changing FORCE_RESTART in this file. (closes: #298040) * Add hplip to Suggests:. (closes: #297776) -- Kenshi Muto Sat, 5 Mar 2005 12:27:32 +0900 cupsys (1.1.23-6) unstable; urgency=medium * Fix missing adduser dependency in cupsys-client. (closes: #296849) * Apply parallel backend improvement patch. - don't receive signal during writing (closes: #296222) - fix 64bit problem (closes: #296223) -- Kenshi Muto Sat, 26 Feb 2005 08:07:39 +0000 cupsys (1.1.23-5) unstable; urgency=low * Improve postinst message (closes: #295642). Thanks Adam. -- Kenshi Muto Fri, 18 Feb 2005 21:23:10 +0900 cupsys (1.1.23-4) unstable; urgency=low * 20defaultport.patch is merged in upstream source. * ARGH, libcupsys2-dev should conflict/replace against <<1.1.22-3. Fix control file. (closes: #292879) * Remove obsolete README_fr.txt. (closes: #293274) -- Kenshi Muto Sun, 30 Jan 2005 08:35:17 +0900 cupsys (1.1.23-3) unstable; urgency=low * Remove $Id$ from config file: 07cvsremovetag.patch (closes: #291629) * Fix 'lppasswd does not work with nonexisting passwd file' by mpitt's patch: 41lppasswdnoexistingconf.patch (closes: 290011) -- Kenshi Muto Sat, 22 Jan 2005 12:23:46 +0900 cupsys (1.1.23-2) unstable; urgency=medium * Move defvalue declaration to begin block for compile on backports environment. Thanks Massimiliano. * Fix Cyclades serial port name: 40cycladeserial.patch (closes: #270375) * Upgrade shlibs of libcupsys2-gnutls10. cupsys-client needs newest libcupsys2-gnutls10 (closes: #289930, #289939). -- Kenshi Muto Mon, 10 Jan 2005 13:48:32 +0900 cupsys (1.1.23-1) unstable; urgency=low * New upstream release * lprng disabled ipp feature since 3.8.26-1. Remove conflicts: lprng of cupsys. (closes: #288531) -- Kenshi Muto Tue, 4 Jan 2005 19:32:16 +0900 cupsys (1.1.22-8) unstable; urgency=high * Fix another security vulnerability since 1.1.21. Sigh... (closes: #287835) -- Kenshi Muto Fri, 31 Dec 2004 13:16:54 +0900 cupsys (1.1.22-7) unstable; urgency=medium * Use Depends: xpdf-utils instead of Recommends:. This is RC fix (closes: #287921) -- Kenshi Muto Fri, 31 Dec 2004 08:37:54 +0900 cupsys (1.1.22-6) unstable; urgency=high * Replaced upstream pdftops (derived from Xpdf) with pdftops.pl wrapper. pdftops.pl is made by Helge Blischke, GNU GPL licensed. CUPS 1.1.22 should enter to Sarge ASAP by some security reasons, but upstream pdftops prevents to enter because it has libgcc_s.so dependency and current gcc 3.4 faces difficult 'unwind' problem. Now I believe cupsys 1.1.22-6 can enter soon without waiting gcc problem. If you want to print PDF files directly, you need to install xpdf-utils. pdftops.pl calls pdftops in xpdf-utils package. * Fix typo in control file. -- Kenshi Muto Wed, 29 Dec 2004 14:59:28 +0000 cupsys (1.1.22-5) unstable; urgency=high * Apply upstream CVS patch (00cvs20041229.patch) This includes fix of buffer overflow possibility in scheduler. -- Kenshi Muto Wed, 29 Dec 2004 21:35:51 +0900 cupsys (1.1.22-4) unstable; urgency=high * Add Replaces migration for libcupsys2-dev. It solves 'libcupsys2-dev overwrite a file in cupsys' problem. (closes: #287609) -- Kenshi Muto Wed, 29 Dec 2004 02:43:09 +0000 cupsys (1.1.22-3) unstable; urgency=medium * Remove unwanted ldflag: Back 02configure.patch (closes: #286450) * Move fr/cups-config.1 to libcupsys2-dev (closes: #286449) Thanks for your above two bug reports, Henrique. * Note: [CAN-2004-1125] "xpdf buffer overflows" is already fixed in previous Debian revision (1.1.22-2) with upstream patch. -- Kenshi Muto Sat, 25 Dec 2004 23:40:15 +0900 cupsys (1.1.22-2) unstable; urgency=medium * Apply security fix patches from 1.1.23rc1. * Revert logrotate to use 'reload'. (closes: #271872) -- Kenshi Muto Sun, 19 Dec 2004 17:43:10 +0900 cupsys (1.1.22-1) unstable; urgency=low * New upstream release for unstable. Time is over, sarge isn't shipped. I checked 1.1.21 to 1.1.22 migration doesn't break ABI quickly, but I'm still scared... * Apply gcc-4.0 patch for amd64: 37gfxfont.patch (closes: #285601) * Do 'restart' instead of 'reload' when log is rotated. 'reload' sometime causes just shutdown daemon. (Unknown problem) * Fix equation in cupsys.postscript. (closes: #285205) * Apply Russell's patch: 38httpwait.patch (closes: #284829) (This is trial. If there is any grave problem by this, I'll off this patch) - Made http_wait() handle EINTR. This bug was causing cups to print multiple copies of reports on remote printers. - Lengthed the wait in ipp_http_read to handle connections running over the internet. The short wait was causing unwated multiple copies of reports to be printed. - While both these bugs need to be fixed, neither completely solves the original multiple copies problem. To solve that no data should be printed if there was a read error. * Add dependency version of smbclient. (closes: #284733) * Fix SIGSEGV when remote destination goes timeout: 39remotetimeout.patch (closes: #283500) -- Kenshi Muto Wed, 15 Dec 2004 18:58:55 +0900 cupsys (1.1.22-0.experimental4) experimental; urgency=low * "I'm tired waiting Sarge forever" release. I'm considering to upload 1.1.22 to unstable. * I forgot to copy files from unstable version... FTBFS is solved. (closes: #284574) * Downgrade gs-esp dependency to Recommends. I'm bore with attacks from stingy people. -- Kenshi Muto Tue, 7 Dec 2004 21:39:55 +0900 cupsys (1.1.22-0.experimental3) experimental; urgency=low * Rebuild with -sa. -- Kenshi Muto Tue, 7 Dec 2004 00:52:15 +0900 cupsys (1.1.22-0.experimental2) experimental; urgency=low * New upstream release -- Kenshi Muto Mon, 6 Dec 2004 23:10:18 +0900 cupsys (1.1.21-0.experimental2) experimental; urgency=low * Fix typo in templates and unfuzzied po files. (closes: Bug#274851) * Update German translation (closes: Bug#274828) * Make pam.d/cupsys standard @include style (closes: Bug#265299) * Set up group lpadmin in postinst instead of rules. Because lpadmin isn't there on initial build environemnt (closes: Bug#274985) -- Kenshi Muto Mon, 4 Oct 2004 23:09:51 +0900 cupsys (1.1.21-0.experimental1) experimental; urgency=low * Experimental. * new upstream version. -- Kenshi Muto Sun, 3 Oct 2004 18:15:23 +0900 cupsys (1.1.20final+rc1-8) unstable; urgency=medium * Apply GNU Hurd configure patch for fix FTBFS. (closes: Bug#274599) * Improve patch test routine. (closes: Bug#272952, Bug#274564) -- Kenshi Muto Sun, 3 Oct 2004 13:07:43 +0900 cupsys (1.1.20final+rc1-7) unstable; urgency=medium * Fix french debconf translation (closes: Bug#272520). This update is important because previous version shows illegal debconf choice in French. -- Kenshi Muto Tue, 21 Sep 2004 22:31:54 +0900 cupsys (1.1.20final+rc1-6) unstable; urgency=high * Applied patch from Alvaro Martinez Echevarria to fix daniel of service [scheduler/dirsvc.c, CAN-2004-0558] * Apply GNU/Hurd patch (closes: Bug#263526) * Update pt_PR debconf translation (closes: Bug#264096) * Remove directory before making symlink (closes: Bug#270741) -- Kenshi Muto Tue, 24 Aug 2004 10:31:32 +0900 cupsys (1.1.20final+rc1-5) unstable; urgency=low * Apply anonymous patch for /jobs. This patch avoids many client-error-forbidden. (closes: Bug#184361) cupsd.conf will be automatically modified to use basic user authentication (Add AuthType Basic AuthType User). -- Kenshi Muto Wed, 4 Aug 2004 09:13:02 +0900 cupsys (1.1.20final+rc1-4) unstable; urgency=medium * Wait 10 seconds after reload for samba restart problem. (closes: Bug#260969) * Update Czech debconf translation (closes: Bug#260862) * Built against libtiff4. * Build against libgnutls11. (Though package name is still libcupsys2-gnutls10) -- Kenshi Muto Mon, 26 Jul 2004 22:12:18 +0900 cupsys (1.1.20final+rc1-3) unstable; urgency=high * Change guess order of USB device name for FHS compliant. (closes: Bug#259965) -- Kenshi Muto Sun, 18 Jul 2004 04:54:58 +0900 cupsys (1.1.20final+rc1-2) unstable; urgency=medium * Replace set-as-default icon of Japanese. Thanks Tomo-p. * Provides libcupsys2 dummy package for smooth transition. (closes: #259378) -- Kenshi Muto Wed, 14 Jul 2004 19:10:43 +0900 cupsys (1.1.20final+rc1-1) unstable; urgency=low * Apply a patch for fixing typo in DE templates. (Closes: Bug#250883) * New upstream source, 2004-07-03 CVS. * Add netbase dependency for cupsys-bsd. * Move certs files to /var/lib/cups/certs. (Closes: Bug#254153) -- Kenshi Muto Wed, 26 May 2004 08:46:35 +0900 cupsys (1.1.20final+cvs20040330-4) unstable; urgency=medium * Now libgnutls10 migration starts at 'unstable'/'testing'. Packages depending libcupsys2 should be rebuit with newer libcupsys2-dev. * Fix log rotation problem by adding 'sharedscripts' to /etc/logrotate.d/cupsys. (Closes: Bug#249023) -- Kenshi Muto Tue, 25 May 2004 08:14:44 +0900 cupsys (1.1.20final+cvs20040330-3experimental2) experimental; urgency=medium * Rename libcupsys2 to libcupsys2-gnutls10. This package doesn't 'Provides: libcupsys2' to migrate libgnutls10. Sebastien Bacher plans cups/libgnutls10 migration. * Add notes about backend configuration to README.Debian. * Fix (I hope) log rotation problem by adding sharedscripts to /etc/logrotate.d/cupsys. (Closes: Bug#249024) -- Kenshi Muto Sat, 15 May 2004 11:17:16 +0900 cupsys (1.1.20final+cvs20040330-3) unstable; urgency=low * Remove EXPORT_SSLLIBS variable from cups-config (Closes: Bug#246102). -lgnutls isn't necessary by software using libcups. * Apply PJL detection patch from upstream. * Translations - Updated Turkish debconf messages (Closes: Bug#246075). Thanks Recai and Gurkan. -- Kenshi Muto Wed, 28 Apr 2004 00:23:59 +0900 cupsys (1.1.20final+cvs20040330-2) unstable; urgency=low * Fix typo in HOWTO_BUGREPORT.txt. * Translations - Update Dutch debconf messages (Closes: Bug#242260). Thanks Tim. -- Kenshi Muto Tue, 6 Apr 2004 19:16:48 +0900 cupsys (1.1.20final+cvs20040330-1) unstable; urgency=low * New upstream CVS * Revert pstops to old 1.1.20. (Closes: Bug#240792) * Translations - Updated Danish debconf messages. -- Kenshi Muto Fri, 26 Mar 2004 19:00:01 +0900 cupsys (1.1.20final+cvs20040317-4) unstable; urgency=low * Chagnge backend question priority to low. (Closes: Bug#238847) When you use PPC, parallel backend will be removed from default choice automatically. If you want to use parallel (and you know what you will do), please run 'dpkg-reconfigure cupsys'. * Translations - Updated Danish debconf messages (Closes: Bug#239256). Thanks Claus. - Updated French debconf messages (Closes: Bug#239756). Thanks Christian. -- Kenshi Muto Wed, 24 Mar 2004 22:30:28 +0900 cupsys (1.1.20final+cvs20040317-3) unstable; urgency=low * Remove sysvinit. This package is essential. Thanks Thomas. * Now choice menu is translatable (Closes: Bug#238821). * Updated French debconf messages. Thanks Christian. * Add socket to default choice. I think this backend doesn't cause hang up anywhere. -- Kenshi Muto Fri, 19 Mar 2004 17:16:48 +0900 cupsys (1.1.20final+cvs20040317-2) unstable; urgency=medium * Add sysvinit in dependency. (Closes: Bug#238763) * Updated Brazilian Portuguese debconf messages. Thanks Andre. * Fix printers.cgi crash (Closes: Bug#238800) * Updated Japanese templates & images. -- Kenshi Muto Fri, 19 Mar 2004 09:00:04 +0900 cupsys (1.1.20final+cvs20040317-1) unstable; urgency=low * New CVS release. * Add asking about backend program. This is not best way to solve PPC crash / i386 serial hang-up, but at least user can choose what he/she want to use. serial backend becomes 'not use' by default. Add notice about 'parallel of PPC may cause a problem'. (closes: Bug#237613, Bug#233529, Bug#211677, Bug#224760) * Updated Spanish debconf messages (closes: Bug#236470). Thanks Carlos. * Updated Danish debconf messages. Thanks Claus. * Updated French debconf messages. Thanks Christian. * Updated Czech debconf messages. Thanks Miroslav. -- Kenshi Muto Sat, 6 Mar 2004 21:36:35 +0900 cupsys (1.1.20final-16) unstable; urgency=low * Improved init.d/cupsys message (closes: Bug#235693). Thanks Lee. * Add Czech debconf messages (closes: Bug#236276). Thanks Miroslav. -- Kenshi Muto Tue, 2 Mar 2004 09:13:07 +0900 cupsys (1.1.20final-15) unstable; urgency=low * Add conflicts lprng for avoid conflicting ipp support. * Add Danish debconf messages (closes: Bug#233067). Thanks Claus. * Apply current CVS patch. -- Kenshi Muto Sat, 14 Feb 2004 18:10:54 +0900 cupsys (1.1.20final-14) unstable; urgency=medium * Apply loop avoid patch. (closes: Bug#231676) Thanks Ray. -- Kenshi Muto Wed, 11 Feb 2004 14:59:46 +0900 cupsys (1.1.20final-13) unstable; urgency=medium * Use pidof instead of start-stop-daemon for stopping cupsys. I hope this will fix Bug#228967. -- Kenshi Muto Thu, 22 Jan 2004 09:12:25 +0900 cupsys (1.1.20final-12) unstable; urgency=low * Fix incorrect root detection routine (closes: Bug#227733). THanks David. * Continue to install whether deluser is failed (for NIS/LDAP). * 22ipprewrite.patch has critical bug. Fixed by better patch. (closes: Bug#162613) -- Kenshi Muto Sat, 17 Jan 2004 12:57:47 +0900 cupsys (1.1.20final-11) unstable; urgency=low * Improved cupsys stop check. * Apply username patch for Solaris lpd printing (closes: Bug#228078). Thanks Lionel. -- Kenshi Muto Sat, 17 Jan 2004 12:28:15 +0900 cupsys (1.1.20final-10) unstable; urgency=low * Apply Brazilian Portuguese debconf message (closes: Bug#227445). Thanks Andre. * Show verbose message when cups won't stop. -- Kenshi Muto Wed, 14 Jan 2004 08:38:55 +0900 cupsys (1.1.20final-9) unstable; urgency=low * Apply patch for avoid infinite loop (closes: Bug#225625). * Apply patch for http password authenticaion cache (closes: Bug#227143). -- Kenshi Muto Mon, 12 Jan 2004 12:00:17 +0900 cupsys (1.1.20final-8) unstable; urgency=low * Fix typo in lpadmin.8.gz (one of Bug#226149). Thanks Dan. * Unfortunately, I heard cupsys won't stop when upgrading. I implemented Force-stop routine into postinst (closes: Bug#222464, Bug#226140). -- Kenshi Muto Mon, 5 Jan 2004 21:11:30 +0900 cupsys (1.1.20final-7) unstable; urgency=low * Argh, I forgot to apply default port patch. -- Kenshi Muto Tue, 30 Dec 2003 23:01:29 +0900 cupsys (1.1.20final-6) unstable; urgency=low * Apply Dutch debconf translation (closes: Bug#225410). Thanks Tim. * Set default port when any Port/Listen isn't defined (closes: Bug#225208). -- Kenshi Muto Tue, 30 Dec 2003 08:57:10 +0900 cupsys (1.1.20final-5) unstable; urgency=low * Add pdftops.conf into /etc/cups/. This file is symlink to /etc/xpdf/xpdfrc, and configuration for pdftops tool. -- Kenshi Muto Sun, 21 Dec 2003 11:45:38 +0900 cupsys (1.1.20final-4) unstable; urgency=low * Fix cups* commands don't work (closes: Bug#224585). Thanks Rainer. -- Kenshi Muto Sat, 20 Dec 2003 20:52:24 +0900 cupsys (1.1.20final-3) unstable; urgency=low * Apply patch into lpd.c for true compatible with RFC1179 (closes: Bug#223432). Thanks Lionel. * Hmm, PJL patch causes a problem. Since I don't have any PJL printers, I simply unapply PJL patch and reopen Bug#220611 (closes: Bug#223748) -- Kenshi Muto Fri, 12 Dec 2003 18:32:58 +0900 cupsys (1.1.20final-2) unstable; urgency=low * Apply PJL patch (closes: Bug#220611). Thanks Zed. -- Kenshi Muto Sat, 6 Dec 2003 10:42:37 +0900 cupsys (1.1.20final-1) unstable; urgency=low * New upstream release * cupsys set UTF-8 as defaultCharset, but it causes some browsing problem, and looks don't need indeed. I changed defaultCharset to invalid value. It will fix French screen (closes: Bug#221904). * Fix dependency with libgnutls7 by dirty trick. I hope libgnutls7 maintainer will fix Bug#221309. -- Kenshi Muto Tue, 25 Nov 2003 19:17:57 +0900 cupsys (1.1.20candidate6-6) unstable; urgency=low * Set fixed version into Depends for cupsys, cupsys-client. -- Kenshi Muto Mon, 17 Nov 2003 21:35:55 +0900 cupsys (1.1.20candidate6-5) unstable; urgency=high * I'm sorry but openssl license conflicts. I use libgnutls (closes: Bug#220902). * Add euc-jp text. -- Kenshi Muto Sat, 15 Nov 2003 23:55:06 +0900 cupsys (1.1.20candidate6-4) unstable; urgency=low * Add French translation (closes: Bug#220805). Thanks, Christian. * openssl, popular SSL implementation, becomes Debian main, so I think it is no reason for using libgnutls. I changed depends openssl instead of libgnutls. -- Kenshi Muto Sat, 15 Nov 2003 10:24:38 +0900 cupsys (1.1.20candidate6-3) unstable; urgency=low * Remove -Wl from configure (closes: Bug#194353) * Remove /etc/sups/raw.* when purged (closes: Bug#198126) * Remove always Content-Type charset header. This is test (and ad-hoc) case. I'll unapply if this patch causes a problem. * Add Japanese resource. -- Kenshi Muto Thu, 13 Nov 2003 23:02:40 +0900 cupsys (1.1.20candidate6-2) unstable; urgency=medium * Fix FTBFS build error (closes: Bug#220534) -- Kenshi Muto Thu, 13 Nov 2003 15:52:00 +0900 cupsys (1.1.20candidate6-1) unstable; urgency=low * New upstream. * Rename filter, backend man page (closes: Bug#220500). -- Kenshi Muto Wed, 12 Nov 2003 23:41:02 +0900 cupsys (1.1.19final-4) unstable; urgency=low * "Welcome patch" release. * Transited packaging system to CDBS. This release wll be final version for 1.1.19. I'll upload 1.1.20candidate version at next time. * libcupsimage2.so.2 links libcupsys.so.2. (closes: Bug#193618) -- Kenshi Muto Mon, 10 Nov 2003 10:01:58 +0900 cupsys (1.1.19final-3) unstable; urgency=low * Fix check routine of Printcap. (closes: Bug#200278) * Removed "suggests qtcups". (closes: Bug#197267) -- Kenshi Muto Fri, 7 Nov 2003 21:43:39 +0900 cupsys (1.1.19final-2) unstable; urgency=low * lpadmin group included root user, but I didn't understand why it needs. This may cause security problem, so I remove this process and remove root from lpadmin group. (closes: Bug#214746) * Support large file. (closes: Bug#215568) * Support log rotation. (closes: Bug#200704) * Force enable PAM (closes: Bug#183211, Bug#181512) -- Kenshi Muto Thu, 6 Nov 2003 18:31:02 +0900 cupsys (1.1.19final-1.5) unstable; urgency=low * New maintainer (acknowledged from Jeff Licquia). Thanks Jeff! * Changed templates.* to po-debconf style (closes: Bug#199236). * Added Japanese debconf translation (closes: Bug#202273). -- Kenshi Muto Thu, 6 Nov 2003 09:50:29 +0900 cupsys (1.1.19final-1.4) unstable; urgency=low * Non-maintainer upload * Removed '#include ' line from image.h from the version in libcupsimage2-dev with debian/image.h.patch (Closes: #200427) -- Roland Stigge Thu, 4 Sep 2003 14:04:15 +0200 cupsys (1.1.19final-1.3) unstable; urgency=low * Non-maintainer upload * cupsys Replaces: and Conflicts: cupsys-pstoraster (Closes: #206547) NOTE: the Conflicts: was made versioned (<< 2) not to Conflict with gs-esp which provides cupsys-pstoraster. * Build-Depends: libpam0g-dev (new) instead of libpam-dev (removed from archive) -- Roland Stigge Wed, 3 Sep 2003 19:33:09 +0200 cupsys (1.1.19final-1.2) unstable; urgency=low * NMU. * Completely remove dependency on libgnutls5-dev. -- Robin Verduijn Wed, 27 Aug 2003 18:08:50 -0100 cupsys (1.1.19final-1.1) unstable; urgency=low * NMU. * Built against libgnutls7-dev instead of (obsolete) libgnutls5-dev. Closes: #203059. -- Robin Verduijn Tue, 26 Aug 2003 19:28:21 -0100 cupsys (1.1.19final-1) unstable; urgency=high * New upstream final release. DoS attack fixed; thus the urgency. * Rebuilt with the latest libpng-dev, and fixed the explicit deps in the control file. * Removed rpath statment from output of cups-config --ldflags. Closes: #194262. -- Jeff Licquia Thu, 29 May 2003 20:44:48 -0500 cupsys (1.1.19candidate4-1) unstable; urgency=low * New upstream release candidate. * Includes upstream fix to the problem with 100% CPU consumption. Closes: #189795. * Added a dh_makeshlibs call for libcupsimage2. * Made libcupsys2 conflict with cupsys-driver-gimpprint versions built before the libcupsimage split. Closes: #189175. * Move /etc/printcap.cups to /var/run/cups/printcap, since it's generated and non-editable. Also, take care of the /etc/printcap symlink. Closes: #187954. * Per suggestion from the KDE project, suggest the kdeprint package instead of the kdelibs3-cups package. -- Jeff Licquia Sat, 10 May 2003 13:05:33 -0500 cupsys (1.1.19candidate1-3) unstable; urgency=low * Make libcupsys2 conflict with gs-esp versions built before the libcupsimage split. This is part of the fix for bug 189175. * Add a dep on libgnutls-dev for libcupsys2-dev. Closes: #190877. -- Jeff Licquia Mon, 28 Apr 2003 10:57:03 -0500 cupsys (1.1.19candidate1-2) unstable; urgency=low * Set Replaces: on cupsys-client to cover the move of the French man page for cupstestppd. Closes: #189737, #190042. * Add cupsys-pt and xpp to Suggests for cupsys-client. Closes: #168399, #170929. * Added some more example filters: mailto and pstopdf. Closes: #152001. * Pass --system to addgroup when adding the lpadmin group. Closes: #189835. * Set section for the -dev packages to "libdevel". * Fix shlibs files for libcupsys2 and libcupsimage2 to reference the right package versions. Closes: #174391. -- Jeff Licquia Tue, 22 Apr 2003 14:27:43 -0500 cupsys (1.1.19candidate1-1) unstable; urgency=low * New upstream version. I will try to follow upstream's new release policy by uploading release candidate versions to unstable. * Wrote a new GNU TLS patch, which was accepted by upstream. Re-enable SSL support based on this. * Based on recent upstream work, wrote a libpaper patch which has also been accepted upstream. Closes: #60035, #88597, #101591. * Upstream fix included to allow SLP-only browsing support to work. Closes: #178380. * Updated the Spanish debconf template for cupsys-bsd. Closes: #167171. * Added cupstestppd to cupsys-client. Closes: #176941. * Don't respect TMPDIR if we don't have write permissions to that directory. Closes: #176725. -- Jeff Licquia Sat, 12 Apr 2003 14:36:20 -0500 cupsys (1.1.18-3) unstable; urgency=low * Split libcupsimage into its own package. Closes: #187897. * Added versioned build-dep on debhelper >= 2. -- Jeff Licquia Tue, 8 Apr 2003 02:59:57 -0500 cupsys (1.1.18-2) unstable; urgency=high * Disable SSL again. Inexplicably, the GNU TLS people put the OpenSSL compatibility layer under the GPL, not the LGPL. This forces the effective license on libcupsys2 to GPL, which I'm not comfortable with. The urgency reflects possible license conflicts for apps that link to libcupsys2. Closes: #168056. * Add a debconf question to ask whether unrecognized application/octet-stream jobs should be printed as raw jobs. * Forward-port some of the security fixes from woody. * Set the default group for lppasswd to "lpadmin", in keeping with the default in cupsd. Closes: #172842. * Replaced the conflict with manpages-fr, versioned this time to allow for easy upgrades. Also added a Replaces entry for it. -- Jeff Licquia Sun, 5 Jan 2003 23:36:50 -0500 cupsys (1.1.18-1) unstable; urgency=high * New upstream version. This is a security update for problems that include remote root exploits - thus the urgency. * Remove the conflict with manpages-fr per reports that the offending files are now all gone. Closes: #158500. -- Jeff Licquia Fri, 20 Dec 2002 03:27:18 -0500 cupsys (1.1.16-4) unstable; urgency=low * Documentation updates. * Change the GNU TLS patch to more explicitly control which SSL library is linked to, and support switching SSL libraries in the build. By default, the package will not use OpenSSL, so autobuilders won't accidentally build it that way. Closes: #167489. * Add libgnutls-dev to the Dependencies for libcupsys2-dev. * Set the proper permissions on cupsys-client man pages. -- Jeff Licquia Sat, 9 Nov 2002 16:39:54 -0500 cupsys (1.1.16-3) unstable; urgency=low * Totally nuke all script modifications for dh_installinit; do it all manually instead. Closes: #166878. -- Jeff Licquia Tue, 29 Oct 2002 23:06:20 -0500 cupsys (1.1.16-2) unstable; urgency=low * Add libpam-dev to Build-Depends. Closes: #166556. * Update clean target in debian/rules to clean a few more files that are missed by the Makefiles. * Remove SFont.cxx and T1Font.cxx from the pdftops Makefile; these two files aren't needed, and including them would pull in a build dep on xlibs-dev, which is bad news. Closes: #166716. * Tell dh_installdocs to not mess with the postinst/prerm, so the compatibility symlinks aren't created. -- Jeff Licquia Tue, 29 Oct 2002 00:45:38 -0500 cupsys (1.1.16-1) unstable; urgency=low * New upstream version... Closes: #165631. * ...which includes bugfixes to several BSD utilities to avoid segfaulting when certain options are misused. Closes: #159597. * Add upstream patch to scheduler that fixes certain printer operations in the web interface. * Re-enabled SSL support using the OpenSSL compatibility library in libgnutls. Closes: #150600. * Use our own logic for stopping/restarting cupsd on upgrade, instead of relying on dh_installinit. Closes: #160345, #164435. * Make cupsys-client Recommend cupsys-bsd. Closes: #157974. * Make sure we remove everything in /var/spool/cups on purge. Closes: #163571. * Make force-reload send SIGHUP, since policy prefers that mode of operation. * Add dependencies for libcupsys2-dev on the image libraries we need. Closes: #166451. -- Jeff Licquia Sat, 26 Oct 2002 19:37:56 -0500 cupsys (1.1.15-4) unstable; urgency=low * Fix segfault in lp when passing "-q" by itself as the last option. Closes: #150819. * Make the switch to libpng3, now that woody is out. Closes: #156622. * It seemed that the rastertoepson filter occasionally lost its cookies under certain circumstances and passed NULL for a field. Cancel the pending job if that happens. Closes: #147119. * Remove .cvsignore files. * Turned browsing back on by default. With no BrowseAddresses set, no broadcast packets will go out, but cupsd will recognize and accept incoming packets. Closes: #155574. -- Jeff Licquia Tue, 20 Aug 2002 15:51:45 -0500 cupsys (1.1.15-3) unstable; urgency=low * Reorganized the French man pages so they appear in the proper packages. * Declared a Conflict between cupsys-bsd and manpages-fr, as the latter package includes man pages for lpr, lpq, and lprm. * Move lpinfo and lpmove utilities to cupsys-client, where they belong. * Added patch from upstream that fixes some problems with Orientation settings made by some PostScript generators. Closes: #155534. * Fixed compiler settings for the static and shared versions of libcupsys2. -- Jeff Licquia Sun, 11 Aug 2002 02:45:02 -0500 cupsys (1.1.15-2) unstable; urgency=high * Removed SSL support again due to license infection problems. Closes: #154792. * Removed the preformatted French man pages. -- Jeff Licquia Mon, 29 Jul 2002 19:02:21 -0500 cupsys (1.1.15-1) unstable; urgency=low * New upstream version. * Removed cupsys-pstoraster (since it's no longer provided in CUPS), and rely on gs-esp instead for its functionality. * Enabled SSL support and updated copyright file to reflect license change. Closes: #150600. * Applied patch from upstream that causes the cupsd foreground process to wait until the daemon is ready before exiting. Also, changed init script to wait on the daemon before continuing. Closes: #150426. * Moved /etc/cups/certs to /var/spool/cups/certs. Closes: #144887. * Split out German and Portugese debconf templates into separate files, and added French, Russian, and Spanish files. Closes: #137630, #138068, #142904. * Make cupsys Recommend smbclient, and handle symlinking smbspool to /usr/lib/cups/backend/smb if it's available. Closes: #82690. * Make cupsys Suggest foomatic-bin for cupsomatic, so that linuxprinting.org PPDs work. Closes: #146655. * Add examples/filters directory to cupsys and added the contributed DVI filter to it. Users can copy the filter and config files into place themselves to get the functionality. Closes: #55013, #136496. * Fixed a bug where "-" filters are rejected in some cases. -- Jeff Licquia Mon, 29 Jul 2002 00:33:00 -0500 cupsys (1.1.14-3) unstable; urgency=low * Changed libpng dependency to "libpng2 | libpng" to accomodate the current libpng policy. * Changed adduser dep so that the proper adduser (that does root) is available for the postinst. Closes: #133709. * Removed spaces from init script output. Closes: #133262. * Set TZ in init script to REALLY fix timezone problem. Closes: #130676. -- Jeff Licquia Sat, 9 Mar 2002 23:48:41 -0500 cupsys (1.1.14-2) unstable; urgency=high * Remove all the stuff about setting the lpd backend setuid; per upstream, we don't need it anymore, and it's a security hole. -- Jeff Licquia Sun, 17 Feb 2002 18:52:45 -0500 cupsys (1.1.14-1) unstable; urgency=high * New upstream version. * Fixes more buffer overflows not covered in the previous patch; thus the urgency. -- Jeff Licquia Wed, 13 Feb 2002 22:40:50 -0500 cupsys (1.1.13-2) unstable; urgency=high * Fix potentially exploitable buffer overflow in cups/ipp.c. -- Jeff Licquia Sat, 9 Feb 2002 21:27:41 -0500 cupsys (1.1.13-1) unstable; urgency=low * New upstream version. * Silly me. fopen() returns NULL, not non-NULL, when it fails. :-) Closes: #130532, #131433. -- Jeff Licquia Sat, 2 Feb 2002 16:10:20 -0500 cupsys (1.1.12-5) unstable; urgency=low * Fix man page references so, e.g., references go from backend(1) to cups-backend(1). Closes: #126811. * Oops! Debian has time_t->tm_gmtoff, which is defined to have the opposite sign of timezone. Is it that way on BSD? Anyway, reverse the sense of the sign for time_t->tm_gmtoff if we use that. Closes: #126195. * Add header for gs_malloc to pstoraster/gscrdp.c, to prevent problems with implicit declaration on 64-bit systems. Closes: #126002. * cgi-bin/admin.c: Be a little bit more paranoid about one's ability to write to tempfiles. Closes: #122324. * Enabled OpenSLP support. * Cleaned up Priorities and Sections. -- Jeff Licquia Sun, 20 Jan 2002 02:14:35 -0500 cupsys (1.1.12-4) unstable; urgency=low * Move cups-lpd man page to cupsys-bsd. Closes: #122311. * Oops! Lost the patch to allow "cupsaccept", etc. commands. Closes: #123280. * Minor change to the init script output. Closes: #121938. * Changed choose-uri.tmpl to be a little more clear. Closes: #117376. * Moved CUPS document root from /usr/share/doc/cupsys to /usr/share/cups/doc-root, and created a symlink from /u/s/d/cupsys/online-docs to it. It turns out that serving files via CUPS from /usr/share/doc is a policy violation. Closes: #120923. * Fixed a small problem when upgrading from potato libcupsys1-dev to current libcupsys2-dev. -- Jeff Licquia Mon, 17 Dec 2001 00:58:41 -0500 cupsys (1.1.12-3) unstable; urgency=low * Fix libcupsys2 shlibs file to provide the proper dependency information. Closes: #121405. * Oops! Make sure SSL support isn't built yet. -- Jeff Licquia Wed, 28 Nov 2001 11:41:17 -0500 cupsys (1.1.12-2) unstable; urgency=low * It helps to run autoconf after making a change to the configure script. :-) CXX=$CC change wasn't propagated, making the build fail on hppa. -- Jeff Licquia Mon, 26 Nov 2001 12:01:58 -0500 cupsys (1.1.12-1) unstable; urgency=low * New upstream version. Closes: #119162. * Updated Standards-Version. * Made cupsys depend on debconf. * Removed -Wl,rpath from config-scripts/cups-sharedlibs.m4. * Removed explicit libcupsys dep from cupsys. * Removed "CXX=$CC" from config-scripts/cups-compiler.m4. * Removed .SILENT from Makedefs so the build isn't silent anymore. * On devfs, look in /dev/printers as well as /dev/parallel. (Do we still need /dev/parallel?) Closes: #114063. * Changed internal file: device URI type to test:, since (per upstream) it's not intended for anything other than to test filters. See bug #115252 or README.Debian for more info. -- Jeff Licquia Sun, 25 Nov 2001 11:21:32 -0500 cupsys (1.1.10-4) unstable; urgency=low * Switched cupsenable and cupsdisable symlinks to always point to /usr/sbin/accept to prevent them from breaking when files move around (as they did recently). Closes: #114006. * It turns out that libcupsys needs to make temp files in /var/spool/cups/tmp, so that dir needs to be in the package. Closes: #115154. * Related to the above, when creating temp files, don't loop when the open fails unless the return value is EEXIST. Thanks to Brian Ristuccia for the suggestion. * Honor the DEB_BUILD_OPTTIONS "debug" setting. * Per policy, make sure we build with -D_REENTRANT. * Don't remove /var/spool/cups in the cupsys postrm when purging. * Added German description to template. Closes: #113604. * Added Portuguese description to cupsys-bsd template. Closes: #106131. -- Jeff Licquia Thu, 18 Oct 2001 23:07:34 -0500 cupsys (1.1.10-3) unstable; urgency=low * Scale back a bit on aggressiveness on purging cupsys, as it can cause us to remove the cupsys-client conffile. * It turns out that client.conf is parsed by libcupsys2, not cupsys-client, so it needs to switch packages. * Changed PAM code so it attempts to open the "cupsys" PAM config file, instead of the "cups" one. Not sure how this broke again. Closes: #110651. * Per request, implemented the "reload" option in the init script. -- Jeff Licquia Wed, 19 Sep 2001 21:53:48 -0500 cupsys (1.1.10-2) unstable; urgency=low * Added Conflicts: on cupsys-pstoraster with older cupsys packages because of moved files. Closes: #106107. * Fixed bug concerning update-inetd handling; it was removing the inetd entry for the lpd server in cupsys-bsd with every upgrade. Closes: #109298. -- Jeff Licquia Thu, 30 Aug 2001 23:14:08 -0500 cupsys (1.1.10-1) unstable; urgency=low * New upstream version - with Makefile oops fixed (1.1.10-1 upstream). * Fixed lpadmin group creation so NIS-style lpadmin group is recognized. Closes: #78895, #107744. * Replaced kups with kdelibs3-cups in Suggests: lines, and reorganized Suggests line. Closes: #109695. * Moved Suggests for all add-on clients to cupsys-client. * Fixed purge so /etc/cups is completely cleaned out. Closes: #108488. * Moved filter and backend man pages to cups-filter and cups-backend to avoid conflicts with other packages. Closes: #107629. * Made the lpd backend non-setuid, and created a low-priority debconf question to handle the few who really need it setuid. Closes: #77617. * Altered cupsys-bsd postinst; always remove any inetd lines when removing the package (we'll put it back later if we're just upgrading). -- Jeff Licquia Tue, 28 Aug 2001 00:43:36 -0500 cupsys (1.1.9-1.1) unstable; urgency=low * NMU * Fix gcc 3.0/hppa build problems. Closes: #104620, #105308. -- LaMont Jones Wed, 15 Aug 2001 19:28:23 -0600 cupsys (1.1.9-1) unstable; urgency=low * Return of the Maintainer. :-) * New upstream version. * Added dep on adduser (fixed bug #105382). -- Jeff Licquia Mon, 30 Jul 2001 00:28:47 -0500 cupsys (1.1.8-0.1) unstable; urgency=low * Non-maintainer upload. * i think anyone who wants cupsys in woody will be happy by this nmu * New upstream release (Closes: #80895, #100156, #94364) * With the new upstream release the problem with cgi-bin has been fixed (Closes: #96055, #98264, #96530, #96055, #99914, #100707, #103095) * Added cupsys-pstoraster package. * Added the LOGDIR option to install rule (Closes: #94502) * Suggests cupsys-driver-gimpprint | cupsomatic-ppd (Closes: #99146) * Moved to DH_COMPAT=2 * Added a pointer to http://localhost:631/admin to README.Debian (Closes: #97964) * Removed the extra from cupsd.conf (Closes: #96012) * Not installing copyright for libcupsys2-dev, it will have a link pointing to libcupsys2 anyways (Closes: #94504) * Removed maintainer postinst and prerm scripts from cupsys-client and libcupsys2-dev, by purging either of them you would have removed your cups documentation. * added German translation of debconf template to cupsys-bsd by Sebastian Feltel (Closes: #101467, #100901) * changed rm -f to rm -rf from cupsys-bsd prerm, and removed the link handling for /usr/doc, let debhelper worry about that. (Closes: #94539, #100501, #102669) -- Sami Haahtinen Thu, 5 Jul 2001 16:04:42 +0300 cupsys (1.1.6-0.1) unstable; urgency=low * Non-maintainer upload * New upstream release, fixing multiple vulnerabilities (Closes: Bug#88932) * cupsys removes only its own configuration files upon purge (Closes: Bug#84341) * fixed postinst, so it does not fail when the lpadmin group already exists (Closes: Bug#84443) * added a helpful URL to README.Debian (Closes: Bug#63590) * Suggests gtklp | kups | qtcups (Closes: Bug#82974) -- Gergely Nagy <8@free.bsd.hu> Sat, 14 Apr 2001 18:05:23 +0200 cupsys (1.1.4-3) unstable; urgency=low * Fixed PAM module name confusion (closes bugs #76457, #77114). * Fixed broken deps w.r.t. cupsys-client Replacing older cupsys versions (closes bug #75241). * Fixed broken deps surrounding cupsys-dev (closes bug #75242). * My shlibs file was badly broken; it referred to the cupsys package instead of the libcupsys2 package (closes bug #78485). * Fixed problem with upgrading; --oknodo wasn't passed to start-stop-daemon, causing the prerm to fail if cupsd wasn't running (closes bug #70698). -- Jeff Licquia Sun, 3 Dec 2000 22:45:29 -0500 cupsys (1.1.4-2) unstable; urgency=high * Fix misconfiguration in default config; cupsd now refuses connections to printers and printer classes from all hosts except localhost by default. The previous default was to allow all hosts to connect to all printers - not a terribly secure default. :-) -- Jeff Licquia Sat, 18 Nov 2000 00:55:48 -0500 cupsys (1.0.4-8) stable; urgency=high * Security fix: the default configuration now no longer allows people to connect to printers except from localhost. The previous default configuration allowed anyone to connect to any printer from any location; not a smart security move. -- Jeff Licquia Sat, 18 Nov 2000 00:37:06 -0500 cupsys (1.1.4-1) unstable; urgency=low * New upstream version. * Fixed SystemGroup to point to lpadmin again (closes bug #72155). -- Jeff Licquia Sun, 15 Oct 2000 20:36:01 -0500 cupsys (1.1.2-4) unstable; urgency=low * The scheduler will now accept up to 128 characters for a password (closes bug #70946). -- Jeff Licquia Sun, 15 Oct 2000 14:54:31 -0500 cupsys (1.1.2-3) unstable; urgency=low * Re-add ppd directory to build (when did it drop out?) (closes bug #70448). -- Jeff Licquia Mon, 28 Aug 2000 20:14:51 -0500 cupsys (1.1.2-2) unstable; urgency=low * Added debhelper to build deps (closes bug #69677). * Fixed PAM configuration file (closes bug #69787). -- Jeff Licquia Thu, 24 Aug 2000 11:40:56 -0500 cupsys (1.1.2-1) unstable; urgency=low * Another new upstream version. * More build fixes. -- Jeff Licquia Sat, 19 Aug 2000 17:15:34 -0500 cupsys (1.1.1-1) unstable; urgency=low * New upstream version - non-beta this time. * Fixed up build process to reflect upstream changes. * Removed lots of Debian-specific stuff that isn't needed anymore. -- Jeff Licquia Mon, 7 Aug 2000 20:27:29 -0500 cupsys (1.1.0-0b3d1) unstable; urgency=low * New upstream version. * Daemon 'cups-lpd' (new to this version) added to cupsys-bsd, with appropriate update-inetd calls, so cupsys-bsd is now a complete replacement for lpr. -- Jeff Licquia Sun, 14 May 2000 00:08:23 -0500 cupsys (1.0.4-7) frozen unstable; urgency=high * Additional DoS fixes, included in Easy Software Products' patch for the bug below. As these are DoS bugs, I HIGHLY recommend including this in potato. -- Jeff Licquia Sun, 18 Jun 2000 22:39:01 -0500 cupsys (1.0.4-6) frozen unstable; urgency=high * Fixed denial-of-service bug; POSTing non-IPP data would cause the server to crash. Closes bug #65576 (severity: critical). -- Jeff Licquia Tue, 13 Jun 2000 22:04:40 -0500 cupsys (1.0.4-5) frozen unstable; urgency=low * Backported 1.0.5 bugfix: adding a printer would fail if /usr/share/cups were mounted on a different partition than /etc/cups. Closes bug #62267 (severity: grave). -- Jeff Licquia Thu, 13 Apr 2000 23:09:40 -0500 cupsys (1.0.4-4) frozen unstable; urgency=low * Makefile in conf was attempting to remove /etc/printcap during build, and fails to build if this fails (which it will under fakeroot); disabled this. Closes bug #60455 (severity: important). -- Jeff Licquia Wed, 15 Mar 2000 12:34:20 -0600 cupsys (1.0.4-3) frozen unstable; urgency=low * Oops - ppd directory move fails in preinst if /var/lib/cups/ppd is empty. Reported as bug #59993, fixed. * Missed the library Build-Depends. Closes bug #60090. * Postrm during purge now removes /etc/cups properly. * Documentation updates. -- Jeff Licquia Fri, 10 Mar 2000 22:59:07 -0600 cupsys (1.0.4-2) frozen unstable; urgency=low * Fixed documentation corruption in HTML docs (closes bug #59063). * Moved /var/lib/cups/ppd/* config files (printer definitions) to /etc/cups/ppd (closes bug #59263). * Fixed shlibs for libcupsys1 (erroneous information) preventing packages that link to it from depending properly. * Changed default for browsing to Off to keep cupsd from probing the local network continuously (closes bug #59277). -- Jeff Licquia Sat, 4 Mar 2000 18:23:01 -0600 cupsys (1.0.4-1) unstable; urgency=low * New upstream version. * Changed policy version & tweaked for conformance. * Fixed symlinks for cupsys-bsd, including /usr/doc symlinks. * Reverted lp -h hack in favor of upstream fix. -- Jeff Licquia Sun, 9 Jan 2000 23:25:06 -0600 cupsys (1.0.2-2) unstable; urgency=low * Added quick hack to allow for -h option to lp (closes bug #52050). * Set the lpd backend suid after quick audit; it doesn't appear to have any egregious errors (closes part of bug #52381). * Move /var/lib/cups/conf files to /etc/cups, with a symlink in place of the old location (closes bug #52318). * Added "Authentication failed" message when authorizing after the first auth failure (which is likely before the first password request) (closes rest of bug #50264). * Made cupsys-bsd doc dir a symlink to the cupsys doc files, per policy section 6.6 (closes bug #51958). * Symlinked /var/lib/cups/logs to /var/log/cups (closes bug #51957). -- Jeff Licquia Mon, 13 Dec 1999 02:12:40 -0600 cupsys (1.0.2-1) unstable; urgency=low * New upstream version. * Conflict with lprng, since lprng includes some SysV printing commands (closes bug #50539). * Added "cupsenable", "cupsdisable", "cupsaccept", and "cupsreject" commands as part of an ongoing effort to reduce namespace pollution. (addresses part of bug #50661 and #50384) * Set both the default user and group to "lp" (for permissions fixes). * Created "lpadmin" group and set SystemGroup to this. This will fix problems with CUPS not being usable initially. As soon as bug #50620 gets fixed, I'll set up to add root to the group, which will make root able to configure CUPS immediately after installation. -- Jeff Licquia Mon, 29 Nov 1999 00:16:44 -0600 cupsys (1.0.1-3) unstable; urgency=low * Fixed wrong symlinks. (closes bug #50279) * Stopped compression of .pdf files; they didn't gain much, broke the links in the HTML, and generally caused confusion. (closes part of bug #50264) -- Jeff Licquia Mon, 15 Nov 1999 22:28:56 -0600 cupsys (1.0.1-2) unstable; urgency=low * cupsys-bsd should conflict with lpr, not "lpd" (whatever that is) (closes #50047) * Changed priority to "extra". -- Jeff Licquia Fri, 12 Nov 1999 22:24:15 -0600 cupsys (1.0.1-1) unstable; urgency=low * Initial Release. -- Jeff Licquia Sun, 6 Nov 1999 20:58:02 -0500