Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Import Debian changes 2.4.1op1-1ubuntu4.1
cups (2.4.1op1-1ubuntu4.1) jammy-security; urgency=medium * SECURITY UPDATE: Local authorization cert bypass - debian/patches/CVE-2022-26691-1.patch: fix string comparison in scheduler/cert.c. - debian/patches/CVE-2022-26691-2.patch: fix the comment in scheduler/cert.c. - CVE-2022-26691 cups (2.4.1op1-1ubuntu4) jammy; urgency=low * Fixed PPD file auto-generation when a print queue is created with a DNS-SD-service-name-based URI and "-m everywhere" backporting the fix from upstream (Upstream issue #340, #343). cups (2.4.1op1-1ubuntu3) jammy; urgency=low * Fixed crasher in the patch for temporary queues for local services in the previous release. Updated the patch and the upstream pull request (LP: #1965112, Upstream pull request #353). cups (2.4.1op1-1ubuntu2) jammy; urgency=low * Fixed printing on temporary CUPS queues for local services, like IPP-over-USB or Printer Applications. Especially when printing from the GTK print dialog printing on such queues did not work (Upstream pull request #353). cups (2.4.1op1-1ubuntu1) jammy; urgency=low * Merge from Debian unstable. Remaining changes: - Added "--enable-snapped-clients" to the "./configure" options to use the correct Snap mediation mode for an unsnapped cupsd, like provided by this package. - Build CUPS with "SystemGroup lpadmin root" in cups-files.conf by default, as CUPS always worked this way but the new patch for supporting the "cups-control" interface of Snaps does not allow implicit permission to everything for root any more. - In the AppArmor profile allow CUPS to access (/var)/run/snapd.socket to allow cupsd to determine which interfaces a snapped client is plugging. - Build-depend on libapparmor-dev, libsnapd-glib-dev, needed for Snap mediation. - Added fully automatic generation of PPD option setting presets to be applied depending on the settings of the job IPP attributes "print-color-mode", "print-quality", and "print-content-optimize". This allows easy control of any printer with only standard IPP attributes, as for example from a phone (functionality overtaken from cups-filters, mot (yet) upstream in CUPS). * Updated 9100-ppd-cache-add-auto-presets.patch cups (2.4.1op1-1) unstable; urgency=medium * new upstream release * debian/patches/*: update and rebase * debian/control: add myself to Uploaders: * debian/copyright: remove unused BSD-3 license * exlucde some newly generated files * update symbols files * move back to gbp based workflow (git debrebase and dgit do not work in my world) cups (2.3.3op2-7ubuntu2) impish; urgency=low * Updated patch for auto-generation of PPD presets to patch proposed upstream (Upstream pull request #236) due to added PPD options taken into account. cups (2.3.3op2-7ubuntu1) impish; urgency=low * Merge from Debian unstable. Remaining changes: - Added extra checking when administrative requests (create queue, remove someone else's job, ...) reach cupsd. If the client is a Snap, it has to plug the cups-control interface to be allowed to do the task. Added libapparmor-dev and libsnapd-glib-dev to the build dependencies. Also added needed permissions to AppArmor profile. - Build CUPS with "SystemGroup lpadmin root" in cups-files.conf by default, as CUPS always worked this way but the new patch for supporting the "cups-control" interface of Snaps does not allow implicit permission to everything for root any more. - Added "--enable-snapped-clients" to the "./configure" options to use the correct checking mode for an unsnapped cupsd, like provided by this package. - Added fully automatic generation of PPD option setting presets to be applied depending on the settings of the job IPP attributes "print-color-mode", "print-quality", and "print-content-optimize". This allows easy control of any printer with only standard IPP attributes, as for example from a phone (functionality overtaken from cups-filters, mot (yet) upstream in CUPS). * Updated patch for auto-generation of PPD presets to patch proposed upstream (Upstream pull request #236). cups (2.3.3op2-7) unstable; urgency=medium [ Didier Raboud ] * Remove myself from Uploaders [ Roger Lynn ] * Apparmor: allow CUPS to read /etc/letsencrypt/archive/ (Closes: #992378) cups (2.3.3op2-6) unstable; urgency=medium * Migrate to unstable * Packaging cleanup - Update S-V to 4.6.0 without changes needed - Remove 3 obsolete maintscript entries cups (2.3.3op2-5ubuntu1) impish; urgency=low * Merge from Debian unstable. Remaining changes: - Added extra checking when administrative requests (create queue, remove someone else's job, ...) reach cupsd. If the client is a Snap, it has to plug the cups-control interface to be allowed to do the task. Added libapparmor-dev and libsnapd-glib-dev to the build dependencies. Also added needed permissions to AppArmor profile. - Build CUPS with "SystemGroup lpadmin root" in cups-files.conf by default, as CUPS always worked this way but the new patch for supporting the "cups-control" interface of Snaps does not allow implicit permission to everything for root any more. - Added "--enable-snapped-clients" to the "./configure" options to use the correct checking mode for an unsnapped cupsd, like provided by this package. * Added fully automatic generation of PPD option setting presets to be applied depending on the settings of the job IPP attributes "print-color-mode", "print-quality", and "print-content-optimize". This allows easy control of any printer with only standard IPP attributes, as for example from a phone (functionality overtaken from cups-filters, mot (yet) upstream in CUPS). cups (2.3.3op2-5) experimental; urgency=low * Backport 2 upstream USB backend fixes: - Revert enforcing read limits (caused a regression with Lexmark filters) - Use 60s timeout (instead of 250ms) for reading at backchannel, as some older models malfunction if timeout is too short (Closes: #989073) cups (2.3.3op2-4) experimental; urgency=medium [ Helge Kreutzmann ] * Update German man page (2212t) [ Didier Raboud ] * Reorder and cleanup patch queue by replacing some by upstream's * Drop ancient symlink handling in preinsts (Closes: #986165) cups (2.3.3op2-3+deb11u1) unstable; urgency=medium * Backport 2 upstream USB backend fixes: - Revert enforcing read limits (caused a regression with Lexmark filters) - Use 60s timeout (instead of 250ms) for reading at backchannel, as some older models malfunction if timeout is too short (Closes: #989073) cups (2.3.3op2-3ubuntu3) hirsute; urgency=low * Updated AppArmor profile entries for CUPS accessing snapd to check whether a client is a Snap and which interfaces it plugs to. cups (2.3.3op2-3ubuntu2) hirsute; urgency=low * Replaced patch for extra checking of admin requests from snapped clients by the current upstream code. Added "--enable-snapped-clients" to the "./configure" options to use the correct checking mode for an unsnapped cupsd, like provided by this package. cups (2.3.3op2-3ubuntu1) hirsute; urgency=low * Merge from Debian unstable. Remaining changes: - Added extra checking when administrative requests (create queue, remove someone else's job, ...) reach cupsd. If the client is a Snap, it has to plug the cups-control interface to be allowed to do the task. Added libapparmor-dev and libsnapd-glib-dev to the build dependencies. Also added needed permissions to AppArmor profile. - Build CUPS with "SystemGroup lpadmin root" in cups-files.conf by default, as CUPS always worked this way but the new patch for supporting the "cups-control" interface of Snaps does not allow implicit permission to everything for root any more. * Clean up "Build-Depends:" to be in sync with Debian (delta overlooked for near a decade when cups-filters was introduced in 2012), removing the unneeded entries: ghostscript, libavahi-compat-libdnssd-dev, libfontconfig1-dev, libfreetype6-dev, libijs-dev, libjpeg-dev, libldap2-dev, libpng-dev, libtiff-dev, poppler-utils, sharutils * Removed the changes on the machine-generated "configure" file in the patch for checking snapped clients, the changes easily mis-match on updates and we run "autoconf" in debian/rules anyway. cups (2.3.3op2-3) unstable; urgency=medium [ Helge Kreutzmann ] * Update German man page (2212t) [ Didier Raboud ] * Wrap-and-sort -baskt, keep comments * Let cups.1 point to client.conf.5, not client.conf.7 (Closes: #982303) * Make CUPS reproducible by patching it to; - skip the httpAddrGetHostname() test (that fails under reprotest) - skip the stp tests if ran as root, without aborting - run testlang for each provided CUPS locale only cups (2.3.3op2-2) unstable; urgency=medium * Bump debhelper compat to 13, document not-installed files cups (2.3.3op2-1) unstable; urgency=medium * New OpenPrinting 2.3.3op2 release - CVE-2020-10001: Fixed a buffer (read) overflow in the `ippReadIO` function - Drop 4 patches merged upstream * Update d/copyright authors and years cups (2.3.3op1-7) unstable; urgency=medium [ Helmut Grohne ] * Reduce Build-Depends, move dh_apparmor to B-D-A (Closes: #980104) cups (2.3.3op1-6) unstable; urgency=medium [ Till Kamppeter ] * In the AppArmor profile, allow cupsd to write to /run/systemd/notify to notify that it is up and running (systemd service type "notify") cups (2.3.3op1-5ubuntu1) hirsute; urgency=low * Merge from Debian unstable. Remaining changes: - Added extra checking when administrative requests (create queue, remove someone else's job, ...) reach cupsd. If the client is a Snap, it has to plug the cups-control interface to be allowed to do the task. Added libapparmor-dev and libsnapd-glib-dev to the build dependencies. Also added needed permissions to AppArmor profile. - Build CUPS with "SystemGroup lpadmin root" in cups-files.conf by default, as CUPS always worked this way but the new patch for supporting the "cups-control" interface of Snaps does not allow implicit permission to everything for root any more. * In the AppArmor profile allow cupsd to write to /run/systemd/notify to notify that it is up and running (systemd service type "notify"). cups (2.3.3op1-5) unstable; urgency=medium * Update Homepage and Source fields to point https://github.com/OpenPrinting/cups/ as Debian's using the OpenPrinting (friendly) fork (Closes: #979461) cups (2.3.3op1-4) unstable; urgency=medium * Drop ancient manual link-doc setting in cups-bsd.postinst * Let cups.service start after nslcd.service (Closes: #977198) cups (2.3.3op1-3ubuntu1) hirsute; urgency=low * Merge from Debian unstable. Remaining changes: - Added extra checking when administrative requests (create queue, remove someone else's job, ...) rach cupsd. If the client is a Snap, it has to plug the cups-control interface to be allowed to do the task. Added libapparmor-dev and libsnapd-glib-dev to the build dependencies. Also added needed permissions to AppArmor profile. - Build CUPS with "SystemGroup lpadmin root" in cups-files.conf by default, as CUPS always worked this way but the new patch for supporting the "cups-control" interface of Snaps does not allow implicit permission to everything for root any more. cups (2.3.3op1-3) unstable; urgency=medium [ Helge Kreutzmann ] * Update German man page (2211t) [ Didier Raboud ] * Patch configure scripts to fix FTBFS on freebsd-gnu systems cups (2.3.3op1-2) unstable; urgency=medium * Backport upstream "Force a 5 second sleep to wait for the job control file to be written" patch, to address s390x test suite timing issue cups (2.3.3op1-1) unstable; urgency=medium * Use OpenPrinting CUPS fork instead of Apple's codebase - Update d/upstream/metadata, d/watch - d/upstream/signing-key.asc: Swap Apple's with Michael R Sweet's * Large patch-suite cleanup thanks to lots of Debian proposals merged upstream; from 40 to 9; - Reorder (upstream-mergeable first, Debian-specific later) - Reword and refresh metadata for the last patches * Set Debian customizations in d/rules instead of patches; - Set --with-max-log-size=0 - Set --enable-sync-on-close - Set --with-error-policy=retry-job * Packaging cleanup; - Drop the Debian-specific systemd units' renaming, now upstream - Drop pre-oldstable postinst ConfigFilePerm handling - Add missing BSD-2-Clause block in debian/copyright - Convert debian/po files to UTF-8 - Drop --as-needed as it's now default in Debian - Drop Ubuntu-specific patch handling, in favour of compile-time option for --disable-browsing - Bump S-V to 4.5.1 without changes needed - Use debian/main as head branch; update d/gbp.conf accordingly - Drop outdated d/source/options * Refresh manpage translation pofiles for 2.3.3op1 cups (2.3.3-4) unstable; urgency=medium * Drop Ubuntu "Make lpoptions list a printer's options correctly also when CUPS is running on an alternative port" patch, refused upstream (Closes: #970725) * Use upstream-merged patches for fax numbers' fix and rastertopwg rounding cups (2.3.3-3ubuntu1) groovy; urgency=medium * Merged with Debian unstable. Remaining changes: - Added extra checking when administrative requests (create queue, remove someone else's job, ...) rach cupsd. If the client is a Snap, it has to plug the cups-control interface to be allowed to do the task. Added libapparmor-dev and libsnapd-glib-dev to the build dependencies. Also added needed permissions to AppArmor profile. * Build CUPS with "SystemGroup lpadmin root" in cups-files.conf by defualt, as CUPS always worked this way but the new patch for supporting the "cups-control" interface of Snaps does not allow implicit permission to everything for root any more. cups (2.3.3-3) unstable; urgency=medium [ Didier Raboud ] * Set lintian overrides for non-changeable upstream choices * Add missing Build-Depends-Package in symbols' files [ Till Kamppeter ] * Resolve DNS-SD-service-name-based URIs correctly also if they are from a service from localhost (like IPP-over-USB, Printer Application, ...) * Make lpoptions list a printer's options correctly also when CUPS is running on an alternative port * Fix fax numbers supplied via GTK print dialog, removing a "Custom." prefix; do not choke if the GTK dialog sends "None" as phone number or pre-dial prefix * Let the rastertopwg filter check rounding errors when calculating the page geometry cups (2.3.3-2ubuntu5) groovy; urgency=medium * In all autopkgtests modify set "LogLevel debug2" in cupsd.conf and "SystemGroup lpadmin root" in cups-files.conf and restart cupsd, the former change to more easily find out what failed and the latter as the default configuration did not allow root to create queues, making all tests fail. cups (2.3.3-2ubuntu4) groovy; urgency=medium * Let the rastertopwg filter check rounding errors when calculating the page geometry. cups (2.3.3-2ubuntu3) groovy; urgency=medium * Do not choke if the GTK dialog sends "None" as phone number or pre-dial prefix. cups (2.3.3-2ubuntu2) groovy; urgency=medium * Fix fax numbers supplied via GTK print dialog, removing a "Custom." prefix. cups (2.3.3-2ubuntu1) groovy; urgency=medium * Added extra checking when administrative requests (create queue, remove someone else's job, ...) rach cupsd. If the client is a Snap, it has to plug the cups-control interface to be allowed to do the task. Added libapparmor-dev and libsnapd-glib-dev to the build dependencies. Also added needed permissions to AppArmor profile. * Resolve DNS-SD-service-name-based URIs correctly also if they are from a service from localhost (like IPP-over-USB, Printer Application, ...) * Make lpoptions list a printer's options correctly also when CUPS is running on an alternative port. cups (2.3.3-2) unstable; urgency=medium * Add missing dh-strip-nondeterminism B-D * cups-daemon: Add ipp-usb Recommends cups (2.3.3-1) unstable; urgency=medium * New 2.3.3 upstream release, with the two -12 security patches cups (2.3.1-12) unstable; urgency=medium * Backport two security patches - CVE-2020-3898: heap-buffer-overflow in libcups’s ppdFindOption() function in ppd-mark.c - CVE-2019-8842: The `ippReadIO` function may under-read an extension field cups (2.3.1-11) unstable; urgency=medium * CI Tests: fix cups-basiccommands: - swap awk with sed; - filter stderr away from known errors - add missing cups-bsd depends to test lpr commands cups (2.3.1-10) unstable; urgency=medium * Add Requires=cups.socket to cups.service, to make sure they start in the right order * CI Tests: Add a test for all CUPS' basic commands, thanks to RedHat * Add Pre-Depends: ${misc:Pre-Depends} to cups-daemon to fix skip-systemd-native-flag-missing-pre-depends lintian flag * Add patch proposal from RedHat to fix leakage of ppd (Issue: #5738) cups (2.3.1-9) unstable; urgency=medium * CI Tests: Ensure the job files are non-empty; should detect more regressions cups (2.3.1-8) unstable; urgency=medium * Add patch to fix cupsctl when loading cupsd.conf (Issue: #5744) cups (2.3.1-7) unstable; urgency=medium * Add patch to fix conversion of PPD InputSlot choice names; this should fix printers ignoring the paper tray selection (Issue: #5740, Closes: #949315) * lintian-brush: - Set upstream metadata fields: Bug-Database, Repository, Repository-Browse - Rewrap some d/changelog entries cups (2.3.1-6) unstable; urgency=medium * Patch test suite to also ignore 'Job held' lines in error_log line counting cups (2.3.1-5) unstable; urgency=medium * Move towards driverless-centered installation: - Drop all printer-driver-* and hplip recommends/suggests * Cleanup all versions from pre- Debian stable * Bump S-V to 4.5.0 without changes needed cups (2.3.1-4) unstable; urgency=medium * Cleanup patch queue for cups' bts URLs and patch names * Update README.Debian to remove leftover SystemdIdleExit references cups (2.3.1-2) unstable; urgency=medium * Drop pwg-raster-attributes.patch * Amend 2.3.1-1 changelog entry to add missing Ubuntu package drop and CVE bug closure cups (2.3.1-1) unstable; urgency=medium [ Didier Raboud ] * New 2.3.1 upstream release: - CVE-2019-2228: The `ippSetValuetag` function did not validate the default language value (Closes: #946782) [ Steve Langasek ] * On Ubuntu i386, drop cups and cups-core-drivers (Closes: #947185) [ Helge Kreutzmann ] * Update German man page (2207t) cups (2.3.0-7) unstable; urgency=medium * Packaging cleanup: - Set upstream metadata fields: Repository - Rely on pre-initialized dpkg-architecture variables - Fix day-of-week for changelog entries 1.0.1-1 - Bump Standards-Version to 4.4.1 without changes needed - Replace dh-exec usage with manual renaming in debian/rules cups (2.3.0-6) unstable; urgency=medium [ Didier Raboud ] * Tests-drivers: Cleanup output [ intrigeri ] * AppArmor: support cups-pdf "Out" directory pointing to almost anywhere below $HOME (Closes: #940578) cups (2.3.0-5) unstable; urgency=medium * Let the test-drivers script stop waiting when a filter is allegedly failed, and give context cups (2.3.0-4) unstable; urgency=medium [ Helge Kreutzmann ] * Update German man page (2197t) cups (2.3.0-3) unstable; urgency=low * Fix autopkgtests for real; refactor lpadmin stderr filtering cups (2.3.0-2) unstable; urgency=low [ Helge Kreutzmann ] * Update German man page (2100t58f39u) [ Didier Raboud ] * Fix autopkgtest by filtering away known stderr messages cups (2.3.0-1) unstable; urgency=low * New 2.3.0 upstream release, to unstable - CVE-2019-8696 and CVE-2019-8675: Fixed SNMP buffer overflows - Fixed IPP buffer overflow - Fixed memory disclosure and DoS issues in the scheduler - CUPS is now provided under the Apache License, Version 2.0, with a GPL2/LGPL2 exception * Rewrite debian/copyright with the above license change, install the NOTICE file * Refresh manpage translations * Refresh upstream metadata * Bump S-V to 4.4 without changes needed cups (2.3~rc1-2) experimental; urgency=medium * Merge 2.2.12-1 from unstable * Add missing colon in closes line. * Set upstream metadata fields: Contact, Name. * Bump debhelper from old 11 to 12. cups (2.3~rc1-1) experimental; urgency=medium * New 2.3~rc1 upstream release: - Refresh patch queue - Refresh manpage translation files - Remove /usr/sbin/accept and /usr/sbin/reject symlinks cups (2.3~b8-4) experimental; urgency=medium * Reset the LogDebugHistory setting to upstream default (LP: #1831021) cups (2.3~b8-3) experimental; urgency=medium * Migrate to dgit-maint-debrebase workflow cups (2.3~b8-2) experimental; urgency=medium * Backport upstream patch: - Block cups-files.conf directives (Issue #5530, Closes: #923115) cups (2.3~b8-1) experimental; urgency=medium * New 2.3~b8 upstream release - Add patch to fix tests' failure * Redo manpage po4a translation infrastructure and installation * Merge 2.2.10-6 from unstable cups (2.3~b7-1) experimental; urgency=medium * New 2.3~b7 upstream release - Drop two patches now included upstream cups (2.3~b6-2) experimental; urgency=medium * Merge 2.2.10-3 * Add patch to allow building with -Werror=maybe-uninitialized * Drop now-superflous --dbgsym-migration dh_strip argument cups (2.3~b6-1) experimental; urgency=medium * New 2.3~b6 upstream pre-release - CVE-2018-4700: Linux session cookies used a predictable random number seed (Closes: #915909) - The `cupsaddsmb` program has been removed (Issue #5449) - The `cupstestdsc` program has been removed (Issue #5450) - Rebase patches * Merge 2.2.10-1 * Manpage translations update * Add patch to fix FTBFS due to wrong `usage(int)` usage * Update libcups2 symbols: +12 cupsRaster* * Cope with cupsaddsmb and cupstestdsc removals: - Remove from cups-client installed files - Remove from manpage translation infrastructure - Remove from libcups2's README.Debian cups (2.3~b5-2) experimental; urgency=medium * Merge 2.2.8-5, rebase patches cups (2.3~b5-1) experimental; urgency=medium * New 2.3~b5 upstream release * Merge 2.2.8-2 cups (2.3~b4-3) experimental; urgency=medium * Merge 2.2.7-4, rebase patches cups (2.3~b4-2) experimental; urgency=medium * Merge 2.2.7-2 * Name source lintian override file correctly cups (2.3~b4-1) experimental; urgency=medium * New 2.3~b4 upstream pre-release - NOTICE: Printer drivers are now deprecated (Issue #5270) * Add cupsEncodeOption@Base 2.3~b4 symbol in libcups2 * Refresh manpage translations cups (2.3~b3-1) experimental; urgency=medium * New 2.3~b3 upstream pre-release - The `lp` and `lpr` commands now provide better error messages when the default printer cannot be found (Issue #5096, Closes: #870463) - CUPS is now provided under the Apache License, Version 2.0 * 2.3~b3 updates: - Update manpage translation files - Add 2 libcups2 symbols introduced in 2.3~b1 - Backport patch from upstream to fix filter's installation (Issue #5247) * CUPS license change: - Add NEWS file to libcups2-dev - Rewrite debian/copyright * Add cups-daemon lintian override for WantedBy=printer.target systemd service file * Bump debhelper compat to 11 cups (2.2.12-2) unstable; urgency=medium [ Helge Kreutzmann ] * Update German man page (2193t) cups (2.2.12-1) unstable; urgency=medium * New 2.2.12 upstream release - CVE-2019-8696 and CVE-2019-8675: Fixed SNMP buffer overflows (Closes: #934957) * Remove 11 backported patches * Fix CVE-2018-4{7,8}00 typo retrospectively in d/changelog (Closes: #933985) * Refresh debian/gitlab-ci.yml * Refresh manpage translations cups (2.2.10-6) unstable; urgency=medium * Backport patch from upstream's 2.2 "stable" branch: - Fix an issue with `PreserveJobHistory` and time values (Issue #5538) (Closes: #921741) cups (2.2.10-5) unstable; urgency=medium [ Helge Kreutzmann ] * Correct error in german manpage translation [ Didier Raboud ] * Backport patches from upstream's 2.2 "stable" branch: - Add USB quirks rule for Xerox printers (Issue #5523) - Add a USB quirks rule for the DYMO 450 Turbo (Issue #5521) cups (2.2.10-4) unstable; urgency=low * Backport patches from upstream's 2.2 "stable" branch: - Protect against continuing to read from a file at EOF (Issue #5473) - Use the same requested-attributes values for all IPP Everywhere setup requests (Issue #5484) - Add a USB quirk rule for the Lexmark E120n (Issue #5478) - Updated the USB quirks rule for Zebra label printers (Issue #5395) - Fix compile error on Linux (Issue #5483) - Stop parsing the Emulators keywords in PPD files (Issue #5475) - Fix potential unaligned accesses in the string pool (Issue #5474) cups (2.2.10-3) unstable; urgency=medium * reprotest errors; cleanup patches: - Remove culprit patches refused for upstream integration: - patch to implement PRINTER_LIST printer filtering (see #3092) - patch to read embedded options from postcript (see #4344) - patch to cope with newline in device IDs (see #4345) - Update no-conffile-timestamp.patch for syntax bug cups (2.2.10-2) unstable; urgency=medium [ Helge Kreutzmann ] * Update German man page (2192t) cups (2.2.10-1) unstable; urgency=medium * New 2.2.10 upstream release - CVE-2018-4700: Linux session cookies used a predictable random number seed (Closes: #915909) * Manpage translations refresh * Drop superfluous dpkg-dev B-D cups (2.2.9-4) unstable; urgency=medium * Cherry-pick from upstream: - Fix handling of MaxJobTime 0 (Issue #5438, LP: #1804576, Closes: #915724) cups (2.2.9-3) unstable; urgency=medium * debian/control cleanup: - Refresh thanks to `cme fix dpkg-control` - Drop xpp suggest - Bump S-V to 4.2.1 without changes needed * Replace revert with upstream patch to fix `lpadmin -E` regression (Issue #5440) cups (2.2.9-2) unstable; urgency=medium * Revert 2.2.9 lpadmin fixes to circumvent 2.2.9 regression revealed by autopkgtest, see https://github.com/apple/cups/issues/5440 cups (2.2.9-1) unstable; urgency=medium * New 2.2.9 upstream release - Remove libcups{cgi1,mime1,ppdc1} packages as they are not built anymore upstream cups (2.2.8-5) unstable; urgency=high * CVE-2018-6553: Fix AppArmor cupsd sandbox bypass due to use of hard links (Closes: #903605) * All these were fixed in 2.2.8: - CVE-2018-4180 Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN) - CVE-2018-4181 Limited Local File Reads as Root via cupsd.conf Include Directive - CVE-2018-4182 cups-exec Sandbox Bypass Due to Insecure Error Handling - CVE-2018-4183 cups-exec Sandbox Bypass Due to Profile Misconfiguration cups (2.2.8-4) unstable; urgency=medium * Backport upstream patches: - Fix A4 crash in Epson 24-pin driver (Closes: #901860) cups (2.2.8-3) unstable; urgency=medium * Renumber first 2.2.8 upload as 2.2.8-1; skip -2. * Drop the "Generalize the input validation of some kinds of attributes." revert in favour of "Fix regressions in ippValidateAttribute" from upstream cups (2.2.8-1) unstable; urgency=medium * New upstream 2.2.8 release - The scheduler allowed environment variables to be specified in the `cupsd.conf` file [ Didier Raboud ] * Revert "Generalize the input validation of some kinds of attributes." Fixes FTBFS on 2.2.8, see https://github.com/apple/cups/issues/5322 * Manpage refresh after 2.2.8 [ Helge Kreutzmann ] * Update German man page (2193t) cups (2.2.7-5) unstable; urgency=medium [ Jean-Paul Guillonneau ] * Update French man page (2185t2f) (Closes: #897406) [ Didier Raboud ] * Manpage refresh after 2.2.7 cups (2.2.7-4) unstable; urgency=medium [ Helge Kreutzmann ] * Update German man page (2187t) [ Didier Raboud ] * Backport an upstream fix: - Allow cupsd daemon to exit on idle (Closes: #898745) cups (2.2.7-3) unstable; urgency=medium * Backport an upstream fix: - Fix another CUPS-Create-Local-Printer crash (Issue #5290) cups (2.2.7-2) unstable; urgency=medium * Autopkgtest: blacklist the now-deprecated 'raw' queues (Closes: #894643) cups (2.2.7-1) unstable; urgency=medium * New 2.2.7 upstream release - NOTICE: Raw print queues are now deprecated (Issue #5269) - Fixed an Avahi crash bug in the scheduler (Issue #5268, LP: #1725749) - Systemd did not restart cupsd when configuration changes were made that required a restart (Issue #5263. Closes: #861470) - The scheduler could crash while adding an IPP Everywhere printer (Issue #5258, LP: #1750514) - The `lp` and `lpr` commands now provide better error messages when the default printer cannot be found (Issue #5096, Closes: #870463) * Add cupsHashString@Base 2.2.7 symbol * Add lintian override for cups.service WantedBy=printer.target cups (2.2.6-5) unstable; urgency=medium * Bump S-V to 4.1.3 without changes needed * Update Vcs-* fields for the move to salsa.d.o cups (2.2.6-4) unstable; urgency=medium * Fix CI: indexv[3,4] Braille drivers cannot print PDF cups (2.2.6-3) unstable; urgency=medium [ Helge Kreutzmann ] * Update German man page translations [ Didier Raboud ] * Bump S-V to 4.1.2 without changes needed * Remove trailing whitespace in d/control and d/changelog * Drop duplicate priority field for cups-bsd cups (2.2.6-2) unstable; urgency=medium * Backport upstream patch from the 2.3 branch: - The `lp` and `lpr` commands now provide better error messages when the default printer cannot be found (Issue #5096, Closes: #870463) * On the repository: reduce the diff to the upstream tarball to zero to allow uploads with dgit. cups (2.2.6-1) unstable; urgency=medium * New 2.2.6 upstream release - DBUS notifications could crash the scheduler (Issue #5143) - Added USB quirks rules for Canon MP540 and Samsung ML-2160 (Issue #5148) - Localization updates (Issue #5152) * Update manpage translations * Fix DEB_HOST_ARCH_OS dpkg-architecture variable setting * Move source local-options to options cups (2.2.5-2) unstable; urgency=medium [ Helge Kreutzmann ] * Update German man page translations cups (2.2.5-1) unstable; urgency=medium * New 2.2.5 upstream release - The scheduler now creates a PID file when not running on demand with a modern service launcher (Issue #5080) - The CUPS library did not reuse domain sockets (Issue #5098, Closes: #868316) [ Didier Raboud ] * Patches rework: - Drop Debian-specific pidfile patch - Drop the 8 patches which were backported from upstream: - The `cupsGetDests` function incorrectly returned an empty list of printers if there was no default printer (Issue #5046) - Workaround for wrong resolution in PPD Generator for driverless printing setup - Fix an Avahi-related crash bug in the scheduler (Issues #5085 & #5086) - The CUPS library did not reuse domain sockets (Issue #5098) - Fix the interactions between the "print-quality" and "cupsPrintQuality" options (Issue #5090) - Fix mapping and defaulting of print-quality/cupsPrintQuality (Issue #5090) - Fix for resolution list sorting in the PPD generator which caused segfaults when generating PPDs for driverless printing. - The scheduler (incorrectly) woke up once per second to remove stale temporary queues (Issue #5100) * Stop symlinking the ssl-cert snakeoil certificates, CUPS will generate them on-demand (with a different name) * Drop superfluous autotools-dev B-D * Let cups-bsd suggest one compatible inet server: inetutils-inetd (Closes: #676472) * Refresh manpage translations * Make cups-bsd priority optional, as 'extra' is deprecated [ intrigeri ] * AppArmor: allow dac_read_search, now needed on top of dac_override (Closes: #872817) cups (2.2.4-9) unstable; urgency=medium [ Helmut Grohne ] * Fix FTCBS; fix manpage-translations.patch (Closes: #878326) cups (2.2.4-8) unstable; urgency=medium [ Didier Raboud ] * Drop superfluous dh-systemd Build-Depend * Drop --with autotools_dev and autotools-dev B-D, as these are in the default dh sequence in compat 10 [ Till Kamppeter ] * test-drivers script of autopkgtest for breakage with cups-filters 1.17.6 and later: skip gen-brf.ppd and gen-ubrl.ppd as these are test/debug PPD for Braille embossers which do not accept PDF as input format cups (2.2.4-7) unstable; urgency=medium [ Till Kamppeter ] * Backport upstream fixes: - Fix the interactions between the "print-quality" and "cupsPrintQuality" options (Issue #5090) - Fix mapping and defaulting of print-quality/cupsPrintQuality (Issue #5090) - Fix for resolution list sorting in the PPD generator which caused segfaults when generating PPDs for driverless printing - The scheduler (incorrectly) woke up once per second to remove stale temporary queues (Issue #5100) cups (2.2.4-6) unstable; urgency=medium [ intrigeri ] * AppArmor: allow dac_read_search, now needed on top of dac_override (Closes: #872817) cups (2.2.4-5) unstable; urgency=medium * Backport one upstream patch, thanks to Christoph Pleger - The CUPS library did not reuse domain sockets (Issue #5098, Closes: #868316) cups (2.2.4-4) unstable; urgency=low * Backport two upstream patches, thanks to Till Kamppeter - The IPP Everywhere PPD generator now sorts the supported resolutions before choosing them for draft, normal, and best quality modes (Issue #5091) - Fix an Avahi-related crash bug in the scheduler (Issues #5085 & #5086) cups (2.2.4-3) unstable; urgency=medium [ Helge Kreutzmann ] * Update German man page translations cups (2.2.4-2) unstable; urgency=low * Cleanup patch suite to come closer to upstream: - Remove IPP backend from CUPS 1.4 - Remove cupsd upstart support - Remove a test weakening for mips - Remove libcupsppdc dynamic linking for mipsen * Don't install the ipp14 backend * Drop all postinst code managing versions before the current oldoldstable (wheezy, 1.5.3-5) * Drop all postinst code managing versions before the current oldstable (jessie, 1.7.5-11) * Drop the Ubuntu-specific upstart patches and files * Drop Launchpad PNG_PKG_MANGLE workaround * Drop two unused lintian overrides * Allow parallel builds * Backport upstream patch: - The `cupsGetDests` function incorrectly returned an empty list of printers if there was no default printer (Issue #5046, Closes: #867818) [ Vangelis Skarmoutsos ] * Add Greek translation for debconf templates (Closes: #867339) cups (2.2.4-1) unstable; urgency=medium * New 2.2.4 upstream release * Cope with upstream documentation format change to markdown * Migrate to debhelper compat 10 * Add two new libcups2 symbols * Lintian overrides updates: - Update cups' override for the non-standard-executable-perm usb backend - Add source override for the libcups{,image}2-dev circular dependency * Make libcupsimage2-dev Multi-Arch: same * Bump Standards-Version to 4.0.0 - Make sure to update config.{sub,guess} at build time cups (2.2.3-2) unstable; urgency=low * Migrate 2.2.3 to unstable cups (2.2.3-1) experimental; urgency=medium * New 2.2.3 upstream release * Cherry-pick upstream fix for regression in job file preservation cups (2.2.2-2) experimental; urgency=medium * Use /run instead of /var/run everywhere meaningful (Closes: #858341) * /run/cups: - in debian/rules; pass --with-rundir=/run/cups - update cups.init * /run/cups/cupsd.pid: - update cups.init - update pidfile.patch * /run/cups/printcap: - in debian/rules; update --with-printcap - update cups-daemon postinst * /run/cups/cups.sock: - update cups postinst and postrm for the lpadmin calls - update the autopkgtest for the lpadmin call - update the libcups2 example script - update the upstart script * /run/cups/certs: - update cups.init - update the upstart script Thanks-To: Russell Coker <russell@coker.com.au> [ Jamie Strandboge ] * Update debian/local/apparmor-profile (Closes: #858571) - allow cupsd and cups-pdf to communicate via Unix sockets (LP: #1675503) - adjust cups-pdf log location - allow cups-pdf to read /etc/cups/ppd/*.ppd - silence noisy denials for cupsd occasionally trying to send signals to unconfined - allow capability wake_alarm (seen in LP: 1641985) cups (2.2.2-1) experimental; urgency=medium * New 2.2.2 upstream release * Refresh manpage translations * dpkg-source: update extend-diff-ignore to cope with the difference between upstream's VCS and tarball cups (2.2.1-56-ga2f30a72f-1) experimental; urgency=medium * New 2.2.1+ upstream snapshot - Updated systemd config files (Issue #4935) [ Didier Raboud ] * Merge 2.2.1-5 from unstable [ Till Kamppeter ] * Updated debian/control: CUPS does not support PPD-less printing any more, we do driverless printing instead cups (2.2.1-46-g10887d272-2) experimental; urgency=medium * Merge 2.2.1-4 from unstable. cups (2.2.1-46-g10887d272-1) experimental; urgency=medium * New 2.2.1+ upstream snapshot - Fix assymetric resolutions in IPP Everywhere and Apple Raster (Closes: #848164) cups (2.2.1-41-g49c592936-1) experimental; urgency=medium * New 2.2.1+ upstream snapshot cups (2.2.1-8) unstable; urgency=medium [ JP Guillonneau ] * French manpages translation update (Closes: #852662) cups (2.2.1-6) unstable; urgency=medium * Cherry-pick three more upstream fixes: - Add a USB quirk rule for the Kyocera Ecosys P6026cdn (Issue #4900) - Fix rastertopwg line offset bug (Issue #4942) - Fix Russian localization bug (Issue #4946) cups (2.2.1-5) unstable; urgency=medium * Cherry-pick and adapt upstream's systemd configuration update to ensure clean shutdown of CUPS (LP: #1642966) cups (2.2.1-4) unstable; urgency=medium [ Didier Raboud ] * Cleanup the cups debconf questions from 'parallel' leftovers (Closes: #848718) [ intrigeri ] * AppArmor profile: support merged-/usr (Closes: #846868) cups (2.2.1-3) unstable; urgency=low [ Helge Kreutzmann ] * Update German man page cups (2.2.1-2) unstable; urgency=medium [ Helge Kreutzmann ] * Several fixes to german manpages due to proofreading on debian-l10n-german cups (2.2.1-1) unstable; urgency=medium * New 2.2.1 upstream release - Updated man pages (PR #4885, Closes: #838854) [ Helge Kreutzmann ] * Update German man page [ Didier Raboud ] * Demote libcupsfilters{1,-dev} dependencies to recommends (Closes: #711697) * Remove lsb Depends from cups, bump cups-daemon's to 3.2-14~ [ Helmut Grohne ] * Fix FTCBFS (Closes: #837936) - Build mantohtml with the build architecture compiler - Do not execute genstrings during build cups (2.2.0-2) unstable; urgency=medium * Backport upstream patch to handle partial failures when connecting (Closes: #838434) cups (2.2.0-1) unstable; urgency=medium * New 2.2.0 upstream release - http*Connect did not work on Linux when cupsd was not running (Issue #4870) [ Helge Kreutzmann ] * Several fixes due to proofreading on debian-l10n-german [ Didier Raboud ] * Update the manpage-po4a README cups (2.2~rc1-5) experimental; urgency=medium * In tests, use variable test-environment directory CUPS_TESTBASE, thanks to Santiago Vila for the hint. * Patches: - Drop now-unneeded 'tests-use-cupsfilters.patch' patch - Refresh some patch titles - Rename Ubuntu-specific patches' directory to debian/patches-ubuntu to avoid wrong deletions when using git-dpm update-patches * Remove now-unneeded cups-filters from Build-Depends cups (2.2~rc1-4) experimental; urgency=medium * Revert unintentional Ubuntu patches removal; refresh them cups (2.2~rc1-3) experimental; urgency=medium [ Jeremy Bicha ] * Add libcups2-dev dependency on libcupsimage2-dev, as ppd.h includes raster.h (Closes: #833889) cups (2.2~rc1-2) experimental; urgency=medium * Add patch to ignore the 'Unable to write uncompressed print data: Broken pipe' error on kfreebsd * Initialize git-dpm; reword most patch descriptions from the original commits cups (2.2~rc1-1) experimental; urgency=medium * New 2.2~rc1 upstream release * Refresh patches cups (2.2~b2-1) experimental; urgency=low * New 2.2b2 upstream release * Patches: - Refresh all - Drop the wrong fix for #2763 - Udate patch to use the ipv4's 127.0.0.1 instead of localhost to also patch the ipp:// shared printer URL, that fixes the tests - Add patch to revert the addition of pdftourf usage in the test-suite * Refresh manpage translations * Rewrite debian/watch following the new upstream schema cups (2.1.4-4) unstable; urgency=medium * Patch a final lpstat call to really make the build reproducible when built in italian cups (2.1.4-3) unstable; urgency=low * Change the default ErrorPolicy from 'stop-printer' to 'retry-job' - Update documentation, manpage and manpage translations - Add a cups-daemon NEWS entry (Closes: #631025) * Patch another lpstat call to also make the build reproducible when built in italian cups (2.1.4-2) unstable; urgency=medium [ Helge Kreutzmann ] * Update German man page (2118t3f1u) [ Didier Raboud ] * Add patch to force LC_ALL=C on lpstat when grepping its output for Description; should fix the FTBFS on forced-languages reproducible builds environments cups (2.1.4-1) unstable; urgency=medium * New 2.1.4 upstream release * Update debian/watch to check for new releases on GitHub * Remove 3 patches backported from upstream, refresh some * Refresh manpage translations cups (2.1.3-6) unstable; urgency=medium [ Till Kamppeter ] * De-activate CUPS web interface when the files for it are not installed. This allows for auto-shutdown on mobile device installations. * Make CUPS with the Upstart support patch (Ubuntu-only) also build on ubuntuBSD (LP: #1582002) [ Helge Kreutzmann ] * Update German translation [ Didier Raboud ] * Backport upstream-included patch to fix malformed device-id for printers found by dnssd, thanks to Laurent Bigonville. * Bump S-V to 3.9.8 without changes needed * Drop duplicate 'using' word in libcups2's README.Debian cups (2.1.3-5) unstable; urgency=medium * Automatically generate debug package, B-D against debhelper >= 9.20160114 * Convert homepage and Vcs-Browser to https urls * Drop the patch to allow auto-shutdown on idle with active web interface, this induces a regression for web-interface users (Closes: #816490) cups (2.1.3-4) unstable; urgency=medium [ Till Kamppeter ] * Quirk rule to make Lexmark C540n work (STR #4778) * Quirk rule to make Xerox WorkCentre 3220 work (LP: #1406203, STR #4789) cups (2.1.3-3) unstable; urgency=medium * Install missing cups-snmp.8 manpage (Closes: #816316) cups (2.1.3-2) unstable; urgency=medium * Drop unused libslp-dev Build-Dependency (Closes: #815359) * Bump Standards-Version to 3.9.7 without changes needed cups (2.1.3-1) unstable; urgency=medium * New 2.1.3 upstream release: - /admin resource files (like config files of CUPS) were not served when the web interface was disabled, breaking utilities like "cupsctl" (CUPS STR #4755) cups (2.1.2-2) unstable; urgency=medium [ Till Kamppeter ] * Add patch to avoid letting pending subscriptions prevent CUPS from auto-shutdown when idle (CUPS STR#4754) * Add patch to allow auto-shutdown when idle if the web interface is not turned off in the CUPS configuration, the web interface is too important (CUPS STR #4755) [ Didier Raboud ] * Remove libpng12-dev Build-Depends alternative to libpng-dev (Closes: #810183) cups (2.1.2-1) unstable; urgency=low * New 2.1.2 upstream release * Drop patches included upstream: - usb-backend-fix-infinite-loop-when-usblp-module-attached.patch - usb-backend-delayed-closing-for-old-laserjets.patch - fix-ppd-file-load-for-ipp-printers.patch Refresh 2 other patches * Update Apple Inc. Copyright years in debian/copyright cups (2.1.0-7) unstable; urgency=medium [ Till Kamppeter ] * Removed deprecated no-op "--upstart-only" option from dh_installinit call in debian/rules (LP: #1519228) * Moved empty directories /etc/cups/ppd and /etc/cups/interfaces to the cups-core-drivers binary package * Moved mime.convs from cups-server-common to cups-core-drivers to get it onto mobile devices with level-2 printing stack (support for IPP printers with common PDLs auto-set-up by cups-browsed) cups (2.1.0-6) unstable; urgency=medium [ Till Kamppeter ] * Move /usr/lib/cups/daemom/cups-exec from the "cups" binary package to the "cups-daemon" binary package as it is already needed for basic job execution and therefore already in the level-1 (minimum) printing stack (LP: #1509423) cups (2.1.0-5) unstable; urgency=medium [ Till Kamppeter ] * Add upstream patch to fix cupsGetPPD* with IPP print queues (CUPS STR #4725) cups (2.1.0-4) unstable; urgency=medium [ Till Kamppeter ] * Corrected info header (author and Debian bug closure) of usb-backend-fix-infinite-loop-when-usblp-module-attached.patch * USB-backend: Added new quirk rules for delayed closing of the backend for several older HP LaserJet printers (CUPS STR #4549) [ Didier Raboud ] * Add maintscript stanzas to properly remove the oopstops.{convs,types} conffiles in /etc/cups that are not shipped since 1.3.10-3 (Closes: #799025) cups (2.1.0-3) unstable; urgency=medium [ Helge Kreutzmann ] * Update German man page (2114t4f1u) [ Till Kamppeter ] * The libusb-based USB backend sometimes did not unload the kernel usblp module if it was preventing the backend from accessing the printer causing an infinite loop taking 100% CPU (CUPS STR #4707) cups (2.1.0-2) unstable; urgency=low * Upload to unstable [ Helge Kreutzmann ] * Update German man page (2105t4f1u) [ Jean-Paul Guillonneau ] * Update french manual pages translations, for 2.0.3-6 (Closes: #798257) [ Didier Raboud ] * Refresh the manpage translations for 2.1.0 * Given upstream's new enforcement of ConfigFilePerm on /etc/cups/ppd/ files, make sure this is enforced on upgrade cups (2.1.0-1) experimental; urgency=medium * New 2.1.0 upstream release [ Till Kamppeter ] * Removed scheduler-create-ppd-correct-permissions.patch, included upstream * Refreshed patches with quilt for the new 2.1.0 source code [ Didier Raboud ] * Refresh manpage translations cups (2.1~rc1-4) experimental; urgency=medium [ Till Kamppeter ] * Add patch from upstream to fix scheduler and make sure that the permissions and ownerships of PPDs in /etc/cups/ppd/ are always the same (STR #4703, Closes: #784271) cups (2.1~rc1-3) experimental; urgency=medium * Remove leftover test changelog entry * Update the GetJobs patch in tests for the mips FTBFS cups (2.1~rc1-2) experimental; urgency=medium * Add patch to use the IPv4 127.0.0.1 address instead the 'localhost' name in tests, this could fix the reproducible builds cups (2.1~rc1-1) experimental; urgency=low * New 2.1~rc1 upstream version [ Helge Kreutzmann ] * Update German man page (2000t39f71u) [ Didier Raboud ] * Merge upstream version 2.0.4 - Fixed processing of server overrides without port numbers (STR #4675, Closes: #711327, #791876) * Drop patches included upstream: - str4538-fix-redirection-from-cgi-scripts.patc - str4646-fix-the-activejobs-loop-in-cupsdcheckjobs.patch - cupsd-logs-manpage-in-section-5.patch - libsystemd.patch - str4679-fix-local-domainsocket-access-checking.patch Refresh other patches cups (2.1~b1-4) experimental; urgency=medium * Merge 2.0.3-10 from unstable cups (2.1~b1-3) experimental; urgency=medium * Merge 2.0.3-8 from unstable cups (2.1~b1-2) experimental; urgency=low [ Michael Biebl ] * Transition from libsystemd-daemon to libsystemd: - Update Build-Depends - Patch the configuration system (Closes: #779770) cups (2.1~b1-1) experimental; urgency=low * New 2.1~b1 release - No longer install banner files since third-party banner filters now supply their own (STR #4518) - The scheduler no longer listens on the loopback interface unless the web interface or printer sharing are enabled - Added a PPD generator for IPP Everywhere printers (STR #4258) - Now install "default" versions of more configuration files - Added SSLOptions values to allow Diffie-Hellman key exchange and disable TLS/1.0 support. - The scheduler now supports advanced ASL and journald logging when "syslog" output is configured (STR #4474) - The scheduler now supports logging to stderr when running in the foreground (STR #4505) * Drop two patches included upstream * Refresh all patches * Refresh manpage translations * Install the cups-files.conf and snmp.conf default files in usr/share/cups cups (2.0.3-10) unstable; urgency=medium * Backport upstream patches: - Fix redirections from CGI scripts (STR: #4538) - Fix the active jobs loop (STR: #4646) cups (2.0.3-9) unstable; urgency=medium [ Helge Kreutzmann ] * Update German man page (1606t320f184u) [ Didier Raboud ] * Add patch to relax socket access checking to only check read-and-write, not execution (Closes: #792730) * Add maintscript stanzas to properly remove the mime.convs and mime.types conffiles in /etc/cups that are not shipped in this path since 1.4.0~svn8773-1~ (Closes: #792731, LP: #1475683) cups (2.0.3-8) unstable; urgency=medium * Mark the libsystemd as reported (and fixed) upstream * Translate and install the cupsd-helper.8 manpage (Closes: #792484) * Update the manpage translation infrastructure: install multiple missing new manpages * Add patch to move cupsd-logs manpage to section 5 cups (2.0.3-7) unstable; urgency=medium [ Michael Biebl ] * Transition from libsystemd-daemon to libsystemd: - Update Build-Depends - Patch the configuration system (Closes: #779770) cups (2.0.3-6) unstable; urgency=low * Fix the 'which' calls, causing uninstallation error of cups-bsd cups (2.0.3-5) unstable; urgency=low * Amend the previous changelog to reflect its upload to unstable * Add patch to make some attributes optional in the IPP-1.1 3.2.6 GetJobs test, that was causing a FTBFS on mips cups (2.0.3-4) unstable; urgency=medium * Upload to unstable [ Helge Kreutzmann ] * Update German man page (1366t464f280u) [ Didier Raboud ] * Replace full paths in maintainer scripts '[ -x ]' by 'which' calls * Refresh debian/copyright thanks to cme * Remove the superfluous XS-Testsuite header in debian/control cups (2.0.3-3) experimental; urgency=medium [ Till Kamppeter ] * Created new binary package cups-ipp-utils for the IPP utilities ippfind, ipptool, and ippserver. [ Didier Raboud ] * Install the cups-ipp-utils translated manpages in the correct package * Translate the ippserver.1 manpage too, refresh the manpage translation files * Add debian/gbp.conf to ease dch and import-orig * Update README.source with the latest branch names cups (2.0.3-2) experimental; urgency=medium [ Till Kamppeter ] * Fixed IPP Everywhere PPD generator patch. It passes the tests now. [ Helge Kreutzmann ] * Update German man page (870t789f404u) [ Didier Raboud ] * Set QUILT_PATCHES in the two README files that need it (Closes: #788481) cups (2.0.3-1) experimental; urgency=medium * New 2.0.3 upstream release - Security: Fixed CERT VU #810572 exploiting the dynamic linker (STR #4609) - CVE-2015-1158 Improper Update of Reference Count - CVE-2015-1159 Cross-Site Scripting - Security: The scheduler could hang with malformed gzip data (STR #4602) [ Didier Raboud ] * Remove the upstream fix for the FTBS on mips through reordering of IPP-1.1 tests, included in 2.0.3 * Refresh patches * Disable the IPP Everywhere PPD generator patch, as it breaks the test-suite [ Till Kamppeter ] * Fixed PPD generator (for IPP printers) to write floating-point numbers in a locale-neutral way (always with decimal point, CUPS STR #4579). * Make fix for floating point number output in the PPD generator also apply to the PageRegion option (CUPS STR #4579). * Let the PPD generator not create a ColorModel option without choices (CUPS STR #4638). * Fix values of the pwg-raster-document-types-supported attribute of ippserver, the IPP printer emulator. cups (2.0.2-3) experimental; urgency=medium [ Till Kamppeter ] * Re-introduced the patch for IdleExitTimeout under upstart, but Ubuntu-only. * Added PPD generator to support IPP Everywhere printers (Use "lpadmin -p pr -E -v ipp://... -m everywhere" or equivalent operation in the CUPS web interface). * Exclude driver "everywhere" from auto package tests as it only works with IPP URIs. * Refreshed patches with quilt. [ Didier Raboud ] * Merge Ubuntu's AppArmor profile diff in Debian's (Closes: #779901) * Import upstream fix for the FTBS on mips through reordering the IPP-1.1 tests to avoid a timing issue cups (2.0.2-2) experimental; urgency=low [ Till Kamppeter ] * Removed patches for USB quirk rules which got included upstream * Updated Ubuntu-specific patch for the AppArmor profile [ Didier Raboud ] * Drop the patch for IdleExitTimeout under upstart, as it breaks non-linux builds cups (2.0.2-1) experimental; urgency=low * New 2.0.2 upstream version - Add 2.0.2 symbols - Drop 5 upstream patches that were from the upstream 2.0 branch - Drop systemd patches as systemd support got included upstream - Drop the patch avoiding the linking against libgrypt, as it got included upstream - Add patch and dh-exec magic to rename the upstream systemd units away from org.cups.cupsd.* - Drop all references to lppasswd, as it got dropped by upstream in 2.0b1 - Refresh all patches for 2.0.2 - Rebase the manpage translation infrastructure for 2.0.2 - Refresh all test-related patches - Update debian/copyright with the updates made in 2.0.0 - Update configure arguments [ Till Kamppeter ] * Merged in more Ubuntu-specific AppArmor profile changes: - Fix peer on signal rule to use /usr/sbin/cupsd//third_party (LP: #1376611) - Temporarily use attach_disconnected to work around LP: 1373070. - Allow all signals to /usr/sbin/cupsd//third_party - Allow unix to /usr/sbin/cupsd//third_party (LP: #1382042) - Added "flags=(attach_disconnected)" to third_party profile (LP: #1413313) * Fix -h option not honoured when CUPS_SERVER variable is defined (LP: #1352809) cups (1.7.5-10) unstable; urgency=medium * Change ppd-updaters trigger to use interest-noawait instead of interest to avoid trigger cycles (Closes: #772871, #771765) cups (1.7.5-9) unstable; urgency=medium * Drop color-management patch; it got refused by upstream and is not available in non-english translations (Closes: #763517, #768163) * Drop the upstream patch to limit Get-Jobs replies to 500, as this triggers a FTBS on mips cups (1.7.5-8) unstable; urgency=medium * Add a USB quirk fix for Brother HL-1250 (Closes: #712512) * Backport upstream patch to fix random crash in TLS handling. The patch also enables coredumps.(Closes: #760475, #760476) cups (1.7.5-7) unstable; urgency=medium * Revert to not socket-activating CUPS (Closes: #747073) - Drop patch to let CUPS write the systemd.socket configuration files - Replace preinst generation of the same configuration file, delete them on upgrade - Drop the symlink enforcing the automatic configuration - Update NEWS and README.Debian to reflect that change - Create two cups socket configuration examples, document their existence in README.Debian - Update the systemd socket activation patch to include PassCredentials=true in the socket configuration, following upstream's feedback - Disable automatic idle exit timeout under systemd, as this will get activated without socket activation cups (1.7.5-6) unstable; urgency=medium * Backport several upstream patches: - Update the patch restoring the access to cupsd.conf with Upstream's latest - Fix the icon display in web interface during server restart (STR: #4475) - Enforce correct newest-to-oldest order in the completed jobs returned by the scheduler (STR: #4396) - Limit Get-Jobs replies to 500 jobs (STR: #2913) - Do not let cupsGetPPD* return a symlink if it was not readable by the user (STR: #4500). This should help with #764253. * Dropped the FINAL_CONTENT_TYPE revert, stick back to upstream, following RedHat's analysis * Add tests' patch to ignore the 'Address family not supported' that breaks the errorlines counting on buildds without a working IPv6 stack cups (1.7.5-5) unstable; urgency=medium [ Didier Raboud ] * In debian/rules, add conditionals to enable build-indep build * Bump Standards-Version to 3.9.6 without changes needed * Remove Martin Pitt, Masayuki Hatta and Jeff Licquia from the Uploaders' field; with many thanks for their past work on CUPS. [ Ondřej Surý ] * Remove libjpeg8-dev from libcupsimage2-dev (Closes: #765919) cups (1.7.5-4) unstable; urgency=medium [ intrigeri ] * In the apparmor profile, drop features yet unsupported in Debian (Closes: #763673) [ Didier Raboud ] * Add the Ubuntu-specific apparmor profile as Ubuntu-specific patch cups (1.7.5-3) unstable; urgency=medium [ Didier Raboud ] * Add two USB quirk fixes for Canon MX310 and MX320 printers (LP: #1346868, #1369547) [ Jamie Strandboge ] * Update the apparmor-profile - move Ux to Cx -> third_party and provie a third_party child profile. In this manner, we can add some modest confinement (can't change MAC policy, change_profile or mount) but more importantly it allows us to specify peer=third_party to restrict where the strictly confined cups process can send signals (LP: #1370930) - allow r of /var/cache/samba/*.tdb (LP: #1371097) - allow r of /var/{cache,lib}/samba/printing/printers.tdb cups (1.7.5-2) unstable; urgency=medium [ Helge Kreutzmann ] * Update German man page (1537t) [ Till Kamppeter ] * Updated color management extension patch to the newest version from Joseph Simon, especially to fix PPD updates via the web interface (LP: #1362321). [ Didier Raboud ] * Replace the RedHat patch restoring the access to cupsd.conf and logfiles with upstream's cups (1.7.5-1) unstable; urgency=medium * New 1.7.5 upstream release - Drop upstream-originated patches, refresh all - Refresh manpage translations for new upstream release cups (1.7.4-5) unstable; urgency=medium [ Till Kamppeter ] * Color management extensions: Added color management checkboxes to the Japanese version of the web interface, on request of Deng Pang from Ricoh. [ Didier Raboud ] * Add patch from RedHat to restore access to logfiles from the webinterface, regression from the fix for STR: #4455 (Closes: #757964) cups (1.7.4-4) unstable; urgency=medium * Add patch to ignore the 'Failed to connect to system bus' error that sometimes breaks the errorlines counting on various architectures * Refresh cupsd-write-systemd-Port patch cups (1.7.4-3) unstable; urgency=medium * In cups-daemon's postinst, remove leftover cups.patch symlink in multi-user.target.wants (Closes: #755932) * Correct default listening address used under systemd for new installations; also correct the discrepancy on upgrades (Closes: #755807) cups (1.7.4-2) unstable; urgency=medium * Install systemd's cups.path in paths.target instead of multi-user.target (Closes: #755690) * Import two upstream patches: - Fix for unsufficient permission checking for files accesses from the webinterface (STR: #4455) CVE-2014-5029 Incomplete fix CVE-2014-3537 CVE-2014-5030 Disallow symlinks for directory index files CVE-2014-5031 File/directory does not have world read permissions for directory index files - Fix for CGI scripts (STR: #4454) cups (1.7.4-1) unstable; urgency=medium * New 1.7.4 upstream release - Security: The web interface incorrectly served symlinked files and files that were not world-readable, potentially leading to a disclosure of information (STR #4450, CVE-2014-3537) - Added USB quirk rule for Lexmark E230 (STR #4448) - Fix broken links on the web homepage (STR #4453, Closes: #754243) - Refresh patches [ Helge Kreutzmann ] * Update German man page (1531t) [ Didier Raboud ] * Stop managing the rename of /etc/pam.d/cups in the cups binary package: /etc/pam.d/cups is not renamed anymore but is now just installed from a different package (cups-daemon). (Closes: #753439) Thanks to Raphaël Hertzog cups (1.7.3-6) unstable; urgency=medium * Discard lpadmin stderr in the tests' utility, fixes autopkgtests. cups (1.7.3-5) unstable; urgency=medium * Add a trap to test-drivers utility, move it to cups-client instead of cups * Run the tests using the installed test-drivers utility cups (1.7.3-4) unstable; urgency=medium * In cups-config, run krb5-config at runtime to avoid architecture differences due to the output of krb5-config; add check at build-time to avoid this happening again (Closes: #751157) * Fix dpkg-architecture calls in cups-config * Make the test-drivers utility more generic, install it in the cups package to be able to use it in other packages' autopkgtests cups (1.7.3-3) unstable; urgency=medium * Fix autopkgtests: - only use accessible files, - extend the tests to test-print all PDFs in the source test/ directory, - abstract the drivers testing script as a separate script. cups (1.7.3-2) unstable; urgency=medium [ Till Kamppeter ] * Added IPP attributes required by IPP Everywhere for PWG Raster when PWG Raster as input format is supported. This is needed for shared printers correctly emulating an IPP Everywhere printer (CUPS STR #4428) [ Didier Raboud ] * Add SystemdIdleExit and IdleExitTimeout references in cupsd.conf manpage * Rename the cups pam configfile from cups-daemon to cups (Closes: #750602) * Rewrite the autopkgtests suite: - Drop isolation-container restriction - Test cups-core-drivers with no driver for now - Test cups with all available drivers [ Jean-Paul Guillonneau ] * Update the manpages' french translation (Closes: #744987) cups (1.7.3-1) unstable; urgency=medium * New 1.7.3 upstream release - Refresh patches * Add one simple autopackagetest * In cups-daemon.preinst, only write ListenStream stanzas for 'Port' OR 'Listen localhost', not both (Closes: #742668) * Explicitly install README.Debian to libcups2, add symlinks in various other packages (Closes: #750532) cups (1.7.2-3) unstable; urgency=medium [ Till Kamppeter ] * Updated version numbers in Replaces:/Breaks: for cups-bsd to also work with updating CUPS under Ubuntu (LP: #1315766) cups (1.7.2-2) unstable; urgency=low [ Helge Kreutzmann ] * Update German man page (1526t) [ Till Kamppeter ] * Removed Ubuntu difference in the dependency of cups-deamon on avahi-daemon: avahi-daemon is a Recommends for both now; remove "on started avahi-daemon" from the "start on ..." rule in /etc/init/cups.conf upstart script (LP: #1242185, #1178172) * Add two patches for Upstart socket-triggered activation: - allow starting cupsd socket-triggered through…
- Loading branch information