Change logs for cups source package in Trusty

  • cups (1.7.2-0ubuntu1.11) trusty-security; urgency=medium
    
      * SECURITY UPDATE: predictable session cookies
        - debian/patches/CVE-2018-4700.patch: use better seed in cgi-bin/var.c.
        - CVE-2018-4700
    
     -- Marc Deslauriers <email address hidden>  Fri, 16 Nov 2018 14:07:12 -0500
  • cups (1.7.2-0ubuntu1.10) trusty-security; urgency=medium
    
      * SECURITY UPDATE: scheduler crash via DBUS notifications
        - debian/patches/CVE-2017-18248.patch: validate requesting-user-name in
          scheduler/ipp.c.
        - CVE-2017-18248
      * SECURITY UPDATE: privilege escalation in dnssd backend
        - debian/patches/CVE-2018-418x.patch: don't allow PassEnv and SetEnv to
          override standard variables in man/cups-files.conf.man.in,
          man/cupsd.conf.man.in, scheduler/conf.c.
        - CVE-2018-4180
      * SECURITY UPDATE: local file read via Include directive
        - debian/patches/CVE-2018-418x.patch: remove Include directive handling
          in scheduler/conf.c.
        - CVE-2018-4181
      * SECURITY UPDATE: AppArmor sandbox bypass
        - debian/local/apparmor-profile: also confine
          /usr/lib/cups/backend/mdns.
        - CVE-2018-6553
    
     -- Marc Deslauriers <email address hidden>  Fri, 22 Jun 2018 13:53:17 -0400
  • cups (1.7.2-0ubuntu1.9) trusty-security; urgency=medium
    
      * SECURITY UPDATE: Incorrect whitelist permits DNS rebinding attacks
        - debian/patches/CVE-2017-18190.patch: Don't treat "localhost.localdomain"
          as an allowed replacement for localhost, since it isn't
        - CVE-2017-18190
    
     -- Chris Coulson <email address hidden>  Mon, 19 Feb 2018 17:45:40 +0000
  • cups (1.7.2-0ubuntu1.8) trusty; urgency=medium
    
      * Fixed processing of server overrides without port numbers. (LP: #1665018)
    
     -- Dariusz Gadomski <email address hidden>  Wed, 15 Feb 2017 15:55:27 +0100
  • cups (1.7.2-0ubuntu1.7) trusty-security; urgency=medium
    
      * Disable SSLv3 with option to turn back on.
        - debian/patches/disable-sslv3.patch: AllowSSL3 turns SSLv3
          back on and AllowRC4 turns on just the RC4 cypers. (LP: #1505328)
    
     -- Bryan Quigley <email address hidden>  Tue, 10 Nov 2015 21:08:44 +0000
  • cups (1.7.2-0ubuntu1.6) trusty-security; urgency=medium
    
      * SECURITY UPDATE: privilege escalation through dynamic linker and
        isolated vulnerabilities
        - debian/patches/str4609.patch: apply patch from upstream to
          cgi-bin/ipp-var.c, cgi-bin/template.c, scheduler/client.c,
          scheduler/env.c, scheduler/ipp.c, scheduler/job.c, scheduler/main.c.
        - CVE number pending
    
     -- Marc Deslauriers <email address hidden>  Thu, 04 Jun 2015 08:08:11 -0400
  • cups (1.7.2-0ubuntu1.5) trusty-security; urgency=medium
    
      * SECURITY UPDATE: buffer overflow in cupsRasterReadPixels
        - debian/patches/CVE-2014-9679.patch: validate cupsBytesPerLine and
          clear returned buffer in filter/raster.c.
        - CVE-2014-9679
     -- Marc Deslauriers <email address hidden>   Wed, 25 Feb 2015 14:03:54 -0500
  • cups (1.7.2-0ubuntu1.4) trusty-proposed; urgency=medium
    
      * Fix -h option not honoured when CUPS_SERVER variable
        is defined. (LP: #1352809)
     -- Louis Bouchard <email address hidden>   Mon, 09 Feb 2015 11:22:42 +0100
  • cups (1.7.2-0ubuntu1.3) trusty-proposed; urgency=medium
    
      * debian/patches/mime-types-fix-pwg-raster.patch: Fixed priority setting of
        PWG Raster MIME type, so that PWG Raster input is actually recognized
        (LP: #1386241).
     -- Till Kamppeter <email address hidden>   Mon, 27 Oct 2014 16:48:25 +0100
  • cups (1.7.2-0ubuntu1.2) trusty-security; urgency=medium
    
      * SECURITY UPDATE: privilege escalation via symlinks and world-readable
        permissions
        - debian/patches/CVE-2014-50xx.patch: add some more symlink and
          permission checks to scheduler/client.c.
        - CVE-2014-5029
        - CVE-2014-5030
        - CVE-2014-5031
      * debian/patches/cups-restore-access-to-logfiles.patch: fix regressions
        caused by recent security updates by allowing access to cupsd.conf and
        the log files. (LP: #1349387)
     -- Marc Deslauriers <email address hidden>   Fri, 05 Sep 2014 15:04:59 -0400
  • cups (1.7.2-0ubuntu1.1) trusty-security; urgency=medium
    
      * SECURITY UPDATE: privilege escalation via rss dir symlink
        - debian/patches/CVE-2014-3537.patch: check for symlinks and proper
          permissions in scheduler/client.c.
        - CVE-2014-3537
     -- Marc Deslauriers <email address hidden>   Fri, 18 Jul 2014 16:23:48 -0400
  • cups (1.7.2-0ubuntu1) trusty; urgency=medium
    
      * New upstream bug fix release
         - Addresses a web interface redirection security issue, some scheduler
           crashed on Linux, and other general bug fixes.
      * str4393-fix-memoryleak-in-rastertolabel.patch,
        fix-cupsdgetprivateattrs-function-missing-null-check.patch,
        fix-cupsenumdests-does-not-fill-in-is_default-field.patch,
        cupsd-support-avahi-daemon-restarting.patch,
        cupsenumdests-does-not-set-cb.patch,
        fix-a-dbus-threading-issue-that-caused-the-scheduler-to-crash.patch:
        Removed patches backported from upstream.
      * build-with-full-relro.patch,
        fix-template.c-typo.patch,
        prevent-dnssd-backend-exiting-too-early.patch: Removed, fixed upstream.
      * mention-rfc2911-in-ipptoolfile-for-clarity.patch: Removed, fixed
        differently upstream.
      * manpage-hyphen-minus.patch,
        cupsd-upstart-support.patch: Manually regenerated to adapt
        to upstream changes.
      * color-management-extension.patch,
        cupsd-exit-on-idle.patch,
        cupsd-exit-on-idle-upstart.patch,
        read-embedded-options-from-incoming-postscript-and-add-to-ipp-attrs.patch,
        airprint-support.patch,
        no-conffile-timestamp.patch,
        pidfile.patch: Refreshed with quilt.
     -- Till Kamppeter <email address hidden>   Thu, 10 Apr 2014 19:17:25 +0200
  • cups (1.7.1-5ubuntu10) trusty; urgency=low
    
      * fix-a-dbus-threading-issue-that-caused-the-scheduler-to-crash.patch:
        Replace the old cupsd-enable-dbus-threading-support.patch by the patch from
        the current Debian package, containing an extra fix from CUPS upstream.
      * str4393-fix-memoryleak-in-rastertolabel.patch: Fixed memory leaks in the
        rastertolabel filter (CUPS STR #4393).
     -- Till Kamppeter <email address hidden>   Thu,  3 Apr 2014 23:17:01 +0200
  • cups (1.7.1-5ubuntu9) trusty; urgency=low
    
      * fix-race-condition-in-cupsdoiorequest.patch: Removed, as this does not
        actually solve CUPS STR #4386 and also causes CUPS STR #4391, CUPS
        not being able to communicate with Brother printers any more.
     -- Till Kamppeter <email address hidden>   Wed, 19 Mar 2014 16:28:01 +0100
  • cups (1.7.1-5ubuntu8) trusty; urgency=low
    
      * Removed har dependency of cups-daemon on avahi-daemon, demoted Depends: yo
        Recommends: and removed "on started avahi-daemon" from the "start on ..."
        rule in /etc/init/cups.conf (LP: #1242185, LP: #1178172).
     -- Till Kamppeter <email address hidden>   Fri,  7 Mar 2014 17:45:01 +0100
  • cups (1.7.1-5ubuntu7) trusty; urgency=low
    
      * cupsd-upstart-support.patch: Merged in fix-upstart-socket-activation.patch
        from cups 1.7.1-5ubuntu6 release (LP: #1276713).
      * cupsd-support-avahi-daemon-restarting.patch: Updated patch to the version
        from upstream (CUPS STR #4373).
      * fix-cupsenumdests-does-not-fill-in-is_default-field.patch: cupsEnumDests()
        doesn't fill in is_default field (CUPS STR #4332).
      * fix-cupsdgetprivateattrs-function-missing-null-check.patch:
        cupsdGetPrivateAttrs() function in scheduler/policy.c is missing NULL
        check for input parameters (CUPS STR #4378, LP: #1284568).
      * fix-race-condition-in-cupsdoiorequest.patch: Fix race condition in
        cupsDoIORequest(). When cupsDoIORequest() sends a request that will fail
        due to lack of credentials, if the server closes the connection after
        cupsSendRequest() returned but before ippWrite() finishes sending the
        request then the request will not be retried and the caller will see a
        failure (CUPS STR #4386, Red Hat bug #1072952).
      * cupsenumdests-does-not-set-cb.patch, color-management-extension.patch,
        airprint-support.patch, cupsd-exit-on-idle.patch,
        cupsd-exit-on-idle-upstart.patch, no-conffile-timestamp.patch:
        Refreshed with quilt.
     -- Till Kamppeter <email address hidden>   Thu,  6 Mar 2014 16:49:01 +0100
  • cups (1.7.1-5ubuntu6) trusty; urgency=medium
    
      * Fix cups upstart socket activation:
        - run by default in foreground (-f), not foreground (-F). With -F cups
        closes all inherited file descriptors, which is not needed under
        upstart since it does that on our behalf, furthermore closing passed
        socket activation descriptors prevents us from using socket
        activation.
        - force foreground (-f) mode if environment suggests, we are upstart
        socket activated. (similar to "-l" flag for launchd)
        - initialize addrlen to the sizeof addr
        - correct environmental variable name used to check for event type
        - simplify logic to get UPSTART_FDS, simply use atoi
        - perform explicit return code checking from getsockname function call
     -- Dimitri John Ledkov <email address hidden>   Thu, 06 Mar 2014 10:53:25 +0000
  • cups (1.7.1-5ubuntu5) trusty; urgency=low
    
      * cupsenumdests-does-not-set-cb.patch: Let the cupsEnumDests() function
        correctly set "cb" and "user_data" in the context data structure, to
        avoid crashes and hangs of print dialogs (CUPS STR #4380, Red Hat bug
        #1054312).
     -- Till Kamppeter <email address hidden>   Wed,  5 Mar 2014 17:35:01 +0100
  • cups (1.7.1-5ubuntu4) trusty; urgency=low
    
      * cupsd-exit-on-idle.patch: Use "IdleExitTimeout" as cupsd.conf directive as
        this is the term settled on by Debian and upstream, to not have 14.04 LTS
        to support the first-shot expresssion "ExitOnIdleTimeout" for five years.
        Note that we do not overtake the Debian patch as a whole at this time as
        this requires changes in many other patches. This will be done after the
        14.04 LTS release.
     -- Till Kamppeter <email address hidden>   Tue,  4 Mar 2014 18:46:01 +0100
  • cups (1.7.1-5ubuntu3) trusty; urgency=low
    
      * cupsd-support-avahi-daemon-restarting.patch: Allow avahi-daemon be started
        after CUPS and stopped and re-started while CUPS is running, without loss
        of Bonjour broadcasting of shared printers and without need of restarting
        CUPS.
      * airprint-support.patch: Refreshed with quilt.
     -- Till Kamppeter <email address hidden>   Sun, 23 Feb 2014 16:23:01 +0100
  • cups (1.7.1-5ubuntu1) trusty; urgency=low
    
      * Merge from Debian unstable.  Remaining changes:
        - cupsd-upstart-support.patch, cupsd-exit-on-idle.patch,
          cupsd-exit-on-idle-upstart.patch: Patches for running cupsd on-demand,
          introduced in 1.7.1-4ubuntu1.
        - airprint-support.patch, pidfile.patch,
          do-not-broadcast-with-hostnames.patch, confdirperms.patch,
          log-debug-history-nearly-unlimited.patch,
          cupsd-set-default-for-SyncOnClose-to-Yes.patch: Refreshed with quilt
          after applying the patches to run cupsd on-demand.
    
    cups (1.7.1-5) unstable; urgency=medium
    
      * In cups' initscript, stop trying to restart xprint.
        Thanks to Damyan Ivanov (Closes: #738801)
      * Import Fedora patch to prevent the dnssd backend from exiting too
        early
     -- Till Kamppeter <email address hidden>   Wed, 19 Feb 2014 16:18:01 +0100
  • cups (1.7.1-4ubuntu1) trusty; urgency=low
    
      * cupsd-upstart-support.patch: Allow starting cupsd socket-triggered
        through Upstart, for on-demand starting to save resources (especially
        on mobile devices, LP: #1276713).
      * cupsd-exit-on-idle.patch: Add mode to let cupsd terminate when it is idle,
        also for running CUPS on-demand. If the mode is activated, either by
        ExitOnIdleTimeout=TIMEOUT in cupsd.conf, by "-x TIMEOUT" on the cupsd
        command line or by setting the env variable CUPSD_EXIT_ON_IDLE_TIMEOUT=
        TIMEOUT (With TIMEOUT in all theree cases the idle timeout in seconds,
        0 turning off the feature, off by default), cupsd terminates when it
        is idle (no jobs, no shared printers) for the given timeout.
      * cupsd-exit-on-idle-upstart.patch: Set idle timeout of cupsd to 30 sec
        if CUPS is started socket-triggered by Upstart and the timeout is not
        explicitly set (LP: #1276713).
      * airprint-support.patch, pidfile.patch,
        do-not-broadcast-with-hostnames.patch, confdirperms.patch,
        log-debug-history-nearly-unlimited.patch,
        cupsd-set-default-for-SyncOnClose-to-Yes.patch: Refreshed with quilt.
     -- Till Kamppeter <email address hidden>   Fri, 14 Feb 2014 17:08:01 +0100
  • cups (1.7.1-4) unstable; urgency=medium
    
    
      [ Martin Pitt ]
      * debian/libcups2-dev.preinst: Move aside a /usr/include/cups/i18n.h
        directory during upgrades (from wheezy/precise); this directory got
        replaced with a file, and triggers a bug in overlayfs when dist-upgrading
        schroots/containers/similar. This is a hackish workaround and can be
        dropped again in jessie+1/trusty+1. (LP: #1272285)
    
      [ Didier Raboud ]
      * Fix LGPL-2 references in debian/copyright, hanks to Thorsten Alteholz
      * Move commandtops from cups to cups-core-drivers (Closes: #737306)
    
     -- Didier Raboud <email address hidden>  Tue, 04 Feb 2014 15:31:13 +0100
  • cups (1.7.1-3) unstable; urgency=low
    
    
      [ Till Kamppeter ]
      * Split binary package "cups" into "cups" and "cups-core-drivers". In
        low-footprint (mobile) environments we can restrict the printer
        support to only IPP printers with known common languages (PDF,
        PostScript, PWG Raster, PCL) to get rid of the heavy load of drivers
        and PPDs for thousands of printers. From CUPS we need only the
        "cups-daemon" and "cups-core-drivers" (plus library packages) then.
        "cups-core-drivers" currently only contains the gziptoany and pstops
        filters.
    
      [ Didier Raboud ]
      * Avoid specifying mode, user and (wrong) group in the logrotate
        'create' statement (LP: #1268011)
      * Install cups-daemon AppArmor, ufw profile and apport hooks on Debian
        too (Closes: #735313)
      * Replace custom AppArmor post{inst,rm} machinery with a dh_apparmor
        call
      * Add patch to move cupsd.conf.default from /etc/cups to
        /usr/share/cups as it's not a configuration file (Closes: #640124)
      * Reorder most patches to let those that upstream doesn't intend to
        fix stay on top of the pile; most also mark those reported upstream
        as such
      * Drop configure-default-browse-protocols patch, now useless
      * Drop update-rc.d arguments in Debian, as they are no longer
        supported
    
      [ Helge Kreutzmann ]
      * Update German man page (1518t)
    
     -- Didier Raboud <email address hidden>  Mon, 20 Jan 2014 23:06:36 +0100
  • cups (1.7.1-2git1) trusty; urgency=medium
    
      Backport from Debian packaging git:
      * debian/libcups2-dev.preinst: Move aside a /usr/include/cups/i18n.h
        directory during upgrades (from wheezy/precise); this directory got
        replaced with a file, and triggers a bug in overlayfs when dist-upgrading
        schroots/containers/similar. This is a hackish workaround and can be
        dropped again in jessie+1/trusty+1. (LP: #1272285)
     -- Martin Pitt <email address hidden>   Mon, 27 Jan 2014 08:42:51 +0100
  • cups (1.7.1-2) unstable; urgency=medium
    
    
      * Revert "Link against OpenSSL instead of GnuTLS", reopens #714492
      * Add tests' patch to ignore a kfreebsd-amd64 error that breaks the
        error lines counting
    
     -- Didier Raboud <email address hidden>  Tue, 14 Jan 2014 10:03:37 +0100
  • cups (1.7.1-1) unstable; urgency=medium
    
    
      * New 1.7.0 upstream release
       - Security: the lppasswd program incorrectly used settings from
         ~/.cups/client.conf (STR #4319)
       - Some gzip'd PPD files could not be used
       - Cleaned up some job logging in the scheduler
       - ATTR messages could cause string pool memory corruption in the
         scheduler
       - Printing to a raw queue could result in corrupt output due to
         opportunistic compression
       - The "make check" test suite did not work on Linux without the
         cups-filters package installed (That's not fully fixed yet)
       - The libusb-based USB backend incorrectly used write timeouts
       - Using "@IF(name)" in an Allow or Deny rule did not wor
         (STR #4328, Closes: #674520)
       - The D-BUS notifier did not remove its lockfile (STR #4314)
    
      [ Didier Raboud ]
      * Link against OpenSSL instead of GnuTLS; mark two GnuTLS-specific
        symbols in libcups2 as optional (Closes: #714492)
      * Refresh 13 patches for 1.7.1
      * Drop patches obsoleted by 1.7.1:
        - avoid-sign-extending-CRCs-for-gz-decompression
        - avoid_stale_lockfile_in_dbus_notifier
        - cups-dbus-utf8
        - fix-job-history-logging
        - fix-stringpool-corruption
        - prevent-USB-timeouts-causing-incorrect-print-output
      * Refresh the testsuite patches
      * Rewrite tests-use-cupsfilters patch to have the whole test-suite
        pass
    
      [ wookey ]
      * Honour DEB_BUILD_OPTIONS=nocheck (Closes: #734670)
    
     -- Didier Raboud <email address hidden>  Thu, 09 Jan 2014 16:54:26 +0100
  • cups (1.7.0-2) unstable; urgency=low
    
    
      [ Russell Coker ]
      * In the cups init script, run restorecon after creating a /var/run
        directory (Closes: #677580)
    
      [ Bastien ROUCARIÈS ]
      * Add patch to drop two dangling references in cups-lpd.man
        (Closes: #570157)
    
      [ Nicolas Boulenguez ]
      * Enhance cups' init-script(Closes: #718798)
        - Specify SCRIPTNAME instead of relying on N=${0##*/} bashism
        - Replace restart_xprint() implicit parameter (success) with an
          explicit first parameter for readability
        - Replace log_begin_msg() calls by log_daemon_msg() to use the
          vendor-specific formatting
        - Clarify exit statuses handling by making sure only the result of
          start-stop-daemon is returned
        - Don't call coldplug_usb_printers when the daemon fails to start
        - Use status_of_proc from lsb-base >= 3.2.14 instead of a
          hand-written implementation
        - Unimplemented actions must return 3
    
      [ Didier Raboud ]
      * Let uscan verify PGP signatures on signed upstream tarballs
      * Update manpage-hyphen-minus.patch to fix three missing fixes in
        ippfind.1
      * Add patch to fix expres{,s}ion typo
      * Fix two occurences of pointer-from-integer in the color-management
        extension patch
      * Update drop_unnecessary_dependencies patch to make sure
        libcupsimage2 is linked against pthread
      * Bump Standards-Version to 3.9.5 without changes needed
    
     -- Didier Raboud <email address hidden>  Sat, 04 Jan 2014 15:46:02 +0100
  • cups (1.7.0-1) unstable; urgency=low
    
    
      * New 1.7.0 upstream release
    
      [ Till Kamppeter ]
      * Refresh most patches with quilt
      * Removed usb-backend-do-not-crash-if-usb-disabled-in-bios and
        cupsd-no-crash-on-avahi-threaded-poll-shutdown patches as they got
        applied upstream
      * Removed drop-arch-specifics-from-doc patch as it is not needed
        anymore
      * Updated drop_unnecessary_dependencies, manpage-hyphen-minus,
        manpage-translations and ppd-poll-with-client-conf patches manually
        to apply to the new CUPS version
      * Added error counting exception from
        usb-backend-do-not-crash-if-usb-disabled-in-bios to
        tests-ignore-warnings
      * Install the newly added ippfind utility and its manpage in
        cups-client
      * Added pwg.h to libcups2-dev package
      * Call dh_auto_clean only if the file Makedefs is present, to avoid a
        FTBFS
      * Added color management extensions from Joe Simon's GSoC 2013
        project.
      * Patch cups-files.conf to activate CUPS daemon syncing of files when
        closing, so that config files (like printers.conf) do not
        mysteriously disappear (LP: #1157972)
      * In the AppArmor profile, allow execution of programs in
        /etc/cups/interfaces/, needed to make CUPS working with queues based
        on System V interface scripts, especially PPD-less queues
        auto-generated by cups-browsed from cups-filters 1.0.41 on.
      * Silenced AppArmor noise from udev.conf in syslog (LP: #1229766)
    
      [ Steve Langasek ]
      * Add cups-filters (>= 1.0.42) as alternative to foomatic-filters
        (which is deprecated) in package relationships
    
      [ Didier Raboud ]
      * Remove Roger Leigh from uploaders on his request with thanks for his
        past work!
      * Switch avahi LSB Should-Start dependency to be avahi-daemon; also
        bump package relationship to >= 0.6.31-3~ (Closes: #731608)
      * Refresh the manpage translation files
      * Move the USB backend quirk rules file to cups-server-common
      * Add 38 new 1.7.0 libcups2 symbols
      * Mark one C++ libcupsppdc1 symbol as optional as it isn't exported in
        1.7.0 anymore
      * Import Fedora patches:
        - to avoid sign-extending CRCs in gz decompression
        - to build with full read-only relocations
        - to fix job history logging (upstream patch)
        - to set the internal default for SyncOnClose to Yes, instead of
          only configuring it to Yes
        - to fix a stringpool corruption issue
        - to prevent USB timeouts causing incorrect print output
      * Import Fedora patch updates:
        - to dont-use-dbus-from-two-threads patch so it removes a call to
          avahi_threaded_poll_stop()
        - to avoid_stale_lockfile_in_dbus_notifier patch to call _exit when
          handling SIGTERM
      * Move manpage-translations patch at the very end of the patch series
        to have it include all our patches
    
     -- Didier Raboud <email address hidden>  Fri, 03 Jan 2014 18:42:39 +0100
  • cups (1.7.0-0ubuntu3) trusty; urgency=low
    
      * Drop Recommends: on foomatic-filters, which is now obsoleted by
        cups-filters.
     -- Steve Langasek <email address hidden>   Sat, 07 Dec 2013 15:44:31 -0800
  • cups (1.7.0-0ubuntu2) trusty; urgency=low
    
      * debian/rules: Call dh_auto_clean only if the file Makedefs is present, to
        avoid a FTBFS.
     -- Till Kamppeter <email address hidden>   Thu, 31 Oct 2013 13:34:55 +0100
  • cups (1.7.0-0ubuntu1) trusty; urgency=low
    
      * New upstream release
         - Updated Japanese localization
         - The lpadmin command did not send the PPD name from the "-m" option
         - Network backends now use the prtMarkerSuppliesClass property to
           determine the direction of supply level values
         - The scheduler did not remove backup PPD files when a printer was deleted
         - The scheduler incorrectly responded to HEAD requests when the web
           interface was disabled
         - The scheduler did not respond using the hostname specified by the client
         - Fax queues did not work when shared via Bonjour
         - Error messages from the scheduler were not localized using the language
           specified in the client's IPP request
         - Added an Italian localization
         - Fixed a couple memory leaks in ippfind that were reported by Clang.
         - Fixed a compile issue on 64-bit Linux with Clang - need to use the -pie
           option instead of -Wl,-pie now
         - The ippfind utility reported the wrong port numbers when compiled
           against Avahi
         - httpGetFd, httpGetFile, httpPutFd, and httpPutFile did not automatically
           reconnect if the server closed the connecion after the previous response.
         - Fixed a compile error in libcups
         - The scheduler incorrectly did not pass a FINAL_CONTENT_TYPE environment
           variable to the filters or backend
      * debian/patches/cups-1.6.4-changes.patch,
        debian/patches/ippfind-fix-port-output.patch: Removed, changes included
        upstream.
      * debian/patches/rootbackends-worldreadable.patch,
        debian/patches/color-management-extension.patch,
        debian/patches/airprint-support.patch,
        debian/patches/no-conffile-timestamp.patch,
        debian/patches/read-embedded-options-from-incoming-postscript-and-add-to-ipp-attrs.patch:
        debian/patches/Refreshed with quilt.
      * debian/patches/color-management-extension.patch: Added color management
        extensions from Joe Simon's GSoC 2013 project. See
        http://jsimon3.wordpress.com/2013/09/26/google-summer-of-code-2013-final/
      * debian/local/apparmor-profile: Allow execution of programs in
        /etc/cups/interfaces/, needed to make CUPS working with queues based on
        System V interface scripts, especially PPD-less queues auto-generated by
        cups-browsed from cups-filters 1.0.41 on.
     -- Till Kamppeter <email address hidden>   Thu, 31 Oct 2013 12:04:55 +0100
  • cups (1.7.0~rc1-0ubuntu5) saucy; urgency=low
    
      * debian/local/cupsd-sync-files-on-close.patch: Corrected patch, the new
        SyncOnClose directive needs to be in cups-files.conf (LP: #1157972,
        Red Hat bug #984883).
     -- Till Kamppeter <email address hidden>   Fri, 27 Sep 2013 12:30:01 +0200