-
cups-filters (1.0.76-1ubuntu0.2) wily-security; urgency=medium
* SECURITY UPDATE: code execution via improper escaping in foomatic-rip
- debian/patches/CVE-2015-8560.patch: add semicolon to list of shell
escape characters in filter/foomatic-rip/util.c.
- CVE-2015-8560
-- Marc Deslauriers <email address hidden> Wed, 16 Dec 2015 08:08:49 -0500
-
cups-filters (1.0.76-1ubuntu0.1) wily-security; urgency=medium
* SECURITY UPDATE: code execution via improper escaping in foomatic-rip
- debian/patches/CVE-2015-8327.patch: add backtick to list of shell
escape characters in filter/foomatic-rip/util.c.
- CVE-2015-8327
-- Marc Deslauriers <email address hidden> Thu, 03 Dec 2015 09:00:10 -0500
-
cups-filters (1.0.76-1) unstable; urgency=medium
* New upstream release
[ Till Kamppeter ]
* Let AppArmor allow cups-browsed access /var/cache/cups/ as it puts some
files for default printer management and load balancing there
-- Didier Raboud <email address hidden> Mon, 14 Sep 2015 11:15:58 +0200
-
cups-filters (1.0.75-1) unstable; urgency=medium
* New upstream release
-- Didier Raboud <email address hidden> Wed, 09 Sep 2015 08:52:16 +0200
-
cups-filters (1.0.74-2) unstable; urgency=medium
* Upload to unstable
-- Didier Raboud <email address hidden> Mon, 07 Sep 2015 09:26:56 +0200
-
cups-filters (1.0.74-1) experimental; urgency=low
* New upstream release
- cups-browsed: Added NULL check when getting the notification of
a printer starting to process a job and checking whether this
printer is created by cups-browsed with the implicitclass:
backend (LP: #1488524)
- backends: Include unistd.h and fcntl.h in backend-private.h for
all platforms, not only Linux, so that the backends build also
on non-Linux platforms (Bug #1308)
-- Didier Raboud <email address hidden> Wed, 26 Aug 2015 09:47:47 +0200
-
cups-filters (1.0.73-1) experimental; urgency=low
* New upstream release
- cups-browsed: Added LDAP support. Appropriately configured via
cups-browsed.conf remote printers made available via LDAP will be
looked up and local queues pointing to them created. Thanks to
Raphael Geissert for contributing this patch (Closes: #795185)
- foomatic-rip: Prevent crash when supplying "media" option with empty
value ("media=", LP: #1479871)
* Drop patches, all included upstream
* Add a B-D on libldap2-dev for the new LDAP browsing support
* Correct the CVE identifier in the previous upload
-- Didier Raboud <email address hidden> Wed, 19 Aug 2015 18:04:54 +0200
-
cups-filters (1.0.71-1ubuntu5) wily; urgency=medium
* Removed ippusbxd (cups-filters-ippusbxd binary packge) from
cups-filters as ippusbxd will be in its own package from now on.
This package is identical with the 1.0.71-1 Debian package and
from 1.0.71-2 or 1.0.72 on we will sync with Debian again.
-- Till Kamppeter <email address hidden> Wed, 12 Aug 2015 20:37:06 -0300
-
cups-filters (1.0.71-1ubuntu4) wily; urgency=medium
* SECURITY FIX: Updated ippusbxd to the current upstream GIT snapshot to
assure that only localhost can access the IPP-over-USB printers.
-- Till Kamppeter <email address hidden> Sun, 9 Aug 2015 20:29:06 -0300
-
cups-filters (1.0.71-1ubuntu3) wily; urgency=medium
* Updated ippusbxd to the current upstream GIT snapshot so to add
the no-printer development/debug mode ("-N" command line option).
-- Till Kamppeter <email address hidden> Fri, 7 Aug 2015 00:59:06 -0300
-
cups-filters (1.0.71-1ubuntu2) wily; urgency=medium
* Updated ippusbxd to the current upstream GIT snapshot so that jobs
sent in chunked HTTP transfer mode get correctly to the printer.
-- Till Kamppeter <email address hidden> Thu, 16 Jul 2015 16:30:06 -0300
-
cups-filters (1.0.71-1ubuntu1) wily; urgency=medium
* Re-introduced ippusbxd in cups-filters-ippusbxd binary package. It
got lost when accidentally syncing new cups-filters upstream versions
from Debian.
* Updated ippusbxd to the current upstream GIT snapshot.
* Applied most recent, not yet upstreamed changes:
- Made ippusbxd robust against nmap port scans. Before, it errored
out on the null packets.
- Introduced new "-P <port>" command line option to specify a port to
use but let ippusbxd check the subsequent ports instead of erroring out
when the desired port is already taken.
- Let ippusbxd return the process ID of the daemon process to the
calling console.
-- Till Kamppeter <email address hidden> Tue, 7 Jul 2015 20:59:06 -0300
-
cups-filters (1.0.71-1) unstable; urgency=medium
* New upstream release
- texttopdf: The Page allocation is moved into textcommon.c, where it does
all the necessary checking, Thanks to Tim Waugh from Red Hat for the
patch.
- texttopdf: Upper-bounds checking (CVE-2015-3259).
* Update gbp.conf again, use DEFAULTS
* Amend 1.0.70-1 changelog entry to attribute the patch origin correctly to
Tim Waugh
-- Didier Raboud <email address hidden> Fri, 03 Jul 2015 12:39:51 +0200
-
cups-filters (1.0.70-2) unstable; urgency=medium
* Refresh fix.scanned.copyright to reflect COPYING more closely, add a GPL-2
catchall
* Update gbp.conf again, changed my mind
-- Didier Raboud <email address hidden> Mon, 29 Jun 2015 23:10:02 +0200
-
cups-filters (1.0.70-1) unstable; urgency=medium
* New upstream release
- texttopdf: Fixed buffer overflow on size allocation of texttopdf
when working with extremely small line sizes, which causes the size
calculation to result in 0 (CVE-2015-3258, thanks to Stefan
Cornelius fro Red Hat for the patch).
- foomatic-rip: Allow using another shell than /bin/bash using the
"--with-shell=..." option for "./configure". Thanks to Leonardo
Taccari for the patch (Bug #1288).
* Add gbp.conf for dch and import-orig
* Configure --with-shell to use Debian's default
* Rewrite debian/copyright with the help of `cme update dpkg-copyright`
-- Didier Raboud <email address hidden> Sat, 27 Jun 2015 15:05:04 +0200
-
cups-filters (1.0.69-1build1) wily; urgency=medium
* No-change rebuild against new poppler
-- Iain Lane <email address hidden> Tue, 23 Jun 2015 12:28:42 +0100
-
cups-filters (1.0.69-1) unstable; urgency=low
* New upstream release
- Cope with the {pdfto,sys5}ippprinter filter rename
-- Didier Raboud <email address hidden> Thu, 11 Jun 2015 08:41:13 +0200
-
cups-filters (1.0.67-0ubuntu2) vivid; urgency=medium
* debian/patches/cups-browsed-fix-numeric-ids-of-gsources.patch:
cups-browsed: Numeric IDs for GSources of the glib event
loop must be positive integers greater than zero according
to the documentation of the g_source_get_id() function.
Taken care of this at all places.
Hopefully it fixes the recent crashes of cups-browsed: LP: #1435287,
LP: #1436733, LP: #1436684, LP: #1431041, LP: #1434321
-- Till Kamppeter <email address hidden> Thu, 9 Apr 2015 22:40:03 -0300
