2024-06-11 16:28:04 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Jun 11 08:28:32 UTC 2024 - Johannes Meixner <jsmeix@suse.com>
|
|
|
|
|
|
|
|
|
|
- cups-2.4.8-CVE-2024-35235.patch is derived
|
|
|
|
|
from the upstream patch against master (CUPS 2.5)
|
|
|
|
|
to apply to CUPS 2.4.8 in openSUSE Factory to fix CVE-2024-35235
|
|
|
|
|
"cupsd Listen port arbitrary chmod 0140777"
|
|
|
|
|
https://github.com/OpenPrinting/cups/security/advisories/GHSA-vvwp-mv6j-hw6f
|
|
|
|
|
bsc#1225365
|
|
|
|
|
|
2024-06-04 10:49:04 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed May 29 12:29:38 UTC 2024 - Dominique Leuenberger <dimstar@opensuse.org>
|
|
|
|
|
|
|
|
|
|
- Update to version 2.4.8:
|
2024-06-04 11:09:41 +02:00
|
|
|
|
See https://github.com/openprinting/cups/releases
|
|
|
|
|
CUPS 2.4.8 brings many bug fixes which aggregated over the last
|
|
|
|
|
half a year. It brings the important fix for race conditions
|
|
|
|
|
and errors which can happen when installing permanent
|
|
|
|
|
IPP Everywhere printer, support for PAM modules password-auth
|
|
|
|
|
and system-auth and new option for lpstat which can show only
|
|
|
|
|
the successful jobs.
|
|
|
|
|
Detailed list (from CHANGES.md):
|
|
|
|
|
* Added warning if the device has to be asked for
|
|
|
|
|
'all,media-col-database' separately (Issue #829)
|
|
|
|
|
* Added new value for 'lpstat' option '-W' - successfull - for
|
|
|
|
|
getting successfully printed jobs (Issue #830)
|
|
|
|
|
* Added support for PAM modules password-auth
|
|
|
|
|
and system-auth (Issue #892)
|
|
|
|
|
* Updated IPP Everywhere printer creation error
|
|
|
|
|
reporting (Issue #347)
|
|
|
|
|
* Updated and documented the MIME typing buffering
|
|
|
|
|
limit (Issue #925)
|
|
|
|
|
* Raised 'cups_enum_dests()' timeout for listing
|
|
|
|
|
available IPP printers (Issue #751)
|
|
|
|
|
* Now report an error for temporary printer defaults
|
|
|
|
|
with lpadmin (Issue #237)
|
|
|
|
|
* Fixed mapping of PPD InputSlot, MediaType,
|
|
|
|
|
and OutputBin values (Issue #238)
|
|
|
|
|
* Fixed "document-unprintable-error" handling (Issue #391)
|
|
|
|
|
* Fixed the web interface not showing an error
|
|
|
|
|
for a non-existent printer (Issue #423)
|
|
|
|
|
* Fixed printing of jobs with job name longer than 255 chars
|
|
|
|
|
on older printers (Issue #644)
|
|
|
|
|
* Really backported fix for Issue #742
|
|
|
|
|
* Fixed 'cupsCopyDestInfo' device connection
|
|
|
|
|
detection (Issue #586)
|
|
|
|
|
* Fixed "Upgrade" header handling when there is
|
|
|
|
|
no TLS support (Issue #775)
|
|
|
|
|
* Fixed memory leak when unloading a job (Issue #813)
|
|
|
|
|
* Fixed memory leak when creating color profiles (Issue #815)
|
|
|
|
|
* Fixed a punch finishing bug in the IPP Everywhere
|
|
|
|
|
support (Issue #821)
|
|
|
|
|
* Fixed crash in 'scan_ps()' if incoming argument
|
|
|
|
|
is NULL (Issue #831)
|
|
|
|
|
* Fixed setting job state reasons for successful
|
|
|
|
|
jobs (Issue #832)
|
|
|
|
|
* Fixed infinite loop in IPP backend if hostname
|
|
|
|
|
is IP address with Kerberos (Issue #838)
|
|
|
|
|
* Added additional check on socket if 'revents' from 'poll()'
|
|
|
|
|
returns POLLHUP together with POLLIN or POLLOUT
|
|
|
|
|
in 'httpAddrConnect2()' (Issue #839)
|
|
|
|
|
* Fixed crash in 'ppdEmitString()' if 'size' is NULL (Issue #850)
|
|
|
|
|
* Fixed reporting 'media-source-supported' when
|
|
|
|
|
sharing printer which has numbers as strings instead of
|
|
|
|
|
keywords as 'InputSlot' values (Issue #859)
|
|
|
|
|
* Fixed IPP backend to support the "print-scaling" option
|
|
|
|
|
with IPP printers (Issue #862)
|
|
|
|
|
* Fixed potential race condition for the creation
|
|
|
|
|
of temporary queues (Issue #871)
|
|
|
|
|
* Fixed 'httpGets' timeout handling (Issue #879)
|
|
|
|
|
* Fixed checking for required attributes during
|
|
|
|
|
PPD generation (Issue #890)
|
|
|
|
|
* Fixed encoding of IPv6 addresses in HTTP requests (Issue #903)
|
|
|
|
|
* Fixed sending response headers to client (Issue #927)
|
|
|
|
|
* Fixed CGI program initialization and validation
|
|
|
|
|
of form checkbox and text fields.
|
|
|
|
|
Issues are those at https://github.com/OpenPrinting/cups/issues
|
|
|
|
|
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.8
|
2024-06-04 10:49:04 +02:00
|
|
|
|
|
2024-02-27 11:43:55 +01:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Feb 26 10:48:53 UTC 2024 - Dominique Leuenberger <dimstar@opensuse.org>
|
|
|
|
|
|
|
|
|
|
- Use %patch -P N instead of deprecated %patchN.
|
|
|
|
|
|
2024-02-02 14:57:14 +01:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Feb 2 13:45:06 UTC 2024 - Johannes Meixner <jsmeix@suse.com>
|
|
|
|
|
|
|
|
|
|
- Removed outdated ntadmin stuff from cups.spec (boo#1219503)
|
|
|
|
|
|
2024-01-24 10:31:52 +01:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Jan 24 07:47:38 UTC 2024 - Johannes Meixner <jsmeix@suse.com>
|
|
|
|
|
|
|
|
|
|
- Version upgrade to 2.4.7:
|
|
|
|
|
See https://github.com/openprinting/cups/releases
|
|
|
|
|
CUPS 2.4.7 is released to ship the fix for CVE-2023-4504
|
|
|
|
|
and several other changes, among them it is
|
|
|
|
|
adding OpenSSL support for cupsHashData function and bug fixes.
|
|
|
|
|
Detailed list:
|
|
|
|
|
* CVE-2023-4504 - Fixed Heap-based buffer overflow when
|
|
|
|
|
reading Postscript in PPD files
|
|
|
|
|
* Added OpenSSL support for cupsHashData (Issue #762)
|
|
|
|
|
* Fixed delays in lpd backend (Issue #741)
|
|
|
|
|
* Fixed extensive logging in scheduler (Issue #604)
|
|
|
|
|
* Fixed hanging of lpstat on IBM AIX (Issue #773)
|
|
|
|
|
* Fixed hanging of lpstat on Solaris (Issue #156)
|
|
|
|
|
* Fixed printing to stderr if we can't open cups-files.conf
|
|
|
|
|
(Issue #777)
|
|
|
|
|
* Fixed purging job files via cancel -x (Issue #742)
|
|
|
|
|
* Fixed RFC 1179 port reserving behavior in LPD backend
|
|
|
|
|
(Issue #743)
|
|
|
|
|
* Fixed a bug in the PPD command interpretation code
|
|
|
|
|
(Issue #768)
|
|
|
|
|
Issues are those at https://github.com/OpenPrinting/cups/issues
|
|
|
|
|
- Version upgrade to 2.4.6:
|
|
|
|
|
See https://github.com/openprinting/cups/releases
|
|
|
|
|
CUPS 2.4.6 is released to ship the fix for CVE-2023-34241
|
|
|
|
|
and two other bug fixes.
|
|
|
|
|
Detailed list:
|
|
|
|
|
* Fix linking error on old MacOS (Issue #715)
|
|
|
|
|
* Fix printing multiple files on specific printers (Issue #643)
|
|
|
|
|
* Fix use-after-free when logging warnings in case of failures
|
|
|
|
|
in cupsdAcceptClient() (fixes CVE-2023-34241)
|
|
|
|
|
Issues are those at https://github.com/OpenPrinting/cups/issues
|
|
|
|
|
- Version upgrade to 2.4.5:
|
|
|
|
|
See https://github.com/openprinting/cups/releases
|
|
|
|
|
CUPS 2.4.5 is a hotfix release for a bug which corrupted
|
|
|
|
|
locally saved certificates, which broke secured printing
|
|
|
|
|
via TLS after the first print job.
|
|
|
|
|
- Version upgrade to 2.4.4:
|
|
|
|
|
See https://github.com/openprinting/cups/releases
|
|
|
|
|
CUPS 2.4.4 release is created as a hotfix for segfault
|
|
|
|
|
in cupsGetNamedDest(), when caller tries to find
|
|
|
|
|
the default destination and the default destination
|
|
|
|
|
is not set on the machine.
|
|
|
|
|
- Version upgrade to 2.4.3:
|
|
|
|
|
See https://github.com/openprinting/cups/releases
|
|
|
|
|
CUPS 2.4.3 brings fix for CVE-2023-32324, several improvements
|
|
|
|
|
and many bug fixes. CUPS now implements fallback for printers
|
|
|
|
|
with broken firmware, which is not capable of answering
|
|
|
|
|
to IPP request get-printer-attributes with all,
|
|
|
|
|
media-col-database - this enables driverless support for
|
|
|
|
|
bunch of printers which don't follow IPP Everywhere standard.
|
|
|
|
|
Aside from the CVE fix the most important fixes are around color
|
|
|
|
|
settings, printer application support fixes and OpenSSL support.
|
|
|
|
|
Detailed list of changes:
|
|
|
|
|
* Added a title with device uri for found network printers
|
|
|
|
|
(Issues #402, #393)
|
|
|
|
|
* Added new media sizes defined by IANA (Issues #501)
|
|
|
|
|
* Added quirk for GoDEX label printers (Issue #440)
|
|
|
|
|
* Fixed --enable-libtool-unsupported (Issue #394)
|
|
|
|
|
* Fixed configuration on RISC-V machines (Issue #404)
|
|
|
|
|
* Fixed the device_uri invalid pointer for driverless printers
|
|
|
|
|
with .local hostname (Issue #419)
|
|
|
|
|
* Fixed an OpenSSL crash bug (Issue #409)
|
|
|
|
|
* Fixed a potential SNMP OID value overflow issue (Issue #431)
|
|
|
|
|
* Fixed an OpenSSL certificate loading issue (Issue #465)
|
|
|
|
|
* Fixed Brazilian Portuguese translations (Issue #288)
|
|
|
|
|
* Fixed cupsd default keychain location when building
|
|
|
|
|
with OpenSSL (Issue #529)
|
|
|
|
|
* Fixed default color settings for CMYK printers as well
|
|
|
|
|
(Issue #500)
|
|
|
|
|
* Fixed duplicate PPD2IPP media-type names (Issue #688)
|
|
|
|
|
* Fixed possible heap buffer overflow in _cups_strlcpy()
|
|
|
|
|
(fixes CVE-2023-32324)
|
|
|
|
|
* Fixed InputSlot heuristic for photo sizes smaller than 5x7"
|
|
|
|
|
if there is no media-source in the request (Issue #569)
|
|
|
|
|
* Fixed invalid memory access during generating IPP Everywhere
|
|
|
|
|
queue (Issue #466)
|
|
|
|
|
* Fixed lprm if no destination is provided (Issue #457)
|
|
|
|
|
* Fixed memory leaks in create_local_bg_thread() (Issue #466)
|
|
|
|
|
* Fixed media size tolerance in ippeveprinter (Issue #487)
|
|
|
|
|
* Fixed passing command name without path into ippeveprinter
|
|
|
|
|
(Issue #629)
|
|
|
|
|
* Fixed saving strings file path in printers.conf (Issue #710)
|
|
|
|
|
* Fixed TLS certificate generation bugs (Issue #652)
|
|
|
|
|
* ippDeleteValues would not delete the last value (Issue #556)
|
|
|
|
|
* Ignore some of IPP defaults if the application sends
|
|
|
|
|
its PPD alternative (Issue #484)
|
|
|
|
|
* Make Letter the default size in ippevepcl (Issue #543)
|
|
|
|
|
* Now accessing Admin page in Web UI requires authentication
|
|
|
|
|
(Issue #518)
|
|
|
|
|
* Now look for default printer on network if needed (Issue #452)
|
|
|
|
|
* Now we poll media-col-database separately if we fail at first
|
|
|
|
|
(Issue #599)
|
|
|
|
|
* Now report fax attributes and values as needed (Issue #459)
|
|
|
|
|
* Now localize HTTP responses using the Content-Language value
|
|
|
|
|
(Issue #426)
|
|
|
|
|
* Raised file size limit for importing PPD via Web UI
|
|
|
|
|
(Issue #433)
|
|
|
|
|
* Raised maximum listen backlog size to INT MAX (Issue #626)
|
|
|
|
|
* Update print-color-mode if the printer is modified
|
|
|
|
|
via ColorModel PPD option (Issue #451)
|
|
|
|
|
* Use localhost when printing via printer application
|
|
|
|
|
(Issue #353)
|
|
|
|
|
* Write defaults into /etc/cups/lpoptions if we're root
|
|
|
|
|
(Issue #456)
|
|
|
|
|
Issues are those at https://github.com/OpenPrinting/cups/issues
|
|
|
|
|
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.7
|
|
|
|
|
- Removed cups-2.4.2-CVE-2023-4504.patch : fixed upstream
|
|
|
|
|
see the above CUPS 2.4.7 changes
|
|
|
|
|
- Removed cups-2.4.2-CVE-2023-32360.patch : fixed upstream via
|
|
|
|
|
https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
|
|
|
|
|
- Removed cups-2.4.2-CVE-2023-34241.patch : fixed upstream
|
|
|
|
|
see the above CUPS 2.4.6 changes
|
|
|
|
|
- Removed cups-2.4.2-CVE-2023-32324.patch : fixed upstream
|
|
|
|
|
see the above CUPS 2.4.3 changes
|
|
|
|
|
|
2023-09-20 15:12:23 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Sep 20 13:01:03 UTC 2023 - Johannes Meixner <jsmeix@suse.com>
|
|
|
|
|
|
|
|
|
|
- cups-2.4.2-CVE-2023-4504.patch fixes CVE-2023-4504
|
|
|
|
|
"CUPS PostScript Parsing Heap Overflow"
|
|
|
|
|
https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
|
|
|
|
|
bsc#1215204
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Sep 20 11:55:35 UTC 2023 - Johannes Meixner <jsmeix@suse.com>
|
|
|
|
|
|
|
|
|
|
- cups-2.4.2-CVE-2023-32360.patch fixes CVE-2023-32360
|
|
|
|
|
"Information leak through Cups-Get-Document operation"
|
|
|
|
|
by requiring authentication for CUPS-Get-Document in cupsd.conf
|
|
|
|
|
https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
|
|
|
|
|
https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
|
|
|
|
|
bsc#1214254
|
|
|
|
|
- cups-2.4.2-additional_policies.patch is an updated version
|
|
|
|
|
of cups-2.0.3-additional_policies.patch that replaces it
|
|
|
|
|
to add the 'allowallforanybody' policy to cupsd.conf
|
|
|
|
|
after cups-2.4.2-CVE-2023-32360.patch was applied
|
|
|
|
|
|
2023-06-22 13:04:22 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Jun 22 10:50:34 UTC 2023 - Johannes Meixner <jsmeix@suse.com>
|
|
|
|
|
|
|
|
|
|
- cups-2.4.2-CVE-2023-34241.patch fixes CVE-2023-34241
|
|
|
|
|
"use-after-free in cupsdAcceptClient()"
|
|
|
|
|
https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
|
|
|
|
|
bsc#1212230
|
|
|
|
|
|
2023-06-01 13:45:21 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Jun 1 11:31:26 UTC 2023 - Johannes Meixner <jsmeix@suse.com>
|
|
|
|
|
|
|
|
|
|
- cups-2.4.2-CVE-2023-32324.patch fixes CVE-2023-32324
|
|
|
|
|
"Heap buffer overflow in cupsd"
|
|
|
|
|
https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
|
|
|
|
|
bsc#1211643
|
|
|
|
|
|
2022-12-13 07:35:03 +01:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Dec 12 12:23:49 UTC 2022 - Callum Farmer <gmbr3@opensuse.org>
|
|
|
|
|
|
|
|
|
|
- Use %_pam_vendordir
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Sat Dec 10 15:14:42 UTC 2022 - Callum Farmer <gmbr3@opensuse.org>
|
|
|
|
|
|
|
|
|
|
- Remove invalid %config directive on %_distconfdir/pam.d/cups
|
|
|
|
|
|
2022-12-12 12:34:08 +01:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Dec 9 16:58:55 UTC 2022 - Stefan Schubert <schubi@suse.com>
|
|
|
|
|
|
|
|
|
|
- Migration PAM settings to /usr/etc: Fixed posttrans.
|
|
|
|
|
Should only be used for TW.
|
|
|
|
|
|
2022-12-09 11:05:19 +01:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Dec 8 14:30:12 UTC 2022 - Stefan Schubert <schubi@suse.com>
|
|
|
|
|
|
|
|
|
|
- Migration PAM settings to /usr/etc: Saving user changed
|
|
|
|
|
configuration files in /etc and restoring them while an RPM
|
|
|
|
|
update.
|
|
|
|
|
|
2022-07-22 12:55:37 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Sat Jul 9 12:32:40 UTC 2022 - Callum Farmer <gmbr3@opensuse.org>
|
|
|
|
|
|
|
|
|
|
- Move the dbus-1 system.d file to /usr (bsc#1201346)
|
|
|
|
|
|
2022-05-30 10:55:44 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon May 30 08:12:20 UTC 2022 - jsmeix@suse.de
|
|
|
|
|
|
|
|
|
|
- Version upgrade to 2.4.2:
|
|
|
|
|
See https://github.com/openprinting/cups/releases
|
|
|
|
|
CUPS 2.4.2 brings the fix for CVE-2022-26691 (#bsc1199474)
|
|
|
|
|
together with LibreSSL/OpenSSL and minimal AIX support.
|
|
|
|
|
* Fixed certificate strings comparison
|
|
|
|
|
for Local authorization (CVE-2022-26691)
|
|
|
|
|
* The `cupsFileOpen` function no longer opens files
|
|
|
|
|
for append in read-write mode (Issue #291)
|
|
|
|
|
* The cupsd daemon removed processing temporary
|
|
|
|
|
queue (Issue #364)
|
|
|
|
|
* Fixed delay in IPP backend if GNUTLS is used and endpoint
|
|
|
|
|
doesn't confirm closing the connection (Issue #365)
|
|
|
|
|
* Fixed conditional jump based on uninitialized value
|
|
|
|
|
in cups/ppd.c (Issue #329)
|
|
|
|
|
* Fixed CSS related issues in CUPS Web UI (Issue #344)
|
|
|
|
|
* Fixed copyright in CUPS Web UI trailer template (Issue #346)
|
|
|
|
|
* mDNS hostname in device uri is not resolved when installaling
|
|
|
|
|
a permanent IPP Everywhere queue (Issues #340, #343)
|
|
|
|
|
* The `lpstat` command now reports when the scheduler
|
|
|
|
|
is not running (Issue #352)
|
|
|
|
|
* Updated the man pages concerning the `-h` option (Issue #357)
|
|
|
|
|
* Re-added LibreSSL/OpenSSL support (Issue #362)
|
|
|
|
|
* Updated the Solaris smf service file (Issue #368)
|
|
|
|
|
* Fixed a regression in lpoptions option support (Issue #370)
|
|
|
|
|
* The scheduler now regenerates the PPD cache information after
|
|
|
|
|
changing the "cupsd.conf" file (Issue #371)
|
|
|
|
|
* Updated the scheduler to set "auth-info-required"
|
|
|
|
|
to "username,password" if a backend reports it needs
|
|
|
|
|
authentication info but doesn't set a method
|
|
|
|
|
for authentication (Issue #373)
|
|
|
|
|
* Updated the configure script to look for the OpenSSL library
|
|
|
|
|
the old way if pkg-config is not available (Issue #375)
|
|
|
|
|
* Fixed the prototype for the `httpWriteResponse`
|
|
|
|
|
function (Issue #380)
|
|
|
|
|
* Brought back minimal AIX support (Issue #389)
|
|
|
|
|
* `cupsGetResponse` did not always set the last error.
|
|
|
|
|
* Fixed a number of old references to the Apple CUPS web page.
|
|
|
|
|
* Restored the default/generic printer icon file
|
|
|
|
|
for the web interface.
|
|
|
|
|
* Removed old stylesheet classes that are no longer used
|
|
|
|
|
by the web interface.
|
|
|
|
|
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.2
|
|
|
|
|
|
2022-04-04 16:08:30 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Apr 4 12:45:16 UTC 2022 - jsmeix@suse.de
|
|
|
|
|
|
|
|
|
|
- Have cups.pc in %{_libdir} to avoid a conflict
|
|
|
|
|
that cups-devel and cups-devel-32bit would
|
|
|
|
|
both contain /usr/lib/pkgconfig/cups.pc because
|
|
|
|
|
when cups.pc is arch dependent it has to be in %{_libdir}
|
|
|
|
|
which it is because it contains 'libdir=/usr/lib64' on x86_64
|
|
|
|
|
(if it was arch independent it would have to be in %{_datadir})
|
|
|
|
|
cf. https://build.opensuse.org/request/show/965680
|
|
|
|
|
|
Accepting request 958348 from home:ajoga:branches:openSUSE:Factory
- Version upgrade to 2.4.1
- Dropped patch upstream_pull_174 because it it is included in this release
- Dropped patch cups-2.1.0-cups-systemd-socket.patch because it it is included in this release (https://github.com/OpenPrinting/cups/commit/e96e96b4bd0d4e6f634bbb66b95d6e475501541c)
- Changed upstream source packages signing key (https://github.com/OpenPrinting/cups/discussions/327#discussioncomment-2060579)
- Re-enabled testsuite
* Also removed make check because since upstream change the two target are identical (https://github.com/OpenPrinting/cups/commit/96ba46ebc818b610b0e40cbc9d62ef1dcd3ec9b6#diff-76ed074a9305c04054cdebb9e9aad2d818052b07091de1f20cad0bbac34ffb52R239)
- Changed cups-2.1.0-cups-systemd-socket.patch to accomodate new coding style
- Changed cups-config-libs.orig to accommodate recent code changes (SSL->TLS)
- Changed cups-2.1.0-default-webcontent-path.patch to accommodate code changes
old: Printing/cups
new: home:ajoga:branches:openSUSE:Factory/cups rev None
Index: cups-2.1.0-default-webcontent-path.patch
===================================================================
--- cups-2.1.0-default-webcontent-path.patch (revision 380)
+++ cups-2.1.0-default-webcontent-path.patch (revision 2)
@@ -1,17 +1,21 @@
---- config-scripts/cups-directories.m4.orig 2014-03-21 17:42:53.000000000 +0100
-+++ config-scripts/cups-directories.m4 2015-09-01 11:08:43.000000000 +0200
-@@ -206,11 +206,11 @@ fi
- AC_SUBST(MENUDIR)
+--- config-scripts/cups-directories.m4
++++ config-scripts/cups-directories.m4.orig
+@@ -166,15 +166,15 @@ AS_IF([test "x$menudir" = x], [
+ AC_SUBST([MENUDIR])
# Documentation files
--AC_ARG_WITH(docdir, [ --with-docdir set path for documentation],docdir="$withval",docdir="")
-+AC_ARG_WITH(docdir, [ --with-docdir set path and DocumentRoot directive for web content, default=datadir/cups/webcontent],docdir="$withval",docdir="")
+-AC_ARG_WITH([docdir], AS_HELP_STRING([--with-docdir], [set path for documentation]), [
++AC_ARG_WITH([docdir], AS_HELP_STRING([--with-docdir], [set path and DocumentRoot directive for web content, default=datadir/cups/webcontent]), [
+ docdir="$withval"
+ ], [
+ docdir=""
+ ])
- if test x$docdir = x; then
-- CUPS_DOCROOT="$datadir/doc/cups"
-- docdir="$datadir/doc/cups"
-+ CUPS_DOCROOT="$datadir/cups/webcontent"
-+ docdir="$datadir/cups/webcontent"
- else
- CUPS_DOCROOT="$docdir"
- fi
+ AS_IF([test x$docdir = x], [
+- CUPS_DOCROOT="$datadir/doc/cups"
+- docdir="$datadir/doc/cups"
++ CUPS_DOCROOT="$datadir/cups/webcontent"
++ docdir="$datadir/cups/webcontent"
+ ], [
+ CUPS_DOCROOT="$docdir"
+ ])
Index: cups-config-libs.patch
===================================================================
--- cups-config-libs.patch (revision 380)
+++ cups-config-libs.patch (revision 2)
@@ -4,7 +4,7 @@
# flags for compiler and linker...
CFLAGS=""
LDFLAGS="@EXPORT_LDFLAGS@"
--LIBS="@LIBGSSAPI@ @DNSSDLIBS@ @EXPORT_SSLLIBS@ @LIBZ@ @LIBS@"
+-LIBS="@LIBGSSAPI@ @DNSSDLIBS@ @EXPORT_TLSLIBS@ @LIBZ@ @LIBS@"
+LIBS=""
# Check for local invocation...
Index: cups.changes
===================================================================
--- cups.changes (revision 380)
+++ cups.changes (revision 2)
@@ -1,4 +1,88 @@
-------------------------------------------------------------------
+Tue Mar 1 18:16:11 UTC 2022 - Aurélien Joga <aurelienjoga@gmail.com>
+
+- Version upgrade to 2.4.1:
+ * The default color mode now is now configurable and defaults to the printer's reported default mode (Issue #277)
+ * Configuration script now checks linking for -Wl,-pie flags (Issue #303)
+ * Fixed memory leaks - in testi18n (Issue #313), in cups_enum_dests() (Issue #317), in _cupsEncodeOption() and http_tls_upgrade() (Issue #322)
+ * Fixed missing bracket in de/index.html (Issue #299)
+ * Fixed typos in configuration scripts (Issues #304, #316)
+ * Removed remaining legacy code for RIP_MAX_CACHE environment variable (Issue #323)
+ * Removed deprecated directives from cupsctl and cups-files.conf (Issue #300)
+ * Removed purge-jobs legacy code from CGI scripts and templates (Issue #325)
+ * Added configure option --with-idle-exit-timeout (Issue #294)
+ * Added --with-systemd-timeoutstartsec configure option (Issue #298)
+ * DigestOptions now are applied for MD5 Digest authentication defined by RFC 2069 as well (Issue #287)
+ * Fixed compilation on Solaris (Issue #293)
+ * Fixed and improved German translations (Issue #296, Issue #297)
+ * Added warning and debug messages when loading printers if the queue is raw or with driver (Issue #286)
+ * Compilation now uses -fstack-protector-strong if available (Issue #285)
+ * Added support for CUPS running in a Snapcraft snap.
+ * Added basic OAuth 2.0 client support (Issue #100)
+ * Added support for AirPrint and Mopria clients (Issue #105)
+ * Added configure support for specifying systemd dependencies in the CUPS service file (Issue #144)
+ * Added several features and improvements to ipptool (Issue #153)
+ * Added a JSON output mode for ipptool.
+ * The ipptool command now correctly reports an error when a test file cannot be found.
+ * CUPS library now uses thread safe getpwnam_r and getpwuid_r functions (Issue #274)
+ * Fixed Kerberos authentication for the web interface (Issue #19)
+ * The ZPL sample driver now supports more "standard" label sizes (Issue #70)
+ * Fixed reporting of printer instances when enumerating and when no options are set for the main instance (Issue #71)
+ * Reverted USB read limit enforcement change from CUPS 2.2.12 (Issue #72)
+ * The IPP backend did not return the correct status code when a job was canceled at the printer/server (Issue #74)
+ * The testlang unit test program now loops over all of the available locales by default (Issue #85)
+ * The cupsfilter command now shows error messages when options are used incorrectly (Issue #88)
+ * The PPD functions now treat boolean values as case-insensitive (Issue #106)
+ * Temporary queue names no longer end with an underscore (Issue #110)
+ * The USB backend now runs as root (Issue #121)
+ * Added pkg-config file for libcups (Issue #122)
+ * Fixed a PPD memory leak caused by emulator definitions (Issue #124)
+ * Fixed a DISPLAY bug in ipptool (Issue #139)
+ * The scheduler now includes the [Job N] prefix for job log messages, even when using syslog logging (Issue #154)
+ * Added support for locales using the GB18030 character set (Issue #159)
+ * httpReconnect2 did not reset the socket file descriptor when the TLS negotiation failed (Apple #5907)
+ * httpUpdate did not reset the socket file descriptor when the TLS negotiation failed (Apple #5915)
+ * The IPP backend now retries Validate-Job requests (Issue #132)
+ * Now show better error messages when a driver interface program fails to provide a PPD file (Issue #148)
+ * Added dark mode support to the CUPS web interface (Issue #152)
+ * Added a workaround for Solaris in httpAddrConnect2 (Issue #156)
+ * Fixed an interaction between --remote-admin and --remote-any for the cupsctl command (Issue #158)
+ * Now use a 60 second timeout for reading USB backchannel data (Issue #160)
+ * The USB backend now tries harder to find a serial number (Issue #170)
+ * Fixed @IF(name) handling in cupsd.conf (Apple #5918)
+ * Fixed documentation and added examples for CUPS' limited CGI support (Apple #5940)
+ * Fixed the lpc command prompt (Apple #5946)
+ * Now always pass "localhost" in the Host: header when talking over a domain socket or the loopback interface (Issue #185)
+ * Fixed a job history update issue in the scheduler (Issue #187)
+ * Fixed job-pages-per-set value for duplex print jobs.
+ * Fixed an edge case in ippReadIO to make sure that only complete attributes and values are retained on an error (Issue #195)
+ * Hardened ippReadIO to prevent invalid IPP messages from being propagated (Issue #195, Issue #196)
+ * The scheduler now supports the "everywhere" model directly (Issue #201)
+ * Fixed some IPP Everywhere option mapping problems (Issue #238)
+ * Fixed support for "job-hold-until" with the Restart-Job operation (Issue #250)
+ * Fixed the default color/grayscale presets for IPP Everywhere PPDs (Issue #262)
+ * Fixed support for the 'offline-report' state for all USB backends (Issue #264)
+ * Documentation fixes (Issue #92, Issue #163, Issue #177, Issue #184)
+ * Localization updates (Issue #123, Issue #129, Issue #134, Issue #146, Issue #164)
+ * USB quirk updates (Issue #192, Issue #270, Apple #5766, Apple #5838, Apple #5843, Apple #5867)
+ * Web interface updates (Issue #142, Issue #218)
+ * The ippeveprinter tool now automatically uses an available port.
+ * Fixed several Windows TLS and hashing issues.
+ * Deprecated cups-config (Issue #97)
+ * Deprecated Kerberos (AuthType Negotiate) authentication (Issue #98)
+ * Removed support for the (long deprecated and unused) FontPath, ListenBackLog, LPDConfigFile, KeepAliveTimeout, RIPCache, and SMBConfigFile directives in cupsd.conf and cups-files.conf.
+ * Stubbed out deprecated httpMD5 functions.
+ * Add test for undefined page ranges during printing.
+- Dropped patch upstream_pull_174 because it it is included in this release
+- Dropped patch cups-2.1.0-cups-systemd-socket.patch because it it is included in this release (https://github.com/OpenPrinting/cups/commit/e96e96b4bd0d4e6f634bbb66b95d6e475501541c)
+- Changed upstream source packages signing key (https://github.com/OpenPrinting/cups/discussions/327#discussioncomment-2060579)
+- Re-enabled testsuite
+ * Also removed make check because since upstream change the two target are identical (https://github.com/OpenPrinting/cups/commit/96ba46ebc818b610b0e40cbc9d62ef1dcd3ec9b6#diff-76ed074a9305c04054cdebb9e9aad2d818052b07091de1f20cad0bbac34ffb52R239)
+- Changed cups-2.1.0-cups-systemd-socket.patch to accomodate new coding style
+- Changed cups-config-libs.orig to accommodate recent code changes (SSL->TLS)
+- Changed cups-2.1.0-default-webcontent-path.patch to accommodate code changes
+
+-------------------------------------------------------------------
Tue Feb 1 09:18:27 UTC 2022 - jsmeix@suse.de
- Enhanced harden_cups.service.patch by adding
Index: cups.keyring
===================================================================
Binary files cups.keyring (revision 380) and cups.keyring (revision 2) differ
Index: cups.spec
===================================================================
--- cups.spec (revision 380)
+++ cups.spec (revision 2)
@@ -18,9 +18,7 @@
# Cf. https://rpm.org/user_doc/conditional_builds.html
# by default enable testsuite (i.e. in the 'check' section run make check and make test)
-#bcond_without testsuite
-# disable testsuite for now until https://github.com/OpenPrinting/cups/issues/155 is fixed
-%bcond_with testsuite
+%bcond_without testsuite
# _tmpfilesdir is not defined in systemd macros up to openSUSE 13.2
%{!?_tmpfilesdir: %global _tmpfilesdir /usr/lib/tmpfiles.d }
@@ -29,34 +27,32 @@
# "zypper vcmp 2.3.b99 2.3.0" shows "2.3.b99 is older than 2.3.0" and
# "zypper vcmp 2.2.99 2.3b6" show "2.2.99 is older than 2.3b6" so that
# version upgrades from 2.2.x via 2.3.b* to 2.3.0 work:
-Version: 2.3.3op2
+Version: 2.4.1
Release: 0
Summary: The Common UNIX Printing System
License: Apache-2.0
Group: Hardware/Printing
URL: https://openprinting.github.io/cups
# To get Source0 go to https://github.com/OpenPrinting/cups/releases or use e.g.
-# wget --no-check-certificate -O cups-2.3.3op2-source.tar.gz https://github.com/OpenPrinting/cups/releases/download/v2.3.3op2/cups-2.3.3op2-source.tar.gz
-Source0: https://github.com/OpenPrinting/cups/releases/download/v2.3.3op2/cups-2.3.3op2-source.tar.gz
+# wget --no-check-certificate -O cups-2.4.1-source.tar.gz https://github.com/OpenPrinting/cups/releases/download/v2.4.1/cups-2.4.1-source.tar.gz
+Source0: https://github.com/OpenPrinting/cups/releases/download/v2.4.1/cups-2.4.1-source.tar.gz
# To get Source1 go to https://github.com/OpenPrinting/cups/releases or use e.g.
-# wget --no-check-certificate -O cups-2.3.3op2-source.tar.gz.sig https://github.com/OpenPrinting/cups/releases/download/v2.3.3op2/cups-2.3.3op2-source.tar.gz.sig
-Source1: https://github.com/OpenPrinting/cups/releases/download/v2.3.3op2/cups-2.3.3op2-source.tar.gz.sig
-# To get Source2 go to https://www.msweet.org/pgp.html
-# PGP Fingerprint: 845464660B686AAB36540B6F999559A027815955
+# wget --no-check-certificate -O cups-2.4.1-source.tar.gz.sig https://github.com/OpenPrinting/cups/releases/download/v2.4.1/cups-2.4.1-source.tar.gz.sig
+Source1: https://github.com/OpenPrinting/cups/releases/download/v2.4.1/cups-2.4.1-source.tar.gz.sig
+# To get Source2 use gpg --keyserver keys.openpgp.org --recv-keys 7082A0A50A2E92640F3880E0E4522DCC9B246FF7
+# See https://github.com/OpenPrinting/cups/discussions/327#discussioncomment-2060579
+# PGP Fingerprint: 7082A0A50A2E92640F3880E0E4522DCC9B246FF7
Source2: cups.keyring
# To manually verify Source0 with Source1 and Source2 do e.g.
# gpg --import cups.keyring
-# gpg --list-keys | grep -1 'Michael R Sweet' | grep -v 'expired'
-# gpg --verify cups-2.3.3op2-source.tar.gz.sig cups-2.3.3op2-source.tar.gz
+# gpg --list-keys | grep -1 'Zdenek Dohnal'
+# gpg --verify cups-2.4.1-source.tar.gz.sig cups-2.4.1-source.tar.gz
Source102: Postscript.ppd.gz
Source105: Postscript-level1.ppd.gz
Source106: Postscript-level2.ppd.gz
Source108: cups-client.conf
Source109: baselibs.conf
# Patch0...Patch9 is for patches from upstream:
-# Patch1 upstream_pull_174.patch is https://github.com/OpenPrinting/cups/pull/174
-# Use 60s timeout for read_thread, revert read limits
-Patch1: upstream_pull_174.patch
# Source10...Source99 is for sources from SUSE which are intended for upstream:
# Patch10...Patch99 is for patches from SUSE which are intended for upstream:
# Patch10 cups-2.1.0-choose-uri-template.patch adds 'smb://...' URIs to templates/choose-uri.tmpl:
@@ -66,8 +62,6 @@
# because the files of the CUPS web content are no documentation, see CUPS STR #3578
# and http://bugzilla.novell.com/show_bug.cgi?id=546023#c6 and subsequent comments:
Patch11: cups-2.1.0-default-webcontent-path.patch
-# Patch12 cups-2.1.0-cups-systemd-socket.patch Use systemd socket activation properly:
-Patch12: cups-2.1.0-cups-systemd-socket.patch
# Patch100...Patch999 is for private patches from SUSE which are not intended for upstream:
# Patch100 cups-pam.diff adds conf/pam.suse regarding support for PAM for SUSE:
Patch100: cups-pam.diff
@@ -83,9 +77,9 @@
Patch103: cups-1.4-do_not_strip_recommended_from_PPDs.patch
# Patch104 cups-config-libs.patch fixes option --libs in cups-config script:
Patch104: cups-config-libs.patch
-# Patch106 Fixes web UI Kerberos authentication (bsc#1175960)
-Patch106: fix-negotiate-authentication-between-CGIs-and-scheduler.patch
Patch107: harden_cups.service.patch
+# Patch108 downgrades the autoconf requirement to the autoconf available in tumbleweed as of writing
+Patch108: downgrade-autoconf-requirement.patch
# Build Requirements:
BuildRequires: dbus-1-devel
BuildRequires: fdupes
@@ -280,9 +274,6 @@
%prep
%setup -q
# Patch0...Patch9 is for patches from upstream:
-# Patch1 upstream_pull_174.patch is https://github.com/OpenPrinting/cups/pull/174
-# Use 60s timeout for read_thread, revert read limits
-%patch1 -p1
# Patch10...Patch99 is for patches from SUSE which are intended for upstream:
# Patch10 cups-2.1.0-choose-uri-template.patch adds 'smb://...' URIs to templates/choose-uri.tmpl:
%patch10 -b choose-uri-template.orig
@@ -291,8 +282,6 @@
# because the files of the CUPS web content are no documentation, see CUPS STR #3578
# and http://bugzilla.novell.com/show_bug.cgi?id=546023#c6 and subsequent comments:
%patch11 -b default-webcontent-path.orig
-# Patch12 cups-2.1.0-cups-systemd-socket.patch Use systemd socket activation properly:
-#patch12 -b cups-systemd-socket.orig
# Patch100...Patch999 is for private patches from SUSE which are not intended for upstream:
# Patch100 cups-pam.diff adds conf/pam.suse regarding support for PAM for SUSE:
%patch100 -b cups-pam.orig
@@ -308,9 +297,8 @@
%patch103 -b do_not_strip_recommended_from_PPDs.orig
# Patch104 cups-config-libs.patch fixes option --libs in cups-config script:
%patch104 -b cups-config-libs.orig
-# Patch106 Fixes web UI Kerberos authentication (bsc#1175960)
-%patch106 -p1
%patch107 -p1
+%patch108 -p1
%build
# Remove ".SILENT" rule for verbose build output
@@ -439,8 +427,6 @@
# There appears to be some kind of race condition when running make check and make test
# cf. https://github.com/OpenPrinting/cups/issues/155
# We print all logs for debugging purposes if either testsuite fails
-echo "DEBUG: running make check"
-bash -c 'make %{?_smp_mflags} check; EXIT=$?; if [ $EXIT -ne 0 ]; then cat test/*_log*-$(whoami); fi; exit $EXIT'
echo "DEBUG: running make test"
bash -c 'make %{?_smp_mflags} test; EXIT=$?; if [ $EXIT -ne 0 ]; then cat test/*_log*-$(whoami); fi; exit $EXIT'
%else
@@ -681,6 +667,7 @@
%files devel
%defattr(-,root,root)
+/usr/lib/pkgconfig/cups.pc
%{_includedir}/cups/
%{_libdir}/libcups.so
%{_libdir}/libcupsimage.so
Index: cups-2.4.1-source.tar.gz
===================================================================
Binary file cups-2.4.1-source.tar.gz (revision 2) added
Index: cups-2.4.1-source.tar.gz.sig
===================================================================
Binary file cups-2.4.1-source.tar.gz.sig (revision 2) added
Index: downgrade-autoconf-requirement.patch
===================================================================
--- downgrade-autoconf-requirement.patch (added)
+++ downgrade-autoconf-requirement.patch (revision 2)
@@ -0,0 +1,15 @@
+diff --git a/configure.ac b/configure.ac
+index a8c6c1040..6ace74a8d 100644
+--- a/configure.ac
++++ b/configure.ac
+@@ -9,8 +9,8 @@ dnl Licensed under Apache License v2.0. See the file "LICENSE" for more
+ dnl information.
+ dnl
+
+-dnl We need at least autoconf 2.71...
+-AC_PREREQ([2.71])
++dnl We need at least autoconf 2.69...
++AC_PREREQ([2.69])
+
+ dnl Package name and version...
+ AC_INIT([CUPS],[2.4.1],[https://github.com/openprinting/cups/issues],[cups],[https://openprinting.github.io/cups])
Index: cups-2.1.0-cups-systemd-socket.patch
===================================================================
--- cups-2.1.0-cups-systemd-socket.patch (revision 380)
+++ cups-2.1.0-cups-systemd-socket.patch (deleted)
@@ -1,43 +0,0 @@
---- scheduler/main.c.orig 2015-06-08 20:32:35.000000000 +0200
-+++ scheduler/main.c 2015-09-01 11:19:36.000000000 +0200
-@@ -656,7 +656,15 @@ main(int argc, /* I - Number of comm
-
- #if defined(HAVE_LAUNCHD) || defined(HAVE_SYSTEMD)
- if (OnDemand)
-+ {
- cupsdAddEvent(CUPSD_EVENT_SERVER_STARTED, NULL, NULL, "Scheduler started on demand.");
-+# ifdef HAVE_SYSTEMD
-+ sd_notifyf(0, "READY=1\n"
-+ "STATUS=Scheduler is running...\n"
-+ "MAINPID=%lu",
-+ (unsigned long) getpid());
-+# endif /* HAVE_SYSTEMD */
-+ }
- else
- #endif /* HAVE_LAUNCHD || HAVE_SYSTEMD */
- if (fg)
---- scheduler/org.cups.cupsd.path.in.orig 2014-03-21 15:50:24.000000000 +0100
-+++ scheduler/org.cups.cupsd.path.in 2015-09-01 11:20:37.000000000 +0200
-@@ -3,6 +3,7 @@ Description=CUPS Scheduler
-
- [Path]
- PathExists=@CUPS_CACHEDIR@/org.cups.cupsd
-+PathExistsGlob=@CUPS_REQUESTS@/d*
-
- [Install]
- WantedBy=multi-user.target
---- scheduler/org.cups.cupsd.service.in.orig 2014-10-21 13:54:05.000000000 +0200
-+++ scheduler/org.cups.cupsd.service.in 2015-09-01 11:22:09.000000000 +0200
-@@ -1,10 +1,11 @@
- [Unit]
- Description=CUPS Scheduler
- Documentation=man:cupsd(8)
-+After=network.target
-
- [Service]
- ExecStart=@sbindir@/cupsd -l
--Type=simple
-+Type=notify
-
- [Install]
- Also=org.cups.cupsd.socket org.cups.cupsd.path
Index: cups-2.3.3op2-source.tar.gz
===================================================================
Binary file cups-2.3.3op2-source.tar.gz (revision 380) deleted
Index: cups-2.3.3op2-source.tar.gz.sig
===================================================================
Binary file cups-2.3.3op2-source.tar.gz.sig (revision 380) deleted
Index: fix-negotiate-authentication-between-CGIs-and-scheduler.patch
===================================================================
--- fix-negotiate-authentication-between-CGIs-and-scheduler.patch (revision 380)
+++ fix-negotiate-authentication-between-CGIs-and-scheduler.patch (deleted)
@@ -1,223 +0,0 @@
-From d4521ed0df7e625ccf2bc079bab6f48c46ef9bf9 Mon Sep 17 00:00:00 2001
-From: Samuel Cabrero <scabrero@suse.de>
-Date: Mon, 26 Oct 2020 17:35:22 +0100
-Subject: [PATCH 1/4] Avoid infinite loop in admin.cgi when negotiate is used
-
-SetAuthorizationString with NULL argument sets an empty string.
-
-Related: #5596
-
-Signed-off-by: Samuel Cabrero <scabrero@suse.de>
----
- cups/auth.c | 2 +-
- 1 file changed, 1 insertion(+), 1 deletion(-)
-
-diff --git a/cups/auth.c b/cups/auth.c
-index db45bbba6..f2409350a 100644
---- a/cups/auth.c
-+++ b/cups/auth.c
-@@ -295,7 +295,7 @@ cupsDoAuthentication(
- }
- }
-
-- if (http->authstring)
-+ if (http->authstring && http->authstring[0])
- {
- DEBUG_printf(("1cupsDoAuthentication: authstring=\"%s\".", http->authstring));
-
---
-2.30.2
-
-
-From 61ad7780bc7d0593e3225d088ac6dff31badf801 Mon Sep 17 00:00:00 2001
-From: Samuel Cabrero <scabrero@suse.de>
-Date: Tue, 27 Oct 2020 16:11:41 +0100
-Subject: [PATCH 2/4] Add cups_is_local_connection() to check if connection is
- to localhost
-
-Related: #5596
-
-Signed-off-by: Samuel Cabrero <scabrero@suse.de>
----
- cups/auth.c | 11 ++++++++++-
- 1 file changed, 10 insertions(+), 1 deletion(-)
-
-diff --git a/cups/auth.c b/cups/auth.c
-index f2409350a..d2956438d 100644
---- a/cups/auth.c
-+++ b/cups/auth.c
-@@ -90,6 +90,7 @@ static void cups_gss_printf(OM_uint32 major_status, OM_uint32 minor_status,
- # define cups_gss_printf(major, minor, message)
- # endif /* DEBUG */
- #endif /* HAVE_GSSAPI */
-+static int cups_is_local_connection(http_t *http);
- static int cups_local_auth(http_t *http);
-
-
-@@ -916,6 +917,14 @@ cups_gss_printf(OM_uint32 major_status,/* I - Major status code */
- # endif /* DEBUG */
- #endif /* HAVE_GSSAPI */
-
-+static int /* O - 0 if not a local connection */
-+ /* 1 if local connection */
-+cups_is_local_connection(http_t *http) /* I - HTTP connection to server */
-+{
-+ if (!httpAddrLocalhost(http->hostaddr) && _cups_strcasecmp(http->hostname, "localhost") != 0)
-+ return 0;
-+ return 1;
-+}
-
- /*
- * 'cups_local_auth()' - Get the local authorization certificate if
-@@ -958,7 +967,7 @@ cups_local_auth(http_t *http) /* I - HTTP connection to server */
- * See if we are accessing localhost...
- */
-
-- if (!httpAddrLocalhost(http->hostaddr) && _cups_strcasecmp(http->hostname, "localhost") != 0)
-+ if (!cups_is_local_connection(http))
- {
- DEBUG_puts("8cups_local_auth: Not a local connection!");
- return (1);
---
-2.30.2
-
-
-From f629d079750a86b1b605c285f99c0dea3933ca50 Mon Sep 17 00:00:00 2001
-From: Samuel Cabrero <scabrero@suse.de>
-Date: Tue, 27 Oct 2020 16:23:30 +0100
-Subject: [PATCH 3/4] Try local kerberos ccache credentials only for remote
- servers
-
-If connecting to localhost then proceed to ask the client for the
-authorization using cupsGetPassword2. The get password callback will
-return 401 to the client with WWW-Authenticate: Negotiate.
-
-Fixes: #5596
-
-Signed-off-by: Samuel Cabrero <scabrero@suse.de>
----
- cups/auth.c | 10 ++++++----
- 1 file changed, 6 insertions(+), 4 deletions(-)
-
-diff --git a/cups/auth.c b/cups/auth.c
-index d2956438d..9661657fc 100644
---- a/cups/auth.c
-+++ b/cups/auth.c
-@@ -175,10 +175,10 @@ cupsDoAuthentication(
- DEBUG_printf(("2cupsDoAuthentication: Trying scheme \"%s\"...", scheme));
-
- #ifdef HAVE_GSSAPI
-- if (!_cups_strcasecmp(scheme, "Negotiate"))
-+ if (!_cups_strcasecmp(scheme, "Negotiate") && !cups_is_local_connection(http))
- {
- /*
-- * Kerberos authentication...
-+ * Kerberos authentication to remote server...
- */
-
- int gss_status; /* Auth status */
-@@ -202,7 +202,9 @@ cupsDoAuthentication(
- }
- else
- #endif /* HAVE_GSSAPI */
-- if (_cups_strcasecmp(scheme, "Basic") && _cups_strcasecmp(scheme, "Digest"))
-+ if (_cups_strcasecmp(scheme, "Basic") &&
-+ _cups_strcasecmp(scheme, "Digest") &&
-+ _cups_strcasecmp(scheme, "Negotiate"))
- {
- /*
- * Other schemes not yet supported...
-@@ -216,7 +218,7 @@ cupsDoAuthentication(
- * See if we should retry the current username:password...
- */
-
-- if ((http->digest_tries > 1 || !http->userpass[0]) && (!_cups_strcasecmp(scheme, "Basic") || (!_cups_strcasecmp(scheme, "Digest"))))
-+ if (http->digest_tries > 1 || !http->userpass[0])
- {
- /*
- * Nope - get a new password from the user...
---
-2.30.2
-
-
-From 0563a28b18b21d5574a5e0e38b74246146074bbf Mon Sep 17 00:00:00 2001
-From: Samuel Cabrero <scabrero@suse.de>
-Date: Tue, 27 Oct 2020 16:18:03 +0100
-Subject: [PATCH 4/4] Allow Local authentication for Negotiate
-
-PeerCred is also possible if address family is AF_LOCAL. This will allow
-the CGI programs to generate the authorization from the local
-certificates based on PID also when Negotiate is used for local
-connections:
-
-Client CGI
-Browser <- Remote conn -> admin.cgi <--- Localhost conn ---> Scheduler
- | | |
- + --- HTTP/POST /admin/ --> | |
- | + --- CUPS-Get-Devices ------------> |
- | | |
- | | <-- 401 Unauthorized --------------+
- | | WWW-Authenticate: |
- | | Negotiate, (PeerCred,) Local |
- | | |
- | <-- 401 Unauthorized -----+ |
- | WWW-Authenticate: | |
- | Negotiate | |
- | | |
- | --- HTTP/POST /admin/ --> | |
- | Authorization: + --- IPP CUPS-GetDevices ---------> |
- | Negotiate | Authorization: Local <cert> |
- | | |
-
-Fixes: #5596
-
-Signed-off-by: Samuel Cabrero <scabrero@suse.de>
----
- cups/auth.c | 5 -----
- scheduler/client.c | 9 ++-------
- 2 files changed, 2 insertions(+), 12 deletions(-)
-
-diff --git a/cups/auth.c b/cups/auth.c
-index 9661657fc..b6fec6b98 100644
---- a/cups/auth.c
-+++ b/cups/auth.c
-@@ -1043,11 +1043,6 @@ cups_local_auth(http_t *http) /* I - HTTP connection to server */
- }
- # endif /* HAVE_AUTHORIZATION_H */
-
--# ifdef HAVE_GSSAPI
-- if (cups_auth_find(www_auth, "Negotiate"))
-- return (1);
--# endif /* HAVE_GSSAPI */
--
- # if defined(SO_PEERCRED) && defined(AF_LOCAL)
- /*
- * See if we can authenticate using the peer credentials provided over a
-diff --git a/scheduler/client.c b/scheduler/client.c
-index c2ee8f12a..56797d58d 100644
---- a/scheduler/client.c
-+++ b/scheduler/client.c
-@@ -2109,18 +2109,13 @@ cupsdSendHeader(
- }
- else if (auth_type == CUPSD_AUTH_NEGOTIATE)
- {
--#if defined(SO_PEERCRED) && defined(AF_LOCAL)
-- if (httpAddrFamily(httpGetAddress(con->http)) == AF_LOCAL)
-- strlcpy(auth_str, "PeerCred", sizeof(auth_str));
-- else
--#endif /* SO_PEERCRED && AF_LOCAL */
- strlcpy(auth_str, "Negotiate", sizeof(auth_str));
- }
-
-- if (con->best && auth_type != CUPSD_AUTH_NEGOTIATE && !con->is_browser && !_cups_strcasecmp(httpGetHostname(con->http, NULL, 0), "localhost"))
-+ if (con->best && !con->is_browser && !_cups_strcasecmp(httpGetHostname(con->http, NULL, 0), "localhost"))
- {
- /*
-- * Add a "trc" (try root certification) parameter for local non-Kerberos
-+ * Add a "trc" (try root certification) parameter for local
- * requests when the request requires system group membership - then the
- * client knows the root certificate can/should be used.
- *
---
-2.30.2
-
Index: upstream_pull_174.patch
===================================================================
--- upstream_pull_174.patch (revision 380)
+++ upstream_pull_174.patch (deleted)
@@ -1,53 +0,0 @@
-From c37d71b1a31d26a4790166e2508822b18934a5c0 Mon Sep 17 00:00:00 2001
-From: Zdenek Dohnal <zdohnal@redhat.com>
-Date: Tue, 13 Apr 2021 15:44:14 +0200
-Subject: [PATCH 1/2] backend/usb-libusb.c: Use 60s timeout for reading at
- backchannel
-
-Some older models malfunction if timeout is too short.
----
- CHANGES.md | 1 +
- backend/usb-libusb.c | 2 +-
- 2 files changed, 2 insertions(+), 1 deletion(-)
-
---- a/backend/usb-libusb.c
-+++ b/backend/usb-libusb.c
-@@ -1704,7 +1704,7 @@ static void *read_thread(void *reference)
- readstatus = libusb_bulk_transfer(g.printer->handle,
- g.printer->read_endp,
- readbuffer, rbytes,
-- &rbytes, 250);
-+ &rbytes, 60000);
- if (readstatus == LIBUSB_SUCCESS && rbytes > 0)
- {
- fprintf(stderr, "DEBUG: Read %d bytes of back-channel data...\n", (int)rbytes);
-
-From 4cb6f6806cdbe040d478b266a1d351b19341dd79 Mon Sep 17 00:00:00 2001
-From: Zdenek Dohnal <zdohnal@redhat.com>
-Date: Tue, 13 Apr 2021 15:47:37 +0200
-Subject: [PATCH 2/2] backend/usb-libusb.c: Revert enforcing read limits
-
-This commit reverts the change introduced by 2.2.12 [1] - its
-implementation caused a regression with Lexmark filters.
-
-[1]
-https://github.com/apple/cups/commit/35e927f83529cd9b4bc37bcd418c50e307fced35
----
- CHANGES.md | 1 +
- backend/usb-libusb.c | 3 ++-
- 2 files changed, 3 insertions(+), 1 deletion(-)
-
-diff --git a/backend/usb-libusb.c b/backend/usb-libusb.c
-index fbb0d9d89..89b5182f7 100644
---- a/backend/usb-libusb.c
-+++ b/backend/usb-libusb.c
-@@ -1721,7 +1721,8 @@ static void *read_thread(void *reference)
- * Make sure this loop executes no more than once every 250 miliseconds...
- */
-
-- if ((g.wait_eof || !g.read_thread_stop))
-+ if ((readstatus != LIBUSB_SUCCESS || rbytes == 0) &&
-+ (g.wait_eof || !g.read_thread_stop))
- usleep(250000);
- }
- while (g.wait_eof || !g.read_thread_stop);
OBS-URL: https://build.opensuse.org/request/show/958348
OBS-URL: https://build.opensuse.org/package/show/Printing/cups?expand=0&rev=381
2022-03-03 13:19:05 +01:00
|
|
|
|
-------------------------------------------------------------------
|
2022-03-04 13:48:44 +01:00
|
|
|
|
Fri Mar 4 11:34:13 UTC 2022 - jsmeix@suse.de
|
Accepting request 958348 from home:ajoga:branches:openSUSE:Factory
- Version upgrade to 2.4.1
- Dropped patch upstream_pull_174 because it it is included in this release
- Dropped patch cups-2.1.0-cups-systemd-socket.patch because it it is included in this release (https://github.com/OpenPrinting/cups/commit/e96e96b4bd0d4e6f634bbb66b95d6e475501541c)
- Changed upstream source packages signing key (https://github.com/OpenPrinting/cups/discussions/327#discussioncomment-2060579)
- Re-enabled testsuite
* Also removed make check because since upstream change the two target are identical (https://github.com/OpenPrinting/cups/commit/96ba46ebc818b610b0e40cbc9d62ef1dcd3ec9b6#diff-76ed074a9305c04054cdebb9e9aad2d818052b07091de1f20cad0bbac34ffb52R239)
- Changed cups-2.1.0-cups-systemd-socket.patch to accomodate new coding style
- Changed cups-config-libs.orig to accommodate recent code changes (SSL->TLS)
- Changed cups-2.1.0-default-webcontent-path.patch to accommodate code changes
old: Printing/cups
new: home:ajoga:branches:openSUSE:Factory/cups rev None
Index: cups-2.1.0-default-webcontent-path.patch
===================================================================
--- cups-2.1.0-default-webcontent-path.patch (revision 380)
+++ cups-2.1.0-default-webcontent-path.patch (revision 2)
@@ -1,17 +1,21 @@
---- config-scripts/cups-directories.m4.orig 2014-03-21 17:42:53.000000000 +0100
-+++ config-scripts/cups-directories.m4 2015-09-01 11:08:43.000000000 +0200
-@@ -206,11 +206,11 @@ fi
- AC_SUBST(MENUDIR)
+--- config-scripts/cups-directories.m4
++++ config-scripts/cups-directories.m4.orig
+@@ -166,15 +166,15 @@ AS_IF([test "x$menudir" = x], [
+ AC_SUBST([MENUDIR])
# Documentation files
--AC_ARG_WITH(docdir, [ --with-docdir set path for documentation],docdir="$withval",docdir="")
-+AC_ARG_WITH(docdir, [ --with-docdir set path and DocumentRoot directive for web content, default=datadir/cups/webcontent],docdir="$withval",docdir="")
+-AC_ARG_WITH([docdir], AS_HELP_STRING([--with-docdir], [set path for documentation]), [
++AC_ARG_WITH([docdir], AS_HELP_STRING([--with-docdir], [set path and DocumentRoot directive for web content, default=datadir/cups/webcontent]), [
+ docdir="$withval"
+ ], [
+ docdir=""
+ ])
- if test x$docdir = x; then
-- CUPS_DOCROOT="$datadir/doc/cups"
-- docdir="$datadir/doc/cups"
-+ CUPS_DOCROOT="$datadir/cups/webcontent"
-+ docdir="$datadir/cups/webcontent"
- else
- CUPS_DOCROOT="$docdir"
- fi
+ AS_IF([test x$docdir = x], [
+- CUPS_DOCROOT="$datadir/doc/cups"
+- docdir="$datadir/doc/cups"
++ CUPS_DOCROOT="$datadir/cups/webcontent"
++ docdir="$datadir/cups/webcontent"
+ ], [
+ CUPS_DOCROOT="$docdir"
+ ])
Index: cups-config-libs.patch
===================================================================
--- cups-config-libs.patch (revision 380)
+++ cups-config-libs.patch (revision 2)
@@ -4,7 +4,7 @@
# flags for compiler and linker...
CFLAGS=""
LDFLAGS="@EXPORT_LDFLAGS@"
--LIBS="@LIBGSSAPI@ @DNSSDLIBS@ @EXPORT_SSLLIBS@ @LIBZ@ @LIBS@"
+-LIBS="@LIBGSSAPI@ @DNSSDLIBS@ @EXPORT_TLSLIBS@ @LIBZ@ @LIBS@"
+LIBS=""
# Check for local invocation...
Index: cups.changes
===================================================================
--- cups.changes (revision 380)
+++ cups.changes (revision 2)
@@ -1,4 +1,88 @@
-------------------------------------------------------------------
+Tue Mar 1 18:16:11 UTC 2022 - Aurélien Joga <aurelienjoga@gmail.com>
+
+- Version upgrade to 2.4.1:
+ * The default color mode now is now configurable and defaults to the printer's reported default mode (Issue #277)
+ * Configuration script now checks linking for -Wl,-pie flags (Issue #303)
+ * Fixed memory leaks - in testi18n (Issue #313), in cups_enum_dests() (Issue #317), in _cupsEncodeOption() and http_tls_upgrade() (Issue #322)
+ * Fixed missing bracket in de/index.html (Issue #299)
+ * Fixed typos in configuration scripts (Issues #304, #316)
+ * Removed remaining legacy code for RIP_MAX_CACHE environment variable (Issue #323)
+ * Removed deprecated directives from cupsctl and cups-files.conf (Issue #300)
+ * Removed purge-jobs legacy code from CGI scripts and templates (Issue #325)
+ * Added configure option --with-idle-exit-timeout (Issue #294)
+ * Added --with-systemd-timeoutstartsec configure option (Issue #298)
+ * DigestOptions now are applied for MD5 Digest authentication defined by RFC 2069 as well (Issue #287)
+ * Fixed compilation on Solaris (Issue #293)
+ * Fixed and improved German translations (Issue #296, Issue #297)
+ * Added warning and debug messages when loading printers if the queue is raw or with driver (Issue #286)
+ * Compilation now uses -fstack-protector-strong if available (Issue #285)
+ * Added support for CUPS running in a Snapcraft snap.
+ * Added basic OAuth 2.0 client support (Issue #100)
+ * Added support for AirPrint and Mopria clients (Issue #105)
+ * Added configure support for specifying systemd dependencies in the CUPS service file (Issue #144)
+ * Added several features and improvements to ipptool (Issue #153)
+ * Added a JSON output mode for ipptool.
+ * The ipptool command now correctly reports an error when a test file cannot be found.
+ * CUPS library now uses thread safe getpwnam_r and getpwuid_r functions (Issue #274)
+ * Fixed Kerberos authentication for the web interface (Issue #19)
+ * The ZPL sample driver now supports more "standard" label sizes (Issue #70)
+ * Fixed reporting of printer instances when enumerating and when no options are set for the main instance (Issue #71)
+ * Reverted USB read limit enforcement change from CUPS 2.2.12 (Issue #72)
+ * The IPP backend did not return the correct status code when a job was canceled at the printer/server (Issue #74)
+ * The testlang unit test program now loops over all of the available locales by default (Issue #85)
+ * The cupsfilter command now shows error messages when options are used incorrectly (Issue #88)
+ * The PPD functions now treat boolean values as case-insensitive (Issue #106)
+ * Temporary queue names no longer end with an underscore (Issue #110)
+ * The USB backend now runs as root (Issue #121)
+ * Added pkg-config file for libcups (Issue #122)
+ * Fixed a PPD memory leak caused by emulator definitions (Issue #124)
+ * Fixed a DISPLAY bug in ipptool (Issue #139)
+ * The scheduler now includes the [Job N] prefix for job log messages, even when using syslog logging (Issue #154)
+ * Added support for locales using the GB18030 character set (Issue #159)
+ * httpReconnect2 did not reset the socket file descriptor when the TLS negotiation failed (Apple #5907)
+ * httpUpdate did not reset the socket file descriptor when the TLS negotiation failed (Apple #5915)
+ * The IPP backend now retries Validate-Job requests (Issue #132)
+ * Now show better error messages when a driver interface program fails to provide a PPD file (Issue #148)
+ * Added dark mode support to the CUPS web interface (Issue #152)
+ * Added a workaround for Solaris in httpAddrConnect2 (Issue #156)
+ * Fixed an interaction between --remote-admin and --remote-any for the cupsctl command (Issue #158)
+ * Now use a 60 second timeout for reading USB backchannel data (Issue #160)
+ * The USB backend now tries harder to find a serial number (Issue #170)
+ * Fixed @IF(name) handling in cupsd.conf (Apple #5918)
+ * Fixed documentation and added examples for CUPS' limited CGI support (Apple #5940)
+ * Fixed the lpc command prompt (Apple #5946)
+ * Now always pass "localhost" in the Host: header when talking over a domain socket or the loopback interface (Issue #185)
+ * Fixed a job history update issue in the scheduler (Issue #187)
+ * Fixed job-pages-per-set value for duplex print jobs.
+ * Fixed an edge case in ippReadIO to make sure that only complete attributes and values are retained on an error (Issue #195)
+ * Hardened ippReadIO to prevent invalid IPP messages from being propagated (Issue #195, Issue #196)
+ * The scheduler now supports the "everywhere" model directly (Issue #201)
+ * Fixed some IPP Everywhere option mapping problems (Issue #238)
+ * Fixed support for "job-hold-until" with the Restart-Job operation (Issue #250)
+ * Fixed the default color/grayscale presets for IPP Everywhere PPDs (Issue #262)
+ * Fixed support for the 'offline-report' state for all USB backends (Issue #264)
+ * Documentation fixes (Issue #92, Issue #163, Issue #177, Issue #184)
+ * Localization updates (Issue #123, Issue #129, Issue #134, Issue #146, Issue #164)
+ * USB quirk updates (Issue #192, Issue #270, Apple #5766, Apple #5838, Apple #5843, Apple #5867)
+ * Web interface updates (Issue #142, Issue #218)
+ * The ippeveprinter tool now automatically uses an available port.
+ * Fixed several Windows TLS and hashing issues.
+ * Deprecated cups-config (Issue #97)
+ * Deprecated Kerberos (AuthType Negotiate) authentication (Issue #98)
+ * Removed support for the (long deprecated and unused) FontPath, ListenBackLog, LPDConfigFile, KeepAliveTimeout, RIPCache, and SMBConfigFile directives in cupsd.conf and cups-files.conf.
+ * Stubbed out deprecated httpMD5 functions.
+ * Add test for undefined page ranges during printing.
+- Dropped patch upstream_pull_174 because it it is included in this release
+- Dropped patch cups-2.1.0-cups-systemd-socket.patch because it it is included in this release (https://github.com/OpenPrinting/cups/commit/e96e96b4bd0d4e6f634bbb66b95d6e475501541c)
+- Changed upstream source packages signing key (https://github.com/OpenPrinting/cups/discussions/327#discussioncomment-2060579)
+- Re-enabled testsuite
+ * Also removed make check because since upstream change the two target are identical (https://github.com/OpenPrinting/cups/commit/96ba46ebc818b610b0e40cbc9d62ef1dcd3ec9b6#diff-76ed074a9305c04054cdebb9e9aad2d818052b07091de1f20cad0bbac34ffb52R239)
+- Changed cups-2.1.0-cups-systemd-socket.patch to accomodate new coding style
+- Changed cups-config-libs.orig to accommodate recent code changes (SSL->TLS)
+- Changed cups-2.1.0-default-webcontent-path.patch to accommodate code changes
+
+-------------------------------------------------------------------
Tue Feb 1 09:18:27 UTC 2022 - jsmeix@suse.de
- Enhanced harden_cups.service.patch by adding
Index: cups.keyring
===================================================================
Binary files cups.keyring (revision 380) and cups.keyring (revision 2) differ
Index: cups.spec
===================================================================
--- cups.spec (revision 380)
+++ cups.spec (revision 2)
@@ -18,9 +18,7 @@
# Cf. https://rpm.org/user_doc/conditional_builds.html
# by default enable testsuite (i.e. in the 'check' section run make check and make test)
-#bcond_without testsuite
-# disable testsuite for now until https://github.com/OpenPrinting/cups/issues/155 is fixed
-%bcond_with testsuite
+%bcond_without testsuite
# _tmpfilesdir is not defined in systemd macros up to openSUSE 13.2
%{!?_tmpfilesdir: %global _tmpfilesdir /usr/lib/tmpfiles.d }
@@ -29,34 +27,32 @@
# "zypper vcmp 2.3.b99 2.3.0" shows "2.3.b99 is older than 2.3.0" and
# "zypper vcmp 2.2.99 2.3b6" show "2.2.99 is older than 2.3b6" so that
# version upgrades from 2.2.x via 2.3.b* to 2.3.0 work:
-Version: 2.3.3op2
+Version: 2.4.1
Release: 0
Summary: The Common UNIX Printing System
License: Apache-2.0
Group: Hardware/Printing
URL: https://openprinting.github.io/cups
# To get Source0 go to https://github.com/OpenPrinting/cups/releases or use e.g.
-# wget --no-check-certificate -O cups-2.3.3op2-source.tar.gz https://github.com/OpenPrinting/cups/releases/download/v2.3.3op2/cups-2.3.3op2-source.tar.gz
-Source0: https://github.com/OpenPrinting/cups/releases/download/v2.3.3op2/cups-2.3.3op2-source.tar.gz
+# wget --no-check-certificate -O cups-2.4.1-source.tar.gz https://github.com/OpenPrinting/cups/releases/download/v2.4.1/cups-2.4.1-source.tar.gz
+Source0: https://github.com/OpenPrinting/cups/releases/download/v2.4.1/cups-2.4.1-source.tar.gz
# To get Source1 go to https://github.com/OpenPrinting/cups/releases or use e.g.
-# wget --no-check-certificate -O cups-2.3.3op2-source.tar.gz.sig https://github.com/OpenPrinting/cups/releases/download/v2.3.3op2/cups-2.3.3op2-source.tar.gz.sig
-Source1: https://github.com/OpenPrinting/cups/releases/download/v2.3.3op2/cups-2.3.3op2-source.tar.gz.sig
-# To get Source2 go to https://www.msweet.org/pgp.html
-# PGP Fingerprint: 845464660B686AAB36540B6F999559A027815955
+# wget --no-check-certificate -O cups-2.4.1-source.tar.gz.sig https://github.com/OpenPrinting/cups/releases/download/v2.4.1/cups-2.4.1-source.tar.gz.sig
+Source1: https://github.com/OpenPrinting/cups/releases/download/v2.4.1/cups-2.4.1-source.tar.gz.sig
+# To get Source2 use gpg --keyserver keys.openpgp.org --recv-keys 7082A0A50A2E92640F3880E0E4522DCC9B246FF7
+# See https://github.com/OpenPrinting/cups/discussions/327#discussioncomment-2060579
+# PGP Fingerprint: 7082A0A50A2E92640F3880E0E4522DCC9B246FF7
Source2: cups.keyring
# To manually verify Source0 with Source1 and Source2 do e.g.
# gpg --import cups.keyring
-# gpg --list-keys | grep -1 'Michael R Sweet' | grep -v 'expired'
-# gpg --verify cups-2.3.3op2-source.tar.gz.sig cups-2.3.3op2-source.tar.gz
+# gpg --list-keys | grep -1 'Zdenek Dohnal'
+# gpg --verify cups-2.4.1-source.tar.gz.sig cups-2.4.1-source.tar.gz
Source102: Postscript.ppd.gz
Source105: Postscript-level1.ppd.gz
Source106: Postscript-level2.ppd.gz
Source108: cups-client.conf
Source109: baselibs.conf
# Patch0...Patch9 is for patches from upstream:
-# Patch1 upstream_pull_174.patch is https://github.com/OpenPrinting/cups/pull/174
-# Use 60s timeout for read_thread, revert read limits
-Patch1: upstream_pull_174.patch
# Source10...Source99 is for sources from SUSE which are intended for upstream:
# Patch10...Patch99 is for patches from SUSE which are intended for upstream:
# Patch10 cups-2.1.0-choose-uri-template.patch adds 'smb://...' URIs to templates/choose-uri.tmpl:
@@ -66,8 +62,6 @@
# because the files of the CUPS web content are no documentation, see CUPS STR #3578
# and http://bugzilla.novell.com/show_bug.cgi?id=546023#c6 and subsequent comments:
Patch11: cups-2.1.0-default-webcontent-path.patch
-# Patch12 cups-2.1.0-cups-systemd-socket.patch Use systemd socket activation properly:
-Patch12: cups-2.1.0-cups-systemd-socket.patch
# Patch100...Patch999 is for private patches from SUSE which are not intended for upstream:
# Patch100 cups-pam.diff adds conf/pam.suse regarding support for PAM for SUSE:
Patch100: cups-pam.diff
@@ -83,9 +77,9 @@
Patch103: cups-1.4-do_not_strip_recommended_from_PPDs.patch
# Patch104 cups-config-libs.patch fixes option --libs in cups-config script:
Patch104: cups-config-libs.patch
-# Patch106 Fixes web UI Kerberos authentication (bsc#1175960)
-Patch106: fix-negotiate-authentication-between-CGIs-and-scheduler.patch
Patch107: harden_cups.service.patch
+# Patch108 downgrades the autoconf requirement to the autoconf available in tumbleweed as of writing
+Patch108: downgrade-autoconf-requirement.patch
# Build Requirements:
BuildRequires: dbus-1-devel
BuildRequires: fdupes
@@ -280,9 +274,6 @@
%prep
%setup -q
# Patch0...Patch9 is for patches from upstream:
-# Patch1 upstream_pull_174.patch is https://github.com/OpenPrinting/cups/pull/174
-# Use 60s timeout for read_thread, revert read limits
-%patch1 -p1
# Patch10...Patch99 is for patches from SUSE which are intended for upstream:
# Patch10 cups-2.1.0-choose-uri-template.patch adds 'smb://...' URIs to templates/choose-uri.tmpl:
%patch10 -b choose-uri-template.orig
@@ -291,8 +282,6 @@
# because the files of the CUPS web content are no documentation, see CUPS STR #3578
# and http://bugzilla.novell.com/show_bug.cgi?id=546023#c6 and subsequent comments:
%patch11 -b default-webcontent-path.orig
-# Patch12 cups-2.1.0-cups-systemd-socket.patch Use systemd socket activation properly:
-#patch12 -b cups-systemd-socket.orig
# Patch100...Patch999 is for private patches from SUSE which are not intended for upstream:
# Patch100 cups-pam.diff adds conf/pam.suse regarding support for PAM for SUSE:
%patch100 -b cups-pam.orig
@@ -308,9 +297,8 @@
%patch103 -b do_not_strip_recommended_from_PPDs.orig
# Patch104 cups-config-libs.patch fixes option --libs in cups-config script:
%patch104 -b cups-config-libs.orig
-# Patch106 Fixes web UI Kerberos authentication (bsc#1175960)
-%patch106 -p1
%patch107 -p1
+%patch108 -p1
%build
# Remove ".SILENT" rule for verbose build output
@@ -439,8 +427,6 @@
# There appears to be some kind of race condition when running make check and make test
# cf. https://github.com/OpenPrinting/cups/issues/155
# We print all logs for debugging purposes if either testsuite fails
-echo "DEBUG: running make check"
-bash -c 'make %{?_smp_mflags} check; EXIT=$?; if [ $EXIT -ne 0 ]; then cat test/*_log*-$(whoami); fi; exit $EXIT'
echo "DEBUG: running make test"
bash -c 'make %{?_smp_mflags} test; EXIT=$?; if [ $EXIT -ne 0 ]; then cat test/*_log*-$(whoami); fi; exit $EXIT'
%else
@@ -681,6 +667,7 @@
%files devel
%defattr(-,root,root)
+/usr/lib/pkgconfig/cups.pc
%{_includedir}/cups/
%{_libdir}/libcups.so
%{_libdir}/libcupsimage.so
Index: cups-2.4.1-source.tar.gz
===================================================================
Binary file cups-2.4.1-source.tar.gz (revision 2) added
Index: cups-2.4.1-source.tar.gz.sig
===================================================================
Binary file cups-2.4.1-source.tar.gz.sig (revision 2) added
Index: downgrade-autoconf-requirement.patch
===================================================================
--- downgrade-autoconf-requirement.patch (added)
+++ downgrade-autoconf-requirement.patch (revision 2)
@@ -0,0 +1,15 @@
+diff --git a/configure.ac b/configure.ac
+index a8c6c1040..6ace74a8d 100644
+--- a/configure.ac
++++ b/configure.ac
+@@ -9,8 +9,8 @@ dnl Licensed under Apache License v2.0. See the file "LICENSE" for more
+ dnl information.
+ dnl
+
+-dnl We need at least autoconf 2.71...
+-AC_PREREQ([2.71])
++dnl We need at least autoconf 2.69...
++AC_PREREQ([2.69])
+
+ dnl Package name and version...
+ AC_INIT([CUPS],[2.4.1],[https://github.com/openprinting/cups/issues],[cups],[https://openprinting.github.io/cups])
Index: cups-2.1.0-cups-systemd-socket.patch
===================================================================
--- cups-2.1.0-cups-systemd-socket.patch (revision 380)
+++ cups-2.1.0-cups-systemd-socket.patch (deleted)
@@ -1,43 +0,0 @@
---- scheduler/main.c.orig 2015-06-08 20:32:35.000000000 +0200
-+++ scheduler/main.c 2015-09-01 11:19:36.000000000 +0200
-@@ -656,7 +656,15 @@ main(int argc, /* I - Number of comm
-
- #if defined(HAVE_LAUNCHD) || defined(HAVE_SYSTEMD)
- if (OnDemand)
-+ {
- cupsdAddEvent(CUPSD_EVENT_SERVER_STARTED, NULL, NULL, "Scheduler started on demand.");
-+# ifdef HAVE_SYSTEMD
-+ sd_notifyf(0, "READY=1\n"
-+ "STATUS=Scheduler is running...\n"
-+ "MAINPID=%lu",
-+ (unsigned long) getpid());
-+# endif /* HAVE_SYSTEMD */
-+ }
- else
- #endif /* HAVE_LAUNCHD || HAVE_SYSTEMD */
- if (fg)
---- scheduler/org.cups.cupsd.path.in.orig 2014-03-21 15:50:24.000000000 +0100
-+++ scheduler/org.cups.cupsd.path.in 2015-09-01 11:20:37.000000000 +0200
-@@ -3,6 +3,7 @@ Description=CUPS Scheduler
-
- [Path]
- PathExists=@CUPS_CACHEDIR@/org.cups.cupsd
-+PathExistsGlob=@CUPS_REQUESTS@/d*
-
- [Install]
- WantedBy=multi-user.target
---- scheduler/org.cups.cupsd.service.in.orig 2014-10-21 13:54:05.000000000 +0200
-+++ scheduler/org.cups.cupsd.service.in 2015-09-01 11:22:09.000000000 +0200
-@@ -1,10 +1,11 @@
- [Unit]
- Description=CUPS Scheduler
- Documentation=man:cupsd(8)
-+After=network.target
-
- [Service]
- ExecStart=@sbindir@/cupsd -l
--Type=simple
-+Type=notify
-
- [Install]
- Also=org.cups.cupsd.socket org.cups.cupsd.path
Index: cups-2.3.3op2-source.tar.gz
===================================================================
Binary file cups-2.3.3op2-source.tar.gz (revision 380) deleted
Index: cups-2.3.3op2-source.tar.gz.sig
===================================================================
Binary file cups-2.3.3op2-source.tar.gz.sig (revision 380) deleted
Index: fix-negotiate-authentication-between-CGIs-and-scheduler.patch
===================================================================
--- fix-negotiate-authentication-between-CGIs-and-scheduler.patch (revision 380)
+++ fix-negotiate-authentication-between-CGIs-and-scheduler.patch (deleted)
@@ -1,223 +0,0 @@
-From d4521ed0df7e625ccf2bc079bab6f48c46ef9bf9 Mon Sep 17 00:00:00 2001
-From: Samuel Cabrero <scabrero@suse.de>
-Date: Mon, 26 Oct 2020 17:35:22 +0100
-Subject: [PATCH 1/4] Avoid infinite loop in admin.cgi when negotiate is used
-
-SetAuthorizationString with NULL argument sets an empty string.
-
-Related: #5596
-
-Signed-off-by: Samuel Cabrero <scabrero@suse.de>
----
- cups/auth.c | 2 +-
- 1 file changed, 1 insertion(+), 1 deletion(-)
-
-diff --git a/cups/auth.c b/cups/auth.c
-index db45bbba6..f2409350a 100644
---- a/cups/auth.c
-+++ b/cups/auth.c
-@@ -295,7 +295,7 @@ cupsDoAuthentication(
- }
- }
-
-- if (http->authstring)
-+ if (http->authstring && http->authstring[0])
- {
- DEBUG_printf(("1cupsDoAuthentication: authstring=\"%s\".", http->authstring));
-
---
-2.30.2
-
-
-From 61ad7780bc7d0593e3225d088ac6dff31badf801 Mon Sep 17 00:00:00 2001
-From: Samuel Cabrero <scabrero@suse.de>
-Date: Tue, 27 Oct 2020 16:11:41 +0100
-Subject: [PATCH 2/4] Add cups_is_local_connection() to check if connection is
- to localhost
-
-Related: #5596
-
-Signed-off-by: Samuel Cabrero <scabrero@suse.de>
----
- cups/auth.c | 11 ++++++++++-
- 1 file changed, 10 insertions(+), 1 deletion(-)
-
-diff --git a/cups/auth.c b/cups/auth.c
-index f2409350a..d2956438d 100644
---- a/cups/auth.c
-+++ b/cups/auth.c
-@@ -90,6 +90,7 @@ static void cups_gss_printf(OM_uint32 major_status, OM_uint32 minor_status,
- # define cups_gss_printf(major, minor, message)
- # endif /* DEBUG */
- #endif /* HAVE_GSSAPI */
-+static int cups_is_local_connection(http_t *http);
- static int cups_local_auth(http_t *http);
-
-
-@@ -916,6 +917,14 @@ cups_gss_printf(OM_uint32 major_status,/* I - Major status code */
- # endif /* DEBUG */
- #endif /* HAVE_GSSAPI */
-
-+static int /* O - 0 if not a local connection */
-+ /* 1 if local connection */
-+cups_is_local_connection(http_t *http) /* I - HTTP connection to server */
-+{
-+ if (!httpAddrLocalhost(http->hostaddr) && _cups_strcasecmp(http->hostname, "localhost") != 0)
-+ return 0;
-+ return 1;
-+}
-
- /*
- * 'cups_local_auth()' - Get the local authorization certificate if
-@@ -958,7 +967,7 @@ cups_local_auth(http_t *http) /* I - HTTP connection to server */
- * See if we are accessing localhost...
- */
-
-- if (!httpAddrLocalhost(http->hostaddr) && _cups_strcasecmp(http->hostname, "localhost") != 0)
-+ if (!cups_is_local_connection(http))
- {
- DEBUG_puts("8cups_local_auth: Not a local connection!");
- return (1);
---
-2.30.2
-
-
-From f629d079750a86b1b605c285f99c0dea3933ca50 Mon Sep 17 00:00:00 2001
-From: Samuel Cabrero <scabrero@suse.de>
-Date: Tue, 27 Oct 2020 16:23:30 +0100
-Subject: [PATCH 3/4] Try local kerberos ccache credentials only for remote
- servers
-
-If connecting to localhost then proceed to ask the client for the
-authorization using cupsGetPassword2. The get password callback will
-return 401 to the client with WWW-Authenticate: Negotiate.
-
-Fixes: #5596
-
-Signed-off-by: Samuel Cabrero <scabrero@suse.de>
----
- cups/auth.c | 10 ++++++----
- 1 file changed, 6 insertions(+), 4 deletions(-)
-
-diff --git a/cups/auth.c b/cups/auth.c
-index d2956438d..9661657fc 100644
---- a/cups/auth.c
-+++ b/cups/auth.c
-@@ -175,10 +175,10 @@ cupsDoAuthentication(
- DEBUG_printf(("2cupsDoAuthentication: Trying scheme \"%s\"...", scheme));
-
- #ifdef HAVE_GSSAPI
-- if (!_cups_strcasecmp(scheme, "Negotiate"))
-+ if (!_cups_strcasecmp(scheme, "Negotiate") && !cups_is_local_connection(http))
- {
- /*
-- * Kerberos authentication...
-+ * Kerberos authentication to remote server...
- */
-
- int gss_status; /* Auth status */
-@@ -202,7 +202,9 @@ cupsDoAuthentication(
- }
- else
- #endif /* HAVE_GSSAPI */
-- if (_cups_strcasecmp(scheme, "Basic") && _cups_strcasecmp(scheme, "Digest"))
-+ if (_cups_strcasecmp(scheme, "Basic") &&
-+ _cups_strcasecmp(scheme, "Digest") &&
-+ _cups_strcasecmp(scheme, "Negotiate"))
- {
- /*
- * Other schemes not yet supported...
-@@ -216,7 +218,7 @@ cupsDoAuthentication(
- * See if we should retry the current username:password...
- */
-
-- if ((http->digest_tries > 1 || !http->userpass[0]) && (!_cups_strcasecmp(scheme, "Basic") || (!_cups_strcasecmp(scheme, "Digest"))))
-+ if (http->digest_tries > 1 || !http->userpass[0])
- {
- /*
- * Nope - get a new password from the user...
---
-2.30.2
-
-
-From 0563a28b18b21d5574a5e0e38b74246146074bbf Mon Sep 17 00:00:00 2001
-From: Samuel Cabrero <scabrero@suse.de>
-Date: Tue, 27 Oct 2020 16:18:03 +0100
-Subject: [PATCH 4/4] Allow Local authentication for Negotiate
-
-PeerCred is also possible if address family is AF_LOCAL. This will allow
-the CGI programs to generate the authorization from the local
-certificates based on PID also when Negotiate is used for local
-connections:
-
-Client CGI
-Browser <- Remote conn -> admin.cgi <--- Localhost conn ---> Scheduler
- | | |
- + --- HTTP/POST /admin/ --> | |
- | + --- CUPS-Get-Devices ------------> |
- | | |
- | | <-- 401 Unauthorized --------------+
- | | WWW-Authenticate: |
- | | Negotiate, (PeerCred,) Local |
- | | |
- | <-- 401 Unauthorized -----+ |
- | WWW-Authenticate: | |
- | Negotiate | |
- | | |
- | --- HTTP/POST /admin/ --> | |
- | Authorization: + --- IPP CUPS-GetDevices ---------> |
- | Negotiate | Authorization: Local <cert> |
- | | |
-
-Fixes: #5596
-
-Signed-off-by: Samuel Cabrero <scabrero@suse.de>
----
- cups/auth.c | 5 -----
- scheduler/client.c | 9 ++-------
- 2 files changed, 2 insertions(+), 12 deletions(-)
-
-diff --git a/cups/auth.c b/cups/auth.c
-index 9661657fc..b6fec6b98 100644
---- a/cups/auth.c
-+++ b/cups/auth.c
-@@ -1043,11 +1043,6 @@ cups_local_auth(http_t *http) /* I - HTTP connection to server */
- }
- # endif /* HAVE_AUTHORIZATION_H */
-
--# ifdef HAVE_GSSAPI
-- if (cups_auth_find(www_auth, "Negotiate"))
-- return (1);
--# endif /* HAVE_GSSAPI */
--
- # if defined(SO_PEERCRED) && defined(AF_LOCAL)
- /*
- * See if we can authenticate using the peer credentials provided over a
-diff --git a/scheduler/client.c b/scheduler/client.c
-index c2ee8f12a..56797d58d 100644
---- a/scheduler/client.c
-+++ b/scheduler/client.c
-@@ -2109,18 +2109,13 @@ cupsdSendHeader(
- }
- else if (auth_type == CUPSD_AUTH_NEGOTIATE)
- {
--#if defined(SO_PEERCRED) && defined(AF_LOCAL)
-- if (httpAddrFamily(httpGetAddress(con->http)) == AF_LOCAL)
-- strlcpy(auth_str, "PeerCred", sizeof(auth_str));
-- else
--#endif /* SO_PEERCRED && AF_LOCAL */
- strlcpy(auth_str, "Negotiate", sizeof(auth_str));
- }
-
-- if (con->best && auth_type != CUPSD_AUTH_NEGOTIATE && !con->is_browser && !_cups_strcasecmp(httpGetHostname(con->http, NULL, 0), "localhost"))
-+ if (con->best && !con->is_browser && !_cups_strcasecmp(httpGetHostname(con->http, NULL, 0), "localhost"))
- {
- /*
-- * Add a "trc" (try root certification) parameter for local non-Kerberos
-+ * Add a "trc" (try root certification) parameter for local
- * requests when the request requires system group membership - then the
- * client knows the root certificate can/should be used.
- *
---
-2.30.2
-
Index: upstream_pull_174.patch
===================================================================
--- upstream_pull_174.patch (revision 380)
+++ upstream_pull_174.patch (deleted)
@@ -1,53 +0,0 @@
-From c37d71b1a31d26a4790166e2508822b18934a5c0 Mon Sep 17 00:00:00 2001
-From: Zdenek Dohnal <zdohnal@redhat.com>
-Date: Tue, 13 Apr 2021 15:44:14 +0200
-Subject: [PATCH 1/2] backend/usb-libusb.c: Use 60s timeout for reading at
- backchannel
-
-Some older models malfunction if timeout is too short.
----
- CHANGES.md | 1 +
- backend/usb-libusb.c | 2 +-
- 2 files changed, 2 insertions(+), 1 deletion(-)
-
---- a/backend/usb-libusb.c
-+++ b/backend/usb-libusb.c
-@@ -1704,7 +1704,7 @@ static void *read_thread(void *reference)
- readstatus = libusb_bulk_transfer(g.printer->handle,
- g.printer->read_endp,
- readbuffer, rbytes,
-- &rbytes, 250);
-+ &rbytes, 60000);
- if (readstatus == LIBUSB_SUCCESS && rbytes > 0)
- {
- fprintf(stderr, "DEBUG: Read %d bytes of back-channel data...\n", (int)rbytes);
-
-From 4cb6f6806cdbe040d478b266a1d351b19341dd79 Mon Sep 17 00:00:00 2001
-From: Zdenek Dohnal <zdohnal@redhat.com>
-Date: Tue, 13 Apr 2021 15:47:37 +0200
-Subject: [PATCH 2/2] backend/usb-libusb.c: Revert enforcing read limits
-
-This commit reverts the change introduced by 2.2.12 [1] - its
-implementation caused a regression with Lexmark filters.
-
-[1]
-https://github.com/apple/cups/commit/35e927f83529cd9b4bc37bcd418c50e307fced35
----
- CHANGES.md | 1 +
- backend/usb-libusb.c | 3 ++-
- 2 files changed, 3 insertions(+), 1 deletion(-)
-
-diff --git a/backend/usb-libusb.c b/backend/usb-libusb.c
-index fbb0d9d89..89b5182f7 100644
---- a/backend/usb-libusb.c
-+++ b/backend/usb-libusb.c
-@@ -1721,7 +1721,8 @@ static void *read_thread(void *reference)
- * Make sure this loop executes no more than once every 250 miliseconds...
- */
-
-- if ((g.wait_eof || !g.read_thread_stop))
-+ if ((readstatus != LIBUSB_SUCCESS || rbytes == 0) &&
-+ (g.wait_eof || !g.read_thread_stop))
- usleep(250000);
- }
- while (g.wait_eof || !g.read_thread_stop);
OBS-URL: https://build.opensuse.org/request/show/958348
OBS-URL: https://build.opensuse.org/package/show/Printing/cups?expand=0&rev=381
2022-03-03 13:19:05 +01:00
|
|
|
|
|
2022-03-04 09:58:18 +01:00
|
|
|
|
- Improved comments in spec file and in changes file
|
|
|
|
|
- Have cups.keyring in ASCII armored format
|
2022-03-04 13:48:44 +01:00
|
|
|
|
- Do not error out when 'make test' fails in the 'check' section
|
|
|
|
|
because https://github.com/OpenPrinting/cups/issues/155
|
|
|
|
|
is not yet actually fixed so currently the testsuite
|
|
|
|
|
still sometimes fails
|
2022-03-04 09:58:18 +01:00
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Mar 1 18:16:11 UTC 2022 - Aurelien Joga <aurelienjoga@gmail.com>
|
|
|
|
|
|
|
|
|
|
- Version upgrade to 2.4.1:
|
|
|
|
|
See https://github.com/openprinting/cups/releases
|
|
|
|
|
CUPS 2.4.1 is the first bug fix release from 2.4.x series.
|
|
|
|
|
Among the other bug fixes it fixes sharing default color mode
|
|
|
|
|
to clients and several memory leaks.
|
|
|
|
|
* The default color mode now is now configurable and defaults
|
|
|
|
|
to the printer's reported default mode (Issue #277)
|
|
|
|
|
* Configuration script now checks linking for -Wl,-pie flags
|
|
|
|
|
(Issue #303)
|
|
|
|
|
* Fixed memory leaks -
|
|
|
|
|
in testi18n (Issue #313),
|
|
|
|
|
in cups_enum_dests() (Issue #317),
|
|
|
|
|
in _cupsEncodeOption() and http_tls_upgrade() (Issue #322)
|
Accepting request 958348 from home:ajoga:branches:openSUSE:Factory
- Version upgrade to 2.4.1
- Dropped patch upstream_pull_174 because it it is included in this release
- Dropped patch cups-2.1.0-cups-systemd-socket.patch because it it is included in this release (https://github.com/OpenPrinting/cups/commit/e96e96b4bd0d4e6f634bbb66b95d6e475501541c)
- Changed upstream source packages signing key (https://github.com/OpenPrinting/cups/discussions/327#discussioncomment-2060579)
- Re-enabled testsuite
* Also removed make check because since upstream change the two target are identical (https://github.com/OpenPrinting/cups/commit/96ba46ebc818b610b0e40cbc9d62ef1dcd3ec9b6#diff-76ed074a9305c04054cdebb9e9aad2d818052b07091de1f20cad0bbac34ffb52R239)
- Changed cups-2.1.0-cups-systemd-socket.patch to accomodate new coding style
- Changed cups-config-libs.orig to accommodate recent code changes (SSL->TLS)
- Changed cups-2.1.0-default-webcontent-path.patch to accommodate code changes
old: Printing/cups
new: home:ajoga:branches:openSUSE:Factory/cups rev None
Index: cups-2.1.0-default-webcontent-path.patch
===================================================================
--- cups-2.1.0-default-webcontent-path.patch (revision 380)
+++ cups-2.1.0-default-webcontent-path.patch (revision 2)
@@ -1,17 +1,21 @@
---- config-scripts/cups-directories.m4.orig 2014-03-21 17:42:53.000000000 +0100
-+++ config-scripts/cups-directories.m4 2015-09-01 11:08:43.000000000 +0200
-@@ -206,11 +206,11 @@ fi
- AC_SUBST(MENUDIR)
+--- config-scripts/cups-directories.m4
++++ config-scripts/cups-directories.m4.orig
+@@ -166,15 +166,15 @@ AS_IF([test "x$menudir" = x], [
+ AC_SUBST([MENUDIR])
# Documentation files
--AC_ARG_WITH(docdir, [ --with-docdir set path for documentation],docdir="$withval",docdir="")
-+AC_ARG_WITH(docdir, [ --with-docdir set path and DocumentRoot directive for web content, default=datadir/cups/webcontent],docdir="$withval",docdir="")
+-AC_ARG_WITH([docdir], AS_HELP_STRING([--with-docdir], [set path for documentation]), [
++AC_ARG_WITH([docdir], AS_HELP_STRING([--with-docdir], [set path and DocumentRoot directive for web content, default=datadir/cups/webcontent]), [
+ docdir="$withval"
+ ], [
+ docdir=""
+ ])
- if test x$docdir = x; then
-- CUPS_DOCROOT="$datadir/doc/cups"
-- docdir="$datadir/doc/cups"
-+ CUPS_DOCROOT="$datadir/cups/webcontent"
-+ docdir="$datadir/cups/webcontent"
- else
- CUPS_DOCROOT="$docdir"
- fi
+ AS_IF([test x$docdir = x], [
+- CUPS_DOCROOT="$datadir/doc/cups"
+- docdir="$datadir/doc/cups"
++ CUPS_DOCROOT="$datadir/cups/webcontent"
++ docdir="$datadir/cups/webcontent"
+ ], [
+ CUPS_DOCROOT="$docdir"
+ ])
Index: cups-config-libs.patch
===================================================================
--- cups-config-libs.patch (revision 380)
+++ cups-config-libs.patch (revision 2)
@@ -4,7 +4,7 @@
# flags for compiler and linker...
CFLAGS=""
LDFLAGS="@EXPORT_LDFLAGS@"
--LIBS="@LIBGSSAPI@ @DNSSDLIBS@ @EXPORT_SSLLIBS@ @LIBZ@ @LIBS@"
+-LIBS="@LIBGSSAPI@ @DNSSDLIBS@ @EXPORT_TLSLIBS@ @LIBZ@ @LIBS@"
+LIBS=""
# Check for local invocation...
Index: cups.changes
===================================================================
--- cups.changes (revision 380)
+++ cups.changes (revision 2)
@@ -1,4 +1,88 @@
-------------------------------------------------------------------
+Tue Mar 1 18:16:11 UTC 2022 - Aurélien Joga <aurelienjoga@gmail.com>
+
+- Version upgrade to 2.4.1:
+ * The default color mode now is now configurable and defaults to the printer's reported default mode (Issue #277)
+ * Configuration script now checks linking for -Wl,-pie flags (Issue #303)
+ * Fixed memory leaks - in testi18n (Issue #313), in cups_enum_dests() (Issue #317), in _cupsEncodeOption() and http_tls_upgrade() (Issue #322)
+ * Fixed missing bracket in de/index.html (Issue #299)
+ * Fixed typos in configuration scripts (Issues #304, #316)
+ * Removed remaining legacy code for RIP_MAX_CACHE environment variable (Issue #323)
+ * Removed deprecated directives from cupsctl and cups-files.conf (Issue #300)
+ * Removed purge-jobs legacy code from CGI scripts and templates (Issue #325)
+ * Added configure option --with-idle-exit-timeout (Issue #294)
+ * Added --with-systemd-timeoutstartsec configure option (Issue #298)
+ * DigestOptions now are applied for MD5 Digest authentication defined by RFC 2069 as well (Issue #287)
+ * Fixed compilation on Solaris (Issue #293)
+ * Fixed and improved German translations (Issue #296, Issue #297)
+ * Added warning and debug messages when loading printers if the queue is raw or with driver (Issue #286)
+ * Compilation now uses -fstack-protector-strong if available (Issue #285)
+ * Added support for CUPS running in a Snapcraft snap.
+ * Added basic OAuth 2.0 client support (Issue #100)
+ * Added support for AirPrint and Mopria clients (Issue #105)
+ * Added configure support for specifying systemd dependencies in the CUPS service file (Issue #144)
+ * Added several features and improvements to ipptool (Issue #153)
+ * Added a JSON output mode for ipptool.
+ * The ipptool command now correctly reports an error when a test file cannot be found.
+ * CUPS library now uses thread safe getpwnam_r and getpwuid_r functions (Issue #274)
+ * Fixed Kerberos authentication for the web interface (Issue #19)
+ * The ZPL sample driver now supports more "standard" label sizes (Issue #70)
+ * Fixed reporting of printer instances when enumerating and when no options are set for the main instance (Issue #71)
+ * Reverted USB read limit enforcement change from CUPS 2.2.12 (Issue #72)
+ * The IPP backend did not return the correct status code when a job was canceled at the printer/server (Issue #74)
+ * The testlang unit test program now loops over all of the available locales by default (Issue #85)
+ * The cupsfilter command now shows error messages when options are used incorrectly (Issue #88)
+ * The PPD functions now treat boolean values as case-insensitive (Issue #106)
+ * Temporary queue names no longer end with an underscore (Issue #110)
+ * The USB backend now runs as root (Issue #121)
+ * Added pkg-config file for libcups (Issue #122)
+ * Fixed a PPD memory leak caused by emulator definitions (Issue #124)
+ * Fixed a DISPLAY bug in ipptool (Issue #139)
+ * The scheduler now includes the [Job N] prefix for job log messages, even when using syslog logging (Issue #154)
+ * Added support for locales using the GB18030 character set (Issue #159)
+ * httpReconnect2 did not reset the socket file descriptor when the TLS negotiation failed (Apple #5907)
+ * httpUpdate did not reset the socket file descriptor when the TLS negotiation failed (Apple #5915)
+ * The IPP backend now retries Validate-Job requests (Issue #132)
+ * Now show better error messages when a driver interface program fails to provide a PPD file (Issue #148)
+ * Added dark mode support to the CUPS web interface (Issue #152)
+ * Added a workaround for Solaris in httpAddrConnect2 (Issue #156)
+ * Fixed an interaction between --remote-admin and --remote-any for the cupsctl command (Issue #158)
+ * Now use a 60 second timeout for reading USB backchannel data (Issue #160)
+ * The USB backend now tries harder to find a serial number (Issue #170)
+ * Fixed @IF(name) handling in cupsd.conf (Apple #5918)
+ * Fixed documentation and added examples for CUPS' limited CGI support (Apple #5940)
+ * Fixed the lpc command prompt (Apple #5946)
+ * Now always pass "localhost" in the Host: header when talking over a domain socket or the loopback interface (Issue #185)
+ * Fixed a job history update issue in the scheduler (Issue #187)
+ * Fixed job-pages-per-set value for duplex print jobs.
+ * Fixed an edge case in ippReadIO to make sure that only complete attributes and values are retained on an error (Issue #195)
+ * Hardened ippReadIO to prevent invalid IPP messages from being propagated (Issue #195, Issue #196)
+ * The scheduler now supports the "everywhere" model directly (Issue #201)
+ * Fixed some IPP Everywhere option mapping problems (Issue #238)
+ * Fixed support for "job-hold-until" with the Restart-Job operation (Issue #250)
+ * Fixed the default color/grayscale presets for IPP Everywhere PPDs (Issue #262)
+ * Fixed support for the 'offline-report' state for all USB backends (Issue #264)
+ * Documentation fixes (Issue #92, Issue #163, Issue #177, Issue #184)
+ * Localization updates (Issue #123, Issue #129, Issue #134, Issue #146, Issue #164)
+ * USB quirk updates (Issue #192, Issue #270, Apple #5766, Apple #5838, Apple #5843, Apple #5867)
+ * Web interface updates (Issue #142, Issue #218)
+ * The ippeveprinter tool now automatically uses an available port.
+ * Fixed several Windows TLS and hashing issues.
+ * Deprecated cups-config (Issue #97)
+ * Deprecated Kerberos (AuthType Negotiate) authentication (Issue #98)
+ * Removed support for the (long deprecated and unused) FontPath, ListenBackLog, LPDConfigFile, KeepAliveTimeout, RIPCache, and SMBConfigFile directives in cupsd.conf and cups-files.conf.
+ * Stubbed out deprecated httpMD5 functions.
+ * Add test for undefined page ranges during printing.
+- Dropped patch upstream_pull_174 because it it is included in this release
+- Dropped patch cups-2.1.0-cups-systemd-socket.patch because it it is included in this release (https://github.com/OpenPrinting/cups/commit/e96e96b4bd0d4e6f634bbb66b95d6e475501541c)
+- Changed upstream source packages signing key (https://github.com/OpenPrinting/cups/discussions/327#discussioncomment-2060579)
+- Re-enabled testsuite
+ * Also removed make check because since upstream change the two target are identical (https://github.com/OpenPrinting/cups/commit/96ba46ebc818b610b0e40cbc9d62ef1dcd3ec9b6#diff-76ed074a9305c04054cdebb9e9aad2d818052b07091de1f20cad0bbac34ffb52R239)
+- Changed cups-2.1.0-cups-systemd-socket.patch to accomodate new coding style
+- Changed cups-config-libs.orig to accommodate recent code changes (SSL->TLS)
+- Changed cups-2.1.0-default-webcontent-path.patch to accommodate code changes
+
+-------------------------------------------------------------------
Tue Feb 1 09:18:27 UTC 2022 - jsmeix@suse.de
- Enhanced harden_cups.service.patch by adding
Index: cups.keyring
===================================================================
Binary files cups.keyring (revision 380) and cups.keyring (revision 2) differ
Index: cups.spec
===================================================================
--- cups.spec (revision 380)
+++ cups.spec (revision 2)
@@ -18,9 +18,7 @@
# Cf. https://rpm.org/user_doc/conditional_builds.html
# by default enable testsuite (i.e. in the 'check' section run make check and make test)
-#bcond_without testsuite
-# disable testsuite for now until https://github.com/OpenPrinting/cups/issues/155 is fixed
-%bcond_with testsuite
+%bcond_without testsuite
# _tmpfilesdir is not defined in systemd macros up to openSUSE 13.2
%{!?_tmpfilesdir: %global _tmpfilesdir /usr/lib/tmpfiles.d }
@@ -29,34 +27,32 @@
# "zypper vcmp 2.3.b99 2.3.0" shows "2.3.b99 is older than 2.3.0" and
# "zypper vcmp 2.2.99 2.3b6" show "2.2.99 is older than 2.3b6" so that
# version upgrades from 2.2.x via 2.3.b* to 2.3.0 work:
-Version: 2.3.3op2
+Version: 2.4.1
Release: 0
Summary: The Common UNIX Printing System
License: Apache-2.0
Group: Hardware/Printing
URL: https://openprinting.github.io/cups
# To get Source0 go to https://github.com/OpenPrinting/cups/releases or use e.g.
-# wget --no-check-certificate -O cups-2.3.3op2-source.tar.gz https://github.com/OpenPrinting/cups/releases/download/v2.3.3op2/cups-2.3.3op2-source.tar.gz
-Source0: https://github.com/OpenPrinting/cups/releases/download/v2.3.3op2/cups-2.3.3op2-source.tar.gz
+# wget --no-check-certificate -O cups-2.4.1-source.tar.gz https://github.com/OpenPrinting/cups/releases/download/v2.4.1/cups-2.4.1-source.tar.gz
+Source0: https://github.com/OpenPrinting/cups/releases/download/v2.4.1/cups-2.4.1-source.tar.gz
# To get Source1 go to https://github.com/OpenPrinting/cups/releases or use e.g.
-# wget --no-check-certificate -O cups-2.3.3op2-source.tar.gz.sig https://github.com/OpenPrinting/cups/releases/download/v2.3.3op2/cups-2.3.3op2-source.tar.gz.sig
-Source1: https://github.com/OpenPrinting/cups/releases/download/v2.3.3op2/cups-2.3.3op2-source.tar.gz.sig
-# To get Source2 go to https://www.msweet.org/pgp.html
-# PGP Fingerprint: 845464660B686AAB36540B6F999559A027815955
+# wget --no-check-certificate -O cups-2.4.1-source.tar.gz.sig https://github.com/OpenPrinting/cups/releases/download/v2.4.1/cups-2.4.1-source.tar.gz.sig
+Source1: https://github.com/OpenPrinting/cups/releases/download/v2.4.1/cups-2.4.1-source.tar.gz.sig
+# To get Source2 use gpg --keyserver keys.openpgp.org --recv-keys 7082A0A50A2E92640F3880E0E4522DCC9B246FF7
+# See https://github.com/OpenPrinting/cups/discussions/327#discussioncomment-2060579
+# PGP Fingerprint: 7082A0A50A2E92640F3880E0E4522DCC9B246FF7
Source2: cups.keyring
# To manually verify Source0 with Source1 and Source2 do e.g.
# gpg --import cups.keyring
-# gpg --list-keys | grep -1 'Michael R Sweet' | grep -v 'expired'
-# gpg --verify cups-2.3.3op2-source.tar.gz.sig cups-2.3.3op2-source.tar.gz
+# gpg --list-keys | grep -1 'Zdenek Dohnal'
+# gpg --verify cups-2.4.1-source.tar.gz.sig cups-2.4.1-source.tar.gz
Source102: Postscript.ppd.gz
Source105: Postscript-level1.ppd.gz
Source106: Postscript-level2.ppd.gz
Source108: cups-client.conf
Source109: baselibs.conf
# Patch0...Patch9 is for patches from upstream:
-# Patch1 upstream_pull_174.patch is https://github.com/OpenPrinting/cups/pull/174
-# Use 60s timeout for read_thread, revert read limits
-Patch1: upstream_pull_174.patch
# Source10...Source99 is for sources from SUSE which are intended for upstream:
# Patch10...Patch99 is for patches from SUSE which are intended for upstream:
# Patch10 cups-2.1.0-choose-uri-template.patch adds 'smb://...' URIs to templates/choose-uri.tmpl:
@@ -66,8 +62,6 @@
# because the files of the CUPS web content are no documentation, see CUPS STR #3578
# and http://bugzilla.novell.com/show_bug.cgi?id=546023#c6 and subsequent comments:
Patch11: cups-2.1.0-default-webcontent-path.patch
-# Patch12 cups-2.1.0-cups-systemd-socket.patch Use systemd socket activation properly:
-Patch12: cups-2.1.0-cups-systemd-socket.patch
# Patch100...Patch999 is for private patches from SUSE which are not intended for upstream:
# Patch100 cups-pam.diff adds conf/pam.suse regarding support for PAM for SUSE:
Patch100: cups-pam.diff
@@ -83,9 +77,9 @@
Patch103: cups-1.4-do_not_strip_recommended_from_PPDs.patch
# Patch104 cups-config-libs.patch fixes option --libs in cups-config script:
Patch104: cups-config-libs.patch
-# Patch106 Fixes web UI Kerberos authentication (bsc#1175960)
-Patch106: fix-negotiate-authentication-between-CGIs-and-scheduler.patch
Patch107: harden_cups.service.patch
+# Patch108 downgrades the autoconf requirement to the autoconf available in tumbleweed as of writing
+Patch108: downgrade-autoconf-requirement.patch
# Build Requirements:
BuildRequires: dbus-1-devel
BuildRequires: fdupes
@@ -280,9 +274,6 @@
%prep
%setup -q
# Patch0...Patch9 is for patches from upstream:
-# Patch1 upstream_pull_174.patch is https://github.com/OpenPrinting/cups/pull/174
-# Use 60s timeout for read_thread, revert read limits
-%patch1 -p1
# Patch10...Patch99 is for patches from SUSE which are intended for upstream:
# Patch10 cups-2.1.0-choose-uri-template.patch adds 'smb://...' URIs to templates/choose-uri.tmpl:
%patch10 -b choose-uri-template.orig
@@ -291,8 +282,6 @@
# because the files of the CUPS web content are no documentation, see CUPS STR #3578
# and http://bugzilla.novell.com/show_bug.cgi?id=546023#c6 and subsequent comments:
%patch11 -b default-webcontent-path.orig
-# Patch12 cups-2.1.0-cups-systemd-socket.patch Use systemd socket activation properly:
-#patch12 -b cups-systemd-socket.orig
# Patch100...Patch999 is for private patches from SUSE which are not intended for upstream:
# Patch100 cups-pam.diff adds conf/pam.suse regarding support for PAM for SUSE:
%patch100 -b cups-pam.orig
@@ -308,9 +297,8 @@
%patch103 -b do_not_strip_recommended_from_PPDs.orig
# Patch104 cups-config-libs.patch fixes option --libs in cups-config script:
%patch104 -b cups-config-libs.orig
-# Patch106 Fixes web UI Kerberos authentication (bsc#1175960)
-%patch106 -p1
%patch107 -p1
+%patch108 -p1
%build
# Remove ".SILENT" rule for verbose build output
@@ -439,8 +427,6 @@
# There appears to be some kind of race condition when running make check and make test
# cf. https://github.com/OpenPrinting/cups/issues/155
# We print all logs for debugging purposes if either testsuite fails
-echo "DEBUG: running make check"
-bash -c 'make %{?_smp_mflags} check; EXIT=$?; if [ $EXIT -ne 0 ]; then cat test/*_log*-$(whoami); fi; exit $EXIT'
echo "DEBUG: running make test"
bash -c 'make %{?_smp_mflags} test; EXIT=$?; if [ $EXIT -ne 0 ]; then cat test/*_log*-$(whoami); fi; exit $EXIT'
%else
@@ -681,6 +667,7 @@
%files devel
%defattr(-,root,root)
+/usr/lib/pkgconfig/cups.pc
%{_includedir}/cups/
%{_libdir}/libcups.so
%{_libdir}/libcupsimage.so
Index: cups-2.4.1-source.tar.gz
===================================================================
Binary file cups-2.4.1-source.tar.gz (revision 2) added
Index: cups-2.4.1-source.tar.gz.sig
===================================================================
Binary file cups-2.4.1-source.tar.gz.sig (revision 2) added
Index: downgrade-autoconf-requirement.patch
===================================================================
--- downgrade-autoconf-requirement.patch (added)
+++ downgrade-autoconf-requirement.patch (revision 2)
@@ -0,0 +1,15 @@
+diff --git a/configure.ac b/configure.ac
+index a8c6c1040..6ace74a8d 100644
+--- a/configure.ac
++++ b/configure.ac
+@@ -9,8 +9,8 @@ dnl Licensed under Apache License v2.0. See the file "LICENSE" for more
+ dnl information.
+ dnl
+
+-dnl We need at least autoconf 2.71...
+-AC_PREREQ([2.71])
++dnl We need at least autoconf 2.69...
++AC_PREREQ([2.69])
+
+ dnl Package name and version...
+ AC_INIT([CUPS],[2.4.1],[https://github.com/openprinting/cups/issues],[cups],[https://openprinting.github.io/cups])
Index: cups-2.1.0-cups-systemd-socket.patch
===================================================================
--- cups-2.1.0-cups-systemd-socket.patch (revision 380)
+++ cups-2.1.0-cups-systemd-socket.patch (deleted)
@@ -1,43 +0,0 @@
---- scheduler/main.c.orig 2015-06-08 20:32:35.000000000 +0200
-+++ scheduler/main.c 2015-09-01 11:19:36.000000000 +0200
-@@ -656,7 +656,15 @@ main(int argc, /* I - Number of comm
-
- #if defined(HAVE_LAUNCHD) || defined(HAVE_SYSTEMD)
- if (OnDemand)
-+ {
- cupsdAddEvent(CUPSD_EVENT_SERVER_STARTED, NULL, NULL, "Scheduler started on demand.");
-+# ifdef HAVE_SYSTEMD
-+ sd_notifyf(0, "READY=1\n"
-+ "STATUS=Scheduler is running...\n"
-+ "MAINPID=%lu",
-+ (unsigned long) getpid());
-+# endif /* HAVE_SYSTEMD */
-+ }
- else
- #endif /* HAVE_LAUNCHD || HAVE_SYSTEMD */
- if (fg)
---- scheduler/org.cups.cupsd.path.in.orig 2014-03-21 15:50:24.000000000 +0100
-+++ scheduler/org.cups.cupsd.path.in 2015-09-01 11:20:37.000000000 +0200
-@@ -3,6 +3,7 @@ Description=CUPS Scheduler
-
- [Path]
- PathExists=@CUPS_CACHEDIR@/org.cups.cupsd
-+PathExistsGlob=@CUPS_REQUESTS@/d*
-
- [Install]
- WantedBy=multi-user.target
---- scheduler/org.cups.cupsd.service.in.orig 2014-10-21 13:54:05.000000000 +0200
-+++ scheduler/org.cups.cupsd.service.in 2015-09-01 11:22:09.000000000 +0200
-@@ -1,10 +1,11 @@
- [Unit]
- Description=CUPS Scheduler
- Documentation=man:cupsd(8)
-+After=network.target
-
- [Service]
- ExecStart=@sbindir@/cupsd -l
--Type=simple
-+Type=notify
-
- [Install]
- Also=org.cups.cupsd.socket org.cups.cupsd.path
Index: cups-2.3.3op2-source.tar.gz
===================================================================
Binary file cups-2.3.3op2-source.tar.gz (revision 380) deleted
Index: cups-2.3.3op2-source.tar.gz.sig
===================================================================
Binary file cups-2.3.3op2-source.tar.gz.sig (revision 380) deleted
Index: fix-negotiate-authentication-between-CGIs-and-scheduler.patch
===================================================================
--- fix-negotiate-authentication-between-CGIs-and-scheduler.patch (revision 380)
+++ fix-negotiate-authentication-between-CGIs-and-scheduler.patch (deleted)
@@ -1,223 +0,0 @@
-From d4521ed0df7e625ccf2bc079bab6f48c46ef9bf9 Mon Sep 17 00:00:00 2001
-From: Samuel Cabrero <scabrero@suse.de>
-Date: Mon, 26 Oct 2020 17:35:22 +0100
-Subject: [PATCH 1/4] Avoid infinite loop in admin.cgi when negotiate is used
-
-SetAuthorizationString with NULL argument sets an empty string.
-
-Related: #5596
-
-Signed-off-by: Samuel Cabrero <scabrero@suse.de>
----
- cups/auth.c | 2 +-
- 1 file changed, 1 insertion(+), 1 deletion(-)
-
-diff --git a/cups/auth.c b/cups/auth.c
-index db45bbba6..f2409350a 100644
---- a/cups/auth.c
-+++ b/cups/auth.c
-@@ -295,7 +295,7 @@ cupsDoAuthentication(
- }
- }
-
-- if (http->authstring)
-+ if (http->authstring && http->authstring[0])
- {
- DEBUG_printf(("1cupsDoAuthentication: authstring=\"%s\".", http->authstring));
-
---
-2.30.2
-
-
-From 61ad7780bc7d0593e3225d088ac6dff31badf801 Mon Sep 17 00:00:00 2001
-From: Samuel Cabrero <scabrero@suse.de>
-Date: Tue, 27 Oct 2020 16:11:41 +0100
-Subject: [PATCH 2/4] Add cups_is_local_connection() to check if connection is
- to localhost
-
-Related: #5596
-
-Signed-off-by: Samuel Cabrero <scabrero@suse.de>
----
- cups/auth.c | 11 ++++++++++-
- 1 file changed, 10 insertions(+), 1 deletion(-)
-
-diff --git a/cups/auth.c b/cups/auth.c
-index f2409350a..d2956438d 100644
---- a/cups/auth.c
-+++ b/cups/auth.c
-@@ -90,6 +90,7 @@ static void cups_gss_printf(OM_uint32 major_status, OM_uint32 minor_status,
- # define cups_gss_printf(major, minor, message)
- # endif /* DEBUG */
- #endif /* HAVE_GSSAPI */
-+static int cups_is_local_connection(http_t *http);
- static int cups_local_auth(http_t *http);
-
-
-@@ -916,6 +917,14 @@ cups_gss_printf(OM_uint32 major_status,/* I - Major status code */
- # endif /* DEBUG */
- #endif /* HAVE_GSSAPI */
-
-+static int /* O - 0 if not a local connection */
-+ /* 1 if local connection */
-+cups_is_local_connection(http_t *http) /* I - HTTP connection to server */
-+{
-+ if (!httpAddrLocalhost(http->hostaddr) && _cups_strcasecmp(http->hostname, "localhost") != 0)
-+ return 0;
-+ return 1;
-+}
-
- /*
- * 'cups_local_auth()' - Get the local authorization certificate if
-@@ -958,7 +967,7 @@ cups_local_auth(http_t *http) /* I - HTTP connection to server */
- * See if we are accessing localhost...
- */
-
-- if (!httpAddrLocalhost(http->hostaddr) && _cups_strcasecmp(http->hostname, "localhost") != 0)
-+ if (!cups_is_local_connection(http))
- {
- DEBUG_puts("8cups_local_auth: Not a local connection!");
- return (1);
---
-2.30.2
-
-
-From f629d079750a86b1b605c285f99c0dea3933ca50 Mon Sep 17 00:00:00 2001
-From: Samuel Cabrero <scabrero@suse.de>
-Date: Tue, 27 Oct 2020 16:23:30 +0100
-Subject: [PATCH 3/4] Try local kerberos ccache credentials only for remote
- servers
-
-If connecting to localhost then proceed to ask the client for the
-authorization using cupsGetPassword2. The get password callback will
-return 401 to the client with WWW-Authenticate: Negotiate.
-
-Fixes: #5596
-
-Signed-off-by: Samuel Cabrero <scabrero@suse.de>
----
- cups/auth.c | 10 ++++++----
- 1 file changed, 6 insertions(+), 4 deletions(-)
-
-diff --git a/cups/auth.c b/cups/auth.c
-index d2956438d..9661657fc 100644
---- a/cups/auth.c
-+++ b/cups/auth.c
-@@ -175,10 +175,10 @@ cupsDoAuthentication(
- DEBUG_printf(("2cupsDoAuthentication: Trying scheme \"%s\"...", scheme));
-
- #ifdef HAVE_GSSAPI
-- if (!_cups_strcasecmp(scheme, "Negotiate"))
-+ if (!_cups_strcasecmp(scheme, "Negotiate") && !cups_is_local_connection(http))
- {
- /*
-- * Kerberos authentication...
-+ * Kerberos authentication to remote server...
- */
-
- int gss_status; /* Auth status */
-@@ -202,7 +202,9 @@ cupsDoAuthentication(
- }
- else
- #endif /* HAVE_GSSAPI */
-- if (_cups_strcasecmp(scheme, "Basic") && _cups_strcasecmp(scheme, "Digest"))
-+ if (_cups_strcasecmp(scheme, "Basic") &&
-+ _cups_strcasecmp(scheme, "Digest") &&
-+ _cups_strcasecmp(scheme, "Negotiate"))
- {
- /*
- * Other schemes not yet supported...
-@@ -216,7 +218,7 @@ cupsDoAuthentication(
- * See if we should retry the current username:password...
- */
-
-- if ((http->digest_tries > 1 || !http->userpass[0]) && (!_cups_strcasecmp(scheme, "Basic") || (!_cups_strcasecmp(scheme, "Digest"))))
-+ if (http->digest_tries > 1 || !http->userpass[0])
- {
- /*
- * Nope - get a new password from the user...
---
-2.30.2
-
-
-From 0563a28b18b21d5574a5e0e38b74246146074bbf Mon Sep 17 00:00:00 2001
-From: Samuel Cabrero <scabrero@suse.de>
-Date: Tue, 27 Oct 2020 16:18:03 +0100
-Subject: [PATCH 4/4] Allow Local authentication for Negotiate
-
-PeerCred is also possible if address family is AF_LOCAL. This will allow
-the CGI programs to generate the authorization from the local
-certificates based on PID also when Negotiate is used for local
-connections:
-
-Client CGI
-Browser <- Remote conn -> admin.cgi <--- Localhost conn ---> Scheduler
- | | |
- + --- HTTP/POST /admin/ --> | |
- | + --- CUPS-Get-Devices ------------> |
- | | |
- | | <-- 401 Unauthorized --------------+
- | | WWW-Authenticate: |
- | | Negotiate, (PeerCred,) Local |
- | | |
- | <-- 401 Unauthorized -----+ |
- | WWW-Authenticate: | |
- | Negotiate | |
- | | |
- | --- HTTP/POST /admin/ --> | |
- | Authorization: + --- IPP CUPS-GetDevices ---------> |
- | Negotiate | Authorization: Local <cert> |
- | | |
-
-Fixes: #5596
-
-Signed-off-by: Samuel Cabrero <scabrero@suse.de>
----
- cups/auth.c | 5 -----
- scheduler/client.c | 9 ++-------
- 2 files changed, 2 insertions(+), 12 deletions(-)
-
-diff --git a/cups/auth.c b/cups/auth.c
-index 9661657fc..b6fec6b98 100644
---- a/cups/auth.c
-+++ b/cups/auth.c
-@@ -1043,11 +1043,6 @@ cups_local_auth(http_t *http) /* I - HTTP connection to server */
- }
- # endif /* HAVE_AUTHORIZATION_H */
-
--# ifdef HAVE_GSSAPI
-- if (cups_auth_find(www_auth, "Negotiate"))
-- return (1);
--# endif /* HAVE_GSSAPI */
--
- # if defined(SO_PEERCRED) && defined(AF_LOCAL)
- /*
- * See if we can authenticate using the peer credentials provided over a
-diff --git a/scheduler/client.c b/scheduler/client.c
-index c2ee8f12a..56797d58d 100644
---- a/scheduler/client.c
-+++ b/scheduler/client.c
-@@ -2109,18 +2109,13 @@ cupsdSendHeader(
- }
- else if (auth_type == CUPSD_AUTH_NEGOTIATE)
- {
--#if defined(SO_PEERCRED) && defined(AF_LOCAL)
-- if (httpAddrFamily(httpGetAddress(con->http)) == AF_LOCAL)
-- strlcpy(auth_str, "PeerCred", sizeof(auth_str));
-- else
--#endif /* SO_PEERCRED && AF_LOCAL */
- strlcpy(auth_str, "Negotiate", sizeof(auth_str));
- }
-
-- if (con->best && auth_type != CUPSD_AUTH_NEGOTIATE && !con->is_browser && !_cups_strcasecmp(httpGetHostname(con->http, NULL, 0), "localhost"))
-+ if (con->best && !con->is_browser && !_cups_strcasecmp(httpGetHostname(con->http, NULL, 0), "localhost"))
- {
- /*
-- * Add a "trc" (try root certification) parameter for local non-Kerberos
-+ * Add a "trc" (try root certification) parameter for local
- * requests when the request requires system group membership - then the
- * client knows the root certificate can/should be used.
- *
---
-2.30.2
-
Index: upstream_pull_174.patch
===================================================================
--- upstream_pull_174.patch (revision 380)
+++ upstream_pull_174.patch (deleted)
@@ -1,53 +0,0 @@
-From c37d71b1a31d26a4790166e2508822b18934a5c0 Mon Sep 17 00:00:00 2001
-From: Zdenek Dohnal <zdohnal@redhat.com>
-Date: Tue, 13 Apr 2021 15:44:14 +0200
-Subject: [PATCH 1/2] backend/usb-libusb.c: Use 60s timeout for reading at
- backchannel
-
-Some older models malfunction if timeout is too short.
----
- CHANGES.md | 1 +
- backend/usb-libusb.c | 2 +-
- 2 files changed, 2 insertions(+), 1 deletion(-)
-
---- a/backend/usb-libusb.c
-+++ b/backend/usb-libusb.c
-@@ -1704,7 +1704,7 @@ static void *read_thread(void *reference)
- readstatus = libusb_bulk_transfer(g.printer->handle,
- g.printer->read_endp,
- readbuffer, rbytes,
-- &rbytes, 250);
-+ &rbytes, 60000);
- if (readstatus == LIBUSB_SUCCESS && rbytes > 0)
- {
- fprintf(stderr, "DEBUG: Read %d bytes of back-channel data...\n", (int)rbytes);
-
-From 4cb6f6806cdbe040d478b266a1d351b19341dd79 Mon Sep 17 00:00:00 2001
-From: Zdenek Dohnal <zdohnal@redhat.com>
-Date: Tue, 13 Apr 2021 15:47:37 +0200
-Subject: [PATCH 2/2] backend/usb-libusb.c: Revert enforcing read limits
-
-This commit reverts the change introduced by 2.2.12 [1] - its
-implementation caused a regression with Lexmark filters.
-
-[1]
-https://github.com/apple/cups/commit/35e927f83529cd9b4bc37bcd418c50e307fced35
----
- CHANGES.md | 1 +
- backend/usb-libusb.c | 3 ++-
- 2 files changed, 3 insertions(+), 1 deletion(-)
-
-diff --git a/backend/usb-libusb.c b/backend/usb-libusb.c
-index fbb0d9d89..89b5182f7 100644
---- a/backend/usb-libusb.c
-+++ b/backend/usb-libusb.c
-@@ -1721,7 +1721,8 @@ static void *read_thread(void *reference)
- * Make sure this loop executes no more than once every 250 miliseconds...
- */
-
-- if ((g.wait_eof || !g.read_thread_stop))
-+ if ((readstatus != LIBUSB_SUCCESS || rbytes == 0) &&
-+ (g.wait_eof || !g.read_thread_stop))
- usleep(250000);
- }
- while (g.wait_eof || !g.read_thread_stop);
OBS-URL: https://build.opensuse.org/request/show/958348
OBS-URL: https://build.opensuse.org/package/show/Printing/cups?expand=0&rev=381
2022-03-03 13:19:05 +01:00
|
|
|
|
* Fixed missing bracket in de/index.html (Issue #299)
|
|
|
|
|
* Fixed typos in configuration scripts (Issues #304, #316)
|
2022-03-04 09:58:18 +01:00
|
|
|
|
* Removed remaining legacy code for RIP_MAX_CACHE environment
|
|
|
|
|
variable (Issue #323)
|
|
|
|
|
* Removed deprecated directives from cupsctl and
|
|
|
|
|
cups-files.conf (Issue #300)
|
|
|
|
|
* Removed purge-jobs legacy code from CGI scripts and
|
|
|
|
|
templates (Issue #325)
|
|
|
|
|
- Version upgrade to 2.4.0:
|
|
|
|
|
CUPS 2.4.0 is the latest stable OpenPrinting CUPS release.
|
|
|
|
|
Among the changes from beta and release candidate
|
|
|
|
|
the stable release adds two new configuration options for
|
|
|
|
|
optimizing cupsd setup on servers and several other changes.
|
Accepting request 958348 from home:ajoga:branches:openSUSE:Factory
- Version upgrade to 2.4.1
- Dropped patch upstream_pull_174 because it it is included in this release
- Dropped patch cups-2.1.0-cups-systemd-socket.patch because it it is included in this release (https://github.com/OpenPrinting/cups/commit/e96e96b4bd0d4e6f634bbb66b95d6e475501541c)
- Changed upstream source packages signing key (https://github.com/OpenPrinting/cups/discussions/327#discussioncomment-2060579)
- Re-enabled testsuite
* Also removed make check because since upstream change the two target are identical (https://github.com/OpenPrinting/cups/commit/96ba46ebc818b610b0e40cbc9d62ef1dcd3ec9b6#diff-76ed074a9305c04054cdebb9e9aad2d818052b07091de1f20cad0bbac34ffb52R239)
- Changed cups-2.1.0-cups-systemd-socket.patch to accomodate new coding style
- Changed cups-config-libs.orig to accommodate recent code changes (SSL->TLS)
- Changed cups-2.1.0-default-webcontent-path.patch to accommodate code changes
old: Printing/cups
new: home:ajoga:branches:openSUSE:Factory/cups rev None
Index: cups-2.1.0-default-webcontent-path.patch
===================================================================
--- cups-2.1.0-default-webcontent-path.patch (revision 380)
+++ cups-2.1.0-default-webcontent-path.patch (revision 2)
@@ -1,17 +1,21 @@
---- config-scripts/cups-directories.m4.orig 2014-03-21 17:42:53.000000000 +0100
-+++ config-scripts/cups-directories.m4 2015-09-01 11:08:43.000000000 +0200
-@@ -206,11 +206,11 @@ fi
- AC_SUBST(MENUDIR)
+--- config-scripts/cups-directories.m4
++++ config-scripts/cups-directories.m4.orig
+@@ -166,15 +166,15 @@ AS_IF([test "x$menudir" = x], [
+ AC_SUBST([MENUDIR])
# Documentation files
--AC_ARG_WITH(docdir, [ --with-docdir set path for documentation],docdir="$withval",docdir="")
-+AC_ARG_WITH(docdir, [ --with-docdir set path and DocumentRoot directive for web content, default=datadir/cups/webcontent],docdir="$withval",docdir="")
+-AC_ARG_WITH([docdir], AS_HELP_STRING([--with-docdir], [set path for documentation]), [
++AC_ARG_WITH([docdir], AS_HELP_STRING([--with-docdir], [set path and DocumentRoot directive for web content, default=datadir/cups/webcontent]), [
+ docdir="$withval"
+ ], [
+ docdir=""
+ ])
- if test x$docdir = x; then
-- CUPS_DOCROOT="$datadir/doc/cups"
-- docdir="$datadir/doc/cups"
-+ CUPS_DOCROOT="$datadir/cups/webcontent"
-+ docdir="$datadir/cups/webcontent"
- else
- CUPS_DOCROOT="$docdir"
- fi
+ AS_IF([test x$docdir = x], [
+- CUPS_DOCROOT="$datadir/doc/cups"
+- docdir="$datadir/doc/cups"
++ CUPS_DOCROOT="$datadir/cups/webcontent"
++ docdir="$datadir/cups/webcontent"
+ ], [
+ CUPS_DOCROOT="$docdir"
+ ])
Index: cups-config-libs.patch
===================================================================
--- cups-config-libs.patch (revision 380)
+++ cups-config-libs.patch (revision 2)
@@ -4,7 +4,7 @@
# flags for compiler and linker...
CFLAGS=""
LDFLAGS="@EXPORT_LDFLAGS@"
--LIBS="@LIBGSSAPI@ @DNSSDLIBS@ @EXPORT_SSLLIBS@ @LIBZ@ @LIBS@"
+-LIBS="@LIBGSSAPI@ @DNSSDLIBS@ @EXPORT_TLSLIBS@ @LIBZ@ @LIBS@"
+LIBS=""
# Check for local invocation...
Index: cups.changes
===================================================================
--- cups.changes (revision 380)
+++ cups.changes (revision 2)
@@ -1,4 +1,88 @@
-------------------------------------------------------------------
+Tue Mar 1 18:16:11 UTC 2022 - Aurélien Joga <aurelienjoga@gmail.com>
+
+- Version upgrade to 2.4.1:
+ * The default color mode now is now configurable and defaults to the printer's reported default mode (Issue #277)
+ * Configuration script now checks linking for -Wl,-pie flags (Issue #303)
+ * Fixed memory leaks - in testi18n (Issue #313), in cups_enum_dests() (Issue #317), in _cupsEncodeOption() and http_tls_upgrade() (Issue #322)
+ * Fixed missing bracket in de/index.html (Issue #299)
+ * Fixed typos in configuration scripts (Issues #304, #316)
+ * Removed remaining legacy code for RIP_MAX_CACHE environment variable (Issue #323)
+ * Removed deprecated directives from cupsctl and cups-files.conf (Issue #300)
+ * Removed purge-jobs legacy code from CGI scripts and templates (Issue #325)
+ * Added configure option --with-idle-exit-timeout (Issue #294)
+ * Added --with-systemd-timeoutstartsec configure option (Issue #298)
+ * DigestOptions now are applied for MD5 Digest authentication defined by RFC 2069 as well (Issue #287)
+ * Fixed compilation on Solaris (Issue #293)
+ * Fixed and improved German translations (Issue #296, Issue #297)
+ * Added warning and debug messages when loading printers if the queue is raw or with driver (Issue #286)
+ * Compilation now uses -fstack-protector-strong if available (Issue #285)
+ * Added support for CUPS running in a Snapcraft snap.
+ * Added basic OAuth 2.0 client support (Issue #100)
+ * Added support for AirPrint and Mopria clients (Issue #105)
+ * Added configure support for specifying systemd dependencies in the CUPS service file (Issue #144)
+ * Added several features and improvements to ipptool (Issue #153)
+ * Added a JSON output mode for ipptool.
+ * The ipptool command now correctly reports an error when a test file cannot be found.
+ * CUPS library now uses thread safe getpwnam_r and getpwuid_r functions (Issue #274)
+ * Fixed Kerberos authentication for the web interface (Issue #19)
+ * The ZPL sample driver now supports more "standard" label sizes (Issue #70)
+ * Fixed reporting of printer instances when enumerating and when no options are set for the main instance (Issue #71)
+ * Reverted USB read limit enforcement change from CUPS 2.2.12 (Issue #72)
+ * The IPP backend did not return the correct status code when a job was canceled at the printer/server (Issue #74)
+ * The testlang unit test program now loops over all of the available locales by default (Issue #85)
+ * The cupsfilter command now shows error messages when options are used incorrectly (Issue #88)
+ * The PPD functions now treat boolean values as case-insensitive (Issue #106)
+ * Temporary queue names no longer end with an underscore (Issue #110)
+ * The USB backend now runs as root (Issue #121)
+ * Added pkg-config file for libcups (Issue #122)
+ * Fixed a PPD memory leak caused by emulator definitions (Issue #124)
+ * Fixed a DISPLAY bug in ipptool (Issue #139)
+ * The scheduler now includes the [Job N] prefix for job log messages, even when using syslog logging (Issue #154)
+ * Added support for locales using the GB18030 character set (Issue #159)
+ * httpReconnect2 did not reset the socket file descriptor when the TLS negotiation failed (Apple #5907)
+ * httpUpdate did not reset the socket file descriptor when the TLS negotiation failed (Apple #5915)
+ * The IPP backend now retries Validate-Job requests (Issue #132)
+ * Now show better error messages when a driver interface program fails to provide a PPD file (Issue #148)
+ * Added dark mode support to the CUPS web interface (Issue #152)
+ * Added a workaround for Solaris in httpAddrConnect2 (Issue #156)
+ * Fixed an interaction between --remote-admin and --remote-any for the cupsctl command (Issue #158)
+ * Now use a 60 second timeout for reading USB backchannel data (Issue #160)
+ * The USB backend now tries harder to find a serial number (Issue #170)
+ * Fixed @IF(name) handling in cupsd.conf (Apple #5918)
+ * Fixed documentation and added examples for CUPS' limited CGI support (Apple #5940)
+ * Fixed the lpc command prompt (Apple #5946)
+ * Now always pass "localhost" in the Host: header when talking over a domain socket or the loopback interface (Issue #185)
+ * Fixed a job history update issue in the scheduler (Issue #187)
+ * Fixed job-pages-per-set value for duplex print jobs.
+ * Fixed an edge case in ippReadIO to make sure that only complete attributes and values are retained on an error (Issue #195)
+ * Hardened ippReadIO to prevent invalid IPP messages from being propagated (Issue #195, Issue #196)
+ * The scheduler now supports the "everywhere" model directly (Issue #201)
+ * Fixed some IPP Everywhere option mapping problems (Issue #238)
+ * Fixed support for "job-hold-until" with the Restart-Job operation (Issue #250)
+ * Fixed the default color/grayscale presets for IPP Everywhere PPDs (Issue #262)
+ * Fixed support for the 'offline-report' state for all USB backends (Issue #264)
+ * Documentation fixes (Issue #92, Issue #163, Issue #177, Issue #184)
+ * Localization updates (Issue #123, Issue #129, Issue #134, Issue #146, Issue #164)
+ * USB quirk updates (Issue #192, Issue #270, Apple #5766, Apple #5838, Apple #5843, Apple #5867)
+ * Web interface updates (Issue #142, Issue #218)
+ * The ippeveprinter tool now automatically uses an available port.
+ * Fixed several Windows TLS and hashing issues.
+ * Deprecated cups-config (Issue #97)
+ * Deprecated Kerberos (AuthType Negotiate) authentication (Issue #98)
+ * Removed support for the (long deprecated and unused) FontPath, ListenBackLog, LPDConfigFile, KeepAliveTimeout, RIPCache, and SMBConfigFile directives in cupsd.conf and cups-files.conf.
+ * Stubbed out deprecated httpMD5 functions.
+ * Add test for undefined page ranges during printing.
+- Dropped patch upstream_pull_174 because it it is included in this release
+- Dropped patch cups-2.1.0-cups-systemd-socket.patch because it it is included in this release (https://github.com/OpenPrinting/cups/commit/e96e96b4bd0d4e6f634bbb66b95d6e475501541c)
+- Changed upstream source packages signing key (https://github.com/OpenPrinting/cups/discussions/327#discussioncomment-2060579)
+- Re-enabled testsuite
+ * Also removed make check because since upstream change the two target are identical (https://github.com/OpenPrinting/cups/commit/96ba46ebc818b610b0e40cbc9d62ef1dcd3ec9b6#diff-76ed074a9305c04054cdebb9e9aad2d818052b07091de1f20cad0bbac34ffb52R239)
+- Changed cups-2.1.0-cups-systemd-socket.patch to accomodate new coding style
+- Changed cups-config-libs.orig to accommodate recent code changes (SSL->TLS)
+- Changed cups-2.1.0-default-webcontent-path.patch to accommodate code changes
+
+-------------------------------------------------------------------
Tue Feb 1 09:18:27 UTC 2022 - jsmeix@suse.de
- Enhanced harden_cups.service.patch by adding
Index: cups.keyring
===================================================================
Binary files cups.keyring (revision 380) and cups.keyring (revision 2) differ
Index: cups.spec
===================================================================
--- cups.spec (revision 380)
+++ cups.spec (revision 2)
@@ -18,9 +18,7 @@
# Cf. https://rpm.org/user_doc/conditional_builds.html
# by default enable testsuite (i.e. in the 'check' section run make check and make test)
-#bcond_without testsuite
-# disable testsuite for now until https://github.com/OpenPrinting/cups/issues/155 is fixed
-%bcond_with testsuite
+%bcond_without testsuite
# _tmpfilesdir is not defined in systemd macros up to openSUSE 13.2
%{!?_tmpfilesdir: %global _tmpfilesdir /usr/lib/tmpfiles.d }
@@ -29,34 +27,32 @@
# "zypper vcmp 2.3.b99 2.3.0" shows "2.3.b99 is older than 2.3.0" and
# "zypper vcmp 2.2.99 2.3b6" show "2.2.99 is older than 2.3b6" so that
# version upgrades from 2.2.x via 2.3.b* to 2.3.0 work:
-Version: 2.3.3op2
+Version: 2.4.1
Release: 0
Summary: The Common UNIX Printing System
License: Apache-2.0
Group: Hardware/Printing
URL: https://openprinting.github.io/cups
# To get Source0 go to https://github.com/OpenPrinting/cups/releases or use e.g.
-# wget --no-check-certificate -O cups-2.3.3op2-source.tar.gz https://github.com/OpenPrinting/cups/releases/download/v2.3.3op2/cups-2.3.3op2-source.tar.gz
-Source0: https://github.com/OpenPrinting/cups/releases/download/v2.3.3op2/cups-2.3.3op2-source.tar.gz
+# wget --no-check-certificate -O cups-2.4.1-source.tar.gz https://github.com/OpenPrinting/cups/releases/download/v2.4.1/cups-2.4.1-source.tar.gz
+Source0: https://github.com/OpenPrinting/cups/releases/download/v2.4.1/cups-2.4.1-source.tar.gz
# To get Source1 go to https://github.com/OpenPrinting/cups/releases or use e.g.
-# wget --no-check-certificate -O cups-2.3.3op2-source.tar.gz.sig https://github.com/OpenPrinting/cups/releases/download/v2.3.3op2/cups-2.3.3op2-source.tar.gz.sig
-Source1: https://github.com/OpenPrinting/cups/releases/download/v2.3.3op2/cups-2.3.3op2-source.tar.gz.sig
-# To get Source2 go to https://www.msweet.org/pgp.html
-# PGP Fingerprint: 845464660B686AAB36540B6F999559A027815955
+# wget --no-check-certificate -O cups-2.4.1-source.tar.gz.sig https://github.com/OpenPrinting/cups/releases/download/v2.4.1/cups-2.4.1-source.tar.gz.sig
+Source1: https://github.com/OpenPrinting/cups/releases/download/v2.4.1/cups-2.4.1-source.tar.gz.sig
+# To get Source2 use gpg --keyserver keys.openpgp.org --recv-keys 7082A0A50A2E92640F3880E0E4522DCC9B246FF7
+# See https://github.com/OpenPrinting/cups/discussions/327#discussioncomment-2060579
+# PGP Fingerprint: 7082A0A50A2E92640F3880E0E4522DCC9B246FF7
Source2: cups.keyring
# To manually verify Source0 with Source1 and Source2 do e.g.
# gpg --import cups.keyring
-# gpg --list-keys | grep -1 'Michael R Sweet' | grep -v 'expired'
-# gpg --verify cups-2.3.3op2-source.tar.gz.sig cups-2.3.3op2-source.tar.gz
+# gpg --list-keys | grep -1 'Zdenek Dohnal'
+# gpg --verify cups-2.4.1-source.tar.gz.sig cups-2.4.1-source.tar.gz
Source102: Postscript.ppd.gz
Source105: Postscript-level1.ppd.gz
Source106: Postscript-level2.ppd.gz
Source108: cups-client.conf
Source109: baselibs.conf
# Patch0...Patch9 is for patches from upstream:
-# Patch1 upstream_pull_174.patch is https://github.com/OpenPrinting/cups/pull/174
-# Use 60s timeout for read_thread, revert read limits
-Patch1: upstream_pull_174.patch
# Source10...Source99 is for sources from SUSE which are intended for upstream:
# Patch10...Patch99 is for patches from SUSE which are intended for upstream:
# Patch10 cups-2.1.0-choose-uri-template.patch adds 'smb://...' URIs to templates/choose-uri.tmpl:
@@ -66,8 +62,6 @@
# because the files of the CUPS web content are no documentation, see CUPS STR #3578
# and http://bugzilla.novell.com/show_bug.cgi?id=546023#c6 and subsequent comments:
Patch11: cups-2.1.0-default-webcontent-path.patch
-# Patch12 cups-2.1.0-cups-systemd-socket.patch Use systemd socket activation properly:
-Patch12: cups-2.1.0-cups-systemd-socket.patch
# Patch100...Patch999 is for private patches from SUSE which are not intended for upstream:
# Patch100 cups-pam.diff adds conf/pam.suse regarding support for PAM for SUSE:
Patch100: cups-pam.diff
@@ -83,9 +77,9 @@
Patch103: cups-1.4-do_not_strip_recommended_from_PPDs.patch
# Patch104 cups-config-libs.patch fixes option --libs in cups-config script:
Patch104: cups-config-libs.patch
-# Patch106 Fixes web UI Kerberos authentication (bsc#1175960)
-Patch106: fix-negotiate-authentication-between-CGIs-and-scheduler.patch
Patch107: harden_cups.service.patch
+# Patch108 downgrades the autoconf requirement to the autoconf available in tumbleweed as of writing
+Patch108: downgrade-autoconf-requirement.patch
# Build Requirements:
BuildRequires: dbus-1-devel
BuildRequires: fdupes
@@ -280,9 +274,6 @@
%prep
%setup -q
# Patch0...Patch9 is for patches from upstream:
-# Patch1 upstream_pull_174.patch is https://github.com/OpenPrinting/cups/pull/174
-# Use 60s timeout for read_thread, revert read limits
-%patch1 -p1
# Patch10...Patch99 is for patches from SUSE which are intended for upstream:
# Patch10 cups-2.1.0-choose-uri-template.patch adds 'smb://...' URIs to templates/choose-uri.tmpl:
%patch10 -b choose-uri-template.orig
@@ -291,8 +282,6 @@
# because the files of the CUPS web content are no documentation, see CUPS STR #3578
# and http://bugzilla.novell.com/show_bug.cgi?id=546023#c6 and subsequent comments:
%patch11 -b default-webcontent-path.orig
-# Patch12 cups-2.1.0-cups-systemd-socket.patch Use systemd socket activation properly:
-#patch12 -b cups-systemd-socket.orig
# Patch100...Patch999 is for private patches from SUSE which are not intended for upstream:
# Patch100 cups-pam.diff adds conf/pam.suse regarding support for PAM for SUSE:
%patch100 -b cups-pam.orig
@@ -308,9 +297,8 @@
%patch103 -b do_not_strip_recommended_from_PPDs.orig
# Patch104 cups-config-libs.patch fixes option --libs in cups-config script:
%patch104 -b cups-config-libs.orig
-# Patch106 Fixes web UI Kerberos authentication (bsc#1175960)
-%patch106 -p1
%patch107 -p1
+%patch108 -p1
%build
# Remove ".SILENT" rule for verbose build output
@@ -439,8 +427,6 @@
# There appears to be some kind of race condition when running make check and make test
# cf. https://github.com/OpenPrinting/cups/issues/155
# We print all logs for debugging purposes if either testsuite fails
-echo "DEBUG: running make check"
-bash -c 'make %{?_smp_mflags} check; EXIT=$?; if [ $EXIT -ne 0 ]; then cat test/*_log*-$(whoami); fi; exit $EXIT'
echo "DEBUG: running make test"
bash -c 'make %{?_smp_mflags} test; EXIT=$?; if [ $EXIT -ne 0 ]; then cat test/*_log*-$(whoami); fi; exit $EXIT'
%else
@@ -681,6 +667,7 @@
%files devel
%defattr(-,root,root)
+/usr/lib/pkgconfig/cups.pc
%{_includedir}/cups/
%{_libdir}/libcups.so
%{_libdir}/libcupsimage.so
Index: cups-2.4.1-source.tar.gz
===================================================================
Binary file cups-2.4.1-source.tar.gz (revision 2) added
Index: cups-2.4.1-source.tar.gz.sig
===================================================================
Binary file cups-2.4.1-source.tar.gz.sig (revision 2) added
Index: downgrade-autoconf-requirement.patch
===================================================================
--- downgrade-autoconf-requirement.patch (added)
+++ downgrade-autoconf-requirement.patch (revision 2)
@@ -0,0 +1,15 @@
+diff --git a/configure.ac b/configure.ac
+index a8c6c1040..6ace74a8d 100644
+--- a/configure.ac
++++ b/configure.ac
+@@ -9,8 +9,8 @@ dnl Licensed under Apache License v2.0. See the file "LICENSE" for more
+ dnl information.
+ dnl
+
+-dnl We need at least autoconf 2.71...
+-AC_PREREQ([2.71])
++dnl We need at least autoconf 2.69...
++AC_PREREQ([2.69])
+
+ dnl Package name and version...
+ AC_INIT([CUPS],[2.4.1],[https://github.com/openprinting/cups/issues],[cups],[https://openprinting.github.io/cups])
Index: cups-2.1.0-cups-systemd-socket.patch
===================================================================
--- cups-2.1.0-cups-systemd-socket.patch (revision 380)
+++ cups-2.1.0-cups-systemd-socket.patch (deleted)
@@ -1,43 +0,0 @@
---- scheduler/main.c.orig 2015-06-08 20:32:35.000000000 +0200
-+++ scheduler/main.c 2015-09-01 11:19:36.000000000 +0200
-@@ -656,7 +656,15 @@ main(int argc, /* I - Number of comm
-
- #if defined(HAVE_LAUNCHD) || defined(HAVE_SYSTEMD)
- if (OnDemand)
-+ {
- cupsdAddEvent(CUPSD_EVENT_SERVER_STARTED, NULL, NULL, "Scheduler started on demand.");
-+# ifdef HAVE_SYSTEMD
-+ sd_notifyf(0, "READY=1\n"
-+ "STATUS=Scheduler is running...\n"
-+ "MAINPID=%lu",
-+ (unsigned long) getpid());
-+# endif /* HAVE_SYSTEMD */
-+ }
- else
- #endif /* HAVE_LAUNCHD || HAVE_SYSTEMD */
- if (fg)
---- scheduler/org.cups.cupsd.path.in.orig 2014-03-21 15:50:24.000000000 +0100
-+++ scheduler/org.cups.cupsd.path.in 2015-09-01 11:20:37.000000000 +0200
-@@ -3,6 +3,7 @@ Description=CUPS Scheduler
-
- [Path]
- PathExists=@CUPS_CACHEDIR@/org.cups.cupsd
-+PathExistsGlob=@CUPS_REQUESTS@/d*
-
- [Install]
- WantedBy=multi-user.target
---- scheduler/org.cups.cupsd.service.in.orig 2014-10-21 13:54:05.000000000 +0200
-+++ scheduler/org.cups.cupsd.service.in 2015-09-01 11:22:09.000000000 +0200
-@@ -1,10 +1,11 @@
- [Unit]
- Description=CUPS Scheduler
- Documentation=man:cupsd(8)
-+After=network.target
-
- [Service]
- ExecStart=@sbindir@/cupsd -l
--Type=simple
-+Type=notify
-
- [Install]
- Also=org.cups.cupsd.socket org.cups.cupsd.path
Index: cups-2.3.3op2-source.tar.gz
===================================================================
Binary file cups-2.3.3op2-source.tar.gz (revision 380) deleted
Index: cups-2.3.3op2-source.tar.gz.sig
===================================================================
Binary file cups-2.3.3op2-source.tar.gz.sig (revision 380) deleted
Index: fix-negotiate-authentication-between-CGIs-and-scheduler.patch
===================================================================
--- fix-negotiate-authentication-between-CGIs-and-scheduler.patch (revision 380)
+++ fix-negotiate-authentication-between-CGIs-and-scheduler.patch (deleted)
@@ -1,223 +0,0 @@
-From d4521ed0df7e625ccf2bc079bab6f48c46ef9bf9 Mon Sep 17 00:00:00 2001
-From: Samuel Cabrero <scabrero@suse.de>
-Date: Mon, 26 Oct 2020 17:35:22 +0100
-Subject: [PATCH 1/4] Avoid infinite loop in admin.cgi when negotiate is used
-
-SetAuthorizationString with NULL argument sets an empty string.
-
-Related: #5596
-
-Signed-off-by: Samuel Cabrero <scabrero@suse.de>
----
- cups/auth.c | 2 +-
- 1 file changed, 1 insertion(+), 1 deletion(-)
-
-diff --git a/cups/auth.c b/cups/auth.c
-index db45bbba6..f2409350a 100644
---- a/cups/auth.c
-+++ b/cups/auth.c
-@@ -295,7 +295,7 @@ cupsDoAuthentication(
- }
- }
-
-- if (http->authstring)
-+ if (http->authstring && http->authstring[0])
- {
- DEBUG_printf(("1cupsDoAuthentication: authstring=\"%s\".", http->authstring));
-
---
-2.30.2
-
-
-From 61ad7780bc7d0593e3225d088ac6dff31badf801 Mon Sep 17 00:00:00 2001
-From: Samuel Cabrero <scabrero@suse.de>
-Date: Tue, 27 Oct 2020 16:11:41 +0100
-Subject: [PATCH 2/4] Add cups_is_local_connection() to check if connection is
- to localhost
-
-Related: #5596
-
-Signed-off-by: Samuel Cabrero <scabrero@suse.de>
----
- cups/auth.c | 11 ++++++++++-
- 1 file changed, 10 insertions(+), 1 deletion(-)
-
-diff --git a/cups/auth.c b/cups/auth.c
-index f2409350a..d2956438d 100644
---- a/cups/auth.c
-+++ b/cups/auth.c
-@@ -90,6 +90,7 @@ static void cups_gss_printf(OM_uint32 major_status, OM_uint32 minor_status,
- # define cups_gss_printf(major, minor, message)
- # endif /* DEBUG */
- #endif /* HAVE_GSSAPI */
-+static int cups_is_local_connection(http_t *http);
- static int cups_local_auth(http_t *http);
-
-
-@@ -916,6 +917,14 @@ cups_gss_printf(OM_uint32 major_status,/* I - Major status code */
- # endif /* DEBUG */
- #endif /* HAVE_GSSAPI */
-
-+static int /* O - 0 if not a local connection */
-+ /* 1 if local connection */
-+cups_is_local_connection(http_t *http) /* I - HTTP connection to server */
-+{
-+ if (!httpAddrLocalhost(http->hostaddr) && _cups_strcasecmp(http->hostname, "localhost") != 0)
-+ return 0;
-+ return 1;
-+}
-
- /*
- * 'cups_local_auth()' - Get the local authorization certificate if
-@@ -958,7 +967,7 @@ cups_local_auth(http_t *http) /* I - HTTP connection to server */
- * See if we are accessing localhost...
- */
-
-- if (!httpAddrLocalhost(http->hostaddr) && _cups_strcasecmp(http->hostname, "localhost") != 0)
-+ if (!cups_is_local_connection(http))
- {
- DEBUG_puts("8cups_local_auth: Not a local connection!");
- return (1);
---
-2.30.2
-
-
-From f629d079750a86b1b605c285f99c0dea3933ca50 Mon Sep 17 00:00:00 2001
-From: Samuel Cabrero <scabrero@suse.de>
-Date: Tue, 27 Oct 2020 16:23:30 +0100
-Subject: [PATCH 3/4] Try local kerberos ccache credentials only for remote
- servers
-
-If connecting to localhost then proceed to ask the client for the
-authorization using cupsGetPassword2. The get password callback will
-return 401 to the client with WWW-Authenticate: Negotiate.
-
-Fixes: #5596
-
-Signed-off-by: Samuel Cabrero <scabrero@suse.de>
----
- cups/auth.c | 10 ++++++----
- 1 file changed, 6 insertions(+), 4 deletions(-)
-
-diff --git a/cups/auth.c b/cups/auth.c
-index d2956438d..9661657fc 100644
---- a/cups/auth.c
-+++ b/cups/auth.c
-@@ -175,10 +175,10 @@ cupsDoAuthentication(
- DEBUG_printf(("2cupsDoAuthentication: Trying scheme \"%s\"...", scheme));
-
- #ifdef HAVE_GSSAPI
-- if (!_cups_strcasecmp(scheme, "Negotiate"))
-+ if (!_cups_strcasecmp(scheme, "Negotiate") && !cups_is_local_connection(http))
- {
- /*
-- * Kerberos authentication...
-+ * Kerberos authentication to remote server...
- */
-
- int gss_status; /* Auth status */
-@@ -202,7 +202,9 @@ cupsDoAuthentication(
- }
- else
- #endif /* HAVE_GSSAPI */
-- if (_cups_strcasecmp(scheme, "Basic") && _cups_strcasecmp(scheme, "Digest"))
-+ if (_cups_strcasecmp(scheme, "Basic") &&
-+ _cups_strcasecmp(scheme, "Digest") &&
-+ _cups_strcasecmp(scheme, "Negotiate"))
- {
- /*
- * Other schemes not yet supported...
-@@ -216,7 +218,7 @@ cupsDoAuthentication(
- * See if we should retry the current username:password...
- */
-
-- if ((http->digest_tries > 1 || !http->userpass[0]) && (!_cups_strcasecmp(scheme, "Basic") || (!_cups_strcasecmp(scheme, "Digest"))))
-+ if (http->digest_tries > 1 || !http->userpass[0])
- {
- /*
- * Nope - get a new password from the user...
---
-2.30.2
-
-
-From 0563a28b18b21d5574a5e0e38b74246146074bbf Mon Sep 17 00:00:00 2001
-From: Samuel Cabrero <scabrero@suse.de>
-Date: Tue, 27 Oct 2020 16:18:03 +0100
-Subject: [PATCH 4/4] Allow Local authentication for Negotiate
-
-PeerCred is also possible if address family is AF_LOCAL. This will allow
-the CGI programs to generate the authorization from the local
-certificates based on PID also when Negotiate is used for local
-connections:
-
-Client CGI
-Browser <- Remote conn -> admin.cgi <--- Localhost conn ---> Scheduler
- | | |
- + --- HTTP/POST /admin/ --> | |
- | + --- CUPS-Get-Devices ------------> |
- | | |
- | | <-- 401 Unauthorized --------------+
- | | WWW-Authenticate: |
- | | Negotiate, (PeerCred,) Local |
- | | |
- | <-- 401 Unauthorized -----+ |
- | WWW-Authenticate: | |
- | Negotiate | |
- | | |
- | --- HTTP/POST /admin/ --> | |
- | Authorization: + --- IPP CUPS-GetDevices ---------> |
- | Negotiate | Authorization: Local <cert> |
- | | |
-
-Fixes: #5596
-
-Signed-off-by: Samuel Cabrero <scabrero@suse.de>
----
- cups/auth.c | 5 -----
- scheduler/client.c | 9 ++-------
- 2 files changed, 2 insertions(+), 12 deletions(-)
-
-diff --git a/cups/auth.c b/cups/auth.c
-index 9661657fc..b6fec6b98 100644
---- a/cups/auth.c
-+++ b/cups/auth.c
-@@ -1043,11 +1043,6 @@ cups_local_auth(http_t *http) /* I - HTTP connection to server */
- }
- # endif /* HAVE_AUTHORIZATION_H */
-
--# ifdef HAVE_GSSAPI
-- if (cups_auth_find(www_auth, "Negotiate"))
-- return (1);
--# endif /* HAVE_GSSAPI */
--
- # if defined(SO_PEERCRED) && defined(AF_LOCAL)
- /*
- * See if we can authenticate using the peer credentials provided over a
-diff --git a/scheduler/client.c b/scheduler/client.c
-index c2ee8f12a..56797d58d 100644
---- a/scheduler/client.c
-+++ b/scheduler/client.c
-@@ -2109,18 +2109,13 @@ cupsdSendHeader(
- }
- else if (auth_type == CUPSD_AUTH_NEGOTIATE)
- {
--#if defined(SO_PEERCRED) && defined(AF_LOCAL)
-- if (httpAddrFamily(httpGetAddress(con->http)) == AF_LOCAL)
-- strlcpy(auth_str, "PeerCred", sizeof(auth_str));
-- else
--#endif /* SO_PEERCRED && AF_LOCAL */
- strlcpy(auth_str, "Negotiate", sizeof(auth_str));
- }
-
-- if (con->best && auth_type != CUPSD_AUTH_NEGOTIATE && !con->is_browser && !_cups_strcasecmp(httpGetHostname(con->http, NULL, 0), "localhost"))
-+ if (con->best && !con->is_browser && !_cups_strcasecmp(httpGetHostname(con->http, NULL, 0), "localhost"))
- {
- /*
-- * Add a "trc" (try root certification) parameter for local non-Kerberos
-+ * Add a "trc" (try root certification) parameter for local
- * requests when the request requires system group membership - then the
- * client knows the root certificate can/should be used.
- *
---
-2.30.2
-
Index: upstream_pull_174.patch
===================================================================
--- upstream_pull_174.patch (revision 380)
+++ upstream_pull_174.patch (deleted)
@@ -1,53 +0,0 @@
-From c37d71b1a31d26a4790166e2508822b18934a5c0 Mon Sep 17 00:00:00 2001
-From: Zdenek Dohnal <zdohnal@redhat.com>
-Date: Tue, 13 Apr 2021 15:44:14 +0200
-Subject: [PATCH 1/2] backend/usb-libusb.c: Use 60s timeout for reading at
- backchannel
-
-Some older models malfunction if timeout is too short.
----
- CHANGES.md | 1 +
- backend/usb-libusb.c | 2 +-
- 2 files changed, 2 insertions(+), 1 deletion(-)
-
---- a/backend/usb-libusb.c
-+++ b/backend/usb-libusb.c
-@@ -1704,7 +1704,7 @@ static void *read_thread(void *reference)
- readstatus = libusb_bulk_transfer(g.printer->handle,
- g.printer->read_endp,
- readbuffer, rbytes,
-- &rbytes, 250);
-+ &rbytes, 60000);
- if (readstatus == LIBUSB_SUCCESS && rbytes > 0)
- {
- fprintf(stderr, "DEBUG: Read %d bytes of back-channel data...\n", (int)rbytes);
-
-From 4cb6f6806cdbe040d478b266a1d351b19341dd79 Mon Sep 17 00:00:00 2001
-From: Zdenek Dohnal <zdohnal@redhat.com>
-Date: Tue, 13 Apr 2021 15:47:37 +0200
-Subject: [PATCH 2/2] backend/usb-libusb.c: Revert enforcing read limits
-
-This commit reverts the change introduced by 2.2.12 [1] - its
-implementation caused a regression with Lexmark filters.
-
-[1]
-https://github.com/apple/cups/commit/35e927f83529cd9b4bc37bcd418c50e307fced35
----
- CHANGES.md | 1 +
- backend/usb-libusb.c | 3 ++-
- 2 files changed, 3 insertions(+), 1 deletion(-)
-
-diff --git a/backend/usb-libusb.c b/backend/usb-libusb.c
-index fbb0d9d89..89b5182f7 100644
---- a/backend/usb-libusb.c
-+++ b/backend/usb-libusb.c
-@@ -1721,7 +1721,8 @@ static void *read_thread(void *reference)
- * Make sure this loop executes no more than once every 250 miliseconds...
- */
-
-- if ((g.wait_eof || !g.read_thread_stop))
-+ if ((readstatus != LIBUSB_SUCCESS || rbytes == 0) &&
-+ (g.wait_eof || !g.read_thread_stop))
- usleep(250000);
- }
- while (g.wait_eof || !g.read_thread_stop);
OBS-URL: https://build.opensuse.org/request/show/958348
OBS-URL: https://build.opensuse.org/package/show/Printing/cups?expand=0&rev=381
2022-03-03 13:19:05 +01:00
|
|
|
|
* Added configure option --with-idle-exit-timeout (Issue #294)
|
2022-03-04 09:58:18 +01:00
|
|
|
|
* Added --with-systemd-timeoutstartsec configure
|
|
|
|
|
option (Issue #298)
|
|
|
|
|
* DigestOptions now are applied for MD5 Digest authentication
|
|
|
|
|
defined by RFC 2069 as well (Issue #287)
|
Accepting request 958348 from home:ajoga:branches:openSUSE:Factory
- Version upgrade to 2.4.1
- Dropped patch upstream_pull_174 because it it is included in this release
- Dropped patch cups-2.1.0-cups-systemd-socket.patch because it it is included in this release (https://github.com/OpenPrinting/cups/commit/e96e96b4bd0d4e6f634bbb66b95d6e475501541c)
- Changed upstream source packages signing key (https://github.com/OpenPrinting/cups/discussions/327#discussioncomment-2060579)
- Re-enabled testsuite
* Also removed make check because since upstream change the two target are identical (https://github.com/OpenPrinting/cups/commit/96ba46ebc818b610b0e40cbc9d62ef1dcd3ec9b6#diff-76ed074a9305c04054cdebb9e9aad2d818052b07091de1f20cad0bbac34ffb52R239)
- Changed cups-2.1.0-cups-systemd-socket.patch to accomodate new coding style
- Changed cups-config-libs.orig to accommodate recent code changes (SSL->TLS)
- Changed cups-2.1.0-default-webcontent-path.patch to accommodate code changes
old: Printing/cups
new: home:ajoga:branches:openSUSE:Factory/cups rev None
Index: cups-2.1.0-default-webcontent-path.patch
===================================================================
--- cups-2.1.0-default-webcontent-path.patch (revision 380)
+++ cups-2.1.0-default-webcontent-path.patch (revision 2)
@@ -1,17 +1,21 @@
---- config-scripts/cups-directories.m4.orig 2014-03-21 17:42:53.000000000 +0100
-+++ config-scripts/cups-directories.m4 2015-09-01 11:08:43.000000000 +0200
-@@ -206,11 +206,11 @@ fi
- AC_SUBST(MENUDIR)
+--- config-scripts/cups-directories.m4
++++ config-scripts/cups-directories.m4.orig
+@@ -166,15 +166,15 @@ AS_IF([test "x$menudir" = x], [
+ AC_SUBST([MENUDIR])
# Documentation files
--AC_ARG_WITH(docdir, [ --with-docdir set path for documentation],docdir="$withval",docdir="")
-+AC_ARG_WITH(docdir, [ --with-docdir set path and DocumentRoot directive for web content, default=datadir/cups/webcontent],docdir="$withval",docdir="")
+-AC_ARG_WITH([docdir], AS_HELP_STRING([--with-docdir], [set path for documentation]), [
++AC_ARG_WITH([docdir], AS_HELP_STRING([--with-docdir], [set path and DocumentRoot directive for web content, default=datadir/cups/webcontent]), [
+ docdir="$withval"
+ ], [
+ docdir=""
+ ])
- if test x$docdir = x; then
-- CUPS_DOCROOT="$datadir/doc/cups"
-- docdir="$datadir/doc/cups"
-+ CUPS_DOCROOT="$datadir/cups/webcontent"
-+ docdir="$datadir/cups/webcontent"
- else
- CUPS_DOCROOT="$docdir"
- fi
+ AS_IF([test x$docdir = x], [
+- CUPS_DOCROOT="$datadir/doc/cups"
+- docdir="$datadir/doc/cups"
++ CUPS_DOCROOT="$datadir/cups/webcontent"
++ docdir="$datadir/cups/webcontent"
+ ], [
+ CUPS_DOCROOT="$docdir"
+ ])
Index: cups-config-libs.patch
===================================================================
--- cups-config-libs.patch (revision 380)
+++ cups-config-libs.patch (revision 2)
@@ -4,7 +4,7 @@
# flags for compiler and linker...
CFLAGS=""
LDFLAGS="@EXPORT_LDFLAGS@"
--LIBS="@LIBGSSAPI@ @DNSSDLIBS@ @EXPORT_SSLLIBS@ @LIBZ@ @LIBS@"
+-LIBS="@LIBGSSAPI@ @DNSSDLIBS@ @EXPORT_TLSLIBS@ @LIBZ@ @LIBS@"
+LIBS=""
# Check for local invocation...
Index: cups.changes
===================================================================
--- cups.changes (revision 380)
+++ cups.changes (revision 2)
@@ -1,4 +1,88 @@
-------------------------------------------------------------------
+Tue Mar 1 18:16:11 UTC 2022 - Aurélien Joga <aurelienjoga@gmail.com>
+
+- Version upgrade to 2.4.1:
+ * The default color mode now is now configurable and defaults to the printer's reported default mode (Issue #277)
+ * Configuration script now checks linking for -Wl,-pie flags (Issue #303)
+ * Fixed memory leaks - in testi18n (Issue #313), in cups_enum_dests() (Issue #317), in _cupsEncodeOption() and http_tls_upgrade() (Issue #322)
+ * Fixed missing bracket in de/index.html (Issue #299)
+ * Fixed typos in configuration scripts (Issues #304, #316)
+ * Removed remaining legacy code for RIP_MAX_CACHE environment variable (Issue #323)
+ * Removed deprecated directives from cupsctl and cups-files.conf (Issue #300)
+ * Removed purge-jobs legacy code from CGI scripts and templates (Issue #325)
+ * Added configure option --with-idle-exit-timeout (Issue #294)
+ * Added --with-systemd-timeoutstartsec configure option (Issue #298)
+ * DigestOptions now are applied for MD5 Digest authentication defined by RFC 2069 as well (Issue #287)
+ * Fixed compilation on Solaris (Issue #293)
+ * Fixed and improved German translations (Issue #296, Issue #297)
+ * Added warning and debug messages when loading printers if the queue is raw or with driver (Issue #286)
+ * Compilation now uses -fstack-protector-strong if available (Issue #285)
+ * Added support for CUPS running in a Snapcraft snap.
+ * Added basic OAuth 2.0 client support (Issue #100)
+ * Added support for AirPrint and Mopria clients (Issue #105)
+ * Added configure support for specifying systemd dependencies in the CUPS service file (Issue #144)
+ * Added several features and improvements to ipptool (Issue #153)
+ * Added a JSON output mode for ipptool.
+ * The ipptool command now correctly reports an error when a test file cannot be found.
+ * CUPS library now uses thread safe getpwnam_r and getpwuid_r functions (Issue #274)
+ * Fixed Kerberos authentication for the web interface (Issue #19)
+ * The ZPL sample driver now supports more "standard" label sizes (Issue #70)
+ * Fixed reporting of printer instances when enumerating and when no options are set for the main instance (Issue #71)
+ * Reverted USB read limit enforcement change from CUPS 2.2.12 (Issue #72)
+ * The IPP backend did not return the correct status code when a job was canceled at the printer/server (Issue #74)
+ * The testlang unit test program now loops over all of the available locales by default (Issue #85)
+ * The cupsfilter command now shows error messages when options are used incorrectly (Issue #88)
+ * The PPD functions now treat boolean values as case-insensitive (Issue #106)
+ * Temporary queue names no longer end with an underscore (Issue #110)
+ * The USB backend now runs as root (Issue #121)
+ * Added pkg-config file for libcups (Issue #122)
+ * Fixed a PPD memory leak caused by emulator definitions (Issue #124)
+ * Fixed a DISPLAY bug in ipptool (Issue #139)
+ * The scheduler now includes the [Job N] prefix for job log messages, even when using syslog logging (Issue #154)
+ * Added support for locales using the GB18030 character set (Issue #159)
+ * httpReconnect2 did not reset the socket file descriptor when the TLS negotiation failed (Apple #5907)
+ * httpUpdate did not reset the socket file descriptor when the TLS negotiation failed (Apple #5915)
+ * The IPP backend now retries Validate-Job requests (Issue #132)
+ * Now show better error messages when a driver interface program fails to provide a PPD file (Issue #148)
+ * Added dark mode support to the CUPS web interface (Issue #152)
+ * Added a workaround for Solaris in httpAddrConnect2 (Issue #156)
+ * Fixed an interaction between --remote-admin and --remote-any for the cupsctl command (Issue #158)
+ * Now use a 60 second timeout for reading USB backchannel data (Issue #160)
+ * The USB backend now tries harder to find a serial number (Issue #170)
+ * Fixed @IF(name) handling in cupsd.conf (Apple #5918)
+ * Fixed documentation and added examples for CUPS' limited CGI support (Apple #5940)
+ * Fixed the lpc command prompt (Apple #5946)
+ * Now always pass "localhost" in the Host: header when talking over a domain socket or the loopback interface (Issue #185)
+ * Fixed a job history update issue in the scheduler (Issue #187)
+ * Fixed job-pages-per-set value for duplex print jobs.
+ * Fixed an edge case in ippReadIO to make sure that only complete attributes and values are retained on an error (Issue #195)
+ * Hardened ippReadIO to prevent invalid IPP messages from being propagated (Issue #195, Issue #196)
+ * The scheduler now supports the "everywhere" model directly (Issue #201)
+ * Fixed some IPP Everywhere option mapping problems (Issue #238)
+ * Fixed support for "job-hold-until" with the Restart-Job operation (Issue #250)
+ * Fixed the default color/grayscale presets for IPP Everywhere PPDs (Issue #262)
+ * Fixed support for the 'offline-report' state for all USB backends (Issue #264)
+ * Documentation fixes (Issue #92, Issue #163, Issue #177, Issue #184)
+ * Localization updates (Issue #123, Issue #129, Issue #134, Issue #146, Issue #164)
+ * USB quirk updates (Issue #192, Issue #270, Apple #5766, Apple #5838, Apple #5843, Apple #5867)
+ * Web interface updates (Issue #142, Issue #218)
+ * The ippeveprinter tool now automatically uses an available port.
+ * Fixed several Windows TLS and hashing issues.
+ * Deprecated cups-config (Issue #97)
+ * Deprecated Kerberos (AuthType Negotiate) authentication (Issue #98)
+ * Removed support for the (long deprecated and unused) FontPath, ListenBackLog, LPDConfigFile, KeepAliveTimeout, RIPCache, and SMBConfigFile directives in cupsd.conf and cups-files.conf.
+ * Stubbed out deprecated httpMD5 functions.
+ * Add test for undefined page ranges during printing.
+- Dropped patch upstream_pull_174 because it it is included in this release
+- Dropped patch cups-2.1.0-cups-systemd-socket.patch because it it is included in this release (https://github.com/OpenPrinting/cups/commit/e96e96b4bd0d4e6f634bbb66b95d6e475501541c)
+- Changed upstream source packages signing key (https://github.com/OpenPrinting/cups/discussions/327#discussioncomment-2060579)
+- Re-enabled testsuite
+ * Also removed make check because since upstream change the two target are identical (https://github.com/OpenPrinting/cups/commit/96ba46ebc818b610b0e40cbc9d62ef1dcd3ec9b6#diff-76ed074a9305c04054cdebb9e9aad2d818052b07091de1f20cad0bbac34ffb52R239)
+- Changed cups-2.1.0-cups-systemd-socket.patch to accomodate new coding style
+- Changed cups-config-libs.orig to accommodate recent code changes (SSL->TLS)
+- Changed cups-2.1.0-default-webcontent-path.patch to accommodate code changes
+
+-------------------------------------------------------------------
Tue Feb 1 09:18:27 UTC 2022 - jsmeix@suse.de
- Enhanced harden_cups.service.patch by adding
Index: cups.keyring
===================================================================
Binary files cups.keyring (revision 380) and cups.keyring (revision 2) differ
Index: cups.spec
===================================================================
--- cups.spec (revision 380)
+++ cups.spec (revision 2)
@@ -18,9 +18,7 @@
# Cf. https://rpm.org/user_doc/conditional_builds.html
# by default enable testsuite (i.e. in the 'check' section run make check and make test)
-#bcond_without testsuite
-# disable testsuite for now until https://github.com/OpenPrinting/cups/issues/155 is fixed
-%bcond_with testsuite
+%bcond_without testsuite
# _tmpfilesdir is not defined in systemd macros up to openSUSE 13.2
%{!?_tmpfilesdir: %global _tmpfilesdir /usr/lib/tmpfiles.d }
@@ -29,34 +27,32 @@
# "zypper vcmp 2.3.b99 2.3.0" shows "2.3.b99 is older than 2.3.0" and
# "zypper vcmp 2.2.99 2.3b6" show "2.2.99 is older than 2.3b6" so that
# version upgrades from 2.2.x via 2.3.b* to 2.3.0 work:
-Version: 2.3.3op2
+Version: 2.4.1
Release: 0
Summary: The Common UNIX Printing System
License: Apache-2.0
Group: Hardware/Printing
URL: https://openprinting.github.io/cups
# To get Source0 go to https://github.com/OpenPrinting/cups/releases or use e.g.
-# wget --no-check-certificate -O cups-2.3.3op2-source.tar.gz https://github.com/OpenPrinting/cups/releases/download/v2.3.3op2/cups-2.3.3op2-source.tar.gz
-Source0: https://github.com/OpenPrinting/cups/releases/download/v2.3.3op2/cups-2.3.3op2-source.tar.gz
+# wget --no-check-certificate -O cups-2.4.1-source.tar.gz https://github.com/OpenPrinting/cups/releases/download/v2.4.1/cups-2.4.1-source.tar.gz
+Source0: https://github.com/OpenPrinting/cups/releases/download/v2.4.1/cups-2.4.1-source.tar.gz
# To get Source1 go to https://github.com/OpenPrinting/cups/releases or use e.g.
-# wget --no-check-certificate -O cups-2.3.3op2-source.tar.gz.sig https://github.com/OpenPrinting/cups/releases/download/v2.3.3op2/cups-2.3.3op2-source.tar.gz.sig
-Source1: https://github.com/OpenPrinting/cups/releases/download/v2.3.3op2/cups-2.3.3op2-source.tar.gz.sig
-# To get Source2 go to https://www.msweet.org/pgp.html
-# PGP Fingerprint: 845464660B686AAB36540B6F999559A027815955
+# wget --no-check-certificate -O cups-2.4.1-source.tar.gz.sig https://github.com/OpenPrinting/cups/releases/download/v2.4.1/cups-2.4.1-source.tar.gz.sig
+Source1: https://github.com/OpenPrinting/cups/releases/download/v2.4.1/cups-2.4.1-source.tar.gz.sig
+# To get Source2 use gpg --keyserver keys.openpgp.org --recv-keys 7082A0A50A2E92640F3880E0E4522DCC9B246FF7
+# See https://github.com/OpenPrinting/cups/discussions/327#discussioncomment-2060579
+# PGP Fingerprint: 7082A0A50A2E92640F3880E0E4522DCC9B246FF7
Source2: cups.keyring
# To manually verify Source0 with Source1 and Source2 do e.g.
# gpg --import cups.keyring
-# gpg --list-keys | grep -1 'Michael R Sweet' | grep -v 'expired'
-# gpg --verify cups-2.3.3op2-source.tar.gz.sig cups-2.3.3op2-source.tar.gz
+# gpg --list-keys | grep -1 'Zdenek Dohnal'
+# gpg --verify cups-2.4.1-source.tar.gz.sig cups-2.4.1-source.tar.gz
Source102: Postscript.ppd.gz
Source105: Postscript-level1.ppd.gz
Source106: Postscript-level2.ppd.gz
Source108: cups-client.conf
Source109: baselibs.conf
# Patch0...Patch9 is for patches from upstream:
-# Patch1 upstream_pull_174.patch is https://github.com/OpenPrinting/cups/pull/174
-# Use 60s timeout for read_thread, revert read limits
-Patch1: upstream_pull_174.patch
# Source10...Source99 is for sources from SUSE which are intended for upstream:
# Patch10...Patch99 is for patches from SUSE which are intended for upstream:
# Patch10 cups-2.1.0-choose-uri-template.patch adds 'smb://...' URIs to templates/choose-uri.tmpl:
@@ -66,8 +62,6 @@
# because the files of the CUPS web content are no documentation, see CUPS STR #3578
# and http://bugzilla.novell.com/show_bug.cgi?id=546023#c6 and subsequent comments:
Patch11: cups-2.1.0-default-webcontent-path.patch
-# Patch12 cups-2.1.0-cups-systemd-socket.patch Use systemd socket activation properly:
-Patch12: cups-2.1.0-cups-systemd-socket.patch
# Patch100...Patch999 is for private patches from SUSE which are not intended for upstream:
# Patch100 cups-pam.diff adds conf/pam.suse regarding support for PAM for SUSE:
Patch100: cups-pam.diff
@@ -83,9 +77,9 @@
Patch103: cups-1.4-do_not_strip_recommended_from_PPDs.patch
# Patch104 cups-config-libs.patch fixes option --libs in cups-config script:
Patch104: cups-config-libs.patch
-# Patch106 Fixes web UI Kerberos authentication (bsc#1175960)
-Patch106: fix-negotiate-authentication-between-CGIs-and-scheduler.patch
Patch107: harden_cups.service.patch
+# Patch108 downgrades the autoconf requirement to the autoconf available in tumbleweed as of writing
+Patch108: downgrade-autoconf-requirement.patch
# Build Requirements:
BuildRequires: dbus-1-devel
BuildRequires: fdupes
@@ -280,9 +274,6 @@
%prep
%setup -q
# Patch0...Patch9 is for patches from upstream:
-# Patch1 upstream_pull_174.patch is https://github.com/OpenPrinting/cups/pull/174
-# Use 60s timeout for read_thread, revert read limits
-%patch1 -p1
# Patch10...Patch99 is for patches from SUSE which are intended for upstream:
# Patch10 cups-2.1.0-choose-uri-template.patch adds 'smb://...' URIs to templates/choose-uri.tmpl:
%patch10 -b choose-uri-template.orig
@@ -291,8 +282,6 @@
# because the files of the CUPS web content are no documentation, see CUPS STR #3578
# and http://bugzilla.novell.com/show_bug.cgi?id=546023#c6 and subsequent comments:
%patch11 -b default-webcontent-path.orig
-# Patch12 cups-2.1.0-cups-systemd-socket.patch Use systemd socket activation properly:
-#patch12 -b cups-systemd-socket.orig
# Patch100...Patch999 is for private patches from SUSE which are not intended for upstream:
# Patch100 cups-pam.diff adds conf/pam.suse regarding support for PAM for SUSE:
%patch100 -b cups-pam.orig
@@ -308,9 +297,8 @@
%patch103 -b do_not_strip_recommended_from_PPDs.orig
# Patch104 cups-config-libs.patch fixes option --libs in cups-config script:
%patch104 -b cups-config-libs.orig
-# Patch106 Fixes web UI Kerberos authentication (bsc#1175960)
-%patch106 -p1
%patch107 -p1
+%patch108 -p1
%build
# Remove ".SILENT" rule for verbose build output
@@ -439,8 +427,6 @@
# There appears to be some kind of race condition when running make check and make test
# cf. https://github.com/OpenPrinting/cups/issues/155
# We print all logs for debugging purposes if either testsuite fails
-echo "DEBUG: running make check"
-bash -c 'make %{?_smp_mflags} check; EXIT=$?; if [ $EXIT -ne 0 ]; then cat test/*_log*-$(whoami); fi; exit $EXIT'
echo "DEBUG: running make test"
bash -c 'make %{?_smp_mflags} test; EXIT=$?; if [ $EXIT -ne 0 ]; then cat test/*_log*-$(whoami); fi; exit $EXIT'
%else
@@ -681,6 +667,7 @@
%files devel
%defattr(-,root,root)
+/usr/lib/pkgconfig/cups.pc
%{_includedir}/cups/
%{_libdir}/libcups.so
%{_libdir}/libcupsimage.so
Index: cups-2.4.1-source.tar.gz
===================================================================
Binary file cups-2.4.1-source.tar.gz (revision 2) added
Index: cups-2.4.1-source.tar.gz.sig
===================================================================
Binary file cups-2.4.1-source.tar.gz.sig (revision 2) added
Index: downgrade-autoconf-requirement.patch
===================================================================
--- downgrade-autoconf-requirement.patch (added)
+++ downgrade-autoconf-requirement.patch (revision 2)
@@ -0,0 +1,15 @@
+diff --git a/configure.ac b/configure.ac
+index a8c6c1040..6ace74a8d 100644
+--- a/configure.ac
++++ b/configure.ac
+@@ -9,8 +9,8 @@ dnl Licensed under Apache License v2.0. See the file "LICENSE" for more
+ dnl information.
+ dnl
+
+-dnl We need at least autoconf 2.71...
+-AC_PREREQ([2.71])
++dnl We need at least autoconf 2.69...
++AC_PREREQ([2.69])
+
+ dnl Package name and version...
+ AC_INIT([CUPS],[2.4.1],[https://github.com/openprinting/cups/issues],[cups],[https://openprinting.github.io/cups])
Index: cups-2.1.0-cups-systemd-socket.patch
===================================================================
--- cups-2.1.0-cups-systemd-socket.patch (revision 380)
+++ cups-2.1.0-cups-systemd-socket.patch (deleted)
@@ -1,43 +0,0 @@
---- scheduler/main.c.orig 2015-06-08 20:32:35.000000000 +0200
-+++ scheduler/main.c 2015-09-01 11:19:36.000000000 +0200
-@@ -656,7 +656,15 @@ main(int argc, /* I - Number of comm
-
- #if defined(HAVE_LAUNCHD) || defined(HAVE_SYSTEMD)
- if (OnDemand)
-+ {
- cupsdAddEvent(CUPSD_EVENT_SERVER_STARTED, NULL, NULL, "Scheduler started on demand.");
-+# ifdef HAVE_SYSTEMD
-+ sd_notifyf(0, "READY=1\n"
-+ "STATUS=Scheduler is running...\n"
-+ "MAINPID=%lu",
-+ (unsigned long) getpid());
-+# endif /* HAVE_SYSTEMD */
-+ }
- else
- #endif /* HAVE_LAUNCHD || HAVE_SYSTEMD */
- if (fg)
---- scheduler/org.cups.cupsd.path.in.orig 2014-03-21 15:50:24.000000000 +0100
-+++ scheduler/org.cups.cupsd.path.in 2015-09-01 11:20:37.000000000 +0200
-@@ -3,6 +3,7 @@ Description=CUPS Scheduler
-
- [Path]
- PathExists=@CUPS_CACHEDIR@/org.cups.cupsd
-+PathExistsGlob=@CUPS_REQUESTS@/d*
-
- [Install]
- WantedBy=multi-user.target
---- scheduler/org.cups.cupsd.service.in.orig 2014-10-21 13:54:05.000000000 +0200
-+++ scheduler/org.cups.cupsd.service.in 2015-09-01 11:22:09.000000000 +0200
-@@ -1,10 +1,11 @@
- [Unit]
- Description=CUPS Scheduler
- Documentation=man:cupsd(8)
-+After=network.target
-
- [Service]
- ExecStart=@sbindir@/cupsd -l
--Type=simple
-+Type=notify
-
- [Install]
- Also=org.cups.cupsd.socket org.cups.cupsd.path
Index: cups-2.3.3op2-source.tar.gz
===================================================================
Binary file cups-2.3.3op2-source.tar.gz (revision 380) deleted
Index: cups-2.3.3op2-source.tar.gz.sig
===================================================================
Binary file cups-2.3.3op2-source.tar.gz.sig (revision 380) deleted
Index: fix-negotiate-authentication-between-CGIs-and-scheduler.patch
===================================================================
--- fix-negotiate-authentication-between-CGIs-and-scheduler.patch (revision 380)
+++ fix-negotiate-authentication-between-CGIs-and-scheduler.patch (deleted)
@@ -1,223 +0,0 @@
-From d4521ed0df7e625ccf2bc079bab6f48c46ef9bf9 Mon Sep 17 00:00:00 2001
-From: Samuel Cabrero <scabrero@suse.de>
-Date: Mon, 26 Oct 2020 17:35:22 +0100
-Subject: [PATCH 1/4] Avoid infinite loop in admin.cgi when negotiate is used
-
-SetAuthorizationString with NULL argument sets an empty string.
-
-Related: #5596
-
-Signed-off-by: Samuel Cabrero <scabrero@suse.de>
----
- cups/auth.c | 2 +-
- 1 file changed, 1 insertion(+), 1 deletion(-)
-
-diff --git a/cups/auth.c b/cups/auth.c
-index db45bbba6..f2409350a 100644
---- a/cups/auth.c
-+++ b/cups/auth.c
-@@ -295,7 +295,7 @@ cupsDoAuthentication(
- }
- }
-
-- if (http->authstring)
-+ if (http->authstring && http->authstring[0])
- {
- DEBUG_printf(("1cupsDoAuthentication: authstring=\"%s\".", http->authstring));
-
---
-2.30.2
-
-
-From 61ad7780bc7d0593e3225d088ac6dff31badf801 Mon Sep 17 00:00:00 2001
-From: Samuel Cabrero <scabrero@suse.de>
-Date: Tue, 27 Oct 2020 16:11:41 +0100
-Subject: [PATCH 2/4] Add cups_is_local_connection() to check if connection is
- to localhost
-
-Related: #5596
-
-Signed-off-by: Samuel Cabrero <scabrero@suse.de>
----
- cups/auth.c | 11 ++++++++++-
- 1 file changed, 10 insertions(+), 1 deletion(-)
-
-diff --git a/cups/auth.c b/cups/auth.c
-index f2409350a..d2956438d 100644
---- a/cups/auth.c
-+++ b/cups/auth.c
-@@ -90,6 +90,7 @@ static void cups_gss_printf(OM_uint32 major_status, OM_uint32 minor_status,
- # define cups_gss_printf(major, minor, message)
- # endif /* DEBUG */
- #endif /* HAVE_GSSAPI */
-+static int cups_is_local_connection(http_t *http);
- static int cups_local_auth(http_t *http);
-
-
-@@ -916,6 +917,14 @@ cups_gss_printf(OM_uint32 major_status,/* I - Major status code */
- # endif /* DEBUG */
- #endif /* HAVE_GSSAPI */
-
-+static int /* O - 0 if not a local connection */
-+ /* 1 if local connection */
-+cups_is_local_connection(http_t *http) /* I - HTTP connection to server */
-+{
-+ if (!httpAddrLocalhost(http->hostaddr) && _cups_strcasecmp(http->hostname, "localhost") != 0)
-+ return 0;
-+ return 1;
-+}
-
- /*
- * 'cups_local_auth()' - Get the local authorization certificate if
-@@ -958,7 +967,7 @@ cups_local_auth(http_t *http) /* I - HTTP connection to server */
- * See if we are accessing localhost...
- */
-
-- if (!httpAddrLocalhost(http->hostaddr) && _cups_strcasecmp(http->hostname, "localhost") != 0)
-+ if (!cups_is_local_connection(http))
- {
- DEBUG_puts("8cups_local_auth: Not a local connection!");
- return (1);
---
-2.30.2
-
-
-From f629d079750a86b1b605c285f99c0dea3933ca50 Mon Sep 17 00:00:00 2001
-From: Samuel Cabrero <scabrero@suse.de>
-Date: Tue, 27 Oct 2020 16:23:30 +0100
-Subject: [PATCH 3/4] Try local kerberos ccache credentials only for remote
- servers
-
-If connecting to localhost then proceed to ask the client for the
-authorization using cupsGetPassword2. The get password callback will
-return 401 to the client with WWW-Authenticate: Negotiate.
-
-Fixes: #5596
-
-Signed-off-by: Samuel Cabrero <scabrero@suse.de>
----
- cups/auth.c | 10 ++++++----
- 1 file changed, 6 insertions(+), 4 deletions(-)
-
-diff --git a/cups/auth.c b/cups/auth.c
-index d2956438d..9661657fc 100644
---- a/cups/auth.c
-+++ b/cups/auth.c
-@@ -175,10 +175,10 @@ cupsDoAuthentication(
- DEBUG_printf(("2cupsDoAuthentication: Trying scheme \"%s\"...", scheme));
-
- #ifdef HAVE_GSSAPI
-- if (!_cups_strcasecmp(scheme, "Negotiate"))
-+ if (!_cups_strcasecmp(scheme, "Negotiate") && !cups_is_local_connection(http))
- {
- /*
-- * Kerberos authentication...
-+ * Kerberos authentication to remote server...
- */
-
- int gss_status; /* Auth status */
-@@ -202,7 +202,9 @@ cupsDoAuthentication(
- }
- else
- #endif /* HAVE_GSSAPI */
-- if (_cups_strcasecmp(scheme, "Basic") && _cups_strcasecmp(scheme, "Digest"))
-+ if (_cups_strcasecmp(scheme, "Basic") &&
-+ _cups_strcasecmp(scheme, "Digest") &&
-+ _cups_strcasecmp(scheme, "Negotiate"))
- {
- /*
- * Other schemes not yet supported...
-@@ -216,7 +218,7 @@ cupsDoAuthentication(
- * See if we should retry the current username:password...
- */
-
-- if ((http->digest_tries > 1 || !http->userpass[0]) && (!_cups_strcasecmp(scheme, "Basic") || (!_cups_strcasecmp(scheme, "Digest"))))
-+ if (http->digest_tries > 1 || !http->userpass[0])
- {
- /*
- * Nope - get a new password from the user...
---
-2.30.2
-
-
-From 0563a28b18b21d5574a5e0e38b74246146074bbf Mon Sep 17 00:00:00 2001
-From: Samuel Cabrero <scabrero@suse.de>
-Date: Tue, 27 Oct 2020 16:18:03 +0100
-Subject: [PATCH 4/4] Allow Local authentication for Negotiate
-
-PeerCred is also possible if address family is AF_LOCAL. This will allow
-the CGI programs to generate the authorization from the local
-certificates based on PID also when Negotiate is used for local
-connections:
-
-Client CGI
-Browser <- Remote conn -> admin.cgi <--- Localhost conn ---> Scheduler
- | | |
- + --- HTTP/POST /admin/ --> | |
- | + --- CUPS-Get-Devices ------------> |
- | | |
- | | <-- 401 Unauthorized --------------+
- | | WWW-Authenticate: |
- | | Negotiate, (PeerCred,) Local |
- | | |
- | <-- 401 Unauthorized -----+ |
- | WWW-Authenticate: | |
- | Negotiate | |
- | | |
- | --- HTTP/POST /admin/ --> | |
- | Authorization: + --- IPP CUPS-GetDevices ---------> |
- | Negotiate | Authorization: Local <cert> |
- | | |
-
-Fixes: #5596
-
-Signed-off-by: Samuel Cabrero <scabrero@suse.de>
----
- cups/auth.c | 5 -----
- scheduler/client.c | 9 ++-------
- 2 files changed, 2 insertions(+), 12 deletions(-)
-
-diff --git a/cups/auth.c b/cups/auth.c
-index 9661657fc..b6fec6b98 100644
---- a/cups/auth.c
-+++ b/cups/auth.c
-@@ -1043,11 +1043,6 @@ cups_local_auth(http_t *http) /* I - HTTP connection to server */
- }
- # endif /* HAVE_AUTHORIZATION_H */
-
--# ifdef HAVE_GSSAPI
-- if (cups_auth_find(www_auth, "Negotiate"))
-- return (1);
--# endif /* HAVE_GSSAPI */
--
- # if defined(SO_PEERCRED) && defined(AF_LOCAL)
- /*
- * See if we can authenticate using the peer credentials provided over a
-diff --git a/scheduler/client.c b/scheduler/client.c
-index c2ee8f12a..56797d58d 100644
---- a/scheduler/client.c
-+++ b/scheduler/client.c
-@@ -2109,18 +2109,13 @@ cupsdSendHeader(
- }
- else if (auth_type == CUPSD_AUTH_NEGOTIATE)
- {
--#if defined(SO_PEERCRED) && defined(AF_LOCAL)
-- if (httpAddrFamily(httpGetAddress(con->http)) == AF_LOCAL)
-- strlcpy(auth_str, "PeerCred", sizeof(auth_str));
-- else
--#endif /* SO_PEERCRED && AF_LOCAL */
- strlcpy(auth_str, "Negotiate", sizeof(auth_str));
- }
-
-- if (con->best && auth_type != CUPSD_AUTH_NEGOTIATE && !con->is_browser && !_cups_strcasecmp(httpGetHostname(con->http, NULL, 0), "localhost"))
-+ if (con->best && !con->is_browser && !_cups_strcasecmp(httpGetHostname(con->http, NULL, 0), "localhost"))
- {
- /*
-- * Add a "trc" (try root certification) parameter for local non-Kerberos
-+ * Add a "trc" (try root certification) parameter for local
- * requests when the request requires system group membership - then the
- * client knows the root certificate can/should be used.
- *
---
-2.30.2
-
Index: upstream_pull_174.patch
===================================================================
--- upstream_pull_174.patch (revision 380)
+++ upstream_pull_174.patch (deleted)
@@ -1,53 +0,0 @@
-From c37d71b1a31d26a4790166e2508822b18934a5c0 Mon Sep 17 00:00:00 2001
-From: Zdenek Dohnal <zdohnal@redhat.com>
-Date: Tue, 13 Apr 2021 15:44:14 +0200
-Subject: [PATCH 1/2] backend/usb-libusb.c: Use 60s timeout for reading at
- backchannel
-
-Some older models malfunction if timeout is too short.
----
- CHANGES.md | 1 +
- backend/usb-libusb.c | 2 +-
- 2 files changed, 2 insertions(+), 1 deletion(-)
-
---- a/backend/usb-libusb.c
-+++ b/backend/usb-libusb.c
-@@ -1704,7 +1704,7 @@ static void *read_thread(void *reference)
- readstatus = libusb_bulk_transfer(g.printer->handle,
- g.printer->read_endp,
- readbuffer, rbytes,
-- &rbytes, 250);
-+ &rbytes, 60000);
- if (readstatus == LIBUSB_SUCCESS && rbytes > 0)
- {
- fprintf(stderr, "DEBUG: Read %d bytes of back-channel data...\n", (int)rbytes);
-
-From 4cb6f6806cdbe040d478b266a1d351b19341dd79 Mon Sep 17 00:00:00 2001
-From: Zdenek Dohnal <zdohnal@redhat.com>
-Date: Tue, 13 Apr 2021 15:47:37 +0200
-Subject: [PATCH 2/2] backend/usb-libusb.c: Revert enforcing read limits
-
-This commit reverts the change introduced by 2.2.12 [1] - its
-implementation caused a regression with Lexmark filters.
-
-[1]
-https://github.com/apple/cups/commit/35e927f83529cd9b4bc37bcd418c50e307fced35
----
- CHANGES.md | 1 +
- backend/usb-libusb.c | 3 ++-
- 2 files changed, 3 insertions(+), 1 deletion(-)
-
-diff --git a/backend/usb-libusb.c b/backend/usb-libusb.c
-index fbb0d9d89..89b5182f7 100644
---- a/backend/usb-libusb.c
-+++ b/backend/usb-libusb.c
-@@ -1721,7 +1721,8 @@ static void *read_thread(void *reference)
- * Make sure this loop executes no more than once every 250 miliseconds...
- */
-
-- if ((g.wait_eof || !g.read_thread_stop))
-+ if ((readstatus != LIBUSB_SUCCESS || rbytes == 0) &&
-+ (g.wait_eof || !g.read_thread_stop))
- usleep(250000);
- }
- while (g.wait_eof || !g.read_thread_stop);
OBS-URL: https://build.opensuse.org/request/show/958348
OBS-URL: https://build.opensuse.org/package/show/Printing/cups?expand=0&rev=381
2022-03-03 13:19:05 +01:00
|
|
|
|
* Fixed compilation on Solaris (Issue #293)
|
|
|
|
|
* Fixed and improved German translations (Issue #296, Issue #297)
|
2022-03-04 09:58:18 +01:00
|
|
|
|
- Version upgrade to 2.4rc1:
|
|
|
|
|
CUPS 2.4rc1 is a release candidate for OpenPrinting CUPS 2.4.0,
|
|
|
|
|
which adds two enhancements before the stable release.
|
|
|
|
|
* Added warning and debug messages when loading printers
|
|
|
|
|
if the queue is raw or with driver (Issue #286)
|
|
|
|
|
* Compilation now uses -fstack-protector-strong
|
|
|
|
|
if available (Issue #285)
|
|
|
|
|
- Version upgrade to 2.4b1:
|
|
|
|
|
CUPS 2.4b1 is the beta release for OpenPrinting CUPS 2.4
|
|
|
|
|
which contains several new features such as basic OAuth support,
|
|
|
|
|
support for AirPrint and Mopria clients and support for running
|
|
|
|
|
CUPS as a snap, several deprecations (Kerberos, cups-config),
|
|
|
|
|
removals of old deprecated directives, and many bug fixes.
|
Accepting request 958348 from home:ajoga:branches:openSUSE:Factory
- Version upgrade to 2.4.1
- Dropped patch upstream_pull_174 because it it is included in this release
- Dropped patch cups-2.1.0-cups-systemd-socket.patch because it it is included in this release (https://github.com/OpenPrinting/cups/commit/e96e96b4bd0d4e6f634bbb66b95d6e475501541c)
- Changed upstream source packages signing key (https://github.com/OpenPrinting/cups/discussions/327#discussioncomment-2060579)
- Re-enabled testsuite
* Also removed make check because since upstream change the two target are identical (https://github.com/OpenPrinting/cups/commit/96ba46ebc818b610b0e40cbc9d62ef1dcd3ec9b6#diff-76ed074a9305c04054cdebb9e9aad2d818052b07091de1f20cad0bbac34ffb52R239)
- Changed cups-2.1.0-cups-systemd-socket.patch to accomodate new coding style
- Changed cups-config-libs.orig to accommodate recent code changes (SSL->TLS)
- Changed cups-2.1.0-default-webcontent-path.patch to accommodate code changes
old: Printing/cups
new: home:ajoga:branches:openSUSE:Factory/cups rev None
Index: cups-2.1.0-default-webcontent-path.patch
===================================================================
--- cups-2.1.0-default-webcontent-path.patch (revision 380)
+++ cups-2.1.0-default-webcontent-path.patch (revision 2)
@@ -1,17 +1,21 @@
---- config-scripts/cups-directories.m4.orig 2014-03-21 17:42:53.000000000 +0100
-+++ config-scripts/cups-directories.m4 2015-09-01 11:08:43.000000000 +0200
-@@ -206,11 +206,11 @@ fi
- AC_SUBST(MENUDIR)
+--- config-scripts/cups-directories.m4
++++ config-scripts/cups-directories.m4.orig
+@@ -166,15 +166,15 @@ AS_IF([test "x$menudir" = x], [
+ AC_SUBST([MENUDIR])
# Documentation files
--AC_ARG_WITH(docdir, [ --with-docdir set path for documentation],docdir="$withval",docdir="")
-+AC_ARG_WITH(docdir, [ --with-docdir set path and DocumentRoot directive for web content, default=datadir/cups/webcontent],docdir="$withval",docdir="")
+-AC_ARG_WITH([docdir], AS_HELP_STRING([--with-docdir], [set path for documentation]), [
++AC_ARG_WITH([docdir], AS_HELP_STRING([--with-docdir], [set path and DocumentRoot directive for web content, default=datadir/cups/webcontent]), [
+ docdir="$withval"
+ ], [
+ docdir=""
+ ])
- if test x$docdir = x; then
-- CUPS_DOCROOT="$datadir/doc/cups"
-- docdir="$datadir/doc/cups"
-+ CUPS_DOCROOT="$datadir/cups/webcontent"
-+ docdir="$datadir/cups/webcontent"
- else
- CUPS_DOCROOT="$docdir"
- fi
+ AS_IF([test x$docdir = x], [
+- CUPS_DOCROOT="$datadir/doc/cups"
+- docdir="$datadir/doc/cups"
++ CUPS_DOCROOT="$datadir/cups/webcontent"
++ docdir="$datadir/cups/webcontent"
+ ], [
+ CUPS_DOCROOT="$docdir"
+ ])
Index: cups-config-libs.patch
===================================================================
--- cups-config-libs.patch (revision 380)
+++ cups-config-libs.patch (revision 2)
@@ -4,7 +4,7 @@
# flags for compiler and linker...
CFLAGS=""
LDFLAGS="@EXPORT_LDFLAGS@"
--LIBS="@LIBGSSAPI@ @DNSSDLIBS@ @EXPORT_SSLLIBS@ @LIBZ@ @LIBS@"
+-LIBS="@LIBGSSAPI@ @DNSSDLIBS@ @EXPORT_TLSLIBS@ @LIBZ@ @LIBS@"
+LIBS=""
# Check for local invocation...
Index: cups.changes
===================================================================
--- cups.changes (revision 380)
+++ cups.changes (revision 2)
@@ -1,4 +1,88 @@
-------------------------------------------------------------------
+Tue Mar 1 18:16:11 UTC 2022 - Aurélien Joga <aurelienjoga@gmail.com>
+
+- Version upgrade to 2.4.1:
+ * The default color mode now is now configurable and defaults to the printer's reported default mode (Issue #277)
+ * Configuration script now checks linking for -Wl,-pie flags (Issue #303)
+ * Fixed memory leaks - in testi18n (Issue #313), in cups_enum_dests() (Issue #317), in _cupsEncodeOption() and http_tls_upgrade() (Issue #322)
+ * Fixed missing bracket in de/index.html (Issue #299)
+ * Fixed typos in configuration scripts (Issues #304, #316)
+ * Removed remaining legacy code for RIP_MAX_CACHE environment variable (Issue #323)
+ * Removed deprecated directives from cupsctl and cups-files.conf (Issue #300)
+ * Removed purge-jobs legacy code from CGI scripts and templates (Issue #325)
+ * Added configure option --with-idle-exit-timeout (Issue #294)
+ * Added --with-systemd-timeoutstartsec configure option (Issue #298)
+ * DigestOptions now are applied for MD5 Digest authentication defined by RFC 2069 as well (Issue #287)
+ * Fixed compilation on Solaris (Issue #293)
+ * Fixed and improved German translations (Issue #296, Issue #297)
+ * Added warning and debug messages when loading printers if the queue is raw or with driver (Issue #286)
+ * Compilation now uses -fstack-protector-strong if available (Issue #285)
+ * Added support for CUPS running in a Snapcraft snap.
+ * Added basic OAuth 2.0 client support (Issue #100)
+ * Added support for AirPrint and Mopria clients (Issue #105)
+ * Added configure support for specifying systemd dependencies in the CUPS service file (Issue #144)
+ * Added several features and improvements to ipptool (Issue #153)
+ * Added a JSON output mode for ipptool.
+ * The ipptool command now correctly reports an error when a test file cannot be found.
+ * CUPS library now uses thread safe getpwnam_r and getpwuid_r functions (Issue #274)
+ * Fixed Kerberos authentication for the web interface (Issue #19)
+ * The ZPL sample driver now supports more "standard" label sizes (Issue #70)
+ * Fixed reporting of printer instances when enumerating and when no options are set for the main instance (Issue #71)
+ * Reverted USB read limit enforcement change from CUPS 2.2.12 (Issue #72)
+ * The IPP backend did not return the correct status code when a job was canceled at the printer/server (Issue #74)
+ * The testlang unit test program now loops over all of the available locales by default (Issue #85)
+ * The cupsfilter command now shows error messages when options are used incorrectly (Issue #88)
+ * The PPD functions now treat boolean values as case-insensitive (Issue #106)
+ * Temporary queue names no longer end with an underscore (Issue #110)
+ * The USB backend now runs as root (Issue #121)
+ * Added pkg-config file for libcups (Issue #122)
+ * Fixed a PPD memory leak caused by emulator definitions (Issue #124)
+ * Fixed a DISPLAY bug in ipptool (Issue #139)
+ * The scheduler now includes the [Job N] prefix for job log messages, even when using syslog logging (Issue #154)
+ * Added support for locales using the GB18030 character set (Issue #159)
+ * httpReconnect2 did not reset the socket file descriptor when the TLS negotiation failed (Apple #5907)
+ * httpUpdate did not reset the socket file descriptor when the TLS negotiation failed (Apple #5915)
+ * The IPP backend now retries Validate-Job requests (Issue #132)
+ * Now show better error messages when a driver interface program fails to provide a PPD file (Issue #148)
+ * Added dark mode support to the CUPS web interface (Issue #152)
+ * Added a workaround for Solaris in httpAddrConnect2 (Issue #156)
+ * Fixed an interaction between --remote-admin and --remote-any for the cupsctl command (Issue #158)
+ * Now use a 60 second timeout for reading USB backchannel data (Issue #160)
+ * The USB backend now tries harder to find a serial number (Issue #170)
+ * Fixed @IF(name) handling in cupsd.conf (Apple #5918)
+ * Fixed documentation and added examples for CUPS' limited CGI support (Apple #5940)
+ * Fixed the lpc command prompt (Apple #5946)
+ * Now always pass "localhost" in the Host: header when talking over a domain socket or the loopback interface (Issue #185)
+ * Fixed a job history update issue in the scheduler (Issue #187)
+ * Fixed job-pages-per-set value for duplex print jobs.
+ * Fixed an edge case in ippReadIO to make sure that only complete attributes and values are retained on an error (Issue #195)
+ * Hardened ippReadIO to prevent invalid IPP messages from being propagated (Issue #195, Issue #196)
+ * The scheduler now supports the "everywhere" model directly (Issue #201)
+ * Fixed some IPP Everywhere option mapping problems (Issue #238)
+ * Fixed support for "job-hold-until" with the Restart-Job operation (Issue #250)
+ * Fixed the default color/grayscale presets for IPP Everywhere PPDs (Issue #262)
+ * Fixed support for the 'offline-report' state for all USB backends (Issue #264)
+ * Documentation fixes (Issue #92, Issue #163, Issue #177, Issue #184)
+ * Localization updates (Issue #123, Issue #129, Issue #134, Issue #146, Issue #164)
+ * USB quirk updates (Issue #192, Issue #270, Apple #5766, Apple #5838, Apple #5843, Apple #5867)
+ * Web interface updates (Issue #142, Issue #218)
+ * The ippeveprinter tool now automatically uses an available port.
+ * Fixed several Windows TLS and hashing issues.
+ * Deprecated cups-config (Issue #97)
+ * Deprecated Kerberos (AuthType Negotiate) authentication (Issue #98)
+ * Removed support for the (long deprecated and unused) FontPath, ListenBackLog, LPDConfigFile, KeepAliveTimeout, RIPCache, and SMBConfigFile directives in cupsd.conf and cups-files.conf.
+ * Stubbed out deprecated httpMD5 functions.
+ * Add test for undefined page ranges during printing.
+- Dropped patch upstream_pull_174 because it it is included in this release
+- Dropped patch cups-2.1.0-cups-systemd-socket.patch because it it is included in this release (https://github.com/OpenPrinting/cups/commit/e96e96b4bd0d4e6f634bbb66b95d6e475501541c)
+- Changed upstream source packages signing key (https://github.com/OpenPrinting/cups/discussions/327#discussioncomment-2060579)
+- Re-enabled testsuite
+ * Also removed make check because since upstream change the two target are identical (https://github.com/OpenPrinting/cups/commit/96ba46ebc818b610b0e40cbc9d62ef1dcd3ec9b6#diff-76ed074a9305c04054cdebb9e9aad2d818052b07091de1f20cad0bbac34ffb52R239)
+- Changed cups-2.1.0-cups-systemd-socket.patch to accomodate new coding style
+- Changed cups-config-libs.orig to accommodate recent code changes (SSL->TLS)
+- Changed cups-2.1.0-default-webcontent-path.patch to accommodate code changes
+
+-------------------------------------------------------------------
Tue Feb 1 09:18:27 UTC 2022 - jsmeix@suse.de
- Enhanced harden_cups.service.patch by adding
Index: cups.keyring
===================================================================
Binary files cups.keyring (revision 380) and cups.keyring (revision 2) differ
Index: cups.spec
===================================================================
--- cups.spec (revision 380)
+++ cups.spec (revision 2)
@@ -18,9 +18,7 @@
# Cf. https://rpm.org/user_doc/conditional_builds.html
# by default enable testsuite (i.e. in the 'check' section run make check and make test)
-#bcond_without testsuite
-# disable testsuite for now until https://github.com/OpenPrinting/cups/issues/155 is fixed
-%bcond_with testsuite
+%bcond_without testsuite
# _tmpfilesdir is not defined in systemd macros up to openSUSE 13.2
%{!?_tmpfilesdir: %global _tmpfilesdir /usr/lib/tmpfiles.d }
@@ -29,34 +27,32 @@
# "zypper vcmp 2.3.b99 2.3.0" shows "2.3.b99 is older than 2.3.0" and
# "zypper vcmp 2.2.99 2.3b6" show "2.2.99 is older than 2.3b6" so that
# version upgrades from 2.2.x via 2.3.b* to 2.3.0 work:
-Version: 2.3.3op2
+Version: 2.4.1
Release: 0
Summary: The Common UNIX Printing System
License: Apache-2.0
Group: Hardware/Printing
URL: https://openprinting.github.io/cups
# To get Source0 go to https://github.com/OpenPrinting/cups/releases or use e.g.
-# wget --no-check-certificate -O cups-2.3.3op2-source.tar.gz https://github.com/OpenPrinting/cups/releases/download/v2.3.3op2/cups-2.3.3op2-source.tar.gz
-Source0: https://github.com/OpenPrinting/cups/releases/download/v2.3.3op2/cups-2.3.3op2-source.tar.gz
+# wget --no-check-certificate -O cups-2.4.1-source.tar.gz https://github.com/OpenPrinting/cups/releases/download/v2.4.1/cups-2.4.1-source.tar.gz
+Source0: https://github.com/OpenPrinting/cups/releases/download/v2.4.1/cups-2.4.1-source.tar.gz
# To get Source1 go to https://github.com/OpenPrinting/cups/releases or use e.g.
-# wget --no-check-certificate -O cups-2.3.3op2-source.tar.gz.sig https://github.com/OpenPrinting/cups/releases/download/v2.3.3op2/cups-2.3.3op2-source.tar.gz.sig
-Source1: https://github.com/OpenPrinting/cups/releases/download/v2.3.3op2/cups-2.3.3op2-source.tar.gz.sig
-# To get Source2 go to https://www.msweet.org/pgp.html
-# PGP Fingerprint: 845464660B686AAB36540B6F999559A027815955
+# wget --no-check-certificate -O cups-2.4.1-source.tar.gz.sig https://github.com/OpenPrinting/cups/releases/download/v2.4.1/cups-2.4.1-source.tar.gz.sig
+Source1: https://github.com/OpenPrinting/cups/releases/download/v2.4.1/cups-2.4.1-source.tar.gz.sig
+# To get Source2 use gpg --keyserver keys.openpgp.org --recv-keys 7082A0A50A2E92640F3880E0E4522DCC9B246FF7
+# See https://github.com/OpenPrinting/cups/discussions/327#discussioncomment-2060579
+# PGP Fingerprint: 7082A0A50A2E92640F3880E0E4522DCC9B246FF7
Source2: cups.keyring
# To manually verify Source0 with Source1 and Source2 do e.g.
# gpg --import cups.keyring
-# gpg --list-keys | grep -1 'Michael R Sweet' | grep -v 'expired'
-# gpg --verify cups-2.3.3op2-source.tar.gz.sig cups-2.3.3op2-source.tar.gz
+# gpg --list-keys | grep -1 'Zdenek Dohnal'
+# gpg --verify cups-2.4.1-source.tar.gz.sig cups-2.4.1-source.tar.gz
Source102: Postscript.ppd.gz
Source105: Postscript-level1.ppd.gz
Source106: Postscript-level2.ppd.gz
Source108: cups-client.conf
Source109: baselibs.conf
# Patch0...Patch9 is for patches from upstream:
-# Patch1 upstream_pull_174.patch is https://github.com/OpenPrinting/cups/pull/174
-# Use 60s timeout for read_thread, revert read limits
-Patch1: upstream_pull_174.patch
# Source10...Source99 is for sources from SUSE which are intended for upstream:
# Patch10...Patch99 is for patches from SUSE which are intended for upstream:
# Patch10 cups-2.1.0-choose-uri-template.patch adds 'smb://...' URIs to templates/choose-uri.tmpl:
@@ -66,8 +62,6 @@
# because the files of the CUPS web content are no documentation, see CUPS STR #3578
# and http://bugzilla.novell.com/show_bug.cgi?id=546023#c6 and subsequent comments:
Patch11: cups-2.1.0-default-webcontent-path.patch
-# Patch12 cups-2.1.0-cups-systemd-socket.patch Use systemd socket activation properly:
-Patch12: cups-2.1.0-cups-systemd-socket.patch
# Patch100...Patch999 is for private patches from SUSE which are not intended for upstream:
# Patch100 cups-pam.diff adds conf/pam.suse regarding support for PAM for SUSE:
Patch100: cups-pam.diff
@@ -83,9 +77,9 @@
Patch103: cups-1.4-do_not_strip_recommended_from_PPDs.patch
# Patch104 cups-config-libs.patch fixes option --libs in cups-config script:
Patch104: cups-config-libs.patch
-# Patch106 Fixes web UI Kerberos authentication (bsc#1175960)
-Patch106: fix-negotiate-authentication-between-CGIs-and-scheduler.patch
Patch107: harden_cups.service.patch
+# Patch108 downgrades the autoconf requirement to the autoconf available in tumbleweed as of writing
+Patch108: downgrade-autoconf-requirement.patch
# Build Requirements:
BuildRequires: dbus-1-devel
BuildRequires: fdupes
@@ -280,9 +274,6 @@
%prep
%setup -q
# Patch0...Patch9 is for patches from upstream:
-# Patch1 upstream_pull_174.patch is https://github.com/OpenPrinting/cups/pull/174
-# Use 60s timeout for read_thread, revert read limits
-%patch1 -p1
# Patch10...Patch99 is for patches from SUSE which are intended for upstream:
# Patch10 cups-2.1.0-choose-uri-template.patch adds 'smb://...' URIs to templates/choose-uri.tmpl:
%patch10 -b choose-uri-template.orig
@@ -291,8 +282,6 @@
# because the files of the CUPS web content are no documentation, see CUPS STR #3578
# and http://bugzilla.novell.com/show_bug.cgi?id=546023#c6 and subsequent comments:
%patch11 -b default-webcontent-path.orig
-# Patch12 cups-2.1.0-cups-systemd-socket.patch Use systemd socket activation properly:
-#patch12 -b cups-systemd-socket.orig
# Patch100...Patch999 is for private patches from SUSE which are not intended for upstream:
# Patch100 cups-pam.diff adds conf/pam.suse regarding support for PAM for SUSE:
%patch100 -b cups-pam.orig
@@ -308,9 +297,8 @@
%patch103 -b do_not_strip_recommended_from_PPDs.orig
# Patch104 cups-config-libs.patch fixes option --libs in cups-config script:
%patch104 -b cups-config-libs.orig
-# Patch106 Fixes web UI Kerberos authentication (bsc#1175960)
-%patch106 -p1
%patch107 -p1
+%patch108 -p1
%build
# Remove ".SILENT" rule for verbose build output
@@ -439,8 +427,6 @@
# There appears to be some kind of race condition when running make check and make test
# cf. https://github.com/OpenPrinting/cups/issues/155
# We print all logs for debugging purposes if either testsuite fails
-echo "DEBUG: running make check"
-bash -c 'make %{?_smp_mflags} check; EXIT=$?; if [ $EXIT -ne 0 ]; then cat test/*_log*-$(whoami); fi; exit $EXIT'
echo "DEBUG: running make test"
bash -c 'make %{?_smp_mflags} test; EXIT=$?; if [ $EXIT -ne 0 ]; then cat test/*_log*-$(whoami); fi; exit $EXIT'
%else
@@ -681,6 +667,7 @@
%files devel
%defattr(-,root,root)
+/usr/lib/pkgconfig/cups.pc
%{_includedir}/cups/
%{_libdir}/libcups.so
%{_libdir}/libcupsimage.so
Index: cups-2.4.1-source.tar.gz
===================================================================
Binary file cups-2.4.1-source.tar.gz (revision 2) added
Index: cups-2.4.1-source.tar.gz.sig
===================================================================
Binary file cups-2.4.1-source.tar.gz.sig (revision 2) added
Index: downgrade-autoconf-requirement.patch
===================================================================
--- downgrade-autoconf-requirement.patch (added)
+++ downgrade-autoconf-requirement.patch (revision 2)
@@ -0,0 +1,15 @@
+diff --git a/configure.ac b/configure.ac
+index a8c6c1040..6ace74a8d 100644
+--- a/configure.ac
++++ b/configure.ac
+@@ -9,8 +9,8 @@ dnl Licensed under Apache License v2.0. See the file "LICENSE" for more
+ dnl information.
+ dnl
+
+-dnl We need at least autoconf 2.71...
+-AC_PREREQ([2.71])
++dnl We need at least autoconf 2.69...
++AC_PREREQ([2.69])
+
+ dnl Package name and version...
+ AC_INIT([CUPS],[2.4.1],[https://github.com/openprinting/cups/issues],[cups],[https://openprinting.github.io/cups])
Index: cups-2.1.0-cups-systemd-socket.patch
===================================================================
--- cups-2.1.0-cups-systemd-socket.patch (revision 380)
+++ cups-2.1.0-cups-systemd-socket.patch (deleted)
@@ -1,43 +0,0 @@
---- scheduler/main.c.orig 2015-06-08 20:32:35.000000000 +0200
-+++ scheduler/main.c 2015-09-01 11:19:36.000000000 +0200
-@@ -656,7 +656,15 @@ main(int argc, /* I - Number of comm
-
- #if defined(HAVE_LAUNCHD) || defined(HAVE_SYSTEMD)
- if (OnDemand)
-+ {
- cupsdAddEvent(CUPSD_EVENT_SERVER_STARTED, NULL, NULL, "Scheduler started on demand.");
-+# ifdef HAVE_SYSTEMD
-+ sd_notifyf(0, "READY=1\n"
-+ "STATUS=Scheduler is running...\n"
-+ "MAINPID=%lu",
-+ (unsigned long) getpid());
-+# endif /* HAVE_SYSTEMD */
-+ }
- else
- #endif /* HAVE_LAUNCHD || HAVE_SYSTEMD */
- if (fg)
---- scheduler/org.cups.cupsd.path.in.orig 2014-03-21 15:50:24.000000000 +0100
-+++ scheduler/org.cups.cupsd.path.in 2015-09-01 11:20:37.000000000 +0200
-@@ -3,6 +3,7 @@ Description=CUPS Scheduler
-
- [Path]
- PathExists=@CUPS_CACHEDIR@/org.cups.cupsd
-+PathExistsGlob=@CUPS_REQUESTS@/d*
-
- [Install]
- WantedBy=multi-user.target
---- scheduler/org.cups.cupsd.service.in.orig 2014-10-21 13:54:05.000000000 +0200
-+++ scheduler/org.cups.cupsd.service.in 2015-09-01 11:22:09.000000000 +0200
-@@ -1,10 +1,11 @@
- [Unit]
- Description=CUPS Scheduler
- Documentation=man:cupsd(8)
-+After=network.target
-
- [Service]
- ExecStart=@sbindir@/cupsd -l
--Type=simple
-+Type=notify
-
- [Install]
- Also=org.cups.cupsd.socket org.cups.cupsd.path
Index: cups-2.3.3op2-source.tar.gz
===================================================================
Binary file cups-2.3.3op2-source.tar.gz (revision 380) deleted
Index: cups-2.3.3op2-source.tar.gz.sig
===================================================================
Binary file cups-2.3.3op2-source.tar.gz.sig (revision 380) deleted
Index: fix-negotiate-authentication-between-CGIs-and-scheduler.patch
===================================================================
--- fix-negotiate-authentication-between-CGIs-and-scheduler.patch (revision 380)
+++ fix-negotiate-authentication-between-CGIs-and-scheduler.patch (deleted)
@@ -1,223 +0,0 @@
-From d4521ed0df7e625ccf2bc079bab6f48c46ef9bf9 Mon Sep 17 00:00:00 2001
-From: Samuel Cabrero <scabrero@suse.de>
-Date: Mon, 26 Oct 2020 17:35:22 +0100
-Subject: [PATCH 1/4] Avoid infinite loop in admin.cgi when negotiate is used
-
-SetAuthorizationString with NULL argument sets an empty string.
-
-Related: #5596
-
-Signed-off-by: Samuel Cabrero <scabrero@suse.de>
----
- cups/auth.c | 2 +-
- 1 file changed, 1 insertion(+), 1 deletion(-)
-
-diff --git a/cups/auth.c b/cups/auth.c
-index db45bbba6..f2409350a 100644
---- a/cups/auth.c
-+++ b/cups/auth.c
-@@ -295,7 +295,7 @@ cupsDoAuthentication(
- }
- }
-
-- if (http->authstring)
-+ if (http->authstring && http->authstring[0])
- {
- DEBUG_printf(("1cupsDoAuthentication: authstring=\"%s\".", http->authstring));
-
---
-2.30.2
-
-
-From 61ad7780bc7d0593e3225d088ac6dff31badf801 Mon Sep 17 00:00:00 2001
-From: Samuel Cabrero <scabrero@suse.de>
-Date: Tue, 27 Oct 2020 16:11:41 +0100
-Subject: [PATCH 2/4] Add cups_is_local_connection() to check if connection is
- to localhost
-
-Related: #5596
-
-Signed-off-by: Samuel Cabrero <scabrero@suse.de>
----
- cups/auth.c | 11 ++++++++++-
- 1 file changed, 10 insertions(+), 1 deletion(-)
-
-diff --git a/cups/auth.c b/cups/auth.c
-index f2409350a..d2956438d 100644
---- a/cups/auth.c
-+++ b/cups/auth.c
-@@ -90,6 +90,7 @@ static void cups_gss_printf(OM_uint32 major_status, OM_uint32 minor_status,
- # define cups_gss_printf(major, minor, message)
- # endif /* DEBUG */
- #endif /* HAVE_GSSAPI */
-+static int cups_is_local_connection(http_t *http);
- static int cups_local_auth(http_t *http);
-
-
-@@ -916,6 +917,14 @@ cups_gss_printf(OM_uint32 major_status,/* I - Major status code */
- # endif /* DEBUG */
- #endif /* HAVE_GSSAPI */
-
-+static int /* O - 0 if not a local connection */
-+ /* 1 if local connection */
-+cups_is_local_connection(http_t *http) /* I - HTTP connection to server */
-+{
-+ if (!httpAddrLocalhost(http->hostaddr) && _cups_strcasecmp(http->hostname, "localhost") != 0)
-+ return 0;
-+ return 1;
-+}
-
- /*
- * 'cups_local_auth()' - Get the local authorization certificate if
-@@ -958,7 +967,7 @@ cups_local_auth(http_t *http) /* I - HTTP connection to server */
- * See if we are accessing localhost...
- */
-
-- if (!httpAddrLocalhost(http->hostaddr) && _cups_strcasecmp(http->hostname, "localhost") != 0)
-+ if (!cups_is_local_connection(http))
- {
- DEBUG_puts("8cups_local_auth: Not a local connection!");
- return (1);
---
-2.30.2
-
-
-From f629d079750a86b1b605c285f99c0dea3933ca50 Mon Sep 17 00:00:00 2001
-From: Samuel Cabrero <scabrero@suse.de>
-Date: Tue, 27 Oct 2020 16:23:30 +0100
-Subject: [PATCH 3/4] Try local kerberos ccache credentials only for remote
- servers
-
-If connecting to localhost then proceed to ask the client for the
-authorization using cupsGetPassword2. The get password callback will
-return 401 to the client with WWW-Authenticate: Negotiate.
-
-Fixes: #5596
-
-Signed-off-by: Samuel Cabrero <scabrero@suse.de>
----
- cups/auth.c | 10 ++++++----
- 1 file changed, 6 insertions(+), 4 deletions(-)
-
-diff --git a/cups/auth.c b/cups/auth.c
-index d2956438d..9661657fc 100644
---- a/cups/auth.c
-+++ b/cups/auth.c
-@@ -175,10 +175,10 @@ cupsDoAuthentication(
- DEBUG_printf(("2cupsDoAuthentication: Trying scheme \"%s\"...", scheme));
-
- #ifdef HAVE_GSSAPI
-- if (!_cups_strcasecmp(scheme, "Negotiate"))
-+ if (!_cups_strcasecmp(scheme, "Negotiate") && !cups_is_local_connection(http))
- {
- /*
-- * Kerberos authentication...
-+ * Kerberos authentication to remote server...
- */
-
- int gss_status; /* Auth status */
-@@ -202,7 +202,9 @@ cupsDoAuthentication(
- }
- else
- #endif /* HAVE_GSSAPI */
-- if (_cups_strcasecmp(scheme, "Basic") && _cups_strcasecmp(scheme, "Digest"))
-+ if (_cups_strcasecmp(scheme, "Basic") &&
-+ _cups_strcasecmp(scheme, "Digest") &&
-+ _cups_strcasecmp(scheme, "Negotiate"))
- {
- /*
- * Other schemes not yet supported...
-@@ -216,7 +218,7 @@ cupsDoAuthentication(
- * See if we should retry the current username:password...
- */
-
-- if ((http->digest_tries > 1 || !http->userpass[0]) && (!_cups_strcasecmp(scheme, "Basic") || (!_cups_strcasecmp(scheme, "Digest"))))
-+ if (http->digest_tries > 1 || !http->userpass[0])
- {
- /*
- * Nope - get a new password from the user...
---
-2.30.2
-
-
-From 0563a28b18b21d5574a5e0e38b74246146074bbf Mon Sep 17 00:00:00 2001
-From: Samuel Cabrero <scabrero@suse.de>
-Date: Tue, 27 Oct 2020 16:18:03 +0100
-Subject: [PATCH 4/4] Allow Local authentication for Negotiate
-
-PeerCred is also possible if address family is AF_LOCAL. This will allow
-the CGI programs to generate the authorization from the local
-certificates based on PID also when Negotiate is used for local
-connections:
-
-Client CGI
-Browser <- Remote conn -> admin.cgi <--- Localhost conn ---> Scheduler
- | | |
- + --- HTTP/POST /admin/ --> | |
- | + --- CUPS-Get-Devices ------------> |
- | | |
- | | <-- 401 Unauthorized --------------+
- | | WWW-Authenticate: |
- | | Negotiate, (PeerCred,) Local |
- | | |
- | <-- 401 Unauthorized -----+ |
- | WWW-Authenticate: | |
- | Negotiate | |
- | | |
- | --- HTTP/POST /admin/ --> | |
- | Authorization: + --- IPP CUPS-GetDevices ---------> |
- | Negotiate | Authorization: Local <cert> |
- | | |
-
-Fixes: #5596
-
-Signed-off-by: Samuel Cabrero <scabrero@suse.de>
----
- cups/auth.c | 5 -----
- scheduler/client.c | 9 ++-------
- 2 files changed, 2 insertions(+), 12 deletions(-)
-
-diff --git a/cups/auth.c b/cups/auth.c
-index 9661657fc..b6fec6b98 100644
---- a/cups/auth.c
-+++ b/cups/auth.c
-@@ -1043,11 +1043,6 @@ cups_local_auth(http_t *http) /* I - HTTP connection to server */
- }
- # endif /* HAVE_AUTHORIZATION_H */
-
--# ifdef HAVE_GSSAPI
-- if (cups_auth_find(www_auth, "Negotiate"))
-- return (1);
--# endif /* HAVE_GSSAPI */
--
- # if defined(SO_PEERCRED) && defined(AF_LOCAL)
- /*
- * See if we can authenticate using the peer credentials provided over a
-diff --git a/scheduler/client.c b/scheduler/client.c
-index c2ee8f12a..56797d58d 100644
---- a/scheduler/client.c
-+++ b/scheduler/client.c
-@@ -2109,18 +2109,13 @@ cupsdSendHeader(
- }
- else if (auth_type == CUPSD_AUTH_NEGOTIATE)
- {
--#if defined(SO_PEERCRED) && defined(AF_LOCAL)
-- if (httpAddrFamily(httpGetAddress(con->http)) == AF_LOCAL)
-- strlcpy(auth_str, "PeerCred", sizeof(auth_str));
-- else
--#endif /* SO_PEERCRED && AF_LOCAL */
- strlcpy(auth_str, "Negotiate", sizeof(auth_str));
- }
-
-- if (con->best && auth_type != CUPSD_AUTH_NEGOTIATE && !con->is_browser && !_cups_strcasecmp(httpGetHostname(con->http, NULL, 0), "localhost"))
-+ if (con->best && !con->is_browser && !_cups_strcasecmp(httpGetHostname(con->http, NULL, 0), "localhost"))
- {
- /*
-- * Add a "trc" (try root certification) parameter for local non-Kerberos
-+ * Add a "trc" (try root certification) parameter for local
- * requests when the request requires system group membership - then the
- * client knows the root certificate can/should be used.
- *
---
-2.30.2
-
Index: upstream_pull_174.patch
===================================================================
--- upstream_pull_174.patch (revision 380)
+++ upstream_pull_174.patch (deleted)
@@ -1,53 +0,0 @@
-From c37d71b1a31d26a4790166e2508822b18934a5c0 Mon Sep 17 00:00:00 2001
-From: Zdenek Dohnal <zdohnal@redhat.com>
-Date: Tue, 13 Apr 2021 15:44:14 +0200
-Subject: [PATCH 1/2] backend/usb-libusb.c: Use 60s timeout for reading at
- backchannel
-
-Some older models malfunction if timeout is too short.
----
- CHANGES.md | 1 +
- backend/usb-libusb.c | 2 +-
- 2 files changed, 2 insertions(+), 1 deletion(-)
-
---- a/backend/usb-libusb.c
-+++ b/backend/usb-libusb.c
-@@ -1704,7 +1704,7 @@ static void *read_thread(void *reference)
- readstatus = libusb_bulk_transfer(g.printer->handle,
- g.printer->read_endp,
- readbuffer, rbytes,
-- &rbytes, 250);
-+ &rbytes, 60000);
- if (readstatus == LIBUSB_SUCCESS && rbytes > 0)
- {
- fprintf(stderr, "DEBUG: Read %d bytes of back-channel data...\n", (int)rbytes);
-
-From 4cb6f6806cdbe040d478b266a1d351b19341dd79 Mon Sep 17 00:00:00 2001
-From: Zdenek Dohnal <zdohnal@redhat.com>
-Date: Tue, 13 Apr 2021 15:47:37 +0200
-Subject: [PATCH 2/2] backend/usb-libusb.c: Revert enforcing read limits
-
-This commit reverts the change introduced by 2.2.12 [1] - its
-implementation caused a regression with Lexmark filters.
-
-[1]
-https://github.com/apple/cups/commit/35e927f83529cd9b4bc37bcd418c50e307fced35
----
- CHANGES.md | 1 +
- backend/usb-libusb.c | 3 ++-
- 2 files changed, 3 insertions(+), 1 deletion(-)
-
-diff --git a/backend/usb-libusb.c b/backend/usb-libusb.c
-index fbb0d9d89..89b5182f7 100644
---- a/backend/usb-libusb.c
-+++ b/backend/usb-libusb.c
-@@ -1721,7 +1721,8 @@ static void *read_thread(void *reference)
- * Make sure this loop executes no more than once every 250 miliseconds...
- */
-
-- if ((g.wait_eof || !g.read_thread_stop))
-+ if ((readstatus != LIBUSB_SUCCESS || rbytes == 0) &&
-+ (g.wait_eof || !g.read_thread_stop))
- usleep(250000);
- }
- while (g.wait_eof || !g.read_thread_stop);
OBS-URL: https://build.opensuse.org/request/show/958348
OBS-URL: https://build.opensuse.org/package/show/Printing/cups?expand=0&rev=381
2022-03-03 13:19:05 +01:00
|
|
|
|
* Added support for CUPS running in a Snapcraft snap.
|
|
|
|
|
* Added basic OAuth 2.0 client support (Issue #100)
|
|
|
|
|
* Added support for AirPrint and Mopria clients (Issue #105)
|
2022-03-04 09:58:18 +01:00
|
|
|
|
* Added configure support for specifying systemd dependencies
|
|
|
|
|
in the CUPS service file (Issue #144)
|
Accepting request 958348 from home:ajoga:branches:openSUSE:Factory
- Version upgrade to 2.4.1
- Dropped patch upstream_pull_174 because it it is included in this release
- Dropped patch cups-2.1.0-cups-systemd-socket.patch because it it is included in this release (https://github.com/OpenPrinting/cups/commit/e96e96b4bd0d4e6f634bbb66b95d6e475501541c)
- Changed upstream source packages signing key (https://github.com/OpenPrinting/cups/discussions/327#discussioncomment-2060579)
- Re-enabled testsuite
* Also removed make check because since upstream change the two target are identical (https://github.com/OpenPrinting/cups/commit/96ba46ebc818b610b0e40cbc9d62ef1dcd3ec9b6#diff-76ed074a9305c04054cdebb9e9aad2d818052b07091de1f20cad0bbac34ffb52R239)
- Changed cups-2.1.0-cups-systemd-socket.patch to accomodate new coding style
- Changed cups-config-libs.orig to accommodate recent code changes (SSL->TLS)
- Changed cups-2.1.0-default-webcontent-path.patch to accommodate code changes
old: Printing/cups
new: home:ajoga:branches:openSUSE:Factory/cups rev None
Index: cups-2.1.0-default-webcontent-path.patch
===================================================================
--- cups-2.1.0-default-webcontent-path.patch (revision 380)
+++ cups-2.1.0-default-webcontent-path.patch (revision 2)
@@ -1,17 +1,21 @@
---- config-scripts/cups-directories.m4.orig 2014-03-21 17:42:53.000000000 +0100
-+++ config-scripts/cups-directories.m4 2015-09-01 11:08:43.000000000 +0200
-@@ -206,11 +206,11 @@ fi
- AC_SUBST(MENUDIR)
+--- config-scripts/cups-directories.m4
++++ config-scripts/cups-directories.m4.orig
+@@ -166,15 +166,15 @@ AS_IF([test "x$menudir" = x], [
+ AC_SUBST([MENUDIR])
# Documentation files
--AC_ARG_WITH(docdir, [ --with-docdir set path for documentation],docdir="$withval",docdir="")
-+AC_ARG_WITH(docdir, [ --with-docdir set path and DocumentRoot directive for web content, default=datadir/cups/webcontent],docdir="$withval",docdir="")
+-AC_ARG_WITH([docdir], AS_HELP_STRING([--with-docdir], [set path for documentation]), [
++AC_ARG_WITH([docdir], AS_HELP_STRING([--with-docdir], [set path and DocumentRoot directive for web content, default=datadir/cups/webcontent]), [
+ docdir="$withval"
+ ], [
+ docdir=""
+ ])
- if test x$docdir = x; then
-- CUPS_DOCROOT="$datadir/doc/cups"
-- docdir="$datadir/doc/cups"
-+ CUPS_DOCROOT="$datadir/cups/webcontent"
-+ docdir="$datadir/cups/webcontent"
- else
- CUPS_DOCROOT="$docdir"
- fi
+ AS_IF([test x$docdir = x], [
+- CUPS_DOCROOT="$datadir/doc/cups"
+- docdir="$datadir/doc/cups"
++ CUPS_DOCROOT="$datadir/cups/webcontent"
++ docdir="$datadir/cups/webcontent"
+ ], [
+ CUPS_DOCROOT="$docdir"
+ ])
Index: cups-config-libs.patch
===================================================================
--- cups-config-libs.patch (revision 380)
+++ cups-config-libs.patch (revision 2)
@@ -4,7 +4,7 @@
# flags for compiler and linker...
CFLAGS=""
LDFLAGS="@EXPORT_LDFLAGS@"
--LIBS="@LIBGSSAPI@ @DNSSDLIBS@ @EXPORT_SSLLIBS@ @LIBZ@ @LIBS@"
+-LIBS="@LIBGSSAPI@ @DNSSDLIBS@ @EXPORT_TLSLIBS@ @LIBZ@ @LIBS@"
+LIBS=""
# Check for local invocation...
Index: cups.changes
===================================================================
--- cups.changes (revision 380)
+++ cups.changes (revision 2)
@@ -1,4 +1,88 @@
-------------------------------------------------------------------
+Tue Mar 1 18:16:11 UTC 2022 - Aurélien Joga <aurelienjoga@gmail.com>
+
+- Version upgrade to 2.4.1:
+ * The default color mode now is now configurable and defaults to the printer's reported default mode (Issue #277)
+ * Configuration script now checks linking for -Wl,-pie flags (Issue #303)
+ * Fixed memory leaks - in testi18n (Issue #313), in cups_enum_dests() (Issue #317), in _cupsEncodeOption() and http_tls_upgrade() (Issue #322)
+ * Fixed missing bracket in de/index.html (Issue #299)
+ * Fixed typos in configuration scripts (Issues #304, #316)
+ * Removed remaining legacy code for RIP_MAX_CACHE environment variable (Issue #323)
+ * Removed deprecated directives from cupsctl and cups-files.conf (Issue #300)
+ * Removed purge-jobs legacy code from CGI scripts and templates (Issue #325)
+ * Added configure option --with-idle-exit-timeout (Issue #294)
+ * Added --with-systemd-timeoutstartsec configure option (Issue #298)
+ * DigestOptions now are applied for MD5 Digest authentication defined by RFC 2069 as well (Issue #287)
+ * Fixed compilation on Solaris (Issue #293)
+ * Fixed and improved German translations (Issue #296, Issue #297)
+ * Added warning and debug messages when loading printers if the queue is raw or with driver (Issue #286)
+ * Compilation now uses -fstack-protector-strong if available (Issue #285)
+ * Added support for CUPS running in a Snapcraft snap.
+ * Added basic OAuth 2.0 client support (Issue #100)
+ * Added support for AirPrint and Mopria clients (Issue #105)
+ * Added configure support for specifying systemd dependencies in the CUPS service file (Issue #144)
+ * Added several features and improvements to ipptool (Issue #153)
+ * Added a JSON output mode for ipptool.
+ * The ipptool command now correctly reports an error when a test file cannot be found.
+ * CUPS library now uses thread safe getpwnam_r and getpwuid_r functions (Issue #274)
+ * Fixed Kerberos authentication for the web interface (Issue #19)
+ * The ZPL sample driver now supports more "standard" label sizes (Issue #70)
+ * Fixed reporting of printer instances when enumerating and when no options are set for the main instance (Issue #71)
+ * Reverted USB read limit enforcement change from CUPS 2.2.12 (Issue #72)
+ * The IPP backend did not return the correct status code when a job was canceled at the printer/server (Issue #74)
+ * The testlang unit test program now loops over all of the available locales by default (Issue #85)
+ * The cupsfilter command now shows error messages when options are used incorrectly (Issue #88)
+ * The PPD functions now treat boolean values as case-insensitive (Issue #106)
+ * Temporary queue names no longer end with an underscore (Issue #110)
+ * The USB backend now runs as root (Issue #121)
+ * Added pkg-config file for libcups (Issue #122)
+ * Fixed a PPD memory leak caused by emulator definitions (Issue #124)
+ * Fixed a DISPLAY bug in ipptool (Issue #139)
+ * The scheduler now includes the [Job N] prefix for job log messages, even when using syslog logging (Issue #154)
+ * Added support for locales using the GB18030 character set (Issue #159)
+ * httpReconnect2 did not reset the socket file descriptor when the TLS negotiation failed (Apple #5907)
+ * httpUpdate did not reset the socket file descriptor when the TLS negotiation failed (Apple #5915)
+ * The IPP backend now retries Validate-Job requests (Issue #132)
+ * Now show better error messages when a driver interface program fails to provide a PPD file (Issue #148)
+ * Added dark mode support to the CUPS web interface (Issue #152)
+ * Added a workaround for Solaris in httpAddrConnect2 (Issue #156)
+ * Fixed an interaction between --remote-admin and --remote-any for the cupsctl command (Issue #158)
+ * Now use a 60 second timeout for reading USB backchannel data (Issue #160)
+ * The USB backend now tries harder to find a serial number (Issue #170)
+ * Fixed @IF(name) handling in cupsd.conf (Apple #5918)
+ * Fixed documentation and added examples for CUPS' limited CGI support (Apple #5940)
+ * Fixed the lpc command prompt (Apple #5946)
+ * Now always pass "localhost" in the Host: header when talking over a domain socket or the loopback interface (Issue #185)
+ * Fixed a job history update issue in the scheduler (Issue #187)
+ * Fixed job-pages-per-set value for duplex print jobs.
+ * Fixed an edge case in ippReadIO to make sure that only complete attributes and values are retained on an error (Issue #195)
+ * Hardened ippReadIO to prevent invalid IPP messages from being propagated (Issue #195, Issue #196)
+ * The scheduler now supports the "everywhere" model directly (Issue #201)
+ * Fixed some IPP Everywhere option mapping problems (Issue #238)
+ * Fixed support for "job-hold-until" with the Restart-Job operation (Issue #250)
+ * Fixed the default color/grayscale presets for IPP Everywhere PPDs (Issue #262)
+ * Fixed support for the 'offline-report' state for all USB backends (Issue #264)
+ * Documentation fixes (Issue #92, Issue #163, Issue #177, Issue #184)
+ * Localization updates (Issue #123, Issue #129, Issue #134, Issue #146, Issue #164)
+ * USB quirk updates (Issue #192, Issue #270, Apple #5766, Apple #5838, Apple #5843, Apple #5867)
+ * Web interface updates (Issue #142, Issue #218)
+ * The ippeveprinter tool now automatically uses an available port.
+ * Fixed several Windows TLS and hashing issues.
+ * Deprecated cups-config (Issue #97)
+ * Deprecated Kerberos (AuthType Negotiate) authentication (Issue #98)
+ * Removed support for the (long deprecated and unused) FontPath, ListenBackLog, LPDConfigFile, KeepAliveTimeout, RIPCache, and SMBConfigFile directives in cupsd.conf and cups-files.conf.
+ * Stubbed out deprecated httpMD5 functions.
+ * Add test for undefined page ranges during printing.
+- Dropped patch upstream_pull_174 because it it is included in this release
+- Dropped patch cups-2.1.0-cups-systemd-socket.patch because it it is included in this release (https://github.com/OpenPrinting/cups/commit/e96e96b4bd0d4e6f634bbb66b95d6e475501541c)
+- Changed upstream source packages signing key (https://github.com/OpenPrinting/cups/discussions/327#discussioncomment-2060579)
+- Re-enabled testsuite
+ * Also removed make check because since upstream change the two target are identical (https://github.com/OpenPrinting/cups/commit/96ba46ebc818b610b0e40cbc9d62ef1dcd3ec9b6#diff-76ed074a9305c04054cdebb9e9aad2d818052b07091de1f20cad0bbac34ffb52R239)
+- Changed cups-2.1.0-cups-systemd-socket.patch to accomodate new coding style
+- Changed cups-config-libs.orig to accommodate recent code changes (SSL->TLS)
+- Changed cups-2.1.0-default-webcontent-path.patch to accommodate code changes
+
+-------------------------------------------------------------------
Tue Feb 1 09:18:27 UTC 2022 - jsmeix@suse.de
- Enhanced harden_cups.service.patch by adding
Index: cups.keyring
===================================================================
Binary files cups.keyring (revision 380) and cups.keyring (revision 2) differ
Index: cups.spec
===================================================================
--- cups.spec (revision 380)
+++ cups.spec (revision 2)
@@ -18,9 +18,7 @@
# Cf. https://rpm.org/user_doc/conditional_builds.html
# by default enable testsuite (i.e. in the 'check' section run make check and make test)
-#bcond_without testsuite
-# disable testsuite for now until https://github.com/OpenPrinting/cups/issues/155 is fixed
-%bcond_with testsuite
+%bcond_without testsuite
# _tmpfilesdir is not defined in systemd macros up to openSUSE 13.2
%{!?_tmpfilesdir: %global _tmpfilesdir /usr/lib/tmpfiles.d }
@@ -29,34 +27,32 @@
# "zypper vcmp 2.3.b99 2.3.0" shows "2.3.b99 is older than 2.3.0" and
# "zypper vcmp 2.2.99 2.3b6" show "2.2.99 is older than 2.3b6" so that
# version upgrades from 2.2.x via 2.3.b* to 2.3.0 work:
-Version: 2.3.3op2
+Version: 2.4.1
Release: 0
Summary: The Common UNIX Printing System
License: Apache-2.0
Group: Hardware/Printing
URL: https://openprinting.github.io/cups
# To get Source0 go to https://github.com/OpenPrinting/cups/releases or use e.g.
-# wget --no-check-certificate -O cups-2.3.3op2-source.tar.gz https://github.com/OpenPrinting/cups/releases/download/v2.3.3op2/cups-2.3.3op2-source.tar.gz
-Source0: https://github.com/OpenPrinting/cups/releases/download/v2.3.3op2/cups-2.3.3op2-source.tar.gz
+# wget --no-check-certificate -O cups-2.4.1-source.tar.gz https://github.com/OpenPrinting/cups/releases/download/v2.4.1/cups-2.4.1-source.tar.gz
+Source0: https://github.com/OpenPrinting/cups/releases/download/v2.4.1/cups-2.4.1-source.tar.gz
# To get Source1 go to https://github.com/OpenPrinting/cups/releases or use e.g.
-# wget --no-check-certificate -O cups-2.3.3op2-source.tar.gz.sig https://github.com/OpenPrinting/cups/releases/download/v2.3.3op2/cups-2.3.3op2-source.tar.gz.sig
-Source1: https://github.com/OpenPrinting/cups/releases/download/v2.3.3op2/cups-2.3.3op2-source.tar.gz.sig
-# To get Source2 go to https://www.msweet.org/pgp.html
-# PGP Fingerprint: 845464660B686AAB36540B6F999559A027815955
+# wget --no-check-certificate -O cups-2.4.1-source.tar.gz.sig https://github.com/OpenPrinting/cups/releases/download/v2.4.1/cups-2.4.1-source.tar.gz.sig
+Source1: https://github.com/OpenPrinting/cups/releases/download/v2.4.1/cups-2.4.1-source.tar.gz.sig
+# To get Source2 use gpg --keyserver keys.openpgp.org --recv-keys 7082A0A50A2E92640F3880E0E4522DCC9B246FF7
+# See https://github.com/OpenPrinting/cups/discussions/327#discussioncomment-2060579
+# PGP Fingerprint: 7082A0A50A2E92640F3880E0E4522DCC9B246FF7
Source2: cups.keyring
# To manually verify Source0 with Source1 and Source2 do e.g.
# gpg --import cups.keyring
-# gpg --list-keys | grep -1 'Michael R Sweet' | grep -v 'expired'
-# gpg --verify cups-2.3.3op2-source.tar.gz.sig cups-2.3.3op2-source.tar.gz
+# gpg --list-keys | grep -1 'Zdenek Dohnal'
+# gpg --verify cups-2.4.1-source.tar.gz.sig cups-2.4.1-source.tar.gz
Source102: Postscript.ppd.gz
Source105: Postscript-level1.ppd.gz
Source106: Postscript-level2.ppd.gz
Source108: cups-client.conf
Source109: baselibs.conf
# Patch0...Patch9 is for patches from upstream:
-# Patch1 upstream_pull_174.patch is https://github.com/OpenPrinting/cups/pull/174
-# Use 60s timeout for read_thread, revert read limits
-Patch1: upstream_pull_174.patch
# Source10...Source99 is for sources from SUSE which are intended for upstream:
# Patch10...Patch99 is for patches from SUSE which are intended for upstream:
# Patch10 cups-2.1.0-choose-uri-template.patch adds 'smb://...' URIs to templates/choose-uri.tmpl:
@@ -66,8 +62,6 @@
# because the files of the CUPS web content are no documentation, see CUPS STR #3578
# and http://bugzilla.novell.com/show_bug.cgi?id=546023#c6 and subsequent comments:
Patch11: cups-2.1.0-default-webcontent-path.patch
-# Patch12 cups-2.1.0-cups-systemd-socket.patch Use systemd socket activation properly:
-Patch12: cups-2.1.0-cups-systemd-socket.patch
# Patch100...Patch999 is for private patches from SUSE which are not intended for upstream:
# Patch100 cups-pam.diff adds conf/pam.suse regarding support for PAM for SUSE:
Patch100: cups-pam.diff
@@ -83,9 +77,9 @@
Patch103: cups-1.4-do_not_strip_recommended_from_PPDs.patch
# Patch104 cups-config-libs.patch fixes option --libs in cups-config script:
Patch104: cups-config-libs.patch
-# Patch106 Fixes web UI Kerberos authentication (bsc#1175960)
-Patch106: fix-negotiate-authentication-between-CGIs-and-scheduler.patch
Patch107: harden_cups.service.patch
+# Patch108 downgrades the autoconf requirement to the autoconf available in tumbleweed as of writing
+Patch108: downgrade-autoconf-requirement.patch
# Build Requirements:
BuildRequires: dbus-1-devel
BuildRequires: fdupes
@@ -280,9 +274,6 @@
%prep
%setup -q
# Patch0...Patch9 is for patches from upstream:
-# Patch1 upstream_pull_174.patch is https://github.com/OpenPrinting/cups/pull/174
-# Use 60s timeout for read_thread, revert read limits
-%patch1 -p1
# Patch10...Patch99 is for patches from SUSE which are intended for upstream:
# Patch10 cups-2.1.0-choose-uri-template.patch adds 'smb://...' URIs to templates/choose-uri.tmpl:
%patch10 -b choose-uri-template.orig
@@ -291,8 +282,6 @@
# because the files of the CUPS web content are no documentation, see CUPS STR #3578
# and http://bugzilla.novell.com/show_bug.cgi?id=546023#c6 and subsequent comments:
%patch11 -b default-webcontent-path.orig
-# Patch12 cups-2.1.0-cups-systemd-socket.patch Use systemd socket activation properly:
-#patch12 -b cups-systemd-socket.orig
# Patch100...Patch999 is for private patches from SUSE which are not intended for upstream:
# Patch100 cups-pam.diff adds conf/pam.suse regarding support for PAM for SUSE:
%patch100 -b cups-pam.orig
@@ -308,9 +297,8 @@
%patch103 -b do_not_strip_recommended_from_PPDs.orig
# Patch104 cups-config-libs.patch fixes option --libs in cups-config script:
%patch104 -b cups-config-libs.orig
-# Patch106 Fixes web UI Kerberos authentication (bsc#1175960)
-%patch106 -p1
%patch107 -p1
+%patch108 -p1
%build
# Remove ".SILENT" rule for verbose build output
@@ -439,8 +427,6 @@
# There appears to be some kind of race condition when running make check and make test
# cf. https://github.com/OpenPrinting/cups/issues/155
# We print all logs for debugging purposes if either testsuite fails
-echo "DEBUG: running make check"
-bash -c 'make %{?_smp_mflags} check; EXIT=$?; if [ $EXIT -ne 0 ]; then cat test/*_log*-$(whoami); fi; exit $EXIT'
echo "DEBUG: running make test"
bash -c 'make %{?_smp_mflags} test; EXIT=$?; if [ $EXIT -ne 0 ]; then cat test/*_log*-$(whoami); fi; exit $EXIT'
%else
@@ -681,6 +667,7 @@
%files devel
%defattr(-,root,root)
+/usr/lib/pkgconfig/cups.pc
%{_includedir}/cups/
%{_libdir}/libcups.so
%{_libdir}/libcupsimage.so
Index: cups-2.4.1-source.tar.gz
===================================================================
Binary file cups-2.4.1-source.tar.gz (revision 2) added
Index: cups-2.4.1-source.tar.gz.sig
===================================================================
Binary file cups-2.4.1-source.tar.gz.sig (revision 2) added
Index: downgrade-autoconf-requirement.patch
===================================================================
--- downgrade-autoconf-requirement.patch (added)
+++ downgrade-autoconf-requirement.patch (revision 2)
@@ -0,0 +1,15 @@
+diff --git a/configure.ac b/configure.ac
+index a8c6c1040..6ace74a8d 100644
+--- a/configure.ac
++++ b/configure.ac
+@@ -9,8 +9,8 @@ dnl Licensed under Apache License v2.0. See the file "LICENSE" for more
+ dnl information.
+ dnl
+
+-dnl We need at least autoconf 2.71...
+-AC_PREREQ([2.71])
++dnl We need at least autoconf 2.69...
++AC_PREREQ([2.69])
+
+ dnl Package name and version...
+ AC_INIT([CUPS],[2.4.1],[https://github.com/openprinting/cups/issues],[cups],[https://openprinting.github.io/cups])
Index: cups-2.1.0-cups-systemd-socket.patch
===================================================================
--- cups-2.1.0-cups-systemd-socket.patch (revision 380)
+++ cups-2.1.0-cups-systemd-socket.patch (deleted)
@@ -1,43 +0,0 @@
---- scheduler/main.c.orig 2015-06-08 20:32:35.000000000 +0200
-+++ scheduler/main.c 2015-09-01 11:19:36.000000000 +0200
-@@ -656,7 +656,15 @@ main(int argc, /* I - Number of comm
-
- #if defined(HAVE_LAUNCHD) || defined(HAVE_SYSTEMD)
- if (OnDemand)
-+ {
- cupsdAddEvent(CUPSD_EVENT_SERVER_STARTED, NULL, NULL, "Scheduler started on demand.");
-+# ifdef HAVE_SYSTEMD
-+ sd_notifyf(0, "READY=1\n"
-+ "STATUS=Scheduler is running...\n"
-+ "MAINPID=%lu",
-+ (unsigned long) getpid());
-+# endif /* HAVE_SYSTEMD */
-+ }
- else
- #endif /* HAVE_LAUNCHD || HAVE_SYSTEMD */
- if (fg)
---- scheduler/org.cups.cupsd.path.in.orig 2014-03-21 15:50:24.000000000 +0100
-+++ scheduler/org.cups.cupsd.path.in 2015-09-01 11:20:37.000000000 +0200
-@@ -3,6 +3,7 @@ Description=CUPS Scheduler
-
- [Path]
- PathExists=@CUPS_CACHEDIR@/org.cups.cupsd
-+PathExistsGlob=@CUPS_REQUESTS@/d*
-
- [Install]
- WantedBy=multi-user.target
---- scheduler/org.cups.cupsd.service.in.orig 2014-10-21 13:54:05.000000000 +0200
-+++ scheduler/org.cups.cupsd.service.in 2015-09-01 11:22:09.000000000 +0200
-@@ -1,10 +1,11 @@
- [Unit]
- Description=CUPS Scheduler
- Documentation=man:cupsd(8)
-+After=network.target
-
- [Service]
- ExecStart=@sbindir@/cupsd -l
--Type=simple
-+Type=notify
-
- [Install]
- Also=org.cups.cupsd.socket org.cups.cupsd.path
Index: cups-2.3.3op2-source.tar.gz
===================================================================
Binary file cups-2.3.3op2-source.tar.gz (revision 380) deleted
Index: cups-2.3.3op2-source.tar.gz.sig
===================================================================
Binary file cups-2.3.3op2-source.tar.gz.sig (revision 380) deleted
Index: fix-negotiate-authentication-between-CGIs-and-scheduler.patch
===================================================================
--- fix-negotiate-authentication-between-CGIs-and-scheduler.patch (revision 380)
+++ fix-negotiate-authentication-between-CGIs-and-scheduler.patch (deleted)
@@ -1,223 +0,0 @@
-From d4521ed0df7e625ccf2bc079bab6f48c46ef9bf9 Mon Sep 17 00:00:00 2001
-From: Samuel Cabrero <scabrero@suse.de>
-Date: Mon, 26 Oct 2020 17:35:22 +0100
-Subject: [PATCH 1/4] Avoid infinite loop in admin.cgi when negotiate is used
-
-SetAuthorizationString with NULL argument sets an empty string.
-
-Related: #5596
-
-Signed-off-by: Samuel Cabrero <scabrero@suse.de>
----
- cups/auth.c | 2 +-
- 1 file changed, 1 insertion(+), 1 deletion(-)
-
-diff --git a/cups/auth.c b/cups/auth.c
-index db45bbba6..f2409350a 100644
---- a/cups/auth.c
-+++ b/cups/auth.c
-@@ -295,7 +295,7 @@ cupsDoAuthentication(
- }
- }
-
-- if (http->authstring)
-+ if (http->authstring && http->authstring[0])
- {
- DEBUG_printf(("1cupsDoAuthentication: authstring=\"%s\".", http->authstring));
-
---
-2.30.2
-
-
-From 61ad7780bc7d0593e3225d088ac6dff31badf801 Mon Sep 17 00:00:00 2001
-From: Samuel Cabrero <scabrero@suse.de>
-Date: Tue, 27 Oct 2020 16:11:41 +0100
-Subject: [PATCH 2/4] Add cups_is_local_connection() to check if connection is
- to localhost
-
-Related: #5596
-
-Signed-off-by: Samuel Cabrero <scabrero@suse.de>
----
- cups/auth.c | 11 ++++++++++-
- 1 file changed, 10 insertions(+), 1 deletion(-)
-
-diff --git a/cups/auth.c b/cups/auth.c
-index f2409350a..d2956438d 100644
---- a/cups/auth.c
-+++ b/cups/auth.c
-@@ -90,6 +90,7 @@ static void cups_gss_printf(OM_uint32 major_status, OM_uint32 minor_status,
- # define cups_gss_printf(major, minor, message)
- # endif /* DEBUG */
- #endif /* HAVE_GSSAPI */
-+static int cups_is_local_connection(http_t *http);
- static int cups_local_auth(http_t *http);
-
-
-@@ -916,6 +917,14 @@ cups_gss_printf(OM_uint32 major_status,/* I - Major status code */
- # endif /* DEBUG */
- #endif /* HAVE_GSSAPI */
-
-+static int /* O - 0 if not a local connection */
-+ /* 1 if local connection */
-+cups_is_local_connection(http_t *http) /* I - HTTP connection to server */
-+{
-+ if (!httpAddrLocalhost(http->hostaddr) && _cups_strcasecmp(http->hostname, "localhost") != 0)
-+ return 0;
-+ return 1;
-+}
-
- /*
- * 'cups_local_auth()' - Get the local authorization certificate if
-@@ -958,7 +967,7 @@ cups_local_auth(http_t *http) /* I - HTTP connection to server */
- * See if we are accessing localhost...
- */
-
-- if (!httpAddrLocalhost(http->hostaddr) && _cups_strcasecmp(http->hostname, "localhost") != 0)
-+ if (!cups_is_local_connection(http))
- {
- DEBUG_puts("8cups_local_auth: Not a local connection!");
- return (1);
---
-2.30.2
-
-
-From f629d079750a86b1b605c285f99c0dea3933ca50 Mon Sep 17 00:00:00 2001
-From: Samuel Cabrero <scabrero@suse.de>
-Date: Tue, 27 Oct 2020 16:23:30 +0100
-Subject: [PATCH 3/4] Try local kerberos ccache credentials only for remote
- servers
-
-If connecting to localhost then proceed to ask the client for the
-authorization using cupsGetPassword2. The get password callback will
-return 401 to the client with WWW-Authenticate: Negotiate.
-
-Fixes: #5596
-
-Signed-off-by: Samuel Cabrero <scabrero@suse.de>
----
- cups/auth.c | 10 ++++++----
- 1 file changed, 6 insertions(+), 4 deletions(-)
-
-diff --git a/cups/auth.c b/cups/auth.c
-index d2956438d..9661657fc 100644
---- a/cups/auth.c
-+++ b/cups/auth.c
-@@ -175,10 +175,10 @@ cupsDoAuthentication(
- DEBUG_printf(("2cupsDoAuthentication: Trying scheme \"%s\"...", scheme));
-
- #ifdef HAVE_GSSAPI
-- if (!_cups_strcasecmp(scheme, "Negotiate"))
-+ if (!_cups_strcasecmp(scheme, "Negotiate") && !cups_is_local_connection(http))
- {
- /*
-- * Kerberos authentication...
-+ * Kerberos authentication to remote server...
- */
-
- int gss_status; /* Auth status */
-@@ -202,7 +202,9 @@ cupsDoAuthentication(
- }
- else
- #endif /* HAVE_GSSAPI */
-- if (_cups_strcasecmp(scheme, "Basic") && _cups_strcasecmp(scheme, "Digest"))
-+ if (_cups_strcasecmp(scheme, "Basic") &&
-+ _cups_strcasecmp(scheme, "Digest") &&
-+ _cups_strcasecmp(scheme, "Negotiate"))
- {
- /*
- * Other schemes not yet supported...
-@@ -216,7 +218,7 @@ cupsDoAuthentication(
- * See if we should retry the current username:password...
- */
-
-- if ((http->digest_tries > 1 || !http->userpass[0]) && (!_cups_strcasecmp(scheme, "Basic") || (!_cups_strcasecmp(scheme, "Digest"))))
-+ if (http->digest_tries > 1 || !http->userpass[0])
- {
- /*
- * Nope - get a new password from the user...
---
-2.30.2
-
-
-From 0563a28b18b21d5574a5e0e38b74246146074bbf Mon Sep 17 00:00:00 2001
-From: Samuel Cabrero <scabrero@suse.de>
-Date: Tue, 27 Oct 2020 16:18:03 +0100
-Subject: [PATCH 4/4] Allow Local authentication for Negotiate
-
-PeerCred is also possible if address family is AF_LOCAL. This will allow
-the CGI programs to generate the authorization from the local
-certificates based on PID also when Negotiate is used for local
-connections:
-
-Client CGI
-Browser <- Remote conn -> admin.cgi <--- Localhost conn ---> Scheduler
- | | |
- + --- HTTP/POST /admin/ --> | |
- | + --- CUPS-Get-Devices ------------> |
- | | |
- | | <-- 401 Unauthorized --------------+
- | | WWW-Authenticate: |
- | | Negotiate, (PeerCred,) Local |
- | | |
- | <-- 401 Unauthorized -----+ |
- | WWW-Authenticate: | |
- | Negotiate | |
- | | |
- | --- HTTP/POST /admin/ --> | |
- | Authorization: + --- IPP CUPS-GetDevices ---------> |
- | Negotiate | Authorization: Local <cert> |
- | | |
-
-Fixes: #5596
-
-Signed-off-by: Samuel Cabrero <scabrero@suse.de>
----
- cups/auth.c | 5 -----
- scheduler/client.c | 9 ++-------
- 2 files changed, 2 insertions(+), 12 deletions(-)
-
-diff --git a/cups/auth.c b/cups/auth.c
-index 9661657fc..b6fec6b98 100644
---- a/cups/auth.c
-+++ b/cups/auth.c
-@@ -1043,11 +1043,6 @@ cups_local_auth(http_t *http) /* I - HTTP connection to server */
- }
- # endif /* HAVE_AUTHORIZATION_H */
-
--# ifdef HAVE_GSSAPI
-- if (cups_auth_find(www_auth, "Negotiate"))
-- return (1);
--# endif /* HAVE_GSSAPI */
--
- # if defined(SO_PEERCRED) && defined(AF_LOCAL)
- /*
- * See if we can authenticate using the peer credentials provided over a
-diff --git a/scheduler/client.c b/scheduler/client.c
-index c2ee8f12a..56797d58d 100644
---- a/scheduler/client.c
-+++ b/scheduler/client.c
-@@ -2109,18 +2109,13 @@ cupsdSendHeader(
- }
- else if (auth_type == CUPSD_AUTH_NEGOTIATE)
- {
--#if defined(SO_PEERCRED) && defined(AF_LOCAL)
-- if (httpAddrFamily(httpGetAddress(con->http)) == AF_LOCAL)
-- strlcpy(auth_str, "PeerCred", sizeof(auth_str));
-- else
--#endif /* SO_PEERCRED && AF_LOCAL */
- strlcpy(auth_str, "Negotiate", sizeof(auth_str));
- }
-
-- if (con->best && auth_type != CUPSD_AUTH_NEGOTIATE && !con->is_browser && !_cups_strcasecmp(httpGetHostname(con->http, NULL, 0), "localhost"))
-+ if (con->best && !con->is_browser && !_cups_strcasecmp(httpGetHostname(con->http, NULL, 0), "localhost"))
- {
- /*
-- * Add a "trc" (try root certification) parameter for local non-Kerberos
-+ * Add a "trc" (try root certification) parameter for local
- * requests when the request requires system group membership - then the
- * client knows the root certificate can/should be used.
- *
---
-2.30.2
-
Index: upstream_pull_174.patch
===================================================================
--- upstream_pull_174.patch (revision 380)
+++ upstream_pull_174.patch (deleted)
@@ -1,53 +0,0 @@
-From c37d71b1a31d26a4790166e2508822b18934a5c0 Mon Sep 17 00:00:00 2001
-From: Zdenek Dohnal <zdohnal@redhat.com>
-Date: Tue, 13 Apr 2021 15:44:14 +0200
-Subject: [PATCH 1/2] backend/usb-libusb.c: Use 60s timeout for reading at
- backchannel
-
-Some older models malfunction if timeout is too short.
----
- CHANGES.md | 1 +
- backend/usb-libusb.c | 2 +-
- 2 files changed, 2 insertions(+), 1 deletion(-)
-
---- a/backend/usb-libusb.c
-+++ b/backend/usb-libusb.c
-@@ -1704,7 +1704,7 @@ static void *read_thread(void *reference)
- readstatus = libusb_bulk_transfer(g.printer->handle,
- g.printer->read_endp,
- readbuffer, rbytes,
-- &rbytes, 250);
-+ &rbytes, 60000);
- if (readstatus == LIBUSB_SUCCESS && rbytes > 0)
- {
- fprintf(stderr, "DEBUG: Read %d bytes of back-channel data...\n", (int)rbytes);
-
-From 4cb6f6806cdbe040d478b266a1d351b19341dd79 Mon Sep 17 00:00:00 2001
-From: Zdenek Dohnal <zdohnal@redhat.com>
-Date: Tue, 13 Apr 2021 15:47:37 +0200
-Subject: [PATCH 2/2] backend/usb-libusb.c: Revert enforcing read limits
-
-This commit reverts the change introduced by 2.2.12 [1] - its
-implementation caused a regression with Lexmark filters.
-
-[1]
-https://github.com/apple/cups/commit/35e927f83529cd9b4bc37bcd418c50e307fced35
----
- CHANGES.md | 1 +
- backend/usb-libusb.c | 3 ++-
- 2 files changed, 3 insertions(+), 1 deletion(-)
-
-diff --git a/backend/usb-libusb.c b/backend/usb-libusb.c
-index fbb0d9d89..89b5182f7 100644
---- a/backend/usb-libusb.c
-+++ b/backend/usb-libusb.c
-@@ -1721,7 +1721,8 @@ static void *read_thread(void *reference)
- * Make sure this loop executes no more than once every 250 miliseconds...
- */
-
-- if ((g.wait_eof || !g.read_thread_stop))
-+ if ((readstatus != LIBUSB_SUCCESS || rbytes == 0) &&
-+ (g.wait_eof || !g.read_thread_stop))
- usleep(250000);
- }
- while (g.wait_eof || !g.read_thread_stop);
OBS-URL: https://build.opensuse.org/request/show/958348
OBS-URL: https://build.opensuse.org/package/show/Printing/cups?expand=0&rev=381
2022-03-03 13:19:05 +01:00
|
|
|
|
* Added several features and improvements to ipptool (Issue #153)
|
|
|
|
|
* Added a JSON output mode for ipptool.
|
2022-03-04 09:58:18 +01:00
|
|
|
|
* The ipptool command now correctly reports an error
|
|
|
|
|
when a test file cannot be found.
|
|
|
|
|
* CUPS library now uses thread safe getpwnam_r and getpwuid_r
|
|
|
|
|
functions (Issue #274)
|
Accepting request 958348 from home:ajoga:branches:openSUSE:Factory
- Version upgrade to 2.4.1
- Dropped patch upstream_pull_174 because it it is included in this release
- Dropped patch cups-2.1.0-cups-systemd-socket.patch because it it is included in this release (https://github.com/OpenPrinting/cups/commit/e96e96b4bd0d4e6f634bbb66b95d6e475501541c)
- Changed upstream source packages signing key (https://github.com/OpenPrinting/cups/discussions/327#discussioncomment-2060579)
- Re-enabled testsuite
* Also removed make check because since upstream change the two target are identical (https://github.com/OpenPrinting/cups/commit/96ba46ebc818b610b0e40cbc9d62ef1dcd3ec9b6#diff-76ed074a9305c04054cdebb9e9aad2d818052b07091de1f20cad0bbac34ffb52R239)
- Changed cups-2.1.0-cups-systemd-socket.patch to accomodate new coding style
- Changed cups-config-libs.orig to accommodate recent code changes (SSL->TLS)
- Changed cups-2.1.0-default-webcontent-path.patch to accommodate code changes
old: Printing/cups
new: home:ajoga:branches:openSUSE:Factory/cups rev None
Index: cups-2.1.0-default-webcontent-path.patch
===================================================================
--- cups-2.1.0-default-webcontent-path.patch (revision 380)
+++ cups-2.1.0-default-webcontent-path.patch (revision 2)
@@ -1,17 +1,21 @@
---- config-scripts/cups-directories.m4.orig 2014-03-21 17:42:53.000000000 +0100
-+++ config-scripts/cups-directories.m4 2015-09-01 11:08:43.000000000 +0200
-@@ -206,11 +206,11 @@ fi
- AC_SUBST(MENUDIR)
+--- config-scripts/cups-directories.m4
++++ config-scripts/cups-directories.m4.orig
+@@ -166,15 +166,15 @@ AS_IF([test "x$menudir" = x], [
+ AC_SUBST([MENUDIR])
# Documentation files
--AC_ARG_WITH(docdir, [ --with-docdir set path for documentation],docdir="$withval",docdir="")
-+AC_ARG_WITH(docdir, [ --with-docdir set path and DocumentRoot directive for web content, default=datadir/cups/webcontent],docdir="$withval",docdir="")
+-AC_ARG_WITH([docdir], AS_HELP_STRING([--with-docdir], [set path for documentation]), [
++AC_ARG_WITH([docdir], AS_HELP_STRING([--with-docdir], [set path and DocumentRoot directive for web content, default=datadir/cups/webcontent]), [
+ docdir="$withval"
+ ], [
+ docdir=""
+ ])
- if test x$docdir = x; then
-- CUPS_DOCROOT="$datadir/doc/cups"
-- docdir="$datadir/doc/cups"
-+ CUPS_DOCROOT="$datadir/cups/webcontent"
-+ docdir="$datadir/cups/webcontent"
- else
- CUPS_DOCROOT="$docdir"
- fi
+ AS_IF([test x$docdir = x], [
+- CUPS_DOCROOT="$datadir/doc/cups"
+- docdir="$datadir/doc/cups"
++ CUPS_DOCROOT="$datadir/cups/webcontent"
++ docdir="$datadir/cups/webcontent"
+ ], [
+ CUPS_DOCROOT="$docdir"
+ ])
Index: cups-config-libs.patch
===================================================================
--- cups-config-libs.patch (revision 380)
+++ cups-config-libs.patch (revision 2)
@@ -4,7 +4,7 @@
# flags for compiler and linker...
CFLAGS=""
LDFLAGS="@EXPORT_LDFLAGS@"
--LIBS="@LIBGSSAPI@ @DNSSDLIBS@ @EXPORT_SSLLIBS@ @LIBZ@ @LIBS@"
+-LIBS="@LIBGSSAPI@ @DNSSDLIBS@ @EXPORT_TLSLIBS@ @LIBZ@ @LIBS@"
+LIBS=""
# Check for local invocation...
Index: cups.changes
===================================================================
--- cups.changes (revision 380)
+++ cups.changes (revision 2)
@@ -1,4 +1,88 @@
-------------------------------------------------------------------
+Tue Mar 1 18:16:11 UTC 2022 - Aurélien Joga <aurelienjoga@gmail.com>
+
+- Version upgrade to 2.4.1:
+ * The default color mode now is now configurable and defaults to the printer's reported default mode (Issue #277)
+ * Configuration script now checks linking for -Wl,-pie flags (Issue #303)
+ * Fixed memory leaks - in testi18n (Issue #313), in cups_enum_dests() (Issue #317), in _cupsEncodeOption() and http_tls_upgrade() (Issue #322)
+ * Fixed missing bracket in de/index.html (Issue #299)
+ * Fixed typos in configuration scripts (Issues #304, #316)
+ * Removed remaining legacy code for RIP_MAX_CACHE environment variable (Issue #323)
+ * Removed deprecated directives from cupsctl and cups-files.conf (Issue #300)
+ * Removed purge-jobs legacy code from CGI scripts and templates (Issue #325)
+ * Added configure option --with-idle-exit-timeout (Issue #294)
+ * Added --with-systemd-timeoutstartsec configure option (Issue #298)
+ * DigestOptions now are applied for MD5 Digest authentication defined by RFC 2069 as well (Issue #287)
+ * Fixed compilation on Solaris (Issue #293)
+ * Fixed and improved German translations (Issue #296, Issue #297)
+ * Added warning and debug messages when loading printers if the queue is raw or with driver (Issue #286)
+ * Compilation now uses -fstack-protector-strong if available (Issue #285)
+ * Added support for CUPS running in a Snapcraft snap.
+ * Added basic OAuth 2.0 client support (Issue #100)
+ * Added support for AirPrint and Mopria clients (Issue #105)
+ * Added configure support for specifying systemd dependencies in the CUPS service file (Issue #144)
+ * Added several features and improvements to ipptool (Issue #153)
+ * Added a JSON output mode for ipptool.
+ * The ipptool command now correctly reports an error when a test file cannot be found.
+ * CUPS library now uses thread safe getpwnam_r and getpwuid_r functions (Issue #274)
+ * Fixed Kerberos authentication for the web interface (Issue #19)
+ * The ZPL sample driver now supports more "standard" label sizes (Issue #70)
+ * Fixed reporting of printer instances when enumerating and when no options are set for the main instance (Issue #71)
+ * Reverted USB read limit enforcement change from CUPS 2.2.12 (Issue #72)
+ * The IPP backend did not return the correct status code when a job was canceled at the printer/server (Issue #74)
+ * The testlang unit test program now loops over all of the available locales by default (Issue #85)
+ * The cupsfilter command now shows error messages when options are used incorrectly (Issue #88)
+ * The PPD functions now treat boolean values as case-insensitive (Issue #106)
+ * Temporary queue names no longer end with an underscore (Issue #110)
+ * The USB backend now runs as root (Issue #121)
+ * Added pkg-config file for libcups (Issue #122)
+ * Fixed a PPD memory leak caused by emulator definitions (Issue #124)
+ * Fixed a DISPLAY bug in ipptool (Issue #139)
+ * The scheduler now includes the [Job N] prefix for job log messages, even when using syslog logging (Issue #154)
+ * Added support for locales using the GB18030 character set (Issue #159)
+ * httpReconnect2 did not reset the socket file descriptor when the TLS negotiation failed (Apple #5907)
+ * httpUpdate did not reset the socket file descriptor when the TLS negotiation failed (Apple #5915)
+ * The IPP backend now retries Validate-Job requests (Issue #132)
+ * Now show better error messages when a driver interface program fails to provide a PPD file (Issue #148)
+ * Added dark mode support to the CUPS web interface (Issue #152)
+ * Added a workaround for Solaris in httpAddrConnect2 (Issue #156)
+ * Fixed an interaction between --remote-admin and --remote-any for the cupsctl command (Issue #158)
+ * Now use a 60 second timeout for reading USB backchannel data (Issue #160)
+ * The USB backend now tries harder to find a serial number (Issue #170)
+ * Fixed @IF(name) handling in cupsd.conf (Apple #5918)
+ * Fixed documentation and added examples for CUPS' limited CGI support (Apple #5940)
+ * Fixed the lpc command prompt (Apple #5946)
+ * Now always pass "localhost" in the Host: header when talking over a domain socket or the loopback interface (Issue #185)
+ * Fixed a job history update issue in the scheduler (Issue #187)
+ * Fixed job-pages-per-set value for duplex print jobs.
+ * Fixed an edge case in ippReadIO to make sure that only complete attributes and values are retained on an error (Issue #195)
+ * Hardened ippReadIO to prevent invalid IPP messages from being propagated (Issue #195, Issue #196)
+ * The scheduler now supports the "everywhere" model directly (Issue #201)
+ * Fixed some IPP Everywhere option mapping problems (Issue #238)
+ * Fixed support for "job-hold-until" with the Restart-Job operation (Issue #250)
+ * Fixed the default color/grayscale presets for IPP Everywhere PPDs (Issue #262)
+ * Fixed support for the 'offline-report' state for all USB backends (Issue #264)
+ * Documentation fixes (Issue #92, Issue #163, Issue #177, Issue #184)
+ * Localization updates (Issue #123, Issue #129, Issue #134, Issue #146, Issue #164)
+ * USB quirk updates (Issue #192, Issue #270, Apple #5766, Apple #5838, Apple #5843, Apple #5867)
+ * Web interface updates (Issue #142, Issue #218)
+ * The ippeveprinter tool now automatically uses an available port.
+ * Fixed several Windows TLS and hashing issues.
+ * Deprecated cups-config (Issue #97)
+ * Deprecated Kerberos (AuthType Negotiate) authentication (Issue #98)
+ * Removed support for the (long deprecated and unused) FontPath, ListenBackLog, LPDConfigFile, KeepAliveTimeout, RIPCache, and SMBConfigFile directives in cupsd.conf and cups-files.conf.
+ * Stubbed out deprecated httpMD5 functions.
+ * Add test for undefined page ranges during printing.
+- Dropped patch upstream_pull_174 because it it is included in this release
+- Dropped patch cups-2.1.0-cups-systemd-socket.patch because it it is included in this release (https://github.com/OpenPrinting/cups/commit/e96e96b4bd0d4e6f634bbb66b95d6e475501541c)
+- Changed upstream source packages signing key (https://github.com/OpenPrinting/cups/discussions/327#discussioncomment-2060579)
+- Re-enabled testsuite
+ * Also removed make check because since upstream change the two target are identical (https://github.com/OpenPrinting/cups/commit/96ba46ebc818b610b0e40cbc9d62ef1dcd3ec9b6#diff-76ed074a9305c04054cdebb9e9aad2d818052b07091de1f20cad0bbac34ffb52R239)
+- Changed cups-2.1.0-cups-systemd-socket.patch to accomodate new coding style
+- Changed cups-config-libs.orig to accommodate recent code changes (SSL->TLS)
+- Changed cups-2.1.0-default-webcontent-path.patch to accommodate code changes
+
+-------------------------------------------------------------------
Tue Feb 1 09:18:27 UTC 2022 - jsmeix@suse.de
- Enhanced harden_cups.service.patch by adding
Index: cups.keyring
===================================================================
Binary files cups.keyring (revision 380) and cups.keyring (revision 2) differ
Index: cups.spec
===================================================================
--- cups.spec (revision 380)
+++ cups.spec (revision 2)
@@ -18,9 +18,7 @@
# Cf. https://rpm.org/user_doc/conditional_builds.html
# by default enable testsuite (i.e. in the 'check' section run make check and make test)
-#bcond_without testsuite
-# disable testsuite for now until https://github.com/OpenPrinting/cups/issues/155 is fixed
-%bcond_with testsuite
+%bcond_without testsuite
# _tmpfilesdir is not defined in systemd macros up to openSUSE 13.2
%{!?_tmpfilesdir: %global _tmpfilesdir /usr/lib/tmpfiles.d }
@@ -29,34 +27,32 @@
# "zypper vcmp 2.3.b99 2.3.0" shows "2.3.b99 is older than 2.3.0" and
# "zypper vcmp 2.2.99 2.3b6" show "2.2.99 is older than 2.3b6" so that
# version upgrades from 2.2.x via 2.3.b* to 2.3.0 work:
-Version: 2.3.3op2
+Version: 2.4.1
Release: 0
Summary: The Common UNIX Printing System
License: Apache-2.0
Group: Hardware/Printing
URL: https://openprinting.github.io/cups
# To get Source0 go to https://github.com/OpenPrinting/cups/releases or use e.g.
-# wget --no-check-certificate -O cups-2.3.3op2-source.tar.gz https://github.com/OpenPrinting/cups/releases/download/v2.3.3op2/cups-2.3.3op2-source.tar.gz
-Source0: https://github.com/OpenPrinting/cups/releases/download/v2.3.3op2/cups-2.3.3op2-source.tar.gz
+# wget --no-check-certificate -O cups-2.4.1-source.tar.gz https://github.com/OpenPrinting/cups/releases/download/v2.4.1/cups-2.4.1-source.tar.gz
+Source0: https://github.com/OpenPrinting/cups/releases/download/v2.4.1/cups-2.4.1-source.tar.gz
# To get Source1 go to https://github.com/OpenPrinting/cups/releases or use e.g.
-# wget --no-check-certificate -O cups-2.3.3op2-source.tar.gz.sig https://github.com/OpenPrinting/cups/releases/download/v2.3.3op2/cups-2.3.3op2-source.tar.gz.sig
-Source1: https://github.com/OpenPrinting/cups/releases/download/v2.3.3op2/cups-2.3.3op2-source.tar.gz.sig
-# To get Source2 go to https://www.msweet.org/pgp.html
-# PGP Fingerprint: 845464660B686AAB36540B6F999559A027815955
+# wget --no-check-certificate -O cups-2.4.1-source.tar.gz.sig https://github.com/OpenPrinting/cups/releases/download/v2.4.1/cups-2.4.1-source.tar.gz.sig
+Source1: https://github.com/OpenPrinting/cups/releases/download/v2.4.1/cups-2.4.1-source.tar.gz.sig
+# To get Source2 use gpg --keyserver keys.openpgp.org --recv-keys 7082A0A50A2E92640F3880E0E4522DCC9B246FF7
+# See https://github.com/OpenPrinting/cups/discussions/327#discussioncomment-2060579
+# PGP Fingerprint: 7082A0A50A2E92640F3880E0E4522DCC9B246FF7
Source2: cups.keyring
# To manually verify Source0 with Source1 and Source2 do e.g.
# gpg --import cups.keyring
-# gpg --list-keys | grep -1 'Michael R Sweet' | grep -v 'expired'
-# gpg --verify cups-2.3.3op2-source.tar.gz.sig cups-2.3.3op2-source.tar.gz
+# gpg --list-keys | grep -1 'Zdenek Dohnal'
+# gpg --verify cups-2.4.1-source.tar.gz.sig cups-2.4.1-source.tar.gz
Source102: Postscript.ppd.gz
Source105: Postscript-level1.ppd.gz
Source106: Postscript-level2.ppd.gz
Source108: cups-client.conf
Source109: baselibs.conf
# Patch0...Patch9 is for patches from upstream:
-# Patch1 upstream_pull_174.patch is https://github.com/OpenPrinting/cups/pull/174
-# Use 60s timeout for read_thread, revert read limits
-Patch1: upstream_pull_174.patch
# Source10...Source99 is for sources from SUSE which are intended for upstream:
# Patch10...Patch99 is for patches from SUSE which are intended for upstream:
# Patch10 cups-2.1.0-choose-uri-template.patch adds 'smb://...' URIs to templates/choose-uri.tmpl:
@@ -66,8 +62,6 @@
# because the files of the CUPS web content are no documentation, see CUPS STR #3578
# and http://bugzilla.novell.com/show_bug.cgi?id=546023#c6 and subsequent comments:
Patch11: cups-2.1.0-default-webcontent-path.patch
-# Patch12 cups-2.1.0-cups-systemd-socket.patch Use systemd socket activation properly:
-Patch12: cups-2.1.0-cups-systemd-socket.patch
# Patch100...Patch999 is for private patches from SUSE which are not intended for upstream:
# Patch100 cups-pam.diff adds conf/pam.suse regarding support for PAM for SUSE:
Patch100: cups-pam.diff
@@ -83,9 +77,9 @@
Patch103: cups-1.4-do_not_strip_recommended_from_PPDs.patch
# Patch104 cups-config-libs.patch fixes option --libs in cups-config script:
Patch104: cups-config-libs.patch
-# Patch106 Fixes web UI Kerberos authentication (bsc#1175960)
-Patch106: fix-negotiate-authentication-between-CGIs-and-scheduler.patch
Patch107: harden_cups.service.patch
+# Patch108 downgrades the autoconf requirement to the autoconf available in tumbleweed as of writing
+Patch108: downgrade-autoconf-requirement.patch
# Build Requirements:
BuildRequires: dbus-1-devel
BuildRequires: fdupes
@@ -280,9 +274,6 @@
%prep
%setup -q
# Patch0...Patch9 is for patches from upstream:
-# Patch1 upstream_pull_174.patch is https://github.com/OpenPrinting/cups/pull/174
-# Use 60s timeout for read_thread, revert read limits
-%patch1 -p1
# Patch10...Patch99 is for patches from SUSE which are intended for upstream:
# Patch10 cups-2.1.0-choose-uri-template.patch adds 'smb://...' URIs to templates/choose-uri.tmpl:
%patch10 -b choose-uri-template.orig
@@ -291,8 +282,6 @@
# because the files of the CUPS web content are no documentation, see CUPS STR #3578
# and http://bugzilla.novell.com/show_bug.cgi?id=546023#c6 and subsequent comments:
%patch11 -b default-webcontent-path.orig
-# Patch12 cups-2.1.0-cups-systemd-socket.patch Use systemd socket activation properly:
-#patch12 -b cups-systemd-socket.orig
# Patch100...Patch999 is for private patches from SUSE which are not intended for upstream:
# Patch100 cups-pam.diff adds conf/pam.suse regarding support for PAM for SUSE:
%patch100 -b cups-pam.orig
@@ -308,9 +297,8 @@
%patch103 -b do_not_strip_recommended_from_PPDs.orig
# Patch104 cups-config-libs.patch fixes option --libs in cups-config script:
%patch104 -b cups-config-libs.orig
-# Patch106 Fixes web UI Kerberos authentication (bsc#1175960)
-%patch106 -p1
%patch107 -p1
+%patch108 -p1
%build
# Remove ".SILENT" rule for verbose build output
@@ -439,8 +427,6 @@
# There appears to be some kind of race condition when running make check and make test
# cf. https://github.com/OpenPrinting/cups/issues/155
# We print all logs for debugging purposes if either testsuite fails
-echo "DEBUG: running make check"
-bash -c 'make %{?_smp_mflags} check; EXIT=$?; if [ $EXIT -ne 0 ]; then cat test/*_log*-$(whoami); fi; exit $EXIT'
echo "DEBUG: running make test"
bash -c 'make %{?_smp_mflags} test; EXIT=$?; if [ $EXIT -ne 0 ]; then cat test/*_log*-$(whoami); fi; exit $EXIT'
%else
@@ -681,6 +667,7 @@
%files devel
%defattr(-,root,root)
+/usr/lib/pkgconfig/cups.pc
%{_includedir}/cups/
%{_libdir}/libcups.so
%{_libdir}/libcupsimage.so
Index: cups-2.4.1-source.tar.gz
===================================================================
Binary file cups-2.4.1-source.tar.gz (revision 2) added
Index: cups-2.4.1-source.tar.gz.sig
===================================================================
Binary file cups-2.4.1-source.tar.gz.sig (revision 2) added
Index: downgrade-autoconf-requirement.patch
===================================================================
--- downgrade-autoconf-requirement.patch (added)
+++ downgrade-autoconf-requirement.patch (revision 2)
@@ -0,0 +1,15 @@
+diff --git a/configure.ac b/configure.ac
+index a8c6c1040..6ace74a8d 100644
+--- a/configure.ac
++++ b/configure.ac
+@@ -9,8 +9,8 @@ dnl Licensed under Apache License v2.0. See the file "LICENSE" for more
+ dnl information.
+ dnl
+
+-dnl We need at least autoconf 2.71...
+-AC_PREREQ([2.71])
++dnl We need at least autoconf 2.69...
++AC_PREREQ([2.69])
+
+ dnl Package name and version...
+ AC_INIT([CUPS],[2.4.1],[https://github.com/openprinting/cups/issues],[cups],[https://openprinting.github.io/cups])
Index: cups-2.1.0-cups-systemd-socket.patch
===================================================================
--- cups-2.1.0-cups-systemd-socket.patch (revision 380)
+++ cups-2.1.0-cups-systemd-socket.patch (deleted)
@@ -1,43 +0,0 @@
---- scheduler/main.c.orig 2015-06-08 20:32:35.000000000 +0200
-+++ scheduler/main.c 2015-09-01 11:19:36.000000000 +0200
-@@ -656,7 +656,15 @@ main(int argc, /* I - Number of comm
-
- #if defined(HAVE_LAUNCHD) || defined(HAVE_SYSTEMD)
- if (OnDemand)
-+ {
- cupsdAddEvent(CUPSD_EVENT_SERVER_STARTED, NULL, NULL, "Scheduler started on demand.");
-+# ifdef HAVE_SYSTEMD
-+ sd_notifyf(0, "READY=1\n"
-+ "STATUS=Scheduler is running...\n"
-+ "MAINPID=%lu",
-+ (unsigned long) getpid());
-+# endif /* HAVE_SYSTEMD */
-+ }
- else
- #endif /* HAVE_LAUNCHD || HAVE_SYSTEMD */
- if (fg)
---- scheduler/org.cups.cupsd.path.in.orig 2014-03-21 15:50:24.000000000 +0100
-+++ scheduler/org.cups.cupsd.path.in 2015-09-01 11:20:37.000000000 +0200
-@@ -3,6 +3,7 @@ Description=CUPS Scheduler
-
- [Path]
- PathExists=@CUPS_CACHEDIR@/org.cups.cupsd
-+PathExistsGlob=@CUPS_REQUESTS@/d*
-
- [Install]
- WantedBy=multi-user.target
---- scheduler/org.cups.cupsd.service.in.orig 2014-10-21 13:54:05.000000000 +0200
-+++ scheduler/org.cups.cupsd.service.in 2015-09-01 11:22:09.000000000 +0200
-@@ -1,10 +1,11 @@
- [Unit]
- Description=CUPS Scheduler
- Documentation=man:cupsd(8)
-+After=network.target
-
- [Service]
- ExecStart=@sbindir@/cupsd -l
--Type=simple
-+Type=notify
-
- [Install]
- Also=org.cups.cupsd.socket org.cups.cupsd.path
Index: cups-2.3.3op2-source.tar.gz
===================================================================
Binary file cups-2.3.3op2-source.tar.gz (revision 380) deleted
Index: cups-2.3.3op2-source.tar.gz.sig
===================================================================
Binary file cups-2.3.3op2-source.tar.gz.sig (revision 380) deleted
Index: fix-negotiate-authentication-between-CGIs-and-scheduler.patch
===================================================================
--- fix-negotiate-authentication-between-CGIs-and-scheduler.patch (revision 380)
+++ fix-negotiate-authentication-between-CGIs-and-scheduler.patch (deleted)
@@ -1,223 +0,0 @@
-From d4521ed0df7e625ccf2bc079bab6f48c46ef9bf9 Mon Sep 17 00:00:00 2001
-From: Samuel Cabrero <scabrero@suse.de>
-Date: Mon, 26 Oct 2020 17:35:22 +0100
-Subject: [PATCH 1/4] Avoid infinite loop in admin.cgi when negotiate is used
-
-SetAuthorizationString with NULL argument sets an empty string.
-
-Related: #5596
-
-Signed-off-by: Samuel Cabrero <scabrero@suse.de>
----
- cups/auth.c | 2 +-
- 1 file changed, 1 insertion(+), 1 deletion(-)
-
-diff --git a/cups/auth.c b/cups/auth.c
-index db45bbba6..f2409350a 100644
---- a/cups/auth.c
-+++ b/cups/auth.c
-@@ -295,7 +295,7 @@ cupsDoAuthentication(
- }
- }
-
-- if (http->authstring)
-+ if (http->authstring && http->authstring[0])
- {
- DEBUG_printf(("1cupsDoAuthentication: authstring=\"%s\".", http->authstring));
-
---
-2.30.2
-
-
-From 61ad7780bc7d0593e3225d088ac6dff31badf801 Mon Sep 17 00:00:00 2001
-From: Samuel Cabrero <scabrero@suse.de>
-Date: Tue, 27 Oct 2020 16:11:41 +0100
-Subject: [PATCH 2/4] Add cups_is_local_connection() to check if connection is
- to localhost
-
-Related: #5596
-
-Signed-off-by: Samuel Cabrero <scabrero@suse.de>
----
- cups/auth.c | 11 ++++++++++-
- 1 file changed, 10 insertions(+), 1 deletion(-)
-
-diff --git a/cups/auth.c b/cups/auth.c
-index f2409350a..d2956438d 100644
---- a/cups/auth.c
-+++ b/cups/auth.c
-@@ -90,6 +90,7 @@ static void cups_gss_printf(OM_uint32 major_status, OM_uint32 minor_status,
- # define cups_gss_printf(major, minor, message)
- # endif /* DEBUG */
- #endif /* HAVE_GSSAPI */
-+static int cups_is_local_connection(http_t *http);
- static int cups_local_auth(http_t *http);
-
-
-@@ -916,6 +917,14 @@ cups_gss_printf(OM_uint32 major_status,/* I - Major status code */
- # endif /* DEBUG */
- #endif /* HAVE_GSSAPI */
-
-+static int /* O - 0 if not a local connection */
-+ /* 1 if local connection */
-+cups_is_local_connection(http_t *http) /* I - HTTP connection to server */
-+{
-+ if (!httpAddrLocalhost(http->hostaddr) && _cups_strcasecmp(http->hostname, "localhost") != 0)
-+ return 0;
-+ return 1;
-+}
-
- /*
- * 'cups_local_auth()' - Get the local authorization certificate if
-@@ -958,7 +967,7 @@ cups_local_auth(http_t *http) /* I - HTTP connection to server */
- * See if we are accessing localhost...
- */
-
-- if (!httpAddrLocalhost(http->hostaddr) && _cups_strcasecmp(http->hostname, "localhost") != 0)
-+ if (!cups_is_local_connection(http))
- {
- DEBUG_puts("8cups_local_auth: Not a local connection!");
- return (1);
---
-2.30.2
-
-
-From f629d079750a86b1b605c285f99c0dea3933ca50 Mon Sep 17 00:00:00 2001
-From: Samuel Cabrero <scabrero@suse.de>
-Date: Tue, 27 Oct 2020 16:23:30 +0100
-Subject: [PATCH 3/4] Try local kerberos ccache credentials only for remote
- servers
-
-If connecting to localhost then proceed to ask the client for the
-authorization using cupsGetPassword2. The get password callback will
-return 401 to the client with WWW-Authenticate: Negotiate.
-
-Fixes: #5596
-
-Signed-off-by: Samuel Cabrero <scabrero@suse.de>
----
- cups/auth.c | 10 ++++++----
- 1 file changed, 6 insertions(+), 4 deletions(-)
-
-diff --git a/cups/auth.c b/cups/auth.c
-index d2956438d..9661657fc 100644
---- a/cups/auth.c
-+++ b/cups/auth.c
-@@ -175,10 +175,10 @@ cupsDoAuthentication(
- DEBUG_printf(("2cupsDoAuthentication: Trying scheme \"%s\"...", scheme));
-
- #ifdef HAVE_GSSAPI
-- if (!_cups_strcasecmp(scheme, "Negotiate"))
-+ if (!_cups_strcasecmp(scheme, "Negotiate") && !cups_is_local_connection(http))
- {
- /*
-- * Kerberos authentication...
-+ * Kerberos authentication to remote server...
- */
-
- int gss_status; /* Auth status */
-@@ -202,7 +202,9 @@ cupsDoAuthentication(
- }
- else
- #endif /* HAVE_GSSAPI */
-- if (_cups_strcasecmp(scheme, "Basic") && _cups_strcasecmp(scheme, "Digest"))
-+ if (_cups_strcasecmp(scheme, "Basic") &&
-+ _cups_strcasecmp(scheme, "Digest") &&
-+ _cups_strcasecmp(scheme, "Negotiate"))
- {
- /*
- * Other schemes not yet supported...
-@@ -216,7 +218,7 @@ cupsDoAuthentication(
- * See if we should retry the current username:password...
- */
-
-- if ((http->digest_tries > 1 || !http->userpass[0]) && (!_cups_strcasecmp(scheme, "Basic") || (!_cups_strcasecmp(scheme, "Digest"))))
-+ if (http->digest_tries > 1 || !http->userpass[0])
- {
- /*
- * Nope - get a new password from the user...
---
-2.30.2
-
-
-From 0563a28b18b21d5574a5e0e38b74246146074bbf Mon Sep 17 00:00:00 2001
-From: Samuel Cabrero <scabrero@suse.de>
-Date: Tue, 27 Oct 2020 16:18:03 +0100
-Subject: [PATCH 4/4] Allow Local authentication for Negotiate
-
-PeerCred is also possible if address family is AF_LOCAL. This will allow
-the CGI programs to generate the authorization from the local
-certificates based on PID also when Negotiate is used for local
-connections:
-
-Client CGI
-Browser <- Remote conn -> admin.cgi <--- Localhost conn ---> Scheduler
- | | |
- + --- HTTP/POST /admin/ --> | |
- | + --- CUPS-Get-Devices ------------> |
- | | |
- | | <-- 401 Unauthorized --------------+
- | | WWW-Authenticate: |
- | | Negotiate, (PeerCred,) Local |
- | | |
- | <-- 401 Unauthorized -----+ |
- | WWW-Authenticate: | |
- | Negotiate | |
- | | |
- | --- HTTP/POST /admin/ --> | |
- | Authorization: + --- IPP CUPS-GetDevices ---------> |
- | Negotiate | Authorization: Local <cert> |
- | | |
-
-Fixes: #5596
-
-Signed-off-by: Samuel Cabrero <scabrero@suse.de>
----
- cups/auth.c | 5 -----
- scheduler/client.c | 9 ++-------
- 2 files changed, 2 insertions(+), 12 deletions(-)
-
-diff --git a/cups/auth.c b/cups/auth.c
-index 9661657fc..b6fec6b98 100644
---- a/cups/auth.c
-+++ b/cups/auth.c
-@@ -1043,11 +1043,6 @@ cups_local_auth(http_t *http) /* I - HTTP connection to server */
- }
- # endif /* HAVE_AUTHORIZATION_H */
-
--# ifdef HAVE_GSSAPI
-- if (cups_auth_find(www_auth, "Negotiate"))
-- return (1);
--# endif /* HAVE_GSSAPI */
--
- # if defined(SO_PEERCRED) && defined(AF_LOCAL)
- /*
- * See if we can authenticate using the peer credentials provided over a
-diff --git a/scheduler/client.c b/scheduler/client.c
-index c2ee8f12a..56797d58d 100644
---- a/scheduler/client.c
-+++ b/scheduler/client.c
-@@ -2109,18 +2109,13 @@ cupsdSendHeader(
- }
- else if (auth_type == CUPSD_AUTH_NEGOTIATE)
- {
--#if defined(SO_PEERCRED) && defined(AF_LOCAL)
-- if (httpAddrFamily(httpGetAddress(con->http)) == AF_LOCAL)
-- strlcpy(auth_str, "PeerCred", sizeof(auth_str));
-- else
--#endif /* SO_PEERCRED && AF_LOCAL */
- strlcpy(auth_str, "Negotiate", sizeof(auth_str));
- }
-
-- if (con->best && auth_type != CUPSD_AUTH_NEGOTIATE && !con->is_browser && !_cups_strcasecmp(httpGetHostname(con->http, NULL, 0), "localhost"))
-+ if (con->best && !con->is_browser && !_cups_strcasecmp(httpGetHostname(con->http, NULL, 0), "localhost"))
- {
- /*
-- * Add a "trc" (try root certification) parameter for local non-Kerberos
-+ * Add a "trc" (try root certification) parameter for local
- * requests when the request requires system group membership - then the
- * client knows the root certificate can/should be used.
- *
---
-2.30.2
-
Index: upstream_pull_174.patch
===================================================================
--- upstream_pull_174.patch (revision 380)
+++ upstream_pull_174.patch (deleted)
@@ -1,53 +0,0 @@
-From c37d71b1a31d26a4790166e2508822b18934a5c0 Mon Sep 17 00:00:00 2001
-From: Zdenek Dohnal <zdohnal@redhat.com>
-Date: Tue, 13 Apr 2021 15:44:14 +0200
-Subject: [PATCH 1/2] backend/usb-libusb.c: Use 60s timeout for reading at
- backchannel
-
-Some older models malfunction if timeout is too short.
----
- CHANGES.md | 1 +
- backend/usb-libusb.c | 2 +-
- 2 files changed, 2 insertions(+), 1 deletion(-)
-
---- a/backend/usb-libusb.c
-+++ b/backend/usb-libusb.c
-@@ -1704,7 +1704,7 @@ static void *read_thread(void *reference)
- readstatus = libusb_bulk_transfer(g.printer->handle,
- g.printer->read_endp,
- readbuffer, rbytes,
-- &rbytes, 250);
-+ &rbytes, 60000);
- if (readstatus == LIBUSB_SUCCESS && rbytes > 0)
- {
- fprintf(stderr, "DEBUG: Read %d bytes of back-channel data...\n", (int)rbytes);
-
-From 4cb6f6806cdbe040d478b266a1d351b19341dd79 Mon Sep 17 00:00:00 2001
-From: Zdenek Dohnal <zdohnal@redhat.com>
-Date: Tue, 13 Apr 2021 15:47:37 +0200
-Subject: [PATCH 2/2] backend/usb-libusb.c: Revert enforcing read limits
-
-This commit reverts the change introduced by 2.2.12 [1] - its
-implementation caused a regression with Lexmark filters.
-
-[1]
-https://github.com/apple/cups/commit/35e927f83529cd9b4bc37bcd418c50e307fced35
----
- CHANGES.md | 1 +
- backend/usb-libusb.c | 3 ++-
- 2 files changed, 3 insertions(+), 1 deletion(-)
-
-diff --git a/backend/usb-libusb.c b/backend/usb-libusb.c
-index fbb0d9d89..89b5182f7 100644
---- a/backend/usb-libusb.c
-+++ b/backend/usb-libusb.c
-@@ -1721,7 +1721,8 @@ static void *read_thread(void *reference)
- * Make sure this loop executes no more than once every 250 miliseconds...
- */
-
-- if ((g.wait_eof || !g.read_thread_stop))
-+ if ((readstatus != LIBUSB_SUCCESS || rbytes == 0) &&
-+ (g.wait_eof || !g.read_thread_stop))
- usleep(250000);
- }
- while (g.wait_eof || !g.read_thread_stop);
OBS-URL: https://build.opensuse.org/request/show/958348
OBS-URL: https://build.opensuse.org/package/show/Printing/cups?expand=0&rev=381
2022-03-03 13:19:05 +01:00
|
|
|
|
* Fixed Kerberos authentication for the web interface (Issue #19)
|
2022-03-04 09:58:18 +01:00
|
|
|
|
* The ZPL sample driver now supports more "standard" label
|
|
|
|
|
sizes (Issue #70)
|
|
|
|
|
* Fixed reporting of printer instances when enumerating and when
|
|
|
|
|
no options are set for the main instance (Issue #71)
|
|
|
|
|
* Reverted USB read limit enforcement change
|
|
|
|
|
from CUPS 2.2.12 (Issue #72)
|
|
|
|
|
* The IPP backend did not return the correct status code
|
|
|
|
|
when a job was canceled at the printer/server (Issue #74)
|
|
|
|
|
* The testlang unit test program now loops over all of the
|
|
|
|
|
available locales by default (Issue #85)
|
|
|
|
|
* The cupsfilter command now shows error messages when options
|
|
|
|
|
are used incorrectly (Issue #88)
|
|
|
|
|
* The PPD functions now treat boolean values as
|
|
|
|
|
case-insensitive (Issue #106)
|
|
|
|
|
* Temporary queue names no longer end with an
|
|
|
|
|
underscore (Issue #110)
|
Accepting request 958348 from home:ajoga:branches:openSUSE:Factory
- Version upgrade to 2.4.1
- Dropped patch upstream_pull_174 because it it is included in this release
- Dropped patch cups-2.1.0-cups-systemd-socket.patch because it it is included in this release (https://github.com/OpenPrinting/cups/commit/e96e96b4bd0d4e6f634bbb66b95d6e475501541c)
- Changed upstream source packages signing key (https://github.com/OpenPrinting/cups/discussions/327#discussioncomment-2060579)
- Re-enabled testsuite
* Also removed make check because since upstream change the two target are identical (https://github.com/OpenPrinting/cups/commit/96ba46ebc818b610b0e40cbc9d62ef1dcd3ec9b6#diff-76ed074a9305c04054cdebb9e9aad2d818052b07091de1f20cad0bbac34ffb52R239)
- Changed cups-2.1.0-cups-systemd-socket.patch to accomodate new coding style
- Changed cups-config-libs.orig to accommodate recent code changes (SSL->TLS)
- Changed cups-2.1.0-default-webcontent-path.patch to accommodate code changes
old: Printing/cups
new: home:ajoga:branches:openSUSE:Factory/cups rev None
Index: cups-2.1.0-default-webcontent-path.patch
===================================================================
--- cups-2.1.0-default-webcontent-path.patch (revision 380)
+++ cups-2.1.0-default-webcontent-path.patch (revision 2)
@@ -1,17 +1,21 @@
---- config-scripts/cups-directories.m4.orig 2014-03-21 17:42:53.000000000 +0100
-+++ config-scripts/cups-directories.m4 2015-09-01 11:08:43.000000000 +0200
-@@ -206,11 +206,11 @@ fi
- AC_SUBST(MENUDIR)
+--- config-scripts/cups-directories.m4
++++ config-scripts/cups-directories.m4.orig
+@@ -166,15 +166,15 @@ AS_IF([test "x$menudir" = x], [
+ AC_SUBST([MENUDIR])
# Documentation files
--AC_ARG_WITH(docdir, [ --with-docdir set path for documentation],docdir="$withval",docdir="")
-+AC_ARG_WITH(docdir, [ --with-docdir set path and DocumentRoot directive for web content, default=datadir/cups/webcontent],docdir="$withval",docdir="")
+-AC_ARG_WITH([docdir], AS_HELP_STRING([--with-docdir], [set path for documentation]), [
++AC_ARG_WITH([docdir], AS_HELP_STRING([--with-docdir], [set path and DocumentRoot directive for web content, default=datadir/cups/webcontent]), [
+ docdir="$withval"
+ ], [
+ docdir=""
+ ])
- if test x$docdir = x; then
-- CUPS_DOCROOT="$datadir/doc/cups"
-- docdir="$datadir/doc/cups"
-+ CUPS_DOCROOT="$datadir/cups/webcontent"
-+ docdir="$datadir/cups/webcontent"
- else
- CUPS_DOCROOT="$docdir"
- fi
+ AS_IF([test x$docdir = x], [
+- CUPS_DOCROOT="$datadir/doc/cups"
+- docdir="$datadir/doc/cups"
++ CUPS_DOCROOT="$datadir/cups/webcontent"
++ docdir="$datadir/cups/webcontent"
+ ], [
+ CUPS_DOCROOT="$docdir"
+ ])
Index: cups-config-libs.patch
===================================================================
--- cups-config-libs.patch (revision 380)
+++ cups-config-libs.patch (revision 2)
@@ -4,7 +4,7 @@
# flags for compiler and linker...
CFLAGS=""
LDFLAGS="@EXPORT_LDFLAGS@"
--LIBS="@LIBGSSAPI@ @DNSSDLIBS@ @EXPORT_SSLLIBS@ @LIBZ@ @LIBS@"
+-LIBS="@LIBGSSAPI@ @DNSSDLIBS@ @EXPORT_TLSLIBS@ @LIBZ@ @LIBS@"
+LIBS=""
# Check for local invocation...
Index: cups.changes
===================================================================
--- cups.changes (revision 380)
+++ cups.changes (revision 2)
@@ -1,4 +1,88 @@
-------------------------------------------------------------------
+Tue Mar 1 18:16:11 UTC 2022 - Aurélien Joga <aurelienjoga@gmail.com>
+
+- Version upgrade to 2.4.1:
+ * The default color mode now is now configurable and defaults to the printer's reported default mode (Issue #277)
+ * Configuration script now checks linking for -Wl,-pie flags (Issue #303)
+ * Fixed memory leaks - in testi18n (Issue #313), in cups_enum_dests() (Issue #317), in _cupsEncodeOption() and http_tls_upgrade() (Issue #322)
+ * Fixed missing bracket in de/index.html (Issue #299)
+ * Fixed typos in configuration scripts (Issues #304, #316)
+ * Removed remaining legacy code for RIP_MAX_CACHE environment variable (Issue #323)
+ * Removed deprecated directives from cupsctl and cups-files.conf (Issue #300)
+ * Removed purge-jobs legacy code from CGI scripts and templates (Issue #325)
+ * Added configure option --with-idle-exit-timeout (Issue #294)
+ * Added --with-systemd-timeoutstartsec configure option (Issue #298)
+ * DigestOptions now are applied for MD5 Digest authentication defined by RFC 2069 as well (Issue #287)
+ * Fixed compilation on Solaris (Issue #293)
+ * Fixed and improved German translations (Issue #296, Issue #297)
+ * Added warning and debug messages when loading printers if the queue is raw or with driver (Issue #286)
+ * Compilation now uses -fstack-protector-strong if available (Issue #285)
+ * Added support for CUPS running in a Snapcraft snap.
+ * Added basic OAuth 2.0 client support (Issue #100)
+ * Added support for AirPrint and Mopria clients (Issue #105)
+ * Added configure support for specifying systemd dependencies in the CUPS service file (Issue #144)
+ * Added several features and improvements to ipptool (Issue #153)
+ * Added a JSON output mode for ipptool.
+ * The ipptool command now correctly reports an error when a test file cannot be found.
+ * CUPS library now uses thread safe getpwnam_r and getpwuid_r functions (Issue #274)
+ * Fixed Kerberos authentication for the web interface (Issue #19)
+ * The ZPL sample driver now supports more "standard" label sizes (Issue #70)
+ * Fixed reporting of printer instances when enumerating and when no options are set for the main instance (Issue #71)
+ * Reverted USB read limit enforcement change from CUPS 2.2.12 (Issue #72)
+ * The IPP backend did not return the correct status code when a job was canceled at the printer/server (Issue #74)
+ * The testlang unit test program now loops over all of the available locales by default (Issue #85)
+ * The cupsfilter command now shows error messages when options are used incorrectly (Issue #88)
+ * The PPD functions now treat boolean values as case-insensitive (Issue #106)
+ * Temporary queue names no longer end with an underscore (Issue #110)
+ * The USB backend now runs as root (Issue #121)
+ * Added pkg-config file for libcups (Issue #122)
+ * Fixed a PPD memory leak caused by emulator definitions (Issue #124)
+ * Fixed a DISPLAY bug in ipptool (Issue #139)
+ * The scheduler now includes the [Job N] prefix for job log messages, even when using syslog logging (Issue #154)
+ * Added support for locales using the GB18030 character set (Issue #159)
+ * httpReconnect2 did not reset the socket file descriptor when the TLS negotiation failed (Apple #5907)
+ * httpUpdate did not reset the socket file descriptor when the TLS negotiation failed (Apple #5915)
+ * The IPP backend now retries Validate-Job requests (Issue #132)
+ * Now show better error messages when a driver interface program fails to provide a PPD file (Issue #148)
+ * Added dark mode support to the CUPS web interface (Issue #152)
+ * Added a workaround for Solaris in httpAddrConnect2 (Issue #156)
+ * Fixed an interaction between --remote-admin and --remote-any for the cupsctl command (Issue #158)
+ * Now use a 60 second timeout for reading USB backchannel data (Issue #160)
+ * The USB backend now tries harder to find a serial number (Issue #170)
+ * Fixed @IF(name) handling in cupsd.conf (Apple #5918)
+ * Fixed documentation and added examples for CUPS' limited CGI support (Apple #5940)
+ * Fixed the lpc command prompt (Apple #5946)
+ * Now always pass "localhost" in the Host: header when talking over a domain socket or the loopback interface (Issue #185)
+ * Fixed a job history update issue in the scheduler (Issue #187)
+ * Fixed job-pages-per-set value for duplex print jobs.
+ * Fixed an edge case in ippReadIO to make sure that only complete attributes and values are retained on an error (Issue #195)
+ * Hardened ippReadIO to prevent invalid IPP messages from being propagated (Issue #195, Issue #196)
+ * The scheduler now supports the "everywhere" model directly (Issue #201)
+ * Fixed some IPP Everywhere option mapping problems (Issue #238)
+ * Fixed support for "job-hold-until" with the Restart-Job operation (Issue #250)
+ * Fixed the default color/grayscale presets for IPP Everywhere PPDs (Issue #262)
+ * Fixed support for the 'offline-report' state for all USB backends (Issue #264)
+ * Documentation fixes (Issue #92, Issue #163, Issue #177, Issue #184)
+ * Localization updates (Issue #123, Issue #129, Issue #134, Issue #146, Issue #164)
+ * USB quirk updates (Issue #192, Issue #270, Apple #5766, Apple #5838, Apple #5843, Apple #5867)
+ * Web interface updates (Issue #142, Issue #218)
+ * The ippeveprinter tool now automatically uses an available port.
+ * Fixed several Windows TLS and hashing issues.
+ * Deprecated cups-config (Issue #97)
+ * Deprecated Kerberos (AuthType Negotiate) authentication (Issue #98)
+ * Removed support for the (long deprecated and unused) FontPath, ListenBackLog, LPDConfigFile, KeepAliveTimeout, RIPCache, and SMBConfigFile directives in cupsd.conf and cups-files.conf.
+ * Stubbed out deprecated httpMD5 functions.
+ * Add test for undefined page ranges during printing.
+- Dropped patch upstream_pull_174 because it it is included in this release
+- Dropped patch cups-2.1.0-cups-systemd-socket.patch because it it is included in this release (https://github.com/OpenPrinting/cups/commit/e96e96b4bd0d4e6f634bbb66b95d6e475501541c)
+- Changed upstream source packages signing key (https://github.com/OpenPrinting/cups/discussions/327#discussioncomment-2060579)
+- Re-enabled testsuite
+ * Also removed make check because since upstream change the two target are identical (https://github.com/OpenPrinting/cups/commit/96ba46ebc818b610b0e40cbc9d62ef1dcd3ec9b6#diff-76ed074a9305c04054cdebb9e9aad2d818052b07091de1f20cad0bbac34ffb52R239)
+- Changed cups-2.1.0-cups-systemd-socket.patch to accomodate new coding style
+- Changed cups-config-libs.orig to accommodate recent code changes (SSL->TLS)
+- Changed cups-2.1.0-default-webcontent-path.patch to accommodate code changes
+
+-------------------------------------------------------------------
Tue Feb 1 09:18:27 UTC 2022 - jsmeix@suse.de
- Enhanced harden_cups.service.patch by adding
Index: cups.keyring
===================================================================
Binary files cups.keyring (revision 380) and cups.keyring (revision 2) differ
Index: cups.spec
===================================================================
--- cups.spec (revision 380)
+++ cups.spec (revision 2)
@@ -18,9 +18,7 @@
# Cf. https://rpm.org/user_doc/conditional_builds.html
# by default enable testsuite (i.e. in the 'check' section run make check and make test)
-#bcond_without testsuite
-# disable testsuite for now until https://github.com/OpenPrinting/cups/issues/155 is fixed
-%bcond_with testsuite
+%bcond_without testsuite
# _tmpfilesdir is not defined in systemd macros up to openSUSE 13.2
%{!?_tmpfilesdir: %global _tmpfilesdir /usr/lib/tmpfiles.d }
@@ -29,34 +27,32 @@
# "zypper vcmp 2.3.b99 2.3.0" shows "2.3.b99 is older than 2.3.0" and
# "zypper vcmp 2.2.99 2.3b6" show "2.2.99 is older than 2.3b6" so that
# version upgrades from 2.2.x via 2.3.b* to 2.3.0 work:
-Version: 2.3.3op2
+Version: 2.4.1
Release: 0
Summary: The Common UNIX Printing System
License: Apache-2.0
Group: Hardware/Printing
URL: https://openprinting.github.io/cups
# To get Source0 go to https://github.com/OpenPrinting/cups/releases or use e.g.
-# wget --no-check-certificate -O cups-2.3.3op2-source.tar.gz https://github.com/OpenPrinting/cups/releases/download/v2.3.3op2/cups-2.3.3op2-source.tar.gz
-Source0: https://github.com/OpenPrinting/cups/releases/download/v2.3.3op2/cups-2.3.3op2-source.tar.gz
+# wget --no-check-certificate -O cups-2.4.1-source.tar.gz https://github.com/OpenPrinting/cups/releases/download/v2.4.1/cups-2.4.1-source.tar.gz
+Source0: https://github.com/OpenPrinting/cups/releases/download/v2.4.1/cups-2.4.1-source.tar.gz
# To get Source1 go to https://github.com/OpenPrinting/cups/releases or use e.g.
-# wget --no-check-certificate -O cups-2.3.3op2-source.tar.gz.sig https://github.com/OpenPrinting/cups/releases/download/v2.3.3op2/cups-2.3.3op2-source.tar.gz.sig
-Source1: https://github.com/OpenPrinting/cups/releases/download/v2.3.3op2/cups-2.3.3op2-source.tar.gz.sig
-# To get Source2 go to https://www.msweet.org/pgp.html
-# PGP Fingerprint: 845464660B686AAB36540B6F999559A027815955
+# wget --no-check-certificate -O cups-2.4.1-source.tar.gz.sig https://github.com/OpenPrinting/cups/releases/download/v2.4.1/cups-2.4.1-source.tar.gz.sig
+Source1: https://github.com/OpenPrinting/cups/releases/download/v2.4.1/cups-2.4.1-source.tar.gz.sig
+# To get Source2 use gpg --keyserver keys.openpgp.org --recv-keys 7082A0A50A2E92640F3880E0E4522DCC9B246FF7
+# See https://github.com/OpenPrinting/cups/discussions/327#discussioncomment-2060579
+# PGP Fingerprint: 7082A0A50A2E92640F3880E0E4522DCC9B246FF7
Source2: cups.keyring
# To manually verify Source0 with Source1 and Source2 do e.g.
# gpg --import cups.keyring
-# gpg --list-keys | grep -1 'Michael R Sweet' | grep -v 'expired'
-# gpg --verify cups-2.3.3op2-source.tar.gz.sig cups-2.3.3op2-source.tar.gz
+# gpg --list-keys | grep -1 'Zdenek Dohnal'
+# gpg --verify cups-2.4.1-source.tar.gz.sig cups-2.4.1-source.tar.gz
Source102: Postscript.ppd.gz
Source105: Postscript-level1.ppd.gz
Source106: Postscript-level2.ppd.gz
Source108: cups-client.conf
Source109: baselibs.conf
# Patch0...Patch9 is for patches from upstream:
-# Patch1 upstream_pull_174.patch is https://github.com/OpenPrinting/cups/pull/174
-# Use 60s timeout for read_thread, revert read limits
-Patch1: upstream_pull_174.patch
# Source10...Source99 is for sources from SUSE which are intended for upstream:
# Patch10...Patch99 is for patches from SUSE which are intended for upstream:
# Patch10 cups-2.1.0-choose-uri-template.patch adds 'smb://...' URIs to templates/choose-uri.tmpl:
@@ -66,8 +62,6 @@
# because the files of the CUPS web content are no documentation, see CUPS STR #3578
# and http://bugzilla.novell.com/show_bug.cgi?id=546023#c6 and subsequent comments:
Patch11: cups-2.1.0-default-webcontent-path.patch
-# Patch12 cups-2.1.0-cups-systemd-socket.patch Use systemd socket activation properly:
-Patch12: cups-2.1.0-cups-systemd-socket.patch
# Patch100...Patch999 is for private patches from SUSE which are not intended for upstream:
# Patch100 cups-pam.diff adds conf/pam.suse regarding support for PAM for SUSE:
Patch100: cups-pam.diff
@@ -83,9 +77,9 @@
Patch103: cups-1.4-do_not_strip_recommended_from_PPDs.patch
# Patch104 cups-config-libs.patch fixes option --libs in cups-config script:
Patch104: cups-config-libs.patch
-# Patch106 Fixes web UI Kerberos authentication (bsc#1175960)
-Patch106: fix-negotiate-authentication-between-CGIs-and-scheduler.patch
Patch107: harden_cups.service.patch
+# Patch108 downgrades the autoconf requirement to the autoconf available in tumbleweed as of writing
+Patch108: downgrade-autoconf-requirement.patch
# Build Requirements:
BuildRequires: dbus-1-devel
BuildRequires: fdupes
@@ -280,9 +274,6 @@
%prep
%setup -q
# Patch0...Patch9 is for patches from upstream:
-# Patch1 upstream_pull_174.patch is https://github.com/OpenPrinting/cups/pull/174
-# Use 60s timeout for read_thread, revert read limits
-%patch1 -p1
# Patch10...Patch99 is for patches from SUSE which are intended for upstream:
# Patch10 cups-2.1.0-choose-uri-template.patch adds 'smb://...' URIs to templates/choose-uri.tmpl:
%patch10 -b choose-uri-template.orig
@@ -291,8 +282,6 @@
# because the files of the CUPS web content are no documentation, see CUPS STR #3578
# and http://bugzilla.novell.com/show_bug.cgi?id=546023#c6 and subsequent comments:
%patch11 -b default-webcontent-path.orig
-# Patch12 cups-2.1.0-cups-systemd-socket.patch Use systemd socket activation properly:
-#patch12 -b cups-systemd-socket.orig
# Patch100...Patch999 is for private patches from SUSE which are not intended for upstream:
# Patch100 cups-pam.diff adds conf/pam.suse regarding support for PAM for SUSE:
%patch100 -b cups-pam.orig
@@ -308,9 +297,8 @@
%patch103 -b do_not_strip_recommended_from_PPDs.orig
# Patch104 cups-config-libs.patch fixes option --libs in cups-config script:
%patch104 -b cups-config-libs.orig
-# Patch106 Fixes web UI Kerberos authentication (bsc#1175960)
-%patch106 -p1
%patch107 -p1
+%patch108 -p1
%build
# Remove ".SILENT" rule for verbose build output
@@ -439,8 +427,6 @@
# There appears to be some kind of race condition when running make check and make test
# cf. https://github.com/OpenPrinting/cups/issues/155
# We print all logs for debugging purposes if either testsuite fails
-echo "DEBUG: running make check"
-bash -c 'make %{?_smp_mflags} check; EXIT=$?; if [ $EXIT -ne 0 ]; then cat test/*_log*-$(whoami); fi; exit $EXIT'
echo "DEBUG: running make test"
bash -c 'make %{?_smp_mflags} test; EXIT=$?; if [ $EXIT -ne 0 ]; then cat test/*_log*-$(whoami); fi; exit $EXIT'
%else
@@ -681,6 +667,7 @@
%files devel
%defattr(-,root,root)
+/usr/lib/pkgconfig/cups.pc
%{_includedir}/cups/
%{_libdir}/libcups.so
%{_libdir}/libcupsimage.so
Index: cups-2.4.1-source.tar.gz
===================================================================
Binary file cups-2.4.1-source.tar.gz (revision 2) added
Index: cups-2.4.1-source.tar.gz.sig
===================================================================
Binary file cups-2.4.1-source.tar.gz.sig (revision 2) added
Index: downgrade-autoconf-requirement.patch
===================================================================
--- downgrade-autoconf-requirement.patch (added)
+++ downgrade-autoconf-requirement.patch (revision 2)
@@ -0,0 +1,15 @@
+diff --git a/configure.ac b/configure.ac
+index a8c6c1040..6ace74a8d 100644
+--- a/configure.ac
++++ b/configure.ac
+@@ -9,8 +9,8 @@ dnl Licensed under Apache License v2.0. See the file "LICENSE" for more
+ dnl information.
+ dnl
+
+-dnl We need at least autoconf 2.71...
+-AC_PREREQ([2.71])
++dnl We need at least autoconf 2.69...
++AC_PREREQ([2.69])
+
+ dnl Package name and version...
+ AC_INIT([CUPS],[2.4.1],[https://github.com/openprinting/cups/issues],[cups],[https://openprinting.github.io/cups])
Index: cups-2.1.0-cups-systemd-socket.patch
===================================================================
--- cups-2.1.0-cups-systemd-socket.patch (revision 380)
+++ cups-2.1.0-cups-systemd-socket.patch (deleted)
@@ -1,43 +0,0 @@
---- scheduler/main.c.orig 2015-06-08 20:32:35.000000000 +0200
-+++ scheduler/main.c 2015-09-01 11:19:36.000000000 +0200
-@@ -656,7 +656,15 @@ main(int argc, /* I - Number of comm
-
- #if defined(HAVE_LAUNCHD) || defined(HAVE_SYSTEMD)
- if (OnDemand)
-+ {
- cupsdAddEvent(CUPSD_EVENT_SERVER_STARTED, NULL, NULL, "Scheduler started on demand.");
-+# ifdef HAVE_SYSTEMD
-+ sd_notifyf(0, "READY=1\n"
-+ "STATUS=Scheduler is running...\n"
-+ "MAINPID=%lu",
-+ (unsigned long) getpid());
-+# endif /* HAVE_SYSTEMD */
-+ }
- else
- #endif /* HAVE_LAUNCHD || HAVE_SYSTEMD */
- if (fg)
---- scheduler/org.cups.cupsd.path.in.orig 2014-03-21 15:50:24.000000000 +0100
-+++ scheduler/org.cups.cupsd.path.in 2015-09-01 11:20:37.000000000 +0200
-@@ -3,6 +3,7 @@ Description=CUPS Scheduler
-
- [Path]
- PathExists=@CUPS_CACHEDIR@/org.cups.cupsd
-+PathExistsGlob=@CUPS_REQUESTS@/d*
-
- [Install]
- WantedBy=multi-user.target
---- scheduler/org.cups.cupsd.service.in.orig 2014-10-21 13:54:05.000000000 +0200
-+++ scheduler/org.cups.cupsd.service.in 2015-09-01 11:22:09.000000000 +0200
-@@ -1,10 +1,11 @@
- [Unit]
- Description=CUPS Scheduler
- Documentation=man:cupsd(8)
-+After=network.target
-
- [Service]
- ExecStart=@sbindir@/cupsd -l
--Type=simple
-+Type=notify
-
- [Install]
- Also=org.cups.cupsd.socket org.cups.cupsd.path
Index: cups-2.3.3op2-source.tar.gz
===================================================================
Binary file cups-2.3.3op2-source.tar.gz (revision 380) deleted
Index: cups-2.3.3op2-source.tar.gz.sig
===================================================================
Binary file cups-2.3.3op2-source.tar.gz.sig (revision 380) deleted
Index: fix-negotiate-authentication-between-CGIs-and-scheduler.patch
===================================================================
--- fix-negotiate-authentication-between-CGIs-and-scheduler.patch (revision 380)
+++ fix-negotiate-authentication-between-CGIs-and-scheduler.patch (deleted)
@@ -1,223 +0,0 @@
-From d4521ed0df7e625ccf2bc079bab6f48c46ef9bf9 Mon Sep 17 00:00:00 2001
-From: Samuel Cabrero <scabrero@suse.de>
-Date: Mon, 26 Oct 2020 17:35:22 +0100
-Subject: [PATCH 1/4] Avoid infinite loop in admin.cgi when negotiate is used
-
-SetAuthorizationString with NULL argument sets an empty string.
-
-Related: #5596
-
-Signed-off-by: Samuel Cabrero <scabrero@suse.de>
----
- cups/auth.c | 2 +-
- 1 file changed, 1 insertion(+), 1 deletion(-)
-
-diff --git a/cups/auth.c b/cups/auth.c
-index db45bbba6..f2409350a 100644
---- a/cups/auth.c
-+++ b/cups/auth.c
-@@ -295,7 +295,7 @@ cupsDoAuthentication(
- }
- }
-
-- if (http->authstring)
-+ if (http->authstring && http->authstring[0])
- {
- DEBUG_printf(("1cupsDoAuthentication: authstring=\"%s\".", http->authstring));
-
---
-2.30.2
-
-
-From 61ad7780bc7d0593e3225d088ac6dff31badf801 Mon Sep 17 00:00:00 2001
-From: Samuel Cabrero <scabrero@suse.de>
-Date: Tue, 27 Oct 2020 16:11:41 +0100
-Subject: [PATCH 2/4] Add cups_is_local_connection() to check if connection is
- to localhost
-
-Related: #5596
-
-Signed-off-by: Samuel Cabrero <scabrero@suse.de>
----
- cups/auth.c | 11 ++++++++++-
- 1 file changed, 10 insertions(+), 1 deletion(-)
-
-diff --git a/cups/auth.c b/cups/auth.c
-index f2409350a..d2956438d 100644
---- a/cups/auth.c
-+++ b/cups/auth.c
-@@ -90,6 +90,7 @@ static void cups_gss_printf(OM_uint32 major_status, OM_uint32 minor_status,
- # define cups_gss_printf(major, minor, message)
- # endif /* DEBUG */
- #endif /* HAVE_GSSAPI */
-+static int cups_is_local_connection(http_t *http);
- static int cups_local_auth(http_t *http);
-
-
-@@ -916,6 +917,14 @@ cups_gss_printf(OM_uint32 major_status,/* I - Major status code */
- # endif /* DEBUG */
- #endif /* HAVE_GSSAPI */
-
-+static int /* O - 0 if not a local connection */
-+ /* 1 if local connection */
-+cups_is_local_connection(http_t *http) /* I - HTTP connection to server */
-+{
-+ if (!httpAddrLocalhost(http->hostaddr) && _cups_strcasecmp(http->hostname, "localhost") != 0)
-+ return 0;
-+ return 1;
-+}
-
- /*
- * 'cups_local_auth()' - Get the local authorization certificate if
-@@ -958,7 +967,7 @@ cups_local_auth(http_t *http) /* I - HTTP connection to server */
- * See if we are accessing localhost...
- */
-
-- if (!httpAddrLocalhost(http->hostaddr) && _cups_strcasecmp(http->hostname, "localhost") != 0)
-+ if (!cups_is_local_connection(http))
- {
- DEBUG_puts("8cups_local_auth: Not a local connection!");
- return (1);
---
-2.30.2
-
-
-From f629d079750a86b1b605c285f99c0dea3933ca50 Mon Sep 17 00:00:00 2001
-From: Samuel Cabrero <scabrero@suse.de>
-Date: Tue, 27 Oct 2020 16:23:30 +0100
-Subject: [PATCH 3/4] Try local kerberos ccache credentials only for remote
- servers
-
-If connecting to localhost then proceed to ask the client for the
-authorization using cupsGetPassword2. The get password callback will
-return 401 to the client with WWW-Authenticate: Negotiate.
-
-Fixes: #5596
-
-Signed-off-by: Samuel Cabrero <scabrero@suse.de>
----
- cups/auth.c | 10 ++++++----
- 1 file changed, 6 insertions(+), 4 deletions(-)
-
-diff --git a/cups/auth.c b/cups/auth.c
-index d2956438d..9661657fc 100644
---- a/cups/auth.c
-+++ b/cups/auth.c
-@@ -175,10 +175,10 @@ cupsDoAuthentication(
- DEBUG_printf(("2cupsDoAuthentication: Trying scheme \"%s\"...", scheme));
-
- #ifdef HAVE_GSSAPI
-- if (!_cups_strcasecmp(scheme, "Negotiate"))
-+ if (!_cups_strcasecmp(scheme, "Negotiate") && !cups_is_local_connection(http))
- {
- /*
-- * Kerberos authentication...
-+ * Kerberos authentication to remote server...
- */
-
- int gss_status; /* Auth status */
-@@ -202,7 +202,9 @@ cupsDoAuthentication(
- }
- else
- #endif /* HAVE_GSSAPI */
-- if (_cups_strcasecmp(scheme, "Basic") && _cups_strcasecmp(scheme, "Digest"))
-+ if (_cups_strcasecmp(scheme, "Basic") &&
-+ _cups_strcasecmp(scheme, "Digest") &&
-+ _cups_strcasecmp(scheme, "Negotiate"))
- {
- /*
- * Other schemes not yet supported...
-@@ -216,7 +218,7 @@ cupsDoAuthentication(
- * See if we should retry the current username:password...
- */
-
-- if ((http->digest_tries > 1 || !http->userpass[0]) && (!_cups_strcasecmp(scheme, "Basic") || (!_cups_strcasecmp(scheme, "Digest"))))
-+ if (http->digest_tries > 1 || !http->userpass[0])
- {
- /*
- * Nope - get a new password from the user...
---
-2.30.2
-
-
-From 0563a28b18b21d5574a5e0e38b74246146074bbf Mon Sep 17 00:00:00 2001
-From: Samuel Cabrero <scabrero@suse.de>
-Date: Tue, 27 Oct 2020 16:18:03 +0100
-Subject: [PATCH 4/4] Allow Local authentication for Negotiate
-
-PeerCred is also possible if address family is AF_LOCAL. This will allow
-the CGI programs to generate the authorization from the local
-certificates based on PID also when Negotiate is used for local
-connections:
-
-Client CGI
-Browser <- Remote conn -> admin.cgi <--- Localhost conn ---> Scheduler
- | | |
- + --- HTTP/POST /admin/ --> | |
- | + --- CUPS-Get-Devices ------------> |
- | | |
- | | <-- 401 Unauthorized --------------+
- | | WWW-Authenticate: |
- | | Negotiate, (PeerCred,) Local |
- | | |
- | <-- 401 Unauthorized -----+ |
- | WWW-Authenticate: | |
- | Negotiate | |
- | | |
- | --- HTTP/POST /admin/ --> | |
- | Authorization: + --- IPP CUPS-GetDevices ---------> |
- | Negotiate | Authorization: Local <cert> |
- | | |
-
-Fixes: #5596
-
-Signed-off-by: Samuel Cabrero <scabrero@suse.de>
----
- cups/auth.c | 5 -----
- scheduler/client.c | 9 ++-------
- 2 files changed, 2 insertions(+), 12 deletions(-)
-
-diff --git a/cups/auth.c b/cups/auth.c
-index 9661657fc..b6fec6b98 100644
---- a/cups/auth.c
-+++ b/cups/auth.c
-@@ -1043,11 +1043,6 @@ cups_local_auth(http_t *http) /* I - HTTP connection to server */
- }
- # endif /* HAVE_AUTHORIZATION_H */
-
--# ifdef HAVE_GSSAPI
-- if (cups_auth_find(www_auth, "Negotiate"))
-- return (1);
--# endif /* HAVE_GSSAPI */
--
- # if defined(SO_PEERCRED) && defined(AF_LOCAL)
- /*
- * See if we can authenticate using the peer credentials provided over a
-diff --git a/scheduler/client.c b/scheduler/client.c
-index c2ee8f12a..56797d58d 100644
---- a/scheduler/client.c
-+++ b/scheduler/client.c
-@@ -2109,18 +2109,13 @@ cupsdSendHeader(
- }
- else if (auth_type == CUPSD_AUTH_NEGOTIATE)
- {
--#if defined(SO_PEERCRED) && defined(AF_LOCAL)
-- if (httpAddrFamily(httpGetAddress(con->http)) == AF_LOCAL)
-- strlcpy(auth_str, "PeerCred", sizeof(auth_str));
-- else
--#endif /* SO_PEERCRED && AF_LOCAL */
- strlcpy(auth_str, "Negotiate", sizeof(auth_str));
- }
-
-- if (con->best && auth_type != CUPSD_AUTH_NEGOTIATE && !con->is_browser && !_cups_strcasecmp(httpGetHostname(con->http, NULL, 0), "localhost"))
-+ if (con->best && !con->is_browser && !_cups_strcasecmp(httpGetHostname(con->http, NULL, 0), "localhost"))
- {
- /*
-- * Add a "trc" (try root certification) parameter for local non-Kerberos
-+ * Add a "trc" (try root certification) parameter for local
- * requests when the request requires system group membership - then the
- * client knows the root certificate can/should be used.
- *
---
-2.30.2
-
Index: upstream_pull_174.patch
===================================================================
--- upstream_pull_174.patch (revision 380)
+++ upstream_pull_174.patch (deleted)
@@ -1,53 +0,0 @@
-From c37d71b1a31d26a4790166e2508822b18934a5c0 Mon Sep 17 00:00:00 2001
-From: Zdenek Dohnal <zdohnal@redhat.com>
-Date: Tue, 13 Apr 2021 15:44:14 +0200
-Subject: [PATCH 1/2] backend/usb-libusb.c: Use 60s timeout for reading at
- backchannel
-
-Some older models malfunction if timeout is too short.
----
- CHANGES.md | 1 +
- backend/usb-libusb.c | 2 +-
- 2 files changed, 2 insertions(+), 1 deletion(-)
-
---- a/backend/usb-libusb.c
-+++ b/backend/usb-libusb.c
-@@ -1704,7 +1704,7 @@ static void *read_thread(void *reference)
- readstatus = libusb_bulk_transfer(g.printer->handle,
- g.printer->read_endp,
- readbuffer, rbytes,
-- &rbytes, 250);
-+ &rbytes, 60000);
- if (readstatus == LIBUSB_SUCCESS && rbytes > 0)
- {
- fprintf(stderr, "DEBUG: Read %d bytes of back-channel data...\n", (int)rbytes);
-
-From 4cb6f6806cdbe040d478b266a1d351b19341dd79 Mon Sep 17 00:00:00 2001
-From: Zdenek Dohnal <zdohnal@redhat.com>
-Date: Tue, 13 Apr 2021 15:47:37 +0200
-Subject: [PATCH 2/2] backend/usb-libusb.c: Revert enforcing read limits
-
-This commit reverts the change introduced by 2.2.12 [1] - its
-implementation caused a regression with Lexmark filters.
-
-[1]
-https://github.com/apple/cups/commit/35e927f83529cd9b4bc37bcd418c50e307fced35
----
- CHANGES.md | 1 +
- backend/usb-libusb.c | 3 ++-
- 2 files changed, 3 insertions(+), 1 deletion(-)
-
-diff --git a/backend/usb-libusb.c b/backend/usb-libusb.c
-index fbb0d9d89..89b5182f7 100644
---- a/backend/usb-libusb.c
-+++ b/backend/usb-libusb.c
-@@ -1721,7 +1721,8 @@ static void *read_thread(void *reference)
- * Make sure this loop executes no more than once every 250 miliseconds...
- */
-
-- if ((g.wait_eof || !g.read_thread_stop))
-+ if ((readstatus != LIBUSB_SUCCESS || rbytes == 0) &&
-+ (g.wait_eof || !g.read_thread_stop))
- usleep(250000);
- }
- while (g.wait_eof || !g.read_thread_stop);
OBS-URL: https://build.opensuse.org/request/show/958348
OBS-URL: https://build.opensuse.org/package/show/Printing/cups?expand=0&rev=381
2022-03-03 13:19:05 +01:00
|
|
|
|
* The USB backend now runs as root (Issue #121)
|
|
|
|
|
* Added pkg-config file for libcups (Issue #122)
|
2022-03-04 09:58:18 +01:00
|
|
|
|
* Fixed a PPD memory leak caused by emulator
|
|
|
|
|
definitions (Issue #124)
|
Accepting request 958348 from home:ajoga:branches:openSUSE:Factory
- Version upgrade to 2.4.1
- Dropped patch upstream_pull_174 because it it is included in this release
- Dropped patch cups-2.1.0-cups-systemd-socket.patch because it it is included in this release (https://github.com/OpenPrinting/cups/commit/e96e96b4bd0d4e6f634bbb66b95d6e475501541c)
- Changed upstream source packages signing key (https://github.com/OpenPrinting/cups/discussions/327#discussioncomment-2060579)
- Re-enabled testsuite
* Also removed make check because since upstream change the two target are identical (https://github.com/OpenPrinting/cups/commit/96ba46ebc818b610b0e40cbc9d62ef1dcd3ec9b6#diff-76ed074a9305c04054cdebb9e9aad2d818052b07091de1f20cad0bbac34ffb52R239)
- Changed cups-2.1.0-cups-systemd-socket.patch to accomodate new coding style
- Changed cups-config-libs.orig to accommodate recent code changes (SSL->TLS)
- Changed cups-2.1.0-default-webcontent-path.patch to accommodate code changes
old: Printing/cups
new: home:ajoga:branches:openSUSE:Factory/cups rev None
Index: cups-2.1.0-default-webcontent-path.patch
===================================================================
--- cups-2.1.0-default-webcontent-path.patch (revision 380)
+++ cups-2.1.0-default-webcontent-path.patch (revision 2)
@@ -1,17 +1,21 @@
---- config-scripts/cups-directories.m4.orig 2014-03-21 17:42:53.000000000 +0100
-+++ config-scripts/cups-directories.m4 2015-09-01 11:08:43.000000000 +0200
-@@ -206,11 +206,11 @@ fi
- AC_SUBST(MENUDIR)
+--- config-scripts/cups-directories.m4
++++ config-scripts/cups-directories.m4.orig
+@@ -166,15 +166,15 @@ AS_IF([test "x$menudir" = x], [
+ AC_SUBST([MENUDIR])
# Documentation files
--AC_ARG_WITH(docdir, [ --with-docdir set path for documentation],docdir="$withval",docdir="")
-+AC_ARG_WITH(docdir, [ --with-docdir set path and DocumentRoot directive for web content, default=datadir/cups/webcontent],docdir="$withval",docdir="")
+-AC_ARG_WITH([docdir], AS_HELP_STRING([--with-docdir], [set path for documentation]), [
++AC_ARG_WITH([docdir], AS_HELP_STRING([--with-docdir], [set path and DocumentRoot directive for web content, default=datadir/cups/webcontent]), [
+ docdir="$withval"
+ ], [
+ docdir=""
+ ])
- if test x$docdir = x; then
-- CUPS_DOCROOT="$datadir/doc/cups"
-- docdir="$datadir/doc/cups"
-+ CUPS_DOCROOT="$datadir/cups/webcontent"
-+ docdir="$datadir/cups/webcontent"
- else
- CUPS_DOCROOT="$docdir"
- fi
+ AS_IF([test x$docdir = x], [
+- CUPS_DOCROOT="$datadir/doc/cups"
+- docdir="$datadir/doc/cups"
++ CUPS_DOCROOT="$datadir/cups/webcontent"
++ docdir="$datadir/cups/webcontent"
+ ], [
+ CUPS_DOCROOT="$docdir"
+ ])
Index: cups-config-libs.patch
===================================================================
--- cups-config-libs.patch (revision 380)
+++ cups-config-libs.patch (revision 2)
@@ -4,7 +4,7 @@
# flags for compiler and linker...
CFLAGS=""
LDFLAGS="@EXPORT_LDFLAGS@"
--LIBS="@LIBGSSAPI@ @DNSSDLIBS@ @EXPORT_SSLLIBS@ @LIBZ@ @LIBS@"
+-LIBS="@LIBGSSAPI@ @DNSSDLIBS@ @EXPORT_TLSLIBS@ @LIBZ@ @LIBS@"
+LIBS=""
# Check for local invocation...
Index: cups.changes
===================================================================
--- cups.changes (revision 380)
+++ cups.changes (revision 2)
@@ -1,4 +1,88 @@
-------------------------------------------------------------------
+Tue Mar 1 18:16:11 UTC 2022 - Aurélien Joga <aurelienjoga@gmail.com>
+
+- Version upgrade to 2.4.1:
+ * The default color mode now is now configurable and defaults to the printer's reported default mode (Issue #277)
+ * Configuration script now checks linking for -Wl,-pie flags (Issue #303)
+ * Fixed memory leaks - in testi18n (Issue #313), in cups_enum_dests() (Issue #317), in _cupsEncodeOption() and http_tls_upgrade() (Issue #322)
+ * Fixed missing bracket in de/index.html (Issue #299)
+ * Fixed typos in configuration scripts (Issues #304, #316)
+ * Removed remaining legacy code for RIP_MAX_CACHE environment variable (Issue #323)
+ * Removed deprecated directives from cupsctl and cups-files.conf (Issue #300)
+ * Removed purge-jobs legacy code from CGI scripts and templates (Issue #325)
+ * Added configure option --with-idle-exit-timeout (Issue #294)
+ * Added --with-systemd-timeoutstartsec configure option (Issue #298)
+ * DigestOptions now are applied for MD5 Digest authentication defined by RFC 2069 as well (Issue #287)
+ * Fixed compilation on Solaris (Issue #293)
+ * Fixed and improved German translations (Issue #296, Issue #297)
+ * Added warning and debug messages when loading printers if the queue is raw or with driver (Issue #286)
+ * Compilation now uses -fstack-protector-strong if available (Issue #285)
+ * Added support for CUPS running in a Snapcraft snap.
+ * Added basic OAuth 2.0 client support (Issue #100)
+ * Added support for AirPrint and Mopria clients (Issue #105)
+ * Added configure support for specifying systemd dependencies in the CUPS service file (Issue #144)
+ * Added several features and improvements to ipptool (Issue #153)
+ * Added a JSON output mode for ipptool.
+ * The ipptool command now correctly reports an error when a test file cannot be found.
+ * CUPS library now uses thread safe getpwnam_r and getpwuid_r functions (Issue #274)
+ * Fixed Kerberos authentication for the web interface (Issue #19)
+ * The ZPL sample driver now supports more "standard" label sizes (Issue #70)
+ * Fixed reporting of printer instances when enumerating and when no options are set for the main instance (Issue #71)
+ * Reverted USB read limit enforcement change from CUPS 2.2.12 (Issue #72)
+ * The IPP backend did not return the correct status code when a job was canceled at the printer/server (Issue #74)
+ * The testlang unit test program now loops over all of the available locales by default (Issue #85)
+ * The cupsfilter command now shows error messages when options are used incorrectly (Issue #88)
+ * The PPD functions now treat boolean values as case-insensitive (Issue #106)
+ * Temporary queue names no longer end with an underscore (Issue #110)
+ * The USB backend now runs as root (Issue #121)
+ * Added pkg-config file for libcups (Issue #122)
+ * Fixed a PPD memory leak caused by emulator definitions (Issue #124)
+ * Fixed a DISPLAY bug in ipptool (Issue #139)
+ * The scheduler now includes the [Job N] prefix for job log messages, even when using syslog logging (Issue #154)
+ * Added support for locales using the GB18030 character set (Issue #159)
+ * httpReconnect2 did not reset the socket file descriptor when the TLS negotiation failed (Apple #5907)
+ * httpUpdate did not reset the socket file descriptor when the TLS negotiation failed (Apple #5915)
+ * The IPP backend now retries Validate-Job requests (Issue #132)
+ * Now show better error messages when a driver interface program fails to provide a PPD file (Issue #148)
+ * Added dark mode support to the CUPS web interface (Issue #152)
+ * Added a workaround for Solaris in httpAddrConnect2 (Issue #156)
+ * Fixed an interaction between --remote-admin and --remote-any for the cupsctl command (Issue #158)
+ * Now use a 60 second timeout for reading USB backchannel data (Issue #160)
+ * The USB backend now tries harder to find a serial number (Issue #170)
+ * Fixed @IF(name) handling in cupsd.conf (Apple #5918)
+ * Fixed documentation and added examples for CUPS' limited CGI support (Apple #5940)
+ * Fixed the lpc command prompt (Apple #5946)
+ * Now always pass "localhost" in the Host: header when talking over a domain socket or the loopback interface (Issue #185)
+ * Fixed a job history update issue in the scheduler (Issue #187)
+ * Fixed job-pages-per-set value for duplex print jobs.
+ * Fixed an edge case in ippReadIO to make sure that only complete attributes and values are retained on an error (Issue #195)
+ * Hardened ippReadIO to prevent invalid IPP messages from being propagated (Issue #195, Issue #196)
+ * The scheduler now supports the "everywhere" model directly (Issue #201)
+ * Fixed some IPP Everywhere option mapping problems (Issue #238)
+ * Fixed support for "job-hold-until" with the Restart-Job operation (Issue #250)
+ * Fixed the default color/grayscale presets for IPP Everywhere PPDs (Issue #262)
+ * Fixed support for the 'offline-report' state for all USB backends (Issue #264)
+ * Documentation fixes (Issue #92, Issue #163, Issue #177, Issue #184)
+ * Localization updates (Issue #123, Issue #129, Issue #134, Issue #146, Issue #164)
+ * USB quirk updates (Issue #192, Issue #270, Apple #5766, Apple #5838, Apple #5843, Apple #5867)
+ * Web interface updates (Issue #142, Issue #218)
+ * The ippeveprinter tool now automatically uses an available port.
+ * Fixed several Windows TLS and hashing issues.
+ * Deprecated cups-config (Issue #97)
+ * Deprecated Kerberos (AuthType Negotiate) authentication (Issue #98)
+ * Removed support for the (long deprecated and unused) FontPath, ListenBackLog, LPDConfigFile, KeepAliveTimeout, RIPCache, and SMBConfigFile directives in cupsd.conf and cups-files.conf.
+ * Stubbed out deprecated httpMD5 functions.
+ * Add test for undefined page ranges during printing.
+- Dropped patch upstream_pull_174 because it it is included in this release
+- Dropped patch cups-2.1.0-cups-systemd-socket.patch because it it is included in this release (https://github.com/OpenPrinting/cups/commit/e96e96b4bd0d4e6f634bbb66b95d6e475501541c)
+- Changed upstream source packages signing key (https://github.com/OpenPrinting/cups/discussions/327#discussioncomment-2060579)
+- Re-enabled testsuite
+ * Also removed make check because since upstream change the two target are identical (https://github.com/OpenPrinting/cups/commit/96ba46ebc818b610b0e40cbc9d62ef1dcd3ec9b6#diff-76ed074a9305c04054cdebb9e9aad2d818052b07091de1f20cad0bbac34ffb52R239)
+- Changed cups-2.1.0-cups-systemd-socket.patch to accomodate new coding style
+- Changed cups-config-libs.orig to accommodate recent code changes (SSL->TLS)
+- Changed cups-2.1.0-default-webcontent-path.patch to accommodate code changes
+
+-------------------------------------------------------------------
Tue Feb 1 09:18:27 UTC 2022 - jsmeix@suse.de
- Enhanced harden_cups.service.patch by adding
Index: cups.keyring
===================================================================
Binary files cups.keyring (revision 380) and cups.keyring (revision 2) differ
Index: cups.spec
===================================================================
--- cups.spec (revision 380)
+++ cups.spec (revision 2)
@@ -18,9 +18,7 @@
# Cf. https://rpm.org/user_doc/conditional_builds.html
# by default enable testsuite (i.e. in the 'check' section run make check and make test)
-#bcond_without testsuite
-# disable testsuite for now until https://github.com/OpenPrinting/cups/issues/155 is fixed
-%bcond_with testsuite
+%bcond_without testsuite
# _tmpfilesdir is not defined in systemd macros up to openSUSE 13.2
%{!?_tmpfilesdir: %global _tmpfilesdir /usr/lib/tmpfiles.d }
@@ -29,34 +27,32 @@
# "zypper vcmp 2.3.b99 2.3.0" shows "2.3.b99 is older than 2.3.0" and
# "zypper vcmp 2.2.99 2.3b6" show "2.2.99 is older than 2.3b6" so that
# version upgrades from 2.2.x via 2.3.b* to 2.3.0 work:
-Version: 2.3.3op2
+Version: 2.4.1
Release: 0
Summary: The Common UNIX Printing System
License: Apache-2.0
Group: Hardware/Printing
URL: https://openprinting.github.io/cups
# To get Source0 go to https://github.com/OpenPrinting/cups/releases or use e.g.
-# wget --no-check-certificate -O cups-2.3.3op2-source.tar.gz https://github.com/OpenPrinting/cups/releases/download/v2.3.3op2/cups-2.3.3op2-source.tar.gz
-Source0: https://github.com/OpenPrinting/cups/releases/download/v2.3.3op2/cups-2.3.3op2-source.tar.gz
+# wget --no-check-certificate -O cups-2.4.1-source.tar.gz https://github.com/OpenPrinting/cups/releases/download/v2.4.1/cups-2.4.1-source.tar.gz
+Source0: https://github.com/OpenPrinting/cups/releases/download/v2.4.1/cups-2.4.1-source.tar.gz
# To get Source1 go to https://github.com/OpenPrinting/cups/releases or use e.g.
-# wget --no-check-certificate -O cups-2.3.3op2-source.tar.gz.sig https://github.com/OpenPrinting/cups/releases/download/v2.3.3op2/cups-2.3.3op2-source.tar.gz.sig
-Source1: https://github.com/OpenPrinting/cups/releases/download/v2.3.3op2/cups-2.3.3op2-source.tar.gz.sig
-# To get Source2 go to https://www.msweet.org/pgp.html
-# PGP Fingerprint: 845464660B686AAB36540B6F999559A027815955
+# wget --no-check-certificate -O cups-2.4.1-source.tar.gz.sig https://github.com/OpenPrinting/cups/releases/download/v2.4.1/cups-2.4.1-source.tar.gz.sig
+Source1: https://github.com/OpenPrinting/cups/releases/download/v2.4.1/cups-2.4.1-source.tar.gz.sig
+# To get Source2 use gpg --keyserver keys.openpgp.org --recv-keys 7082A0A50A2E92640F3880E0E4522DCC9B246FF7
+# See https://github.com/OpenPrinting/cups/discussions/327#discussioncomment-2060579
+# PGP Fingerprint: 7082A0A50A2E92640F3880E0E4522DCC9B246FF7
Source2: cups.keyring
# To manually verify Source0 with Source1 and Source2 do e.g.
# gpg --import cups.keyring
-# gpg --list-keys | grep -1 'Michael R Sweet' | grep -v 'expired'
-# gpg --verify cups-2.3.3op2-source.tar.gz.sig cups-2.3.3op2-source.tar.gz
+# gpg --list-keys | grep -1 'Zdenek Dohnal'
+# gpg --verify cups-2.4.1-source.tar.gz.sig cups-2.4.1-source.tar.gz
Source102: Postscript.ppd.gz
Source105: Postscript-level1.ppd.gz
Source106: Postscript-level2.ppd.gz
Source108: cups-client.conf
Source109: baselibs.conf
# Patch0...Patch9 is for patches from upstream:
-# Patch1 upstream_pull_174.patch is https://github.com/OpenPrinting/cups/pull/174
-# Use 60s timeout for read_thread, revert read limits
-Patch1: upstream_pull_174.patch
# Source10...Source99 is for sources from SUSE which are intended for upstream:
# Patch10...Patch99 is for patches from SUSE which are intended for upstream:
# Patch10 cups-2.1.0-choose-uri-template.patch adds 'smb://...' URIs to templates/choose-uri.tmpl:
@@ -66,8 +62,6 @@
# because the files of the CUPS web content are no documentation, see CUPS STR #3578
# and http://bugzilla.novell.com/show_bug.cgi?id=546023#c6 and subsequent comments:
Patch11: cups-2.1.0-default-webcontent-path.patch
-# Patch12 cups-2.1.0-cups-systemd-socket.patch Use systemd socket activation properly:
-Patch12: cups-2.1.0-cups-systemd-socket.patch
# Patch100...Patch999 is for private patches from SUSE which are not intended for upstream:
# Patch100 cups-pam.diff adds conf/pam.suse regarding support for PAM for SUSE:
Patch100: cups-pam.diff
@@ -83,9 +77,9 @@
Patch103: cups-1.4-do_not_strip_recommended_from_PPDs.patch
# Patch104 cups-config-libs.patch fixes option --libs in cups-config script:
Patch104: cups-config-libs.patch
-# Patch106 Fixes web UI Kerberos authentication (bsc#1175960)
-Patch106: fix-negotiate-authentication-between-CGIs-and-scheduler.patch
Patch107: harden_cups.service.patch
+# Patch108 downgrades the autoconf requirement to the autoconf available in tumbleweed as of writing
+Patch108: downgrade-autoconf-requirement.patch
# Build Requirements:
BuildRequires: dbus-1-devel
BuildRequires: fdupes
@@ -280,9 +274,6 @@
%prep
%setup -q
# Patch0...Patch9 is for patches from upstream:
-# Patch1 upstream_pull_174.patch is https://github.com/OpenPrinting/cups/pull/174
-# Use 60s timeout for read_thread, revert read limits
-%patch1 -p1
# Patch10...Patch99 is for patches from SUSE which are intended for upstream:
# Patch10 cups-2.1.0-choose-uri-template.patch adds 'smb://...' URIs to templates/choose-uri.tmpl:
%patch10 -b choose-uri-template.orig
@@ -291,8 +282,6 @@
# because the files of the CUPS web content are no documentation, see CUPS STR #3578
# and http://bugzilla.novell.com/show_bug.cgi?id=546023#c6 and subsequent comments:
%patch11 -b default-webcontent-path.orig
-# Patch12 cups-2.1.0-cups-systemd-socket.patch Use systemd socket activation properly:
-#patch12 -b cups-systemd-socket.orig
# Patch100...Patch999 is for private patches from SUSE which are not intended for upstream:
# Patch100 cups-pam.diff adds conf/pam.suse regarding support for PAM for SUSE:
%patch100 -b cups-pam.orig
@@ -308,9 +297,8 @@
%patch103 -b do_not_strip_recommended_from_PPDs.orig
# Patch104 cups-config-libs.patch fixes option --libs in cups-config script:
%patch104 -b cups-config-libs.orig
-# Patch106 Fixes web UI Kerberos authentication (bsc#1175960)
-%patch106 -p1
%patch107 -p1
+%patch108 -p1
%build
# Remove ".SILENT" rule for verbose build output
@@ -439,8 +427,6 @@
# There appears to be some kind of race condition when running make check and make test
# cf. https://github.com/OpenPrinting/cups/issues/155
# We print all logs for debugging purposes if either testsuite fails
-echo "DEBUG: running make check"
-bash -c 'make %{?_smp_mflags} check; EXIT=$?; if [ $EXIT -ne 0 ]; then cat test/*_log*-$(whoami); fi; exit $EXIT'
echo "DEBUG: running make test"
bash -c 'make %{?_smp_mflags} test; EXIT=$?; if [ $EXIT -ne 0 ]; then cat test/*_log*-$(whoami); fi; exit $EXIT'
%else
@@ -681,6 +667,7 @@
%files devel
%defattr(-,root,root)
+/usr/lib/pkgconfig/cups.pc
%{_includedir}/cups/
%{_libdir}/libcups.so
%{_libdir}/libcupsimage.so
Index: cups-2.4.1-source.tar.gz
===================================================================
Binary file cups-2.4.1-source.tar.gz (revision 2) added
Index: cups-2.4.1-source.tar.gz.sig
===================================================================
Binary file cups-2.4.1-source.tar.gz.sig (revision 2) added
Index: downgrade-autoconf-requirement.patch
===================================================================
--- downgrade-autoconf-requirement.patch (added)
+++ downgrade-autoconf-requirement.patch (revision 2)
@@ -0,0 +1,15 @@
+diff --git a/configure.ac b/configure.ac
+index a8c6c1040..6ace74a8d 100644
+--- a/configure.ac
++++ b/configure.ac
+@@ -9,8 +9,8 @@ dnl Licensed under Apache License v2.0. See the file "LICENSE" for more
+ dnl information.
+ dnl
+
+-dnl We need at least autoconf 2.71...
+-AC_PREREQ([2.71])
++dnl We need at least autoconf 2.69...
++AC_PREREQ([2.69])
+
+ dnl Package name and version...
+ AC_INIT([CUPS],[2.4.1],[https://github.com/openprinting/cups/issues],[cups],[https://openprinting.github.io/cups])
Index: cups-2.1.0-cups-systemd-socket.patch
===================================================================
--- cups-2.1.0-cups-systemd-socket.patch (revision 380)
+++ cups-2.1.0-cups-systemd-socket.patch (deleted)
@@ -1,43 +0,0 @@
---- scheduler/main.c.orig 2015-06-08 20:32:35.000000000 +0200
-+++ scheduler/main.c 2015-09-01 11:19:36.000000000 +0200
-@@ -656,7 +656,15 @@ main(int argc, /* I - Number of comm
-
- #if defined(HAVE_LAUNCHD) || defined(HAVE_SYSTEMD)
- if (OnDemand)
-+ {
- cupsdAddEvent(CUPSD_EVENT_SERVER_STARTED, NULL, NULL, "Scheduler started on demand.");
-+# ifdef HAVE_SYSTEMD
-+ sd_notifyf(0, "READY=1\n"
-+ "STATUS=Scheduler is running...\n"
-+ "MAINPID=%lu",
-+ (unsigned long) getpid());
-+# endif /* HAVE_SYSTEMD */
-+ }
- else
- #endif /* HAVE_LAUNCHD || HAVE_SYSTEMD */
- if (fg)
---- scheduler/org.cups.cupsd.path.in.orig 2014-03-21 15:50:24.000000000 +0100
-+++ scheduler/org.cups.cupsd.path.in 2015-09-01 11:20:37.000000000 +0200
-@@ -3,6 +3,7 @@ Description=CUPS Scheduler
-
- [Path]
- PathExists=@CUPS_CACHEDIR@/org.cups.cupsd
-+PathExistsGlob=@CUPS_REQUESTS@/d*
-
- [Install]
- WantedBy=multi-user.target
---- scheduler/org.cups.cupsd.service.in.orig 2014-10-21 13:54:05.000000000 +0200
-+++ scheduler/org.cups.cupsd.service.in 2015-09-01 11:22:09.000000000 +0200
-@@ -1,10 +1,11 @@
- [Unit]
- Description=CUPS Scheduler
- Documentation=man:cupsd(8)
-+After=network.target
-
- [Service]
- ExecStart=@sbindir@/cupsd -l
--Type=simple
-+Type=notify
-
- [Install]
- Also=org.cups.cupsd.socket org.cups.cupsd.path
Index: cups-2.3.3op2-source.tar.gz
===================================================================
Binary file cups-2.3.3op2-source.tar.gz (revision 380) deleted
Index: cups-2.3.3op2-source.tar.gz.sig
===================================================================
Binary file cups-2.3.3op2-source.tar.gz.sig (revision 380) deleted
Index: fix-negotiate-authentication-between-CGIs-and-scheduler.patch
===================================================================
--- fix-negotiate-authentication-between-CGIs-and-scheduler.patch (revision 380)
+++ fix-negotiate-authentication-between-CGIs-and-scheduler.patch (deleted)
@@ -1,223 +0,0 @@
-From d4521ed0df7e625ccf2bc079bab6f48c46ef9bf9 Mon Sep 17 00:00:00 2001
-From: Samuel Cabrero <scabrero@suse.de>
-Date: Mon, 26 Oct 2020 17:35:22 +0100
-Subject: [PATCH 1/4] Avoid infinite loop in admin.cgi when negotiate is used
-
-SetAuthorizationString with NULL argument sets an empty string.
-
-Related: #5596
-
-Signed-off-by: Samuel Cabrero <scabrero@suse.de>
----
- cups/auth.c | 2 +-
- 1 file changed, 1 insertion(+), 1 deletion(-)
-
-diff --git a/cups/auth.c b/cups/auth.c
-index db45bbba6..f2409350a 100644
---- a/cups/auth.c
-+++ b/cups/auth.c
-@@ -295,7 +295,7 @@ cupsDoAuthentication(
- }
- }
-
-- if (http->authstring)
-+ if (http->authstring && http->authstring[0])
- {
- DEBUG_printf(("1cupsDoAuthentication: authstring=\"%s\".", http->authstring));
-
---
-2.30.2
-
-
-From 61ad7780bc7d0593e3225d088ac6dff31badf801 Mon Sep 17 00:00:00 2001
-From: Samuel Cabrero <scabrero@suse.de>
-Date: Tue, 27 Oct 2020 16:11:41 +0100
-Subject: [PATCH 2/4] Add cups_is_local_connection() to check if connection is
- to localhost
-
-Related: #5596
-
-Signed-off-by: Samuel Cabrero <scabrero@suse.de>
----
- cups/auth.c | 11 ++++++++++-
- 1 file changed, 10 insertions(+), 1 deletion(-)
-
-diff --git a/cups/auth.c b/cups/auth.c
-index f2409350a..d2956438d 100644
---- a/cups/auth.c
-+++ b/cups/auth.c
-@@ -90,6 +90,7 @@ static void cups_gss_printf(OM_uint32 major_status, OM_uint32 minor_status,
- # define cups_gss_printf(major, minor, message)
- # endif /* DEBUG */
- #endif /* HAVE_GSSAPI */
-+static int cups_is_local_connection(http_t *http);
- static int cups_local_auth(http_t *http);
-
-
-@@ -916,6 +917,14 @@ cups_gss_printf(OM_uint32 major_status,/* I - Major status code */
- # endif /* DEBUG */
- #endif /* HAVE_GSSAPI */
-
-+static int /* O - 0 if not a local connection */
-+ /* 1 if local connection */
-+cups_is_local_connection(http_t *http) /* I - HTTP connection to server */
-+{
-+ if (!httpAddrLocalhost(http->hostaddr) && _cups_strcasecmp(http->hostname, "localhost") != 0)
-+ return 0;
-+ return 1;
-+}
-
- /*
- * 'cups_local_auth()' - Get the local authorization certificate if
-@@ -958,7 +967,7 @@ cups_local_auth(http_t *http) /* I - HTTP connection to server */
- * See if we are accessing localhost...
- */
-
-- if (!httpAddrLocalhost(http->hostaddr) && _cups_strcasecmp(http->hostname, "localhost") != 0)
-+ if (!cups_is_local_connection(http))
- {
- DEBUG_puts("8cups_local_auth: Not a local connection!");
- return (1);
---
-2.30.2
-
-
-From f629d079750a86b1b605c285f99c0dea3933ca50 Mon Sep 17 00:00:00 2001
-From: Samuel Cabrero <scabrero@suse.de>
-Date: Tue, 27 Oct 2020 16:23:30 +0100
-Subject: [PATCH 3/4] Try local kerberos ccache credentials only for remote
- servers
-
-If connecting to localhost then proceed to ask the client for the
-authorization using cupsGetPassword2. The get password callback will
-return 401 to the client with WWW-Authenticate: Negotiate.
-
-Fixes: #5596
-
-Signed-off-by: Samuel Cabrero <scabrero@suse.de>
----
- cups/auth.c | 10 ++++++----
- 1 file changed, 6 insertions(+), 4 deletions(-)
-
-diff --git a/cups/auth.c b/cups/auth.c
-index d2956438d..9661657fc 100644
---- a/cups/auth.c
-+++ b/cups/auth.c
-@@ -175,10 +175,10 @@ cupsDoAuthentication(
- DEBUG_printf(("2cupsDoAuthentication: Trying scheme \"%s\"...", scheme));
-
- #ifdef HAVE_GSSAPI
-- if (!_cups_strcasecmp(scheme, "Negotiate"))
-+ if (!_cups_strcasecmp(scheme, "Negotiate") && !cups_is_local_connection(http))
- {
- /*
-- * Kerberos authentication...
-+ * Kerberos authentication to remote server...
- */
-
- int gss_status; /* Auth status */
-@@ -202,7 +202,9 @@ cupsDoAuthentication(
- }
- else
- #endif /* HAVE_GSSAPI */
-- if (_cups_strcasecmp(scheme, "Basic") && _cups_strcasecmp(scheme, "Digest"))
-+ if (_cups_strcasecmp(scheme, "Basic") &&
-+ _cups_strcasecmp(scheme, "Digest") &&
-+ _cups_strcasecmp(scheme, "Negotiate"))
- {
- /*
- * Other schemes not yet supported...
-@@ -216,7 +218,7 @@ cupsDoAuthentication(
- * See if we should retry the current username:password...
- */
-
-- if ((http->digest_tries > 1 || !http->userpass[0]) && (!_cups_strcasecmp(scheme, "Basic") || (!_cups_strcasecmp(scheme, "Digest"))))
-+ if (http->digest_tries > 1 || !http->userpass[0])
- {
- /*
- * Nope - get a new password from the user...
---
-2.30.2
-
-
-From 0563a28b18b21d5574a5e0e38b74246146074bbf Mon Sep 17 00:00:00 2001
-From: Samuel Cabrero <scabrero@suse.de>
-Date: Tue, 27 Oct 2020 16:18:03 +0100
-Subject: [PATCH 4/4] Allow Local authentication for Negotiate
-
-PeerCred is also possible if address family is AF_LOCAL. This will allow
-the CGI programs to generate the authorization from the local
-certificates based on PID also when Negotiate is used for local
-connections:
-
-Client CGI
-Browser <- Remote conn -> admin.cgi <--- Localhost conn ---> Scheduler
- | | |
- + --- HTTP/POST /admin/ --> | |
- | + --- CUPS-Get-Devices ------------> |
- | | |
- | | <-- 401 Unauthorized --------------+
- | | WWW-Authenticate: |
- | | Negotiate, (PeerCred,) Local |
- | | |
- | <-- 401 Unauthorized -----+ |
- | WWW-Authenticate: | |
- | Negotiate | |
- | | |
- | --- HTTP/POST /admin/ --> | |
- | Authorization: + --- IPP CUPS-GetDevices ---------> |
- | Negotiate | Authorization: Local <cert> |
- | | |
-
-Fixes: #5596
-
-Signed-off-by: Samuel Cabrero <scabrero@suse.de>
----
- cups/auth.c | 5 -----
- scheduler/client.c | 9 ++-------
- 2 files changed, 2 insertions(+), 12 deletions(-)
-
-diff --git a/cups/auth.c b/cups/auth.c
-index 9661657fc..b6fec6b98 100644
---- a/cups/auth.c
-+++ b/cups/auth.c
-@@ -1043,11 +1043,6 @@ cups_local_auth(http_t *http) /* I - HTTP connection to server */
- }
- # endif /* HAVE_AUTHORIZATION_H */
-
--# ifdef HAVE_GSSAPI
-- if (cups_auth_find(www_auth, "Negotiate"))
-- return (1);
--# endif /* HAVE_GSSAPI */
--
- # if defined(SO_PEERCRED) && defined(AF_LOCAL)
- /*
- * See if we can authenticate using the peer credentials provided over a
-diff --git a/scheduler/client.c b/scheduler/client.c
-index c2ee8f12a..56797d58d 100644
---- a/scheduler/client.c
-+++ b/scheduler/client.c
-@@ -2109,18 +2109,13 @@ cupsdSendHeader(
- }
- else if (auth_type == CUPSD_AUTH_NEGOTIATE)
- {
--#if defined(SO_PEERCRED) && defined(AF_LOCAL)
-- if (httpAddrFamily(httpGetAddress(con->http)) == AF_LOCAL)
-- strlcpy(auth_str, "PeerCred", sizeof(auth_str));
-- else
--#endif /* SO_PEERCRED && AF_LOCAL */
- strlcpy(auth_str, "Negotiate", sizeof(auth_str));
- }
-
-- if (con->best && auth_type != CUPSD_AUTH_NEGOTIATE && !con->is_browser && !_cups_strcasecmp(httpGetHostname(con->http, NULL, 0), "localhost"))
-+ if (con->best && !con->is_browser && !_cups_strcasecmp(httpGetHostname(con->http, NULL, 0), "localhost"))
- {
- /*
-- * Add a "trc" (try root certification) parameter for local non-Kerberos
-+ * Add a "trc" (try root certification) parameter for local
- * requests when the request requires system group membership - then the
- * client knows the root certificate can/should be used.
- *
---
-2.30.2
-
Index: upstream_pull_174.patch
===================================================================
--- upstream_pull_174.patch (revision 380)
+++ upstream_pull_174.patch (deleted)
@@ -1,53 +0,0 @@
-From c37d71b1a31d26a4790166e2508822b18934a5c0 Mon Sep 17 00:00:00 2001
-From: Zdenek Dohnal <zdohnal@redhat.com>
-Date: Tue, 13 Apr 2021 15:44:14 +0200
-Subject: [PATCH 1/2] backend/usb-libusb.c: Use 60s timeout for reading at
- backchannel
-
-Some older models malfunction if timeout is too short.
----
- CHANGES.md | 1 +
- backend/usb-libusb.c | 2 +-
- 2 files changed, 2 insertions(+), 1 deletion(-)
-
---- a/backend/usb-libusb.c
-+++ b/backend/usb-libusb.c
-@@ -1704,7 +1704,7 @@ static void *read_thread(void *reference)
- readstatus = libusb_bulk_transfer(g.printer->handle,
- g.printer->read_endp,
- readbuffer, rbytes,
-- &rbytes, 250);
-+ &rbytes, 60000);
- if (readstatus == LIBUSB_SUCCESS && rbytes > 0)
- {
- fprintf(stderr, "DEBUG: Read %d bytes of back-channel data...\n", (int)rbytes);
-
-From 4cb6f6806cdbe040d478b266a1d351b19341dd79 Mon Sep 17 00:00:00 2001
-From: Zdenek Dohnal <zdohnal@redhat.com>
-Date: Tue, 13 Apr 2021 15:47:37 +0200
-Subject: [PATCH 2/2] backend/usb-libusb.c: Revert enforcing read limits
-
-This commit reverts the change introduced by 2.2.12 [1] - its
-implementation caused a regression with Lexmark filters.
-
-[1]
-https://github.com/apple/cups/commit/35e927f83529cd9b4bc37bcd418c50e307fced35
----
- CHANGES.md | 1 +
- backend/usb-libusb.c | 3 ++-
- 2 files changed, 3 insertions(+), 1 deletion(-)
-
-diff --git a/backend/usb-libusb.c b/backend/usb-libusb.c
-index fbb0d9d89..89b5182f7 100644
---- a/backend/usb-libusb.c
-+++ b/backend/usb-libusb.c
-@@ -1721,7 +1721,8 @@ static void *read_thread(void *reference)
- * Make sure this loop executes no more than once every 250 miliseconds...
- */
-
-- if ((g.wait_eof || !g.read_thread_stop))
-+ if ((readstatus != LIBUSB_SUCCESS || rbytes == 0) &&
-+ (g.wait_eof || !g.read_thread_stop))
- usleep(250000);
- }
- while (g.wait_eof || !g.read_thread_stop);
OBS-URL: https://build.opensuse.org/request/show/958348
OBS-URL: https://build.opensuse.org/package/show/Printing/cups?expand=0&rev=381
2022-03-03 13:19:05 +01:00
|
|
|
|
* Fixed a DISPLAY bug in ipptool (Issue #139)
|
2022-03-04 09:58:18 +01:00
|
|
|
|
* The scheduler now includes the [Job N] prefix for job log
|
|
|
|
|
messages, even when using syslog logging (Issue #154)
|
|
|
|
|
* Added support for locales using the GB18030
|
|
|
|
|
character set (Issue #159)
|
|
|
|
|
* httpReconnect2 did not reset the socket file descriptor
|
|
|
|
|
when the TLS negotiation failed (Apple #5907)
|
|
|
|
|
* httpUpdate did not reset the socket file descriptor
|
|
|
|
|
when the TLS negotiation failed (Apple #5915)
|
Accepting request 958348 from home:ajoga:branches:openSUSE:Factory
- Version upgrade to 2.4.1
- Dropped patch upstream_pull_174 because it it is included in this release
- Dropped patch cups-2.1.0-cups-systemd-socket.patch because it it is included in this release (https://github.com/OpenPrinting/cups/commit/e96e96b4bd0d4e6f634bbb66b95d6e475501541c)
- Changed upstream source packages signing key (https://github.com/OpenPrinting/cups/discussions/327#discussioncomment-2060579)
- Re-enabled testsuite
* Also removed make check because since upstream change the two target are identical (https://github.com/OpenPrinting/cups/commit/96ba46ebc818b610b0e40cbc9d62ef1dcd3ec9b6#diff-76ed074a9305c04054cdebb9e9aad2d818052b07091de1f20cad0bbac34ffb52R239)
- Changed cups-2.1.0-cups-systemd-socket.patch to accomodate new coding style
- Changed cups-config-libs.orig to accommodate recent code changes (SSL->TLS)
- Changed cups-2.1.0-default-webcontent-path.patch to accommodate code changes
old: Printing/cups
new: home:ajoga:branches:openSUSE:Factory/cups rev None
Index: cups-2.1.0-default-webcontent-path.patch
===================================================================
--- cups-2.1.0-default-webcontent-path.patch (revision 380)
+++ cups-2.1.0-default-webcontent-path.patch (revision 2)
@@ -1,17 +1,21 @@
---- config-scripts/cups-directories.m4.orig 2014-03-21 17:42:53.000000000 +0100
-+++ config-scripts/cups-directories.m4 2015-09-01 11:08:43.000000000 +0200
-@@ -206,11 +206,11 @@ fi
- AC_SUBST(MENUDIR)
+--- config-scripts/cups-directories.m4
++++ config-scripts/cups-directories.m4.orig
+@@ -166,15 +166,15 @@ AS_IF([test "x$menudir" = x], [
+ AC_SUBST([MENUDIR])
# Documentation files
--AC_ARG_WITH(docdir, [ --with-docdir set path for documentation],docdir="$withval",docdir="")
-+AC_ARG_WITH(docdir, [ --with-docdir set path and DocumentRoot directive for web content, default=datadir/cups/webcontent],docdir="$withval",docdir="")
+-AC_ARG_WITH([docdir], AS_HELP_STRING([--with-docdir], [set path for documentation]), [
++AC_ARG_WITH([docdir], AS_HELP_STRING([--with-docdir], [set path and DocumentRoot directive for web content, default=datadir/cups/webcontent]), [
+ docdir="$withval"
+ ], [
+ docdir=""
+ ])
- if test x$docdir = x; then
-- CUPS_DOCROOT="$datadir/doc/cups"
-- docdir="$datadir/doc/cups"
-+ CUPS_DOCROOT="$datadir/cups/webcontent"
-+ docdir="$datadir/cups/webcontent"
- else
- CUPS_DOCROOT="$docdir"
- fi
+ AS_IF([test x$docdir = x], [
+- CUPS_DOCROOT="$datadir/doc/cups"
+- docdir="$datadir/doc/cups"
++ CUPS_DOCROOT="$datadir/cups/webcontent"
++ docdir="$datadir/cups/webcontent"
+ ], [
+ CUPS_DOCROOT="$docdir"
+ ])
Index: cups-config-libs.patch
===================================================================
--- cups-config-libs.patch (revision 380)
+++ cups-config-libs.patch (revision 2)
@@ -4,7 +4,7 @@
# flags for compiler and linker...
CFLAGS=""
LDFLAGS="@EXPORT_LDFLAGS@"
--LIBS="@LIBGSSAPI@ @DNSSDLIBS@ @EXPORT_SSLLIBS@ @LIBZ@ @LIBS@"
+-LIBS="@LIBGSSAPI@ @DNSSDLIBS@ @EXPORT_TLSLIBS@ @LIBZ@ @LIBS@"
+LIBS=""
# Check for local invocation...
Index: cups.changes
===================================================================
--- cups.changes (revision 380)
+++ cups.changes (revision 2)
@@ -1,4 +1,88 @@
-------------------------------------------------------------------
+Tue Mar 1 18:16:11 UTC 2022 - Aurélien Joga <aurelienjoga@gmail.com>
+
+- Version upgrade to 2.4.1:
+ * The default color mode now is now configurable and defaults to the printer's reported default mode (Issue #277)
+ * Configuration script now checks linking for -Wl,-pie flags (Issue #303)
+ * Fixed memory leaks - in testi18n (Issue #313), in cups_enum_dests() (Issue #317), in _cupsEncodeOption() and http_tls_upgrade() (Issue #322)
+ * Fixed missing bracket in de/index.html (Issue #299)
+ * Fixed typos in configuration scripts (Issues #304, #316)
+ * Removed remaining legacy code for RIP_MAX_CACHE environment variable (Issue #323)
+ * Removed deprecated directives from cupsctl and cups-files.conf (Issue #300)
+ * Removed purge-jobs legacy code from CGI scripts and templates (Issue #325)
+ * Added configure option --with-idle-exit-timeout (Issue #294)
+ * Added --with-systemd-timeoutstartsec configure option (Issue #298)
+ * DigestOptions now are applied for MD5 Digest authentication defined by RFC 2069 as well (Issue #287)
+ * Fixed compilation on Solaris (Issue #293)
+ * Fixed and improved German translations (Issue #296, Issue #297)
+ * Added warning and debug messages when loading printers if the queue is raw or with driver (Issue #286)
+ * Compilation now uses -fstack-protector-strong if available (Issue #285)
+ * Added support for CUPS running in a Snapcraft snap.
+ * Added basic OAuth 2.0 client support (Issue #100)
+ * Added support for AirPrint and Mopria clients (Issue #105)
+ * Added configure support for specifying systemd dependencies in the CUPS service file (Issue #144)
+ * Added several features and improvements to ipptool (Issue #153)
+ * Added a JSON output mode for ipptool.
+ * The ipptool command now correctly reports an error when a test file cannot be found.
+ * CUPS library now uses thread safe getpwnam_r and getpwuid_r functions (Issue #274)
+ * Fixed Kerberos authentication for the web interface (Issue #19)
+ * The ZPL sample driver now supports more "standard" label sizes (Issue #70)
+ * Fixed reporting of printer instances when enumerating and when no options are set for the main instance (Issue #71)
+ * Reverted USB read limit enforcement change from CUPS 2.2.12 (Issue #72)
+ * The IPP backend did not return the correct status code when a job was canceled at the printer/server (Issue #74)
+ * The testlang unit test program now loops over all of the available locales by default (Issue #85)
+ * The cupsfilter command now shows error messages when options are used incorrectly (Issue #88)
+ * The PPD functions now treat boolean values as case-insensitive (Issue #106)
+ * Temporary queue names no longer end with an underscore (Issue #110)
+ * The USB backend now runs as root (Issue #121)
+ * Added pkg-config file for libcups (Issue #122)
+ * Fixed a PPD memory leak caused by emulator definitions (Issue #124)
+ * Fixed a DISPLAY bug in ipptool (Issue #139)
+ * The scheduler now includes the [Job N] prefix for job log messages, even when using syslog logging (Issue #154)
+ * Added support for locales using the GB18030 character set (Issue #159)
+ * httpReconnect2 did not reset the socket file descriptor when the TLS negotiation failed (Apple #5907)
+ * httpUpdate did not reset the socket file descriptor when the TLS negotiation failed (Apple #5915)
+ * The IPP backend now retries Validate-Job requests (Issue #132)
+ * Now show better error messages when a driver interface program fails to provide a PPD file (Issue #148)
+ * Added dark mode support to the CUPS web interface (Issue #152)
+ * Added a workaround for Solaris in httpAddrConnect2 (Issue #156)
+ * Fixed an interaction between --remote-admin and --remote-any for the cupsctl command (Issue #158)
+ * Now use a 60 second timeout for reading USB backchannel data (Issue #160)
+ * The USB backend now tries harder to find a serial number (Issue #170)
+ * Fixed @IF(name) handling in cupsd.conf (Apple #5918)
+ * Fixed documentation and added examples for CUPS' limited CGI support (Apple #5940)
+ * Fixed the lpc command prompt (Apple #5946)
+ * Now always pass "localhost" in the Host: header when talking over a domain socket or the loopback interface (Issue #185)
+ * Fixed a job history update issue in the scheduler (Issue #187)
+ * Fixed job-pages-per-set value for duplex print jobs.
+ * Fixed an edge case in ippReadIO to make sure that only complete attributes and values are retained on an error (Issue #195)
+ * Hardened ippReadIO to prevent invalid IPP messages from being propagated (Issue #195, Issue #196)
+ * The scheduler now supports the "everywhere" model directly (Issue #201)
+ * Fixed some IPP Everywhere option mapping problems (Issue #238)
+ * Fixed support for "job-hold-until" with the Restart-Job operation (Issue #250)
+ * Fixed the default color/grayscale presets for IPP Everywhere PPDs (Issue #262)
+ * Fixed support for the 'offline-report' state for all USB backends (Issue #264)
+ * Documentation fixes (Issue #92, Issue #163, Issue #177, Issue #184)
+ * Localization updates (Issue #123, Issue #129, Issue #134, Issue #146, Issue #164)
+ * USB quirk updates (Issue #192, Issue #270, Apple #5766, Apple #5838, Apple #5843, Apple #5867)
+ * Web interface updates (Issue #142, Issue #218)
+ * The ippeveprinter tool now automatically uses an available port.
+ * Fixed several Windows TLS and hashing issues.
+ * Deprecated cups-config (Issue #97)
+ * Deprecated Kerberos (AuthType Negotiate) authentication (Issue #98)
+ * Removed support for the (long deprecated and unused) FontPath, ListenBackLog, LPDConfigFile, KeepAliveTimeout, RIPCache, and SMBConfigFile directives in cupsd.conf and cups-files.conf.
+ * Stubbed out deprecated httpMD5 functions.
+ * Add test for undefined page ranges during printing.
+- Dropped patch upstream_pull_174 because it it is included in this release
+- Dropped patch cups-2.1.0-cups-systemd-socket.patch because it it is included in this release (https://github.com/OpenPrinting/cups/commit/e96e96b4bd0d4e6f634bbb66b95d6e475501541c)
+- Changed upstream source packages signing key (https://github.com/OpenPrinting/cups/discussions/327#discussioncomment-2060579)
+- Re-enabled testsuite
+ * Also removed make check because since upstream change the two target are identical (https://github.com/OpenPrinting/cups/commit/96ba46ebc818b610b0e40cbc9d62ef1dcd3ec9b6#diff-76ed074a9305c04054cdebb9e9aad2d818052b07091de1f20cad0bbac34ffb52R239)
+- Changed cups-2.1.0-cups-systemd-socket.patch to accomodate new coding style
+- Changed cups-config-libs.orig to accommodate recent code changes (SSL->TLS)
+- Changed cups-2.1.0-default-webcontent-path.patch to accommodate code changes
+
+-------------------------------------------------------------------
Tue Feb 1 09:18:27 UTC 2022 - jsmeix@suse.de
- Enhanced harden_cups.service.patch by adding
Index: cups.keyring
===================================================================
Binary files cups.keyring (revision 380) and cups.keyring (revision 2) differ
Index: cups.spec
===================================================================
--- cups.spec (revision 380)
+++ cups.spec (revision 2)
@@ -18,9 +18,7 @@
# Cf. https://rpm.org/user_doc/conditional_builds.html
# by default enable testsuite (i.e. in the 'check' section run make check and make test)
-#bcond_without testsuite
-# disable testsuite for now until https://github.com/OpenPrinting/cups/issues/155 is fixed
-%bcond_with testsuite
+%bcond_without testsuite
# _tmpfilesdir is not defined in systemd macros up to openSUSE 13.2
%{!?_tmpfilesdir: %global _tmpfilesdir /usr/lib/tmpfiles.d }
@@ -29,34 +27,32 @@
# "zypper vcmp 2.3.b99 2.3.0" shows "2.3.b99 is older than 2.3.0" and
# "zypper vcmp 2.2.99 2.3b6" show "2.2.99 is older than 2.3b6" so that
# version upgrades from 2.2.x via 2.3.b* to 2.3.0 work:
-Version: 2.3.3op2
+Version: 2.4.1
Release: 0
Summary: The Common UNIX Printing System
License: Apache-2.0
Group: Hardware/Printing
URL: https://openprinting.github.io/cups
# To get Source0 go to https://github.com/OpenPrinting/cups/releases or use e.g.
-# wget --no-check-certificate -O cups-2.3.3op2-source.tar.gz https://github.com/OpenPrinting/cups/releases/download/v2.3.3op2/cups-2.3.3op2-source.tar.gz
-Source0: https://github.com/OpenPrinting/cups/releases/download/v2.3.3op2/cups-2.3.3op2-source.tar.gz
+# wget --no-check-certificate -O cups-2.4.1-source.tar.gz https://github.com/OpenPrinting/cups/releases/download/v2.4.1/cups-2.4.1-source.tar.gz
+Source0: https://github.com/OpenPrinting/cups/releases/download/v2.4.1/cups-2.4.1-source.tar.gz
# To get Source1 go to https://github.com/OpenPrinting/cups/releases or use e.g.
-# wget --no-check-certificate -O cups-2.3.3op2-source.tar.gz.sig https://github.com/OpenPrinting/cups/releases/download/v2.3.3op2/cups-2.3.3op2-source.tar.gz.sig
-Source1: https://github.com/OpenPrinting/cups/releases/download/v2.3.3op2/cups-2.3.3op2-source.tar.gz.sig
-# To get Source2 go to https://www.msweet.org/pgp.html
-# PGP Fingerprint: 845464660B686AAB36540B6F999559A027815955
+# wget --no-check-certificate -O cups-2.4.1-source.tar.gz.sig https://github.com/OpenPrinting/cups/releases/download/v2.4.1/cups-2.4.1-source.tar.gz.sig
+Source1: https://github.com/OpenPrinting/cups/releases/download/v2.4.1/cups-2.4.1-source.tar.gz.sig
+# To get Source2 use gpg --keyserver keys.openpgp.org --recv-keys 7082A0A50A2E92640F3880E0E4522DCC9B246FF7
+# See https://github.com/OpenPrinting/cups/discussions/327#discussioncomment-2060579
+# PGP Fingerprint: 7082A0A50A2E92640F3880E0E4522DCC9B246FF7
Source2: cups.keyring
# To manually verify Source0 with Source1 and Source2 do e.g.
# gpg --import cups.keyring
-# gpg --list-keys | grep -1 'Michael R Sweet' | grep -v 'expired'
-# gpg --verify cups-2.3.3op2-source.tar.gz.sig cups-2.3.3op2-source.tar.gz
+# gpg --list-keys | grep -1 'Zdenek Dohnal'
+# gpg --verify cups-2.4.1-source.tar.gz.sig cups-2.4.1-source.tar.gz
Source102: Postscript.ppd.gz
Source105: Postscript-level1.ppd.gz
Source106: Postscript-level2.ppd.gz
Source108: cups-client.conf
Source109: baselibs.conf
# Patch0...Patch9 is for patches from upstream:
-# Patch1 upstream_pull_174.patch is https://github.com/OpenPrinting/cups/pull/174
-# Use 60s timeout for read_thread, revert read limits
-Patch1: upstream_pull_174.patch
# Source10...Source99 is for sources from SUSE which are intended for upstream:
# Patch10...Patch99 is for patches from SUSE which are intended for upstream:
# Patch10 cups-2.1.0-choose-uri-template.patch adds 'smb://...' URIs to templates/choose-uri.tmpl:
@@ -66,8 +62,6 @@
# because the files of the CUPS web content are no documentation, see CUPS STR #3578
# and http://bugzilla.novell.com/show_bug.cgi?id=546023#c6 and subsequent comments:
Patch11: cups-2.1.0-default-webcontent-path.patch
-# Patch12 cups-2.1.0-cups-systemd-socket.patch Use systemd socket activation properly:
-Patch12: cups-2.1.0-cups-systemd-socket.patch
# Patch100...Patch999 is for private patches from SUSE which are not intended for upstream:
# Patch100 cups-pam.diff adds conf/pam.suse regarding support for PAM for SUSE:
Patch100: cups-pam.diff
@@ -83,9 +77,9 @@
Patch103: cups-1.4-do_not_strip_recommended_from_PPDs.patch
# Patch104 cups-config-libs.patch fixes option --libs in cups-config script:
Patch104: cups-config-libs.patch
-# Patch106 Fixes web UI Kerberos authentication (bsc#1175960)
-Patch106: fix-negotiate-authentication-between-CGIs-and-scheduler.patch
Patch107: harden_cups.service.patch
+# Patch108 downgrades the autoconf requirement to the autoconf available in tumbleweed as of writing
+Patch108: downgrade-autoconf-requirement.patch
# Build Requirements:
BuildRequires: dbus-1-devel
BuildRequires: fdupes
@@ -280,9 +274,6 @@
%prep
%setup -q
# Patch0...Patch9 is for patches from upstream:
-# Patch1 upstream_pull_174.patch is https://github.com/OpenPrinting/cups/pull/174
-# Use 60s timeout for read_thread, revert read limits
-%patch1 -p1
# Patch10...Patch99 is for patches from SUSE which are intended for upstream:
# Patch10 cups-2.1.0-choose-uri-template.patch adds 'smb://...' URIs to templates/choose-uri.tmpl:
%patch10 -b choose-uri-template.orig
@@ -291,8 +282,6 @@
# because the files of the CUPS web content are no documentation, see CUPS STR #3578
# and http://bugzilla.novell.com/show_bug.cgi?id=546023#c6 and subsequent comments:
%patch11 -b default-webcontent-path.orig
-# Patch12 cups-2.1.0-cups-systemd-socket.patch Use systemd socket activation properly:
-#patch12 -b cups-systemd-socket.orig
# Patch100...Patch999 is for private patches from SUSE which are not intended for upstream:
# Patch100 cups-pam.diff adds conf/pam.suse regarding support for PAM for SUSE:
%patch100 -b cups-pam.orig
@@ -308,9 +297,8 @@
%patch103 -b do_not_strip_recommended_from_PPDs.orig
# Patch104 cups-config-libs.patch fixes option --libs in cups-config script:
%patch104 -b cups-config-libs.orig
-# Patch106 Fixes web UI Kerberos authentication (bsc#1175960)
-%patch106 -p1
%patch107 -p1
+%patch108 -p1
%build
# Remove ".SILENT" rule for verbose build output
@@ -439,8 +427,6 @@
# There appears to be some kind of race condition when running make check and make test
# cf. https://github.com/OpenPrinting/cups/issues/155
# We print all logs for debugging purposes if either testsuite fails
-echo "DEBUG: running make check"
-bash -c 'make %{?_smp_mflags} check; EXIT=$?; if [ $EXIT -ne 0 ]; then cat test/*_log*-$(whoami); fi; exit $EXIT'
echo "DEBUG: running make test"
bash -c 'make %{?_smp_mflags} test; EXIT=$?; if [ $EXIT -ne 0 ]; then cat test/*_log*-$(whoami); fi; exit $EXIT'
%else
@@ -681,6 +667,7 @@
%files devel
%defattr(-,root,root)
+/usr/lib/pkgconfig/cups.pc
%{_includedir}/cups/
%{_libdir}/libcups.so
%{_libdir}/libcupsimage.so
Index: cups-2.4.1-source.tar.gz
===================================================================
Binary file cups-2.4.1-source.tar.gz (revision 2) added
Index: cups-2.4.1-source.tar.gz.sig
===================================================================
Binary file cups-2.4.1-source.tar.gz.sig (revision 2) added
Index: downgrade-autoconf-requirement.patch
===================================================================
--- downgrade-autoconf-requirement.patch (added)
+++ downgrade-autoconf-requirement.patch (revision 2)
@@ -0,0 +1,15 @@
+diff --git a/configure.ac b/configure.ac
+index a8c6c1040..6ace74a8d 100644
+--- a/configure.ac
++++ b/configure.ac
+@@ -9,8 +9,8 @@ dnl Licensed under Apache License v2.0. See the file "LICENSE" for more
+ dnl information.
+ dnl
+
+-dnl We need at least autoconf 2.71...
+-AC_PREREQ([2.71])
++dnl We need at least autoconf 2.69...
++AC_PREREQ([2.69])
+
+ dnl Package name and version...
+ AC_INIT([CUPS],[2.4.1],[https://github.com/openprinting/cups/issues],[cups],[https://openprinting.github.io/cups])
Index: cups-2.1.0-cups-systemd-socket.patch
===================================================================
--- cups-2.1.0-cups-systemd-socket.patch (revision 380)
+++ cups-2.1.0-cups-systemd-socket.patch (deleted)
@@ -1,43 +0,0 @@
---- scheduler/main.c.orig 2015-06-08 20:32:35.000000000 +0200
-+++ scheduler/main.c 2015-09-01 11:19:36.000000000 +0200
-@@ -656,7 +656,15 @@ main(int argc, /* I - Number of comm
-
- #if defined(HAVE_LAUNCHD) || defined(HAVE_SYSTEMD)
- if (OnDemand)
-+ {
- cupsdAddEvent(CUPSD_EVENT_SERVER_STARTED, NULL, NULL, "Scheduler started on demand.");
-+# ifdef HAVE_SYSTEMD
-+ sd_notifyf(0, "READY=1\n"
-+ "STATUS=Scheduler is running...\n"
-+ "MAINPID=%lu",
-+ (unsigned long) getpid());
-+# endif /* HAVE_SYSTEMD */
-+ }
- else
- #endif /* HAVE_LAUNCHD || HAVE_SYSTEMD */
- if (fg)
---- scheduler/org.cups.cupsd.path.in.orig 2014-03-21 15:50:24.000000000 +0100
-+++ scheduler/org.cups.cupsd.path.in 2015-09-01 11:20:37.000000000 +0200
-@@ -3,6 +3,7 @@ Description=CUPS Scheduler
-
- [Path]
- PathExists=@CUPS_CACHEDIR@/org.cups.cupsd
-+PathExistsGlob=@CUPS_REQUESTS@/d*
-
- [Install]
- WantedBy=multi-user.target
---- scheduler/org.cups.cupsd.service.in.orig 2014-10-21 13:54:05.000000000 +0200
-+++ scheduler/org.cups.cupsd.service.in 2015-09-01 11:22:09.000000000 +0200
-@@ -1,10 +1,11 @@
- [Unit]
- Description=CUPS Scheduler
- Documentation=man:cupsd(8)
-+After=network.target
-
- [Service]
- ExecStart=@sbindir@/cupsd -l
--Type=simple
-+Type=notify
-
- [Install]
- Also=org.cups.cupsd.socket org.cups.cupsd.path
Index: cups-2.3.3op2-source.tar.gz
===================================================================
Binary file cups-2.3.3op2-source.tar.gz (revision 380) deleted
Index: cups-2.3.3op2-source.tar.gz.sig
===================================================================
Binary file cups-2.3.3op2-source.tar.gz.sig (revision 380) deleted
Index: fix-negotiate-authentication-between-CGIs-and-scheduler.patch
===================================================================
--- fix-negotiate-authentication-between-CGIs-and-scheduler.patch (revision 380)
+++ fix-negotiate-authentication-between-CGIs-and-scheduler.patch (deleted)
@@ -1,223 +0,0 @@
-From d4521ed0df7e625ccf2bc079bab6f48c46ef9bf9 Mon Sep 17 00:00:00 2001
-From: Samuel Cabrero <scabrero@suse.de>
-Date: Mon, 26 Oct 2020 17:35:22 +0100
-Subject: [PATCH 1/4] Avoid infinite loop in admin.cgi when negotiate is used
-
-SetAuthorizationString with NULL argument sets an empty string.
-
-Related: #5596
-
-Signed-off-by: Samuel Cabrero <scabrero@suse.de>
----
- cups/auth.c | 2 +-
- 1 file changed, 1 insertion(+), 1 deletion(-)
-
-diff --git a/cups/auth.c b/cups/auth.c
-index db45bbba6..f2409350a 100644
---- a/cups/auth.c
-+++ b/cups/auth.c
-@@ -295,7 +295,7 @@ cupsDoAuthentication(
- }
- }
-
-- if (http->authstring)
-+ if (http->authstring && http->authstring[0])
- {
- DEBUG_printf(("1cupsDoAuthentication: authstring=\"%s\".", http->authstring));
-
---
-2.30.2
-
-
-From 61ad7780bc7d0593e3225d088ac6dff31badf801 Mon Sep 17 00:00:00 2001
-From: Samuel Cabrero <scabrero@suse.de>
-Date: Tue, 27 Oct 2020 16:11:41 +0100
-Subject: [PATCH 2/4] Add cups_is_local_connection() to check if connection is
- to localhost
-
-Related: #5596
-
-Signed-off-by: Samuel Cabrero <scabrero@suse.de>
----
- cups/auth.c | 11 ++++++++++-
- 1 file changed, 10 insertions(+), 1 deletion(-)
-
-diff --git a/cups/auth.c b/cups/auth.c
-index f2409350a..d2956438d 100644
---- a/cups/auth.c
-+++ b/cups/auth.c
-@@ -90,6 +90,7 @@ static void cups_gss_printf(OM_uint32 major_status, OM_uint32 minor_status,
- # define cups_gss_printf(major, minor, message)
- # endif /* DEBUG */
- #endif /* HAVE_GSSAPI */
-+static int cups_is_local_connection(http_t *http);
- static int cups_local_auth(http_t *http);
-
-
-@@ -916,6 +917,14 @@ cups_gss_printf(OM_uint32 major_status,/* I - Major status code */
- # endif /* DEBUG */
- #endif /* HAVE_GSSAPI */
-
-+static int /* O - 0 if not a local connection */
-+ /* 1 if local connection */
-+cups_is_local_connection(http_t *http) /* I - HTTP connection to server */
-+{
-+ if (!httpAddrLocalhost(http->hostaddr) && _cups_strcasecmp(http->hostname, "localhost") != 0)
-+ return 0;
-+ return 1;
-+}
-
- /*
- * 'cups_local_auth()' - Get the local authorization certificate if
-@@ -958,7 +967,7 @@ cups_local_auth(http_t *http) /* I - HTTP connection to server */
- * See if we are accessing localhost...
- */
-
-- if (!httpAddrLocalhost(http->hostaddr) && _cups_strcasecmp(http->hostname, "localhost") != 0)
-+ if (!cups_is_local_connection(http))
- {
- DEBUG_puts("8cups_local_auth: Not a local connection!");
- return (1);
---
-2.30.2
-
-
-From f629d079750a86b1b605c285f99c0dea3933ca50 Mon Sep 17 00:00:00 2001
-From: Samuel Cabrero <scabrero@suse.de>
-Date: Tue, 27 Oct 2020 16:23:30 +0100
-Subject: [PATCH 3/4] Try local kerberos ccache credentials only for remote
- servers
-
-If connecting to localhost then proceed to ask the client for the
-authorization using cupsGetPassword2. The get password callback will
-return 401 to the client with WWW-Authenticate: Negotiate.
-
-Fixes: #5596
-
-Signed-off-by: Samuel Cabrero <scabrero@suse.de>
----
- cups/auth.c | 10 ++++++----
- 1 file changed, 6 insertions(+), 4 deletions(-)
-
-diff --git a/cups/auth.c b/cups/auth.c
-index d2956438d..9661657fc 100644
---- a/cups/auth.c
-+++ b/cups/auth.c
-@@ -175,10 +175,10 @@ cupsDoAuthentication(
- DEBUG_printf(("2cupsDoAuthentication: Trying scheme \"%s\"...", scheme));
-
- #ifdef HAVE_GSSAPI
-- if (!_cups_strcasecmp(scheme, "Negotiate"))
-+ if (!_cups_strcasecmp(scheme, "Negotiate") && !cups_is_local_connection(http))
- {
- /*
-- * Kerberos authentication...
-+ * Kerberos authentication to remote server...
- */
-
- int gss_status; /* Auth status */
-@@ -202,7 +202,9 @@ cupsDoAuthentication(
- }
- else
- #endif /* HAVE_GSSAPI */
-- if (_cups_strcasecmp(scheme, "Basic") && _cups_strcasecmp(scheme, "Digest"))
-+ if (_cups_strcasecmp(scheme, "Basic") &&
-+ _cups_strcasecmp(scheme, "Digest") &&
-+ _cups_strcasecmp(scheme, "Negotiate"))
- {
- /*
- * Other schemes not yet supported...
-@@ -216,7 +218,7 @@ cupsDoAuthentication(
- * See if we should retry the current username:password...
- */
-
-- if ((http->digest_tries > 1 || !http->userpass[0]) && (!_cups_strcasecmp(scheme, "Basic") || (!_cups_strcasecmp(scheme, "Digest"))))
-+ if (http->digest_tries > 1 || !http->userpass[0])
- {
- /*
- * Nope - get a new password from the user...
---
-2.30.2
-
-
-From 0563a28b18b21d5574a5e0e38b74246146074bbf Mon Sep 17 00:00:00 2001
-From: Samuel Cabrero <scabrero@suse.de>
-Date: Tue, 27 Oct 2020 16:18:03 +0100
-Subject: [PATCH 4/4] Allow Local authentication for Negotiate
-
-PeerCred is also possible if address family is AF_LOCAL. This will allow
-the CGI programs to generate the authorization from the local
-certificates based on PID also when Negotiate is used for local
-connections:
-
-Client CGI
-Browser <- Remote conn -> admin.cgi <--- Localhost conn ---> Scheduler
- | | |
- + --- HTTP/POST /admin/ --> | |
- | + --- CUPS-Get-Devices ------------> |
- | | |
- | | <-- 401 Unauthorized --------------+
- | | WWW-Authenticate: |
- | | Negotiate, (PeerCred,) Local |
- | | |
- | <-- 401 Unauthorized -----+ |
- | WWW-Authenticate: | |
- | Negotiate | |
- | | |
- | --- HTTP/POST /admin/ --> | |
- | Authorization: + --- IPP CUPS-GetDevices ---------> |
- | Negotiate | Authorization: Local <cert> |
- | | |
-
-Fixes: #5596
-
-Signed-off-by: Samuel Cabrero <scabrero@suse.de>
----
- cups/auth.c | 5 -----
- scheduler/client.c | 9 ++-------
- 2 files changed, 2 insertions(+), 12 deletions(-)
-
-diff --git a/cups/auth.c b/cups/auth.c
-index 9661657fc..b6fec6b98 100644
---- a/cups/auth.c
-+++ b/cups/auth.c
-@@ -1043,11 +1043,6 @@ cups_local_auth(http_t *http) /* I - HTTP connection to server */
- }
- # endif /* HAVE_AUTHORIZATION_H */
-
--# ifdef HAVE_GSSAPI
-- if (cups_auth_find(www_auth, "Negotiate"))
-- return (1);
--# endif /* HAVE_GSSAPI */
--
- # if defined(SO_PEERCRED) && defined(AF_LOCAL)
- /*
- * See if we can authenticate using the peer credentials provided over a
-diff --git a/scheduler/client.c b/scheduler/client.c
-index c2ee8f12a..56797d58d 100644
---- a/scheduler/client.c
-+++ b/scheduler/client.c
-@@ -2109,18 +2109,13 @@ cupsdSendHeader(
- }
- else if (auth_type == CUPSD_AUTH_NEGOTIATE)
- {
--#if defined(SO_PEERCRED) && defined(AF_LOCAL)
-- if (httpAddrFamily(httpGetAddress(con->http)) == AF_LOCAL)
-- strlcpy(auth_str, "PeerCred", sizeof(auth_str));
-- else
--#endif /* SO_PEERCRED && AF_LOCAL */
- strlcpy(auth_str, "Negotiate", sizeof(auth_str));
- }
-
-- if (con->best && auth_type != CUPSD_AUTH_NEGOTIATE && !con->is_browser && !_cups_strcasecmp(httpGetHostname(con->http, NULL, 0), "localhost"))
-+ if (con->best && !con->is_browser && !_cups_strcasecmp(httpGetHostname(con->http, NULL, 0), "localhost"))
- {
- /*
-- * Add a "trc" (try root certification) parameter for local non-Kerberos
-+ * Add a "trc" (try root certification) parameter for local
- * requests when the request requires system group membership - then the
- * client knows the root certificate can/should be used.
- *
---
-2.30.2
-
Index: upstream_pull_174.patch
===================================================================
--- upstream_pull_174.patch (revision 380)
+++ upstream_pull_174.patch (deleted)
@@ -1,53 +0,0 @@
-From c37d71b1a31d26a4790166e2508822b18934a5c0 Mon Sep 17 00:00:00 2001
-From: Zdenek Dohnal <zdohnal@redhat.com>
-Date: Tue, 13 Apr 2021 15:44:14 +0200
-Subject: [PATCH 1/2] backend/usb-libusb.c: Use 60s timeout for reading at
- backchannel
-
-Some older models malfunction if timeout is too short.
----
- CHANGES.md | 1 +
- backend/usb-libusb.c | 2 +-
- 2 files changed, 2 insertions(+), 1 deletion(-)
-
---- a/backend/usb-libusb.c
-+++ b/backend/usb-libusb.c
-@@ -1704,7 +1704,7 @@ static void *read_thread(void *reference)
- readstatus = libusb_bulk_transfer(g.printer->handle,
- g.printer->read_endp,
- readbuffer, rbytes,
-- &rbytes, 250);
-+ &rbytes, 60000);
- if (readstatus == LIBUSB_SUCCESS && rbytes > 0)
- {
- fprintf(stderr, "DEBUG: Read %d bytes of back-channel data...\n", (int)rbytes);
-
-From 4cb6f6806cdbe040d478b266a1d351b19341dd79 Mon Sep 17 00:00:00 2001
-From: Zdenek Dohnal <zdohnal@redhat.com>
-Date: Tue, 13 Apr 2021 15:47:37 +0200
-Subject: [PATCH 2/2] backend/usb-libusb.c: Revert enforcing read limits
-
-This commit reverts the change introduced by 2.2.12 [1] - its
-implementation caused a regression with Lexmark filters.
-
-[1]
-https://github.com/apple/cups/commit/35e927f83529cd9b4bc37bcd418c50e307fced35
----
- CHANGES.md | 1 +
- backend/usb-libusb.c | 3 ++-
- 2 files changed, 3 insertions(+), 1 deletion(-)
-
-diff --git a/backend/usb-libusb.c b/backend/usb-libusb.c
-index fbb0d9d89..89b5182f7 100644
---- a/backend/usb-libusb.c
-+++ b/backend/usb-libusb.c
-@@ -1721,7 +1721,8 @@ static void *read_thread(void *reference)
- * Make sure this loop executes no more than once every 250 miliseconds...
- */
-
-- if ((g.wait_eof || !g.read_thread_stop))
-+ if ((readstatus != LIBUSB_SUCCESS || rbytes == 0) &&
-+ (g.wait_eof || !g.read_thread_stop))
- usleep(250000);
- }
- while (g.wait_eof || !g.read_thread_stop);
OBS-URL: https://build.opensuse.org/request/show/958348
OBS-URL: https://build.opensuse.org/package/show/Printing/cups?expand=0&rev=381
2022-03-03 13:19:05 +01:00
|
|
|
|
* The IPP backend now retries Validate-Job requests (Issue #132)
|
2022-03-04 09:58:18 +01:00
|
|
|
|
* Now show better error messages when a driver interface program
|
|
|
|
|
fails to provide a PPD file (Issue #148)
|
Accepting request 958348 from home:ajoga:branches:openSUSE:Factory
- Version upgrade to 2.4.1
- Dropped patch upstream_pull_174 because it it is included in this release
- Dropped patch cups-2.1.0-cups-systemd-socket.patch because it it is included in this release (https://github.com/OpenPrinting/cups/commit/e96e96b4bd0d4e6f634bbb66b95d6e475501541c)
- Changed upstream source packages signing key (https://github.com/OpenPrinting/cups/discussions/327#discussioncomment-2060579)
- Re-enabled testsuite
* Also removed make check because since upstream change the two target are identical (https://github.com/OpenPrinting/cups/commit/96ba46ebc818b610b0e40cbc9d62ef1dcd3ec9b6#diff-76ed074a9305c04054cdebb9e9aad2d818052b07091de1f20cad0bbac34ffb52R239)
- Changed cups-2.1.0-cups-systemd-socket.patch to accomodate new coding style
- Changed cups-config-libs.orig to accommodate recent code changes (SSL->TLS)
- Changed cups-2.1.0-default-webcontent-path.patch to accommodate code changes
old: Printing/cups
new: home:ajoga:branches:openSUSE:Factory/cups rev None
Index: cups-2.1.0-default-webcontent-path.patch
===================================================================
--- cups-2.1.0-default-webcontent-path.patch (revision 380)
+++ cups-2.1.0-default-webcontent-path.patch (revision 2)
@@ -1,17 +1,21 @@
---- config-scripts/cups-directories.m4.orig 2014-03-21 17:42:53.000000000 +0100
-+++ config-scripts/cups-directories.m4 2015-09-01 11:08:43.000000000 +0200
-@@ -206,11 +206,11 @@ fi
- AC_SUBST(MENUDIR)
+--- config-scripts/cups-directories.m4
++++ config-scripts/cups-directories.m4.orig
+@@ -166,15 +166,15 @@ AS_IF([test "x$menudir" = x], [
+ AC_SUBST([MENUDIR])
# Documentation files
--AC_ARG_WITH(docdir, [ --with-docdir set path for documentation],docdir="$withval",docdir="")
-+AC_ARG_WITH(docdir, [ --with-docdir set path and DocumentRoot directive for web content, default=datadir/cups/webcontent],docdir="$withval",docdir="")
+-AC_ARG_WITH([docdir], AS_HELP_STRING([--with-docdir], [set path for documentation]), [
++AC_ARG_WITH([docdir], AS_HELP_STRING([--with-docdir], [set path and DocumentRoot directive for web content, default=datadir/cups/webcontent]), [
+ docdir="$withval"
+ ], [
+ docdir=""
+ ])
- if test x$docdir = x; then
-- CUPS_DOCROOT="$datadir/doc/cups"
-- docdir="$datadir/doc/cups"
-+ CUPS_DOCROOT="$datadir/cups/webcontent"
-+ docdir="$datadir/cups/webcontent"
- else
- CUPS_DOCROOT="$docdir"
- fi
+ AS_IF([test x$docdir = x], [
+- CUPS_DOCROOT="$datadir/doc/cups"
+- docdir="$datadir/doc/cups"
++ CUPS_DOCROOT="$datadir/cups/webcontent"
++ docdir="$datadir/cups/webcontent"
+ ], [
+ CUPS_DOCROOT="$docdir"
+ ])
Index: cups-config-libs.patch
===================================================================
--- cups-config-libs.patch (revision 380)
+++ cups-config-libs.patch (revision 2)
@@ -4,7 +4,7 @@
# flags for compiler and linker...
CFLAGS=""
LDFLAGS="@EXPORT_LDFLAGS@"
--LIBS="@LIBGSSAPI@ @DNSSDLIBS@ @EXPORT_SSLLIBS@ @LIBZ@ @LIBS@"
+-LIBS="@LIBGSSAPI@ @DNSSDLIBS@ @EXPORT_TLSLIBS@ @LIBZ@ @LIBS@"
+LIBS=""
# Check for local invocation...
Index: cups.changes
===================================================================
--- cups.changes (revision 380)
+++ cups.changes (revision 2)
@@ -1,4 +1,88 @@
-------------------------------------------------------------------
+Tue Mar 1 18:16:11 UTC 2022 - Aurélien Joga <aurelienjoga@gmail.com>
+
+- Version upgrade to 2.4.1:
+ * The default color mode now is now configurable and defaults to the printer's reported default mode (Issue #277)
+ * Configuration script now checks linking for -Wl,-pie flags (Issue #303)
+ * Fixed memory leaks - in testi18n (Issue #313), in cups_enum_dests() (Issue #317), in _cupsEncodeOption() and http_tls_upgrade() (Issue #322)
+ * Fixed missing bracket in de/index.html (Issue #299)
+ * Fixed typos in configuration scripts (Issues #304, #316)
+ * Removed remaining legacy code for RIP_MAX_CACHE environment variable (Issue #323)
+ * Removed deprecated directives from cupsctl and cups-files.conf (Issue #300)
+ * Removed purge-jobs legacy code from CGI scripts and templates (Issue #325)
+ * Added configure option --with-idle-exit-timeout (Issue #294)
+ * Added --with-systemd-timeoutstartsec configure option (Issue #298)
+ * DigestOptions now are applied for MD5 Digest authentication defined by RFC 2069 as well (Issue #287)
+ * Fixed compilation on Solaris (Issue #293)
+ * Fixed and improved German translations (Issue #296, Issue #297)
+ * Added warning and debug messages when loading printers if the queue is raw or with driver (Issue #286)
+ * Compilation now uses -fstack-protector-strong if available (Issue #285)
+ * Added support for CUPS running in a Snapcraft snap.
+ * Added basic OAuth 2.0 client support (Issue #100)
+ * Added support for AirPrint and Mopria clients (Issue #105)
+ * Added configure support for specifying systemd dependencies in the CUPS service file (Issue #144)
+ * Added several features and improvements to ipptool (Issue #153)
+ * Added a JSON output mode for ipptool.
+ * The ipptool command now correctly reports an error when a test file cannot be found.
+ * CUPS library now uses thread safe getpwnam_r and getpwuid_r functions (Issue #274)
+ * Fixed Kerberos authentication for the web interface (Issue #19)
+ * The ZPL sample driver now supports more "standard" label sizes (Issue #70)
+ * Fixed reporting of printer instances when enumerating and when no options are set for the main instance (Issue #71)
+ * Reverted USB read limit enforcement change from CUPS 2.2.12 (Issue #72)
+ * The IPP backend did not return the correct status code when a job was canceled at the printer/server (Issue #74)
+ * The testlang unit test program now loops over all of the available locales by default (Issue #85)
+ * The cupsfilter command now shows error messages when options are used incorrectly (Issue #88)
+ * The PPD functions now treat boolean values as case-insensitive (Issue #106)
+ * Temporary queue names no longer end with an underscore (Issue #110)
+ * The USB backend now runs as root (Issue #121)
+ * Added pkg-config file for libcups (Issue #122)
+ * Fixed a PPD memory leak caused by emulator definitions (Issue #124)
+ * Fixed a DISPLAY bug in ipptool (Issue #139)
+ * The scheduler now includes the [Job N] prefix for job log messages, even when using syslog logging (Issue #154)
+ * Added support for locales using the GB18030 character set (Issue #159)
+ * httpReconnect2 did not reset the socket file descriptor when the TLS negotiation failed (Apple #5907)
+ * httpUpdate did not reset the socket file descriptor when the TLS negotiation failed (Apple #5915)
+ * The IPP backend now retries Validate-Job requests (Issue #132)
+ * Now show better error messages when a driver interface program fails to provide a PPD file (Issue #148)
+ * Added dark mode support to the CUPS web interface (Issue #152)
+ * Added a workaround for Solaris in httpAddrConnect2 (Issue #156)
+ * Fixed an interaction between --remote-admin and --remote-any for the cupsctl command (Issue #158)
+ * Now use a 60 second timeout for reading USB backchannel data (Issue #160)
+ * The USB backend now tries harder to find a serial number (Issue #170)
+ * Fixed @IF(name) handling in cupsd.conf (Apple #5918)
+ * Fixed documentation and added examples for CUPS' limited CGI support (Apple #5940)
+ * Fixed the lpc command prompt (Apple #5946)
+ * Now always pass "localhost" in the Host: header when talking over a domain socket or the loopback interface (Issue #185)
+ * Fixed a job history update issue in the scheduler (Issue #187)
+ * Fixed job-pages-per-set value for duplex print jobs.
+ * Fixed an edge case in ippReadIO to make sure that only complete attributes and values are retained on an error (Issue #195)
+ * Hardened ippReadIO to prevent invalid IPP messages from being propagated (Issue #195, Issue #196)
+ * The scheduler now supports the "everywhere" model directly (Issue #201)
+ * Fixed some IPP Everywhere option mapping problems (Issue #238)
+ * Fixed support for "job-hold-until" with the Restart-Job operation (Issue #250)
+ * Fixed the default color/grayscale presets for IPP Everywhere PPDs (Issue #262)
+ * Fixed support for the 'offline-report' state for all USB backends (Issue #264)
+ * Documentation fixes (Issue #92, Issue #163, Issue #177, Issue #184)
+ * Localization updates (Issue #123, Issue #129, Issue #134, Issue #146, Issue #164)
+ * USB quirk updates (Issue #192, Issue #270, Apple #5766, Apple #5838, Apple #5843, Apple #5867)
+ * Web interface updates (Issue #142, Issue #218)
+ * The ippeveprinter tool now automatically uses an available port.
+ * Fixed several Windows TLS and hashing issues.
+ * Deprecated cups-config (Issue #97)
+ * Deprecated Kerberos (AuthType Negotiate) authentication (Issue #98)
+ * Removed support for the (long deprecated and unused) FontPath, ListenBackLog, LPDConfigFile, KeepAliveTimeout, RIPCache, and SMBConfigFile directives in cupsd.conf and cups-files.conf.
+ * Stubbed out deprecated httpMD5 functions.
+ * Add test for undefined page ranges during printing.
+- Dropped patch upstream_pull_174 because it it is included in this release
+- Dropped patch cups-2.1.0-cups-systemd-socket.patch because it it is included in this release (https://github.com/OpenPrinting/cups/commit/e96e96b4bd0d4e6f634bbb66b95d6e475501541c)
+- Changed upstream source packages signing key (https://github.com/OpenPrinting/cups/discussions/327#discussioncomment-2060579)
+- Re-enabled testsuite
+ * Also removed make check because since upstream change the two target are identical (https://github.com/OpenPrinting/cups/commit/96ba46ebc818b610b0e40cbc9d62ef1dcd3ec9b6#diff-76ed074a9305c04054cdebb9e9aad2d818052b07091de1f20cad0bbac34ffb52R239)
+- Changed cups-2.1.0-cups-systemd-socket.patch to accomodate new coding style
+- Changed cups-config-libs.orig to accommodate recent code changes (SSL->TLS)
+- Changed cups-2.1.0-default-webcontent-path.patch to accommodate code changes
+
+-------------------------------------------------------------------
Tue Feb 1 09:18:27 UTC 2022 - jsmeix@suse.de
- Enhanced harden_cups.service.patch by adding
Index: cups.keyring
===================================================================
Binary files cups.keyring (revision 380) and cups.keyring (revision 2) differ
Index: cups.spec
===================================================================
--- cups.spec (revision 380)
+++ cups.spec (revision 2)
@@ -18,9 +18,7 @@
# Cf. https://rpm.org/user_doc/conditional_builds.html
# by default enable testsuite (i.e. in the 'check' section run make check and make test)
-#bcond_without testsuite
-# disable testsuite for now until https://github.com/OpenPrinting/cups/issues/155 is fixed
-%bcond_with testsuite
+%bcond_without testsuite
# _tmpfilesdir is not defined in systemd macros up to openSUSE 13.2
%{!?_tmpfilesdir: %global _tmpfilesdir /usr/lib/tmpfiles.d }
@@ -29,34 +27,32 @@
# "zypper vcmp 2.3.b99 2.3.0" shows "2.3.b99 is older than 2.3.0" and
# "zypper vcmp 2.2.99 2.3b6" show "2.2.99 is older than 2.3b6" so that
# version upgrades from 2.2.x via 2.3.b* to 2.3.0 work:
-Version: 2.3.3op2
+Version: 2.4.1
Release: 0
Summary: The Common UNIX Printing System
License: Apache-2.0
Group: Hardware/Printing
URL: https://openprinting.github.io/cups
# To get Source0 go to https://github.com/OpenPrinting/cups/releases or use e.g.
-# wget --no-check-certificate -O cups-2.3.3op2-source.tar.gz https://github.com/OpenPrinting/cups/releases/download/v2.3.3op2/cups-2.3.3op2-source.tar.gz
-Source0: https://github.com/OpenPrinting/cups/releases/download/v2.3.3op2/cups-2.3.3op2-source.tar.gz
+# wget --no-check-certificate -O cups-2.4.1-source.tar.gz https://github.com/OpenPrinting/cups/releases/download/v2.4.1/cups-2.4.1-source.tar.gz
+Source0: https://github.com/OpenPrinting/cups/releases/download/v2.4.1/cups-2.4.1-source.tar.gz
# To get Source1 go to https://github.com/OpenPrinting/cups/releases or use e.g.
-# wget --no-check-certificate -O cups-2.3.3op2-source.tar.gz.sig https://github.com/OpenPrinting/cups/releases/download/v2.3.3op2/cups-2.3.3op2-source.tar.gz.sig
-Source1: https://github.com/OpenPrinting/cups/releases/download/v2.3.3op2/cups-2.3.3op2-source.tar.gz.sig
-# To get Source2 go to https://www.msweet.org/pgp.html
-# PGP Fingerprint: 845464660B686AAB36540B6F999559A027815955
+# wget --no-check-certificate -O cups-2.4.1-source.tar.gz.sig https://github.com/OpenPrinting/cups/releases/download/v2.4.1/cups-2.4.1-source.tar.gz.sig
+Source1: https://github.com/OpenPrinting/cups/releases/download/v2.4.1/cups-2.4.1-source.tar.gz.sig
+# To get Source2 use gpg --keyserver keys.openpgp.org --recv-keys 7082A0A50A2E92640F3880E0E4522DCC9B246FF7
+# See https://github.com/OpenPrinting/cups/discussions/327#discussioncomment-2060579
+# PGP Fingerprint: 7082A0A50A2E92640F3880E0E4522DCC9B246FF7
Source2: cups.keyring
# To manually verify Source0 with Source1 and Source2 do e.g.
# gpg --import cups.keyring
-# gpg --list-keys | grep -1 'Michael R Sweet' | grep -v 'expired'
-# gpg --verify cups-2.3.3op2-source.tar.gz.sig cups-2.3.3op2-source.tar.gz
+# gpg --list-keys | grep -1 'Zdenek Dohnal'
+# gpg --verify cups-2.4.1-source.tar.gz.sig cups-2.4.1-source.tar.gz
Source102: Postscript.ppd.gz
Source105: Postscript-level1.ppd.gz
Source106: Postscript-level2.ppd.gz
Source108: cups-client.conf
Source109: baselibs.conf
# Patch0...Patch9 is for patches from upstream:
-# Patch1 upstream_pull_174.patch is https://github.com/OpenPrinting/cups/pull/174
-# Use 60s timeout for read_thread, revert read limits
-Patch1: upstream_pull_174.patch
# Source10...Source99 is for sources from SUSE which are intended for upstream:
# Patch10...Patch99 is for patches from SUSE which are intended for upstream:
# Patch10 cups-2.1.0-choose-uri-template.patch adds 'smb://...' URIs to templates/choose-uri.tmpl:
@@ -66,8 +62,6 @@
# because the files of the CUPS web content are no documentation, see CUPS STR #3578
# and http://bugzilla.novell.com/show_bug.cgi?id=546023#c6 and subsequent comments:
Patch11: cups-2.1.0-default-webcontent-path.patch
-# Patch12 cups-2.1.0-cups-systemd-socket.patch Use systemd socket activation properly:
-Patch12: cups-2.1.0-cups-systemd-socket.patch
# Patch100...Patch999 is for private patches from SUSE which are not intended for upstream:
# Patch100 cups-pam.diff adds conf/pam.suse regarding support for PAM for SUSE:
Patch100: cups-pam.diff
@@ -83,9 +77,9 @@
Patch103: cups-1.4-do_not_strip_recommended_from_PPDs.patch
# Patch104 cups-config-libs.patch fixes option --libs in cups-config script:
Patch104: cups-config-libs.patch
-# Patch106 Fixes web UI Kerberos authentication (bsc#1175960)
-Patch106: fix-negotiate-authentication-between-CGIs-and-scheduler.patch
Patch107: harden_cups.service.patch
+# Patch108 downgrades the autoconf requirement to the autoconf available in tumbleweed as of writing
+Patch108: downgrade-autoconf-requirement.patch
# Build Requirements:
BuildRequires: dbus-1-devel
BuildRequires: fdupes
@@ -280,9 +274,6 @@
%prep
%setup -q
# Patch0...Patch9 is for patches from upstream:
-# Patch1 upstream_pull_174.patch is https://github.com/OpenPrinting/cups/pull/174
-# Use 60s timeout for read_thread, revert read limits
-%patch1 -p1
# Patch10...Patch99 is for patches from SUSE which are intended for upstream:
# Patch10 cups-2.1.0-choose-uri-template.patch adds 'smb://...' URIs to templates/choose-uri.tmpl:
%patch10 -b choose-uri-template.orig
@@ -291,8 +282,6 @@
# because the files of the CUPS web content are no documentation, see CUPS STR #3578
# and http://bugzilla.novell.com/show_bug.cgi?id=546023#c6 and subsequent comments:
%patch11 -b default-webcontent-path.orig
-# Patch12 cups-2.1.0-cups-systemd-socket.patch Use systemd socket activation properly:
-#patch12 -b cups-systemd-socket.orig
# Patch100...Patch999 is for private patches from SUSE which are not intended for upstream:
# Patch100 cups-pam.diff adds conf/pam.suse regarding support for PAM for SUSE:
%patch100 -b cups-pam.orig
@@ -308,9 +297,8 @@
%patch103 -b do_not_strip_recommended_from_PPDs.orig
# Patch104 cups-config-libs.patch fixes option --libs in cups-config script:
%patch104 -b cups-config-libs.orig
-# Patch106 Fixes web UI Kerberos authentication (bsc#1175960)
-%patch106 -p1
%patch107 -p1
+%patch108 -p1
%build
# Remove ".SILENT" rule for verbose build output
@@ -439,8 +427,6 @@
# There appears to be some kind of race condition when running make check and make test
# cf. https://github.com/OpenPrinting/cups/issues/155
# We print all logs for debugging purposes if either testsuite fails
-echo "DEBUG: running make check"
-bash -c 'make %{?_smp_mflags} check; EXIT=$?; if [ $EXIT -ne 0 ]; then cat test/*_log*-$(whoami); fi; exit $EXIT'
echo "DEBUG: running make test"
bash -c 'make %{?_smp_mflags} test; EXIT=$?; if [ $EXIT -ne 0 ]; then cat test/*_log*-$(whoami); fi; exit $EXIT'
%else
@@ -681,6 +667,7 @@
%files devel
%defattr(-,root,root)
+/usr/lib/pkgconfig/cups.pc
%{_includedir}/cups/
%{_libdir}/libcups.so
%{_libdir}/libcupsimage.so
Index: cups-2.4.1-source.tar.gz
===================================================================
Binary file cups-2.4.1-source.tar.gz (revision 2) added
Index: cups-2.4.1-source.tar.gz.sig
===================================================================
Binary file cups-2.4.1-source.tar.gz.sig (revision 2) added
Index: downgrade-autoconf-requirement.patch
===================================================================
--- downgrade-autoconf-requirement.patch (added)
+++ downgrade-autoconf-requirement.patch (revision 2)
@@ -0,0 +1,15 @@
+diff --git a/configure.ac b/configure.ac
+index a8c6c1040..6ace74a8d 100644
+--- a/configure.ac
++++ b/configure.ac
+@@ -9,8 +9,8 @@ dnl Licensed under Apache License v2.0. See the file "LICENSE" for more
+ dnl information.
+ dnl
+
+-dnl We need at least autoconf 2.71...
+-AC_PREREQ([2.71])
++dnl We need at least autoconf 2.69...
++AC_PREREQ([2.69])
+
+ dnl Package name and version...
+ AC_INIT([CUPS],[2.4.1],[https://github.com/openprinting/cups/issues],[cups],[https://openprinting.github.io/cups])
Index: cups-2.1.0-cups-systemd-socket.patch
===================================================================
--- cups-2.1.0-cups-systemd-socket.patch (revision 380)
+++ cups-2.1.0-cups-systemd-socket.patch (deleted)
@@ -1,43 +0,0 @@
---- scheduler/main.c.orig 2015-06-08 20:32:35.000000000 +0200
-+++ scheduler/main.c 2015-09-01 11:19:36.000000000 +0200
-@@ -656,7 +656,15 @@ main(int argc, /* I - Number of comm
-
- #if defined(HAVE_LAUNCHD) || defined(HAVE_SYSTEMD)
- if (OnDemand)
-+ {
- cupsdAddEvent(CUPSD_EVENT_SERVER_STARTED, NULL, NULL, "Scheduler started on demand.");
-+# ifdef HAVE_SYSTEMD
-+ sd_notifyf(0, "READY=1\n"
-+ "STATUS=Scheduler is running...\n"
-+ "MAINPID=%lu",
-+ (unsigned long) getpid());
-+# endif /* HAVE_SYSTEMD */
-+ }
- else
- #endif /* HAVE_LAUNCHD || HAVE_SYSTEMD */
- if (fg)
---- scheduler/org.cups.cupsd.path.in.orig 2014-03-21 15:50:24.000000000 +0100
-+++ scheduler/org.cups.cupsd.path.in 2015-09-01 11:20:37.000000000 +0200
-@@ -3,6 +3,7 @@ Description=CUPS Scheduler
-
- [Path]
- PathExists=@CUPS_CACHEDIR@/org.cups.cupsd
-+PathExistsGlob=@CUPS_REQUESTS@/d*
-
- [Install]
- WantedBy=multi-user.target
---- scheduler/org.cups.cupsd.service.in.orig 2014-10-21 13:54:05.000000000 +0200
-+++ scheduler/org.cups.cupsd.service.in 2015-09-01 11:22:09.000000000 +0200
-@@ -1,10 +1,11 @@
- [Unit]
- Description=CUPS Scheduler
- Documentation=man:cupsd(8)
-+After=network.target
-
- [Service]
- ExecStart=@sbindir@/cupsd -l
--Type=simple
-+Type=notify
-
- [Install]
- Also=org.cups.cupsd.socket org.cups.cupsd.path
Index: cups-2.3.3op2-source.tar.gz
===================================================================
Binary file cups-2.3.3op2-source.tar.gz (revision 380) deleted
Index: cups-2.3.3op2-source.tar.gz.sig
===================================================================
Binary file cups-2.3.3op2-source.tar.gz.sig (revision 380) deleted
Index: fix-negotiate-authentication-between-CGIs-and-scheduler.patch
===================================================================
--- fix-negotiate-authentication-between-CGIs-and-scheduler.patch (revision 380)
+++ fix-negotiate-authentication-between-CGIs-and-scheduler.patch (deleted)
@@ -1,223 +0,0 @@
-From d4521ed0df7e625ccf2bc079bab6f48c46ef9bf9 Mon Sep 17 00:00:00 2001
-From: Samuel Cabrero <scabrero@suse.de>
-Date: Mon, 26 Oct 2020 17:35:22 +0100
-Subject: [PATCH 1/4] Avoid infinite loop in admin.cgi when negotiate is used
-
-SetAuthorizationString with NULL argument sets an empty string.
-
-Related: #5596
-
-Signed-off-by: Samuel Cabrero <scabrero@suse.de>
----
- cups/auth.c | 2 +-
- 1 file changed, 1 insertion(+), 1 deletion(-)
-
-diff --git a/cups/auth.c b/cups/auth.c
-index db45bbba6..f2409350a 100644
---- a/cups/auth.c
-+++ b/cups/auth.c
-@@ -295,7 +295,7 @@ cupsDoAuthentication(
- }
- }
-
-- if (http->authstring)
-+ if (http->authstring && http->authstring[0])
- {
- DEBUG_printf(("1cupsDoAuthentication: authstring=\"%s\".", http->authstring));
-
---
-2.30.2
-
-
-From 61ad7780bc7d0593e3225d088ac6dff31badf801 Mon Sep 17 00:00:00 2001
-From: Samuel Cabrero <scabrero@suse.de>
-Date: Tue, 27 Oct 2020 16:11:41 +0100
-Subject: [PATCH 2/4] Add cups_is_local_connection() to check if connection is
- to localhost
-
-Related: #5596
-
-Signed-off-by: Samuel Cabrero <scabrero@suse.de>
----
- cups/auth.c | 11 ++++++++++-
- 1 file changed, 10 insertions(+), 1 deletion(-)
-
-diff --git a/cups/auth.c b/cups/auth.c
-index f2409350a..d2956438d 100644
---- a/cups/auth.c
-+++ b/cups/auth.c
-@@ -90,6 +90,7 @@ static void cups_gss_printf(OM_uint32 major_status, OM_uint32 minor_status,
- # define cups_gss_printf(major, minor, message)
- # endif /* DEBUG */
- #endif /* HAVE_GSSAPI */
-+static int cups_is_local_connection(http_t *http);
- static int cups_local_auth(http_t *http);
-
-
-@@ -916,6 +917,14 @@ cups_gss_printf(OM_uint32 major_status,/* I - Major status code */
- # endif /* DEBUG */
- #endif /* HAVE_GSSAPI */
-
-+static int /* O - 0 if not a local connection */
-+ /* 1 if local connection */
-+cups_is_local_connection(http_t *http) /* I - HTTP connection to server */
-+{
-+ if (!httpAddrLocalhost(http->hostaddr) && _cups_strcasecmp(http->hostname, "localhost") != 0)
-+ return 0;
-+ return 1;
-+}
-
- /*
- * 'cups_local_auth()' - Get the local authorization certificate if
-@@ -958,7 +967,7 @@ cups_local_auth(http_t *http) /* I - HTTP connection to server */
- * See if we are accessing localhost...
- */
-
-- if (!httpAddrLocalhost(http->hostaddr) && _cups_strcasecmp(http->hostname, "localhost") != 0)
-+ if (!cups_is_local_connection(http))
- {
- DEBUG_puts("8cups_local_auth: Not a local connection!");
- return (1);
---
-2.30.2
-
-
-From f629d079750a86b1b605c285f99c0dea3933ca50 Mon Sep 17 00:00:00 2001
-From: Samuel Cabrero <scabrero@suse.de>
-Date: Tue, 27 Oct 2020 16:23:30 +0100
-Subject: [PATCH 3/4] Try local kerberos ccache credentials only for remote
- servers
-
-If connecting to localhost then proceed to ask the client for the
-authorization using cupsGetPassword2. The get password callback will
-return 401 to the client with WWW-Authenticate: Negotiate.
-
-Fixes: #5596
-
-Signed-off-by: Samuel Cabrero <scabrero@suse.de>
----
- cups/auth.c | 10 ++++++----
- 1 file changed, 6 insertions(+), 4 deletions(-)
-
-diff --git a/cups/auth.c b/cups/auth.c
-index d2956438d..9661657fc 100644
---- a/cups/auth.c
-+++ b/cups/auth.c
-@@ -175,10 +175,10 @@ cupsDoAuthentication(
- DEBUG_printf(("2cupsDoAuthentication: Trying scheme \"%s\"...", scheme));
-
- #ifdef HAVE_GSSAPI
-- if (!_cups_strcasecmp(scheme, "Negotiate"))
-+ if (!_cups_strcasecmp(scheme, "Negotiate") && !cups_is_local_connection(http))
- {
- /*
-- * Kerberos authentication...
-+ * Kerberos authentication to remote server...
- */
-
- int gss_status; /* Auth status */
-@@ -202,7 +202,9 @@ cupsDoAuthentication(
- }
- else
- #endif /* HAVE_GSSAPI */
-- if (_cups_strcasecmp(scheme, "Basic") && _cups_strcasecmp(scheme, "Digest"))
-+ if (_cups_strcasecmp(scheme, "Basic") &&
-+ _cups_strcasecmp(scheme, "Digest") &&
-+ _cups_strcasecmp(scheme, "Negotiate"))
- {
- /*
- * Other schemes not yet supported...
-@@ -216,7 +218,7 @@ cupsDoAuthentication(
- * See if we should retry the current username:password...
- */
-
-- if ((http->digest_tries > 1 || !http->userpass[0]) && (!_cups_strcasecmp(scheme, "Basic") || (!_cups_strcasecmp(scheme, "Digest"))))
-+ if (http->digest_tries > 1 || !http->userpass[0])
- {
- /*
- * Nope - get a new password from the user...
---
-2.30.2
-
-
-From 0563a28b18b21d5574a5e0e38b74246146074bbf Mon Sep 17 00:00:00 2001
-From: Samuel Cabrero <scabrero@suse.de>
-Date: Tue, 27 Oct 2020 16:18:03 +0100
-Subject: [PATCH 4/4] Allow Local authentication for Negotiate
-
-PeerCred is also possible if address family is AF_LOCAL. This will allow
-the CGI programs to generate the authorization from the local
-certificates based on PID also when Negotiate is used for local
-connections:
-
-Client CGI
-Browser <- Remote conn -> admin.cgi <--- Localhost conn ---> Scheduler
- | | |
- + --- HTTP/POST /admin/ --> | |
- | + --- CUPS-Get-Devices ------------> |
- | | |
- | | <-- 401 Unauthorized --------------+
- | | WWW-Authenticate: |
- | | Negotiate, (PeerCred,) Local |
- | | |
- | <-- 401 Unauthorized -----+ |
- | WWW-Authenticate: | |
- | Negotiate | |
- | | |
- | --- HTTP/POST /admin/ --> | |
- | Authorization: + --- IPP CUPS-GetDevices ---------> |
- | Negotiate | Authorization: Local <cert> |
- | | |
-
-Fixes: #5596
-
-Signed-off-by: Samuel Cabrero <scabrero@suse.de>
----
- cups/auth.c | 5 -----
- scheduler/client.c | 9 ++-------
- 2 files changed, 2 insertions(+), 12 deletions(-)
-
-diff --git a/cups/auth.c b/cups/auth.c
-index 9661657fc..b6fec6b98 100644
---- a/cups/auth.c
-+++ b/cups/auth.c
-@@ -1043,11 +1043,6 @@ cups_local_auth(http_t *http) /* I - HTTP connection to server */
- }
- # endif /* HAVE_AUTHORIZATION_H */
-
--# ifdef HAVE_GSSAPI
-- if (cups_auth_find(www_auth, "Negotiate"))
-- return (1);
--# endif /* HAVE_GSSAPI */
--
- # if defined(SO_PEERCRED) && defined(AF_LOCAL)
- /*
- * See if we can authenticate using the peer credentials provided over a
-diff --git a/scheduler/client.c b/scheduler/client.c
-index c2ee8f12a..56797d58d 100644
---- a/scheduler/client.c
-+++ b/scheduler/client.c
-@@ -2109,18 +2109,13 @@ cupsdSendHeader(
- }
- else if (auth_type == CUPSD_AUTH_NEGOTIATE)
- {
--#if defined(SO_PEERCRED) && defined(AF_LOCAL)
-- if (httpAddrFamily(httpGetAddress(con->http)) == AF_LOCAL)
-- strlcpy(auth_str, "PeerCred", sizeof(auth_str));
-- else
--#endif /* SO_PEERCRED && AF_LOCAL */
- strlcpy(auth_str, "Negotiate", sizeof(auth_str));
- }
-
-- if (con->best && auth_type != CUPSD_AUTH_NEGOTIATE && !con->is_browser && !_cups_strcasecmp(httpGetHostname(con->http, NULL, 0), "localhost"))
-+ if (con->best && !con->is_browser && !_cups_strcasecmp(httpGetHostname(con->http, NULL, 0), "localhost"))
- {
- /*
-- * Add a "trc" (try root certification) parameter for local non-Kerberos
-+ * Add a "trc" (try root certification) parameter for local
- * requests when the request requires system group membership - then the
- * client knows the root certificate can/should be used.
- *
---
-2.30.2
-
Index: upstream_pull_174.patch
===================================================================
--- upstream_pull_174.patch (revision 380)
+++ upstream_pull_174.patch (deleted)
@@ -1,53 +0,0 @@
-From c37d71b1a31d26a4790166e2508822b18934a5c0 Mon Sep 17 00:00:00 2001
-From: Zdenek Dohnal <zdohnal@redhat.com>
-Date: Tue, 13 Apr 2021 15:44:14 +0200
-Subject: [PATCH 1/2] backend/usb-libusb.c: Use 60s timeout for reading at
- backchannel
-
-Some older models malfunction if timeout is too short.
----
- CHANGES.md | 1 +
- backend/usb-libusb.c | 2 +-
- 2 files changed, 2 insertions(+), 1 deletion(-)
-
---- a/backend/usb-libusb.c
-+++ b/backend/usb-libusb.c
-@@ -1704,7 +1704,7 @@ static void *read_thread(void *reference)
- readstatus = libusb_bulk_transfer(g.printer->handle,
- g.printer->read_endp,
- readbuffer, rbytes,
-- &rbytes, 250);
-+ &rbytes, 60000);
- if (readstatus == LIBUSB_SUCCESS && rbytes > 0)
- {
- fprintf(stderr, "DEBUG: Read %d bytes of back-channel data...\n", (int)rbytes);
-
-From 4cb6f6806cdbe040d478b266a1d351b19341dd79 Mon Sep 17 00:00:00 2001
-From: Zdenek Dohnal <zdohnal@redhat.com>
-Date: Tue, 13 Apr 2021 15:47:37 +0200
-Subject: [PATCH 2/2] backend/usb-libusb.c: Revert enforcing read limits
-
-This commit reverts the change introduced by 2.2.12 [1] - its
-implementation caused a regression with Lexmark filters.
-
-[1]
-https://github.com/apple/cups/commit/35e927f83529cd9b4bc37bcd418c50e307fced35
----
- CHANGES.md | 1 +
- backend/usb-libusb.c | 3 ++-
- 2 files changed, 3 insertions(+), 1 deletion(-)
-
-diff --git a/backend/usb-libusb.c b/backend/usb-libusb.c
-index fbb0d9d89..89b5182f7 100644
---- a/backend/usb-libusb.c
-+++ b/backend/usb-libusb.c
-@@ -1721,7 +1721,8 @@ static void *read_thread(void *reference)
- * Make sure this loop executes no more than once every 250 miliseconds...
- */
-
-- if ((g.wait_eof || !g.read_thread_stop))
-+ if ((readstatus != LIBUSB_SUCCESS || rbytes == 0) &&
-+ (g.wait_eof || !g.read_thread_stop))
- usleep(250000);
- }
- while (g.wait_eof || !g.read_thread_stop);
OBS-URL: https://build.opensuse.org/request/show/958348
OBS-URL: https://build.opensuse.org/package/show/Printing/cups?expand=0&rev=381
2022-03-03 13:19:05 +01:00
|
|
|
|
* Added dark mode support to the CUPS web interface (Issue #152)
|
|
|
|
|
* Added a workaround for Solaris in httpAddrConnect2 (Issue #156)
|
2022-03-04 09:58:18 +01:00
|
|
|
|
* Fixed an interaction between --remote-admin and --remote-any
|
|
|
|
|
for the cupsctl command (Issue #158)
|
|
|
|
|
* Now use a 60 second timeout for reading USB backchannel
|
|
|
|
|
data (Issue #160)
|
|
|
|
|
* The USB backend now tries harder to find a serial
|
|
|
|
|
number (Issue #170)
|
Accepting request 958348 from home:ajoga:branches:openSUSE:Factory
- Version upgrade to 2.4.1
- Dropped patch upstream_pull_174 because it it is included in this release
- Dropped patch cups-2.1.0-cups-systemd-socket.patch because it it is included in this release (https://github.com/OpenPrinting/cups/commit/e96e96b4bd0d4e6f634bbb66b95d6e475501541c)
- Changed upstream source packages signing key (https://github.com/OpenPrinting/cups/discussions/327#discussioncomment-2060579)
- Re-enabled testsuite
* Also removed make check because since upstream change the two target are identical (https://github.com/OpenPrinting/cups/commit/96ba46ebc818b610b0e40cbc9d62ef1dcd3ec9b6#diff-76ed074a9305c04054cdebb9e9aad2d818052b07091de1f20cad0bbac34ffb52R239)
- Changed cups-2.1.0-cups-systemd-socket.patch to accomodate new coding style
- Changed cups-config-libs.orig to accommodate recent code changes (SSL->TLS)
- Changed cups-2.1.0-default-webcontent-path.patch to accommodate code changes
old: Printing/cups
new: home:ajoga:branches:openSUSE:Factory/cups rev None
Index: cups-2.1.0-default-webcontent-path.patch
===================================================================
--- cups-2.1.0-default-webcontent-path.patch (revision 380)
+++ cups-2.1.0-default-webcontent-path.patch (revision 2)
@@ -1,17 +1,21 @@
---- config-scripts/cups-directories.m4.orig 2014-03-21 17:42:53.000000000 +0100
-+++ config-scripts/cups-directories.m4 2015-09-01 11:08:43.000000000 +0200
-@@ -206,11 +206,11 @@ fi
- AC_SUBST(MENUDIR)
+--- config-scripts/cups-directories.m4
++++ config-scripts/cups-directories.m4.orig
+@@ -166,15 +166,15 @@ AS_IF([test "x$menudir" = x], [
+ AC_SUBST([MENUDIR])
# Documentation files
--AC_ARG_WITH(docdir, [ --with-docdir set path for documentation],docdir="$withval",docdir="")
-+AC_ARG_WITH(docdir, [ --with-docdir set path and DocumentRoot directive for web content, default=datadir/cups/webcontent],docdir="$withval",docdir="")
+-AC_ARG_WITH([docdir], AS_HELP_STRING([--with-docdir], [set path for documentation]), [
++AC_ARG_WITH([docdir], AS_HELP_STRING([--with-docdir], [set path and DocumentRoot directive for web content, default=datadir/cups/webcontent]), [
+ docdir="$withval"
+ ], [
+ docdir=""
+ ])
- if test x$docdir = x; then
-- CUPS_DOCROOT="$datadir/doc/cups"
-- docdir="$datadir/doc/cups"
-+ CUPS_DOCROOT="$datadir/cups/webcontent"
-+ docdir="$datadir/cups/webcontent"
- else
- CUPS_DOCROOT="$docdir"
- fi
+ AS_IF([test x$docdir = x], [
+- CUPS_DOCROOT="$datadir/doc/cups"
+- docdir="$datadir/doc/cups"
++ CUPS_DOCROOT="$datadir/cups/webcontent"
++ docdir="$datadir/cups/webcontent"
+ ], [
+ CUPS_DOCROOT="$docdir"
+ ])
Index: cups-config-libs.patch
===================================================================
--- cups-config-libs.patch (revision 380)
+++ cups-config-libs.patch (revision 2)
@@ -4,7 +4,7 @@
# flags for compiler and linker...
CFLAGS=""
LDFLAGS="@EXPORT_LDFLAGS@"
--LIBS="@LIBGSSAPI@ @DNSSDLIBS@ @EXPORT_SSLLIBS@ @LIBZ@ @LIBS@"
+-LIBS="@LIBGSSAPI@ @DNSSDLIBS@ @EXPORT_TLSLIBS@ @LIBZ@ @LIBS@"
+LIBS=""
# Check for local invocation...
Index: cups.changes
===================================================================
--- cups.changes (revision 380)
+++ cups.changes (revision 2)
@@ -1,4 +1,88 @@
-------------------------------------------------------------------
+Tue Mar 1 18:16:11 UTC 2022 - Aurélien Joga <aurelienjoga@gmail.com>
+
+- Version upgrade to 2.4.1:
+ * The default color mode now is now configurable and defaults to the printer's reported default mode (Issue #277)
+ * Configuration script now checks linking for -Wl,-pie flags (Issue #303)
+ * Fixed memory leaks - in testi18n (Issue #313), in cups_enum_dests() (Issue #317), in _cupsEncodeOption() and http_tls_upgrade() (Issue #322)
+ * Fixed missing bracket in de/index.html (Issue #299)
+ * Fixed typos in configuration scripts (Issues #304, #316)
+ * Removed remaining legacy code for RIP_MAX_CACHE environment variable (Issue #323)
+ * Removed deprecated directives from cupsctl and cups-files.conf (Issue #300)
+ * Removed purge-jobs legacy code from CGI scripts and templates (Issue #325)
+ * Added configure option --with-idle-exit-timeout (Issue #294)
+ * Added --with-systemd-timeoutstartsec configure option (Issue #298)
+ * DigestOptions now are applied for MD5 Digest authentication defined by RFC 2069 as well (Issue #287)
+ * Fixed compilation on Solaris (Issue #293)
+ * Fixed and improved German translations (Issue #296, Issue #297)
+ * Added warning and debug messages when loading printers if the queue is raw or with driver (Issue #286)
+ * Compilation now uses -fstack-protector-strong if available (Issue #285)
+ * Added support for CUPS running in a Snapcraft snap.
+ * Added basic OAuth 2.0 client support (Issue #100)
+ * Added support for AirPrint and Mopria clients (Issue #105)
+ * Added configure support for specifying systemd dependencies in the CUPS service file (Issue #144)
+ * Added several features and improvements to ipptool (Issue #153)
+ * Added a JSON output mode for ipptool.
+ * The ipptool command now correctly reports an error when a test file cannot be found.
+ * CUPS library now uses thread safe getpwnam_r and getpwuid_r functions (Issue #274)
+ * Fixed Kerberos authentication for the web interface (Issue #19)
+ * The ZPL sample driver now supports more "standard" label sizes (Issue #70)
+ * Fixed reporting of printer instances when enumerating and when no options are set for the main instance (Issue #71)
+ * Reverted USB read limit enforcement change from CUPS 2.2.12 (Issue #72)
+ * The IPP backend did not return the correct status code when a job was canceled at the printer/server (Issue #74)
+ * The testlang unit test program now loops over all of the available locales by default (Issue #85)
+ * The cupsfilter command now shows error messages when options are used incorrectly (Issue #88)
+ * The PPD functions now treat boolean values as case-insensitive (Issue #106)
+ * Temporary queue names no longer end with an underscore (Issue #110)
+ * The USB backend now runs as root (Issue #121)
+ * Added pkg-config file for libcups (Issue #122)
+ * Fixed a PPD memory leak caused by emulator definitions (Issue #124)
+ * Fixed a DISPLAY bug in ipptool (Issue #139)
+ * The scheduler now includes the [Job N] prefix for job log messages, even when using syslog logging (Issue #154)
+ * Added support for locales using the GB18030 character set (Issue #159)
+ * httpReconnect2 did not reset the socket file descriptor when the TLS negotiation failed (Apple #5907)
+ * httpUpdate did not reset the socket file descriptor when the TLS negotiation failed (Apple #5915)
+ * The IPP backend now retries Validate-Job requests (Issue #132)
+ * Now show better error messages when a driver interface program fails to provide a PPD file (Issue #148)
+ * Added dark mode support to the CUPS web interface (Issue #152)
+ * Added a workaround for Solaris in httpAddrConnect2 (Issue #156)
+ * Fixed an interaction between --remote-admin and --remote-any for the cupsctl command (Issue #158)
+ * Now use a 60 second timeout for reading USB backchannel data (Issue #160)
+ * The USB backend now tries harder to find a serial number (Issue #170)
+ * Fixed @IF(name) handling in cupsd.conf (Apple #5918)
+ * Fixed documentation and added examples for CUPS' limited CGI support (Apple #5940)
+ * Fixed the lpc command prompt (Apple #5946)
+ * Now always pass "localhost" in the Host: header when talking over a domain socket or the loopback interface (Issue #185)
+ * Fixed a job history update issue in the scheduler (Issue #187)
+ * Fixed job-pages-per-set value for duplex print jobs.
+ * Fixed an edge case in ippReadIO to make sure that only complete attributes and values are retained on an error (Issue #195)
+ * Hardened ippReadIO to prevent invalid IPP messages from being propagated (Issue #195, Issue #196)
+ * The scheduler now supports the "everywhere" model directly (Issue #201)
+ * Fixed some IPP Everywhere option mapping problems (Issue #238)
+ * Fixed support for "job-hold-until" with the Restart-Job operation (Issue #250)
+ * Fixed the default color/grayscale presets for IPP Everywhere PPDs (Issue #262)
+ * Fixed support for the 'offline-report' state for all USB backends (Issue #264)
+ * Documentation fixes (Issue #92, Issue #163, Issue #177, Issue #184)
+ * Localization updates (Issue #123, Issue #129, Issue #134, Issue #146, Issue #164)
+ * USB quirk updates (Issue #192, Issue #270, Apple #5766, Apple #5838, Apple #5843, Apple #5867)
+ * Web interface updates (Issue #142, Issue #218)
+ * The ippeveprinter tool now automatically uses an available port.
+ * Fixed several Windows TLS and hashing issues.
+ * Deprecated cups-config (Issue #97)
+ * Deprecated Kerberos (AuthType Negotiate) authentication (Issue #98)
+ * Removed support for the (long deprecated and unused) FontPath, ListenBackLog, LPDConfigFile, KeepAliveTimeout, RIPCache, and SMBConfigFile directives in cupsd.conf and cups-files.conf.
+ * Stubbed out deprecated httpMD5 functions.
+ * Add test for undefined page ranges during printing.
+- Dropped patch upstream_pull_174 because it it is included in this release
+- Dropped patch cups-2.1.0-cups-systemd-socket.patch because it it is included in this release (https://github.com/OpenPrinting/cups/commit/e96e96b4bd0d4e6f634bbb66b95d6e475501541c)
+- Changed upstream source packages signing key (https://github.com/OpenPrinting/cups/discussions/327#discussioncomment-2060579)
+- Re-enabled testsuite
+ * Also removed make check because since upstream change the two target are identical (https://github.com/OpenPrinting/cups/commit/96ba46ebc818b610b0e40cbc9d62ef1dcd3ec9b6#diff-76ed074a9305c04054cdebb9e9aad2d818052b07091de1f20cad0bbac34ffb52R239)
+- Changed cups-2.1.0-cups-systemd-socket.patch to accomodate new coding style
+- Changed cups-config-libs.orig to accommodate recent code changes (SSL->TLS)
+- Changed cups-2.1.0-default-webcontent-path.patch to accommodate code changes
+
+-------------------------------------------------------------------
Tue Feb 1 09:18:27 UTC 2022 - jsmeix@suse.de
- Enhanced harden_cups.service.patch by adding
Index: cups.keyring
===================================================================
Binary files cups.keyring (revision 380) and cups.keyring (revision 2) differ
Index: cups.spec
===================================================================
--- cups.spec (revision 380)
+++ cups.spec (revision 2)
@@ -18,9 +18,7 @@
# Cf. https://rpm.org/user_doc/conditional_builds.html
# by default enable testsuite (i.e. in the 'check' section run make check and make test)
-#bcond_without testsuite
-# disable testsuite for now until https://github.com/OpenPrinting/cups/issues/155 is fixed
-%bcond_with testsuite
+%bcond_without testsuite
# _tmpfilesdir is not defined in systemd macros up to openSUSE 13.2
%{!?_tmpfilesdir: %global _tmpfilesdir /usr/lib/tmpfiles.d }
@@ -29,34 +27,32 @@
# "zypper vcmp 2.3.b99 2.3.0" shows "2.3.b99 is older than 2.3.0" and
# "zypper vcmp 2.2.99 2.3b6" show "2.2.99 is older than 2.3b6" so that
# version upgrades from 2.2.x via 2.3.b* to 2.3.0 work:
-Version: 2.3.3op2
+Version: 2.4.1
Release: 0
Summary: The Common UNIX Printing System
License: Apache-2.0
Group: Hardware/Printing
URL: https://openprinting.github.io/cups
# To get Source0 go to https://github.com/OpenPrinting/cups/releases or use e.g.
-# wget --no-check-certificate -O cups-2.3.3op2-source.tar.gz https://github.com/OpenPrinting/cups/releases/download/v2.3.3op2/cups-2.3.3op2-source.tar.gz
-Source0: https://github.com/OpenPrinting/cups/releases/download/v2.3.3op2/cups-2.3.3op2-source.tar.gz
+# wget --no-check-certificate -O cups-2.4.1-source.tar.gz https://github.com/OpenPrinting/cups/releases/download/v2.4.1/cups-2.4.1-source.tar.gz
+Source0: https://github.com/OpenPrinting/cups/releases/download/v2.4.1/cups-2.4.1-source.tar.gz
# To get Source1 go to https://github.com/OpenPrinting/cups/releases or use e.g.
-# wget --no-check-certificate -O cups-2.3.3op2-source.tar.gz.sig https://github.com/OpenPrinting/cups/releases/download/v2.3.3op2/cups-2.3.3op2-source.tar.gz.sig
-Source1: https://github.com/OpenPrinting/cups/releases/download/v2.3.3op2/cups-2.3.3op2-source.tar.gz.sig
-# To get Source2 go to https://www.msweet.org/pgp.html
-# PGP Fingerprint: 845464660B686AAB36540B6F999559A027815955
+# wget --no-check-certificate -O cups-2.4.1-source.tar.gz.sig https://github.com/OpenPrinting/cups/releases/download/v2.4.1/cups-2.4.1-source.tar.gz.sig
+Source1: https://github.com/OpenPrinting/cups/releases/download/v2.4.1/cups-2.4.1-source.tar.gz.sig
+# To get Source2 use gpg --keyserver keys.openpgp.org --recv-keys 7082A0A50A2E92640F3880E0E4522DCC9B246FF7
+# See https://github.com/OpenPrinting/cups/discussions/327#discussioncomment-2060579
+# PGP Fingerprint: 7082A0A50A2E92640F3880E0E4522DCC9B246FF7
Source2: cups.keyring
# To manually verify Source0 with Source1 and Source2 do e.g.
# gpg --import cups.keyring
-# gpg --list-keys | grep -1 'Michael R Sweet' | grep -v 'expired'
-# gpg --verify cups-2.3.3op2-source.tar.gz.sig cups-2.3.3op2-source.tar.gz
+# gpg --list-keys | grep -1 'Zdenek Dohnal'
+# gpg --verify cups-2.4.1-source.tar.gz.sig cups-2.4.1-source.tar.gz
Source102: Postscript.ppd.gz
Source105: Postscript-level1.ppd.gz
Source106: Postscript-level2.ppd.gz
Source108: cups-client.conf
Source109: baselibs.conf
# Patch0...Patch9 is for patches from upstream:
-# Patch1 upstream_pull_174.patch is https://github.com/OpenPrinting/cups/pull/174
-# Use 60s timeout for read_thread, revert read limits
-Patch1: upstream_pull_174.patch
# Source10...Source99 is for sources from SUSE which are intended for upstream:
# Patch10...Patch99 is for patches from SUSE which are intended for upstream:
# Patch10 cups-2.1.0-choose-uri-template.patch adds 'smb://...' URIs to templates/choose-uri.tmpl:
@@ -66,8 +62,6 @@
# because the files of the CUPS web content are no documentation, see CUPS STR #3578
# and http://bugzilla.novell.com/show_bug.cgi?id=546023#c6 and subsequent comments:
Patch11: cups-2.1.0-default-webcontent-path.patch
-# Patch12 cups-2.1.0-cups-systemd-socket.patch Use systemd socket activation properly:
-Patch12: cups-2.1.0-cups-systemd-socket.patch
# Patch100...Patch999 is for private patches from SUSE which are not intended for upstream:
# Patch100 cups-pam.diff adds conf/pam.suse regarding support for PAM for SUSE:
Patch100: cups-pam.diff
@@ -83,9 +77,9 @@
Patch103: cups-1.4-do_not_strip_recommended_from_PPDs.patch
# Patch104 cups-config-libs.patch fixes option --libs in cups-config script:
Patch104: cups-config-libs.patch
-# Patch106 Fixes web UI Kerberos authentication (bsc#1175960)
-Patch106: fix-negotiate-authentication-between-CGIs-and-scheduler.patch
Patch107: harden_cups.service.patch
+# Patch108 downgrades the autoconf requirement to the autoconf available in tumbleweed as of writing
+Patch108: downgrade-autoconf-requirement.patch
# Build Requirements:
BuildRequires: dbus-1-devel
BuildRequires: fdupes
@@ -280,9 +274,6 @@
%prep
%setup -q
# Patch0...Patch9 is for patches from upstream:
-# Patch1 upstream_pull_174.patch is https://github.com/OpenPrinting/cups/pull/174
-# Use 60s timeout for read_thread, revert read limits
-%patch1 -p1
# Patch10...Patch99 is for patches from SUSE which are intended for upstream:
# Patch10 cups-2.1.0-choose-uri-template.patch adds 'smb://...' URIs to templates/choose-uri.tmpl:
%patch10 -b choose-uri-template.orig
@@ -291,8 +282,6 @@
# because the files of the CUPS web content are no documentation, see CUPS STR #3578
# and http://bugzilla.novell.com/show_bug.cgi?id=546023#c6 and subsequent comments:
%patch11 -b default-webcontent-path.orig
-# Patch12 cups-2.1.0-cups-systemd-socket.patch Use systemd socket activation properly:
-#patch12 -b cups-systemd-socket.orig
# Patch100...Patch999 is for private patches from SUSE which are not intended for upstream:
# Patch100 cups-pam.diff adds conf/pam.suse regarding support for PAM for SUSE:
%patch100 -b cups-pam.orig
@@ -308,9 +297,8 @@
%patch103 -b do_not_strip_recommended_from_PPDs.orig
# Patch104 cups-config-libs.patch fixes option --libs in cups-config script:
%patch104 -b cups-config-libs.orig
-# Patch106 Fixes web UI Kerberos authentication (bsc#1175960)
-%patch106 -p1
%patch107 -p1
+%patch108 -p1
%build
# Remove ".SILENT" rule for verbose build output
@@ -439,8 +427,6 @@
# There appears to be some kind of race condition when running make check and make test
# cf. https://github.com/OpenPrinting/cups/issues/155
# We print all logs for debugging purposes if either testsuite fails
-echo "DEBUG: running make check"
-bash -c 'make %{?_smp_mflags} check; EXIT=$?; if [ $EXIT -ne 0 ]; then cat test/*_log*-$(whoami); fi; exit $EXIT'
echo "DEBUG: running make test"
bash -c 'make %{?_smp_mflags} test; EXIT=$?; if [ $EXIT -ne 0 ]; then cat test/*_log*-$(whoami); fi; exit $EXIT'
%else
@@ -681,6 +667,7 @@
%files devel
%defattr(-,root,root)
+/usr/lib/pkgconfig/cups.pc
%{_includedir}/cups/
%{_libdir}/libcups.so
%{_libdir}/libcupsimage.so
Index: cups-2.4.1-source.tar.gz
===================================================================
Binary file cups-2.4.1-source.tar.gz (revision 2) added
Index: cups-2.4.1-source.tar.gz.sig
===================================================================
Binary file cups-2.4.1-source.tar.gz.sig (revision 2) added
Index: downgrade-autoconf-requirement.patch
===================================================================
--- downgrade-autoconf-requirement.patch (added)
+++ downgrade-autoconf-requirement.patch (revision 2)
@@ -0,0 +1,15 @@
+diff --git a/configure.ac b/configure.ac
+index a8c6c1040..6ace74a8d 100644
+--- a/configure.ac
++++ b/configure.ac
+@@ -9,8 +9,8 @@ dnl Licensed under Apache License v2.0. See the file "LICENSE" for more
+ dnl information.
+ dnl
+
+-dnl We need at least autoconf 2.71...
+-AC_PREREQ([2.71])
++dnl We need at least autoconf 2.69...
++AC_PREREQ([2.69])
+
+ dnl Package name and version...
+ AC_INIT([CUPS],[2.4.1],[https://github.com/openprinting/cups/issues],[cups],[https://openprinting.github.io/cups])
Index: cups-2.1.0-cups-systemd-socket.patch
===================================================================
--- cups-2.1.0-cups-systemd-socket.patch (revision 380)
+++ cups-2.1.0-cups-systemd-socket.patch (deleted)
@@ -1,43 +0,0 @@
---- scheduler/main.c.orig 2015-06-08 20:32:35.000000000 +0200
-+++ scheduler/main.c 2015-09-01 11:19:36.000000000 +0200
-@@ -656,7 +656,15 @@ main(int argc, /* I - Number of comm
-
- #if defined(HAVE_LAUNCHD) || defined(HAVE_SYSTEMD)
- if (OnDemand)
-+ {
- cupsdAddEvent(CUPSD_EVENT_SERVER_STARTED, NULL, NULL, "Scheduler started on demand.");
-+# ifdef HAVE_SYSTEMD
-+ sd_notifyf(0, "READY=1\n"
-+ "STATUS=Scheduler is running...\n"
-+ "MAINPID=%lu",
-+ (unsigned long) getpid());
-+# endif /* HAVE_SYSTEMD */
-+ }
- else
- #endif /* HAVE_LAUNCHD || HAVE_SYSTEMD */
- if (fg)
---- scheduler/org.cups.cupsd.path.in.orig 2014-03-21 15:50:24.000000000 +0100
-+++ scheduler/org.cups.cupsd.path.in 2015-09-01 11:20:37.000000000 +0200
-@@ -3,6 +3,7 @@ Description=CUPS Scheduler
-
- [Path]
- PathExists=@CUPS_CACHEDIR@/org.cups.cupsd
-+PathExistsGlob=@CUPS_REQUESTS@/d*
-
- [Install]
- WantedBy=multi-user.target
---- scheduler/org.cups.cupsd.service.in.orig 2014-10-21 13:54:05.000000000 +0200
-+++ scheduler/org.cups.cupsd.service.in 2015-09-01 11:22:09.000000000 +0200
-@@ -1,10 +1,11 @@
- [Unit]
- Description=CUPS Scheduler
- Documentation=man:cupsd(8)
-+After=network.target
-
- [Service]
- ExecStart=@sbindir@/cupsd -l
--Type=simple
-+Type=notify
-
- [Install]
- Also=org.cups.cupsd.socket org.cups.cupsd.path
Index: cups-2.3.3op2-source.tar.gz
===================================================================
Binary file cups-2.3.3op2-source.tar.gz (revision 380) deleted
Index: cups-2.3.3op2-source.tar.gz.sig
===================================================================
Binary file cups-2.3.3op2-source.tar.gz.sig (revision 380) deleted
Index: fix-negotiate-authentication-between-CGIs-and-scheduler.patch
===================================================================
--- fix-negotiate-authentication-between-CGIs-and-scheduler.patch (revision 380)
+++ fix-negotiate-authentication-between-CGIs-and-scheduler.patch (deleted)
@@ -1,223 +0,0 @@
-From d4521ed0df7e625ccf2bc079bab6f48c46ef9bf9 Mon Sep 17 00:00:00 2001
-From: Samuel Cabrero <scabrero@suse.de>
-Date: Mon, 26 Oct 2020 17:35:22 +0100
-Subject: [PATCH 1/4] Avoid infinite loop in admin.cgi when negotiate is used
-
-SetAuthorizationString with NULL argument sets an empty string.
-
-Related: #5596
-
-Signed-off-by: Samuel Cabrero <scabrero@suse.de>
----
- cups/auth.c | 2 +-
- 1 file changed, 1 insertion(+), 1 deletion(-)
-
-diff --git a/cups/auth.c b/cups/auth.c
-index db45bbba6..f2409350a 100644
---- a/cups/auth.c
-+++ b/cups/auth.c
-@@ -295,7 +295,7 @@ cupsDoAuthentication(
- }
- }
-
-- if (http->authstring)
-+ if (http->authstring && http->authstring[0])
- {
- DEBUG_printf(("1cupsDoAuthentication: authstring=\"%s\".", http->authstring));
-
---
-2.30.2
-
-
-From 61ad7780bc7d0593e3225d088ac6dff31badf801 Mon Sep 17 00:00:00 2001
-From: Samuel Cabrero <scabrero@suse.de>
-Date: Tue, 27 Oct 2020 16:11:41 +0100
-Subject: [PATCH 2/4] Add cups_is_local_connection() to check if connection is
- to localhost
-
-Related: #5596
-
-Signed-off-by: Samuel Cabrero <scabrero@suse.de>
----
- cups/auth.c | 11 ++++++++++-
- 1 file changed, 10 insertions(+), 1 deletion(-)
-
-diff --git a/cups/auth.c b/cups/auth.c
-index f2409350a..d2956438d 100644
---- a/cups/auth.c
-+++ b/cups/auth.c
-@@ -90,6 +90,7 @@ static void cups_gss_printf(OM_uint32 major_status, OM_uint32 minor_status,
- # define cups_gss_printf(major, minor, message)
- # endif /* DEBUG */
- #endif /* HAVE_GSSAPI */
-+static int cups_is_local_connection(http_t *http);
- static int cups_local_auth(http_t *http);
-
-
-@@ -916,6 +917,14 @@ cups_gss_printf(OM_uint32 major_status,/* I - Major status code */
- # endif /* DEBUG */
- #endif /* HAVE_GSSAPI */
-
-+static int /* O - 0 if not a local connection */
-+ /* 1 if local connection */
-+cups_is_local_connection(http_t *http) /* I - HTTP connection to server */
-+{
-+ if (!httpAddrLocalhost(http->hostaddr) && _cups_strcasecmp(http->hostname, "localhost") != 0)
-+ return 0;
-+ return 1;
-+}
-
- /*
- * 'cups_local_auth()' - Get the local authorization certificate if
-@@ -958,7 +967,7 @@ cups_local_auth(http_t *http) /* I - HTTP connection to server */
- * See if we are accessing localhost...
- */
-
-- if (!httpAddrLocalhost(http->hostaddr) && _cups_strcasecmp(http->hostname, "localhost") != 0)
-+ if (!cups_is_local_connection(http))
- {
- DEBUG_puts("8cups_local_auth: Not a local connection!");
- return (1);
---
-2.30.2
-
-
-From f629d079750a86b1b605c285f99c0dea3933ca50 Mon Sep 17 00:00:00 2001
-From: Samuel Cabrero <scabrero@suse.de>
-Date: Tue, 27 Oct 2020 16:23:30 +0100
-Subject: [PATCH 3/4] Try local kerberos ccache credentials only for remote
- servers
-
-If connecting to localhost then proceed to ask the client for the
-authorization using cupsGetPassword2. The get password callback will
-return 401 to the client with WWW-Authenticate: Negotiate.
-
-Fixes: #5596
-
-Signed-off-by: Samuel Cabrero <scabrero@suse.de>
----
- cups/auth.c | 10 ++++++----
- 1 file changed, 6 insertions(+), 4 deletions(-)
-
-diff --git a/cups/auth.c b/cups/auth.c
-index d2956438d..9661657fc 100644
---- a/cups/auth.c
-+++ b/cups/auth.c
-@@ -175,10 +175,10 @@ cupsDoAuthentication(
- DEBUG_printf(("2cupsDoAuthentication: Trying scheme \"%s\"...", scheme));
-
- #ifdef HAVE_GSSAPI
-- if (!_cups_strcasecmp(scheme, "Negotiate"))
-+ if (!_cups_strcasecmp(scheme, "Negotiate") && !cups_is_local_connection(http))
- {
- /*
-- * Kerberos authentication...
-+ * Kerberos authentication to remote server...
- */
-
- int gss_status; /* Auth status */
-@@ -202,7 +202,9 @@ cupsDoAuthentication(
- }
- else
- #endif /* HAVE_GSSAPI */
-- if (_cups_strcasecmp(scheme, "Basic") && _cups_strcasecmp(scheme, "Digest"))
-+ if (_cups_strcasecmp(scheme, "Basic") &&
-+ _cups_strcasecmp(scheme, "Digest") &&
-+ _cups_strcasecmp(scheme, "Negotiate"))
- {
- /*
- * Other schemes not yet supported...
-@@ -216,7 +218,7 @@ cupsDoAuthentication(
- * See if we should retry the current username:password...
- */
-
-- if ((http->digest_tries > 1 || !http->userpass[0]) && (!_cups_strcasecmp(scheme, "Basic") || (!_cups_strcasecmp(scheme, "Digest"))))
-+ if (http->digest_tries > 1 || !http->userpass[0])
- {
- /*
- * Nope - get a new password from the user...
---
-2.30.2
-
-
-From 0563a28b18b21d5574a5e0e38b74246146074bbf Mon Sep 17 00:00:00 2001
-From: Samuel Cabrero <scabrero@suse.de>
-Date: Tue, 27 Oct 2020 16:18:03 +0100
-Subject: [PATCH 4/4] Allow Local authentication for Negotiate
-
-PeerCred is also possible if address family is AF_LOCAL. This will allow
-the CGI programs to generate the authorization from the local
-certificates based on PID also when Negotiate is used for local
-connections:
-
-Client CGI
-Browser <- Remote conn -> admin.cgi <--- Localhost conn ---> Scheduler
- | | |
- + --- HTTP/POST /admin/ --> | |
- | + --- CUPS-Get-Devices ------------> |
- | | |
- | | <-- 401 Unauthorized --------------+
- | | WWW-Authenticate: |
- | | Negotiate, (PeerCred,) Local |
- | | |
- | <-- 401 Unauthorized -----+ |
- | WWW-Authenticate: | |
- | Negotiate | |
- | | |
- | --- HTTP/POST /admin/ --> | |
- | Authorization: + --- IPP CUPS-GetDevices ---------> |
- | Negotiate | Authorization: Local <cert> |
- | | |
-
-Fixes: #5596
-
-Signed-off-by: Samuel Cabrero <scabrero@suse.de>
----
- cups/auth.c | 5 -----
- scheduler/client.c | 9 ++-------
- 2 files changed, 2 insertions(+), 12 deletions(-)
-
-diff --git a/cups/auth.c b/cups/auth.c
-index 9661657fc..b6fec6b98 100644
---- a/cups/auth.c
-+++ b/cups/auth.c
-@@ -1043,11 +1043,6 @@ cups_local_auth(http_t *http) /* I - HTTP connection to server */
- }
- # endif /* HAVE_AUTHORIZATION_H */
-
--# ifdef HAVE_GSSAPI
-- if (cups_auth_find(www_auth, "Negotiate"))
-- return (1);
--# endif /* HAVE_GSSAPI */
--
- # if defined(SO_PEERCRED) && defined(AF_LOCAL)
- /*
- * See if we can authenticate using the peer credentials provided over a
-diff --git a/scheduler/client.c b/scheduler/client.c
-index c2ee8f12a..56797d58d 100644
---- a/scheduler/client.c
-+++ b/scheduler/client.c
-@@ -2109,18 +2109,13 @@ cupsdSendHeader(
- }
- else if (auth_type == CUPSD_AUTH_NEGOTIATE)
- {
--#if defined(SO_PEERCRED) && defined(AF_LOCAL)
-- if (httpAddrFamily(httpGetAddress(con->http)) == AF_LOCAL)
-- strlcpy(auth_str, "PeerCred", sizeof(auth_str));
-- else
--#endif /* SO_PEERCRED && AF_LOCAL */
- strlcpy(auth_str, "Negotiate", sizeof(auth_str));
- }
-
-- if (con->best && auth_type != CUPSD_AUTH_NEGOTIATE && !con->is_browser && !_cups_strcasecmp(httpGetHostname(con->http, NULL, 0), "localhost"))
-+ if (con->best && !con->is_browser && !_cups_strcasecmp(httpGetHostname(con->http, NULL, 0), "localhost"))
- {
- /*
-- * Add a "trc" (try root certification) parameter for local non-Kerberos
-+ * Add a "trc" (try root certification) parameter for local
- * requests when the request requires system group membership - then the
- * client knows the root certificate can/should be used.
- *
---
-2.30.2
-
Index: upstream_pull_174.patch
===================================================================
--- upstream_pull_174.patch (revision 380)
+++ upstream_pull_174.patch (deleted)
@@ -1,53 +0,0 @@
-From c37d71b1a31d26a4790166e2508822b18934a5c0 Mon Sep 17 00:00:00 2001
-From: Zdenek Dohnal <zdohnal@redhat.com>
-Date: Tue, 13 Apr 2021 15:44:14 +0200
-Subject: [PATCH 1/2] backend/usb-libusb.c: Use 60s timeout for reading at
- backchannel
-
-Some older models malfunction if timeout is too short.
----
- CHANGES.md | 1 +
- backend/usb-libusb.c | 2 +-
- 2 files changed, 2 insertions(+), 1 deletion(-)
-
---- a/backend/usb-libusb.c
-+++ b/backend/usb-libusb.c
-@@ -1704,7 +1704,7 @@ static void *read_thread(void *reference)
- readstatus = libusb_bulk_transfer(g.printer->handle,
- g.printer->read_endp,
- readbuffer, rbytes,
-- &rbytes, 250);
-+ &rbytes, 60000);
- if (readstatus == LIBUSB_SUCCESS && rbytes > 0)
- {
- fprintf(stderr, "DEBUG: Read %d bytes of back-channel data...\n", (int)rbytes);
-
-From 4cb6f6806cdbe040d478b266a1d351b19341dd79 Mon Sep 17 00:00:00 2001
-From: Zdenek Dohnal <zdohnal@redhat.com>
-Date: Tue, 13 Apr 2021 15:47:37 +0200
-Subject: [PATCH 2/2] backend/usb-libusb.c: Revert enforcing read limits
-
-This commit reverts the change introduced by 2.2.12 [1] - its
-implementation caused a regression with Lexmark filters.
-
-[1]
-https://github.com/apple/cups/commit/35e927f83529cd9b4bc37bcd418c50e307fced35
----
- CHANGES.md | 1 +
- backend/usb-libusb.c | 3 ++-
- 2 files changed, 3 insertions(+), 1 deletion(-)
-
-diff --git a/backend/usb-libusb.c b/backend/usb-libusb.c
-index fbb0d9d89..89b5182f7 100644
---- a/backend/usb-libusb.c
-+++ b/backend/usb-libusb.c
-@@ -1721,7 +1721,8 @@ static void *read_thread(void *reference)
- * Make sure this loop executes no more than once every 250 miliseconds...
- */
-
-- if ((g.wait_eof || !g.read_thread_stop))
-+ if ((readstatus != LIBUSB_SUCCESS || rbytes == 0) &&
-+ (g.wait_eof || !g.read_thread_stop))
- usleep(250000);
- }
- while (g.wait_eof || !g.read_thread_stop);
OBS-URL: https://build.opensuse.org/request/show/958348
OBS-URL: https://build.opensuse.org/package/show/Printing/cups?expand=0&rev=381
2022-03-03 13:19:05 +01:00
|
|
|
|
* Fixed @IF(name) handling in cupsd.conf (Apple #5918)
|
2022-03-04 09:58:18 +01:00
|
|
|
|
* Fixed documentation and added examples for CUPS' limited
|
|
|
|
|
CGI support (Apple #5940)
|
Accepting request 958348 from home:ajoga:branches:openSUSE:Factory
- Version upgrade to 2.4.1
- Dropped patch upstream_pull_174 because it it is included in this release
- Dropped patch cups-2.1.0-cups-systemd-socket.patch because it it is included in this release (https://github.com/OpenPrinting/cups/commit/e96e96b4bd0d4e6f634bbb66b95d6e475501541c)
- Changed upstream source packages signing key (https://github.com/OpenPrinting/cups/discussions/327#discussioncomment-2060579)
- Re-enabled testsuite
* Also removed make check because since upstream change the two target are identical (https://github.com/OpenPrinting/cups/commit/96ba46ebc818b610b0e40cbc9d62ef1dcd3ec9b6#diff-76ed074a9305c04054cdebb9e9aad2d818052b07091de1f20cad0bbac34ffb52R239)
- Changed cups-2.1.0-cups-systemd-socket.patch to accomodate new coding style
- Changed cups-config-libs.orig to accommodate recent code changes (SSL->TLS)
- Changed cups-2.1.0-default-webcontent-path.patch to accommodate code changes
old: Printing/cups
new: home:ajoga:branches:openSUSE:Factory/cups rev None
Index: cups-2.1.0-default-webcontent-path.patch
===================================================================
--- cups-2.1.0-default-webcontent-path.patch (revision 380)
+++ cups-2.1.0-default-webcontent-path.patch (revision 2)
@@ -1,17 +1,21 @@
---- config-scripts/cups-directories.m4.orig 2014-03-21 17:42:53.000000000 +0100
-+++ config-scripts/cups-directories.m4 2015-09-01 11:08:43.000000000 +0200
-@@ -206,11 +206,11 @@ fi
- AC_SUBST(MENUDIR)
+--- config-scripts/cups-directories.m4
++++ config-scripts/cups-directories.m4.orig
+@@ -166,15 +166,15 @@ AS_IF([test "x$menudir" = x], [
+ AC_SUBST([MENUDIR])
# Documentation files
--AC_ARG_WITH(docdir, [ --with-docdir set path for documentation],docdir="$withval",docdir="")
-+AC_ARG_WITH(docdir, [ --with-docdir set path and DocumentRoot directive for web content, default=datadir/cups/webcontent],docdir="$withval",docdir="")
+-AC_ARG_WITH([docdir], AS_HELP_STRING([--with-docdir], [set path for documentation]), [
++AC_ARG_WITH([docdir], AS_HELP_STRING([--with-docdir], [set path and DocumentRoot directive for web content, default=datadir/cups/webcontent]), [
+ docdir="$withval"
+ ], [
+ docdir=""
+ ])
- if test x$docdir = x; then
-- CUPS_DOCROOT="$datadir/doc/cups"
-- docdir="$datadir/doc/cups"
-+ CUPS_DOCROOT="$datadir/cups/webcontent"
-+ docdir="$datadir/cups/webcontent"
- else
- CUPS_DOCROOT="$docdir"
- fi
+ AS_IF([test x$docdir = x], [
+- CUPS_DOCROOT="$datadir/doc/cups"
+- docdir="$datadir/doc/cups"
++ CUPS_DOCROOT="$datadir/cups/webcontent"
++ docdir="$datadir/cups/webcontent"
+ ], [
+ CUPS_DOCROOT="$docdir"
+ ])
Index: cups-config-libs.patch
===================================================================
--- cups-config-libs.patch (revision 380)
+++ cups-config-libs.patch (revision 2)
@@ -4,7 +4,7 @@
# flags for compiler and linker...
CFLAGS=""
LDFLAGS="@EXPORT_LDFLAGS@"
--LIBS="@LIBGSSAPI@ @DNSSDLIBS@ @EXPORT_SSLLIBS@ @LIBZ@ @LIBS@"
+-LIBS="@LIBGSSAPI@ @DNSSDLIBS@ @EXPORT_TLSLIBS@ @LIBZ@ @LIBS@"
+LIBS=""
# Check for local invocation...
Index: cups.changes
===================================================================
--- cups.changes (revision 380)
+++ cups.changes (revision 2)
@@ -1,4 +1,88 @@
-------------------------------------------------------------------
+Tue Mar 1 18:16:11 UTC 2022 - Aurélien Joga <aurelienjoga@gmail.com>
+
+- Version upgrade to 2.4.1:
+ * The default color mode now is now configurable and defaults to the printer's reported default mode (Issue #277)
+ * Configuration script now checks linking for -Wl,-pie flags (Issue #303)
+ * Fixed memory leaks - in testi18n (Issue #313), in cups_enum_dests() (Issue #317), in _cupsEncodeOption() and http_tls_upgrade() (Issue #322)
+ * Fixed missing bracket in de/index.html (Issue #299)
+ * Fixed typos in configuration scripts (Issues #304, #316)
+ * Removed remaining legacy code for RIP_MAX_CACHE environment variable (Issue #323)
+ * Removed deprecated directives from cupsctl and cups-files.conf (Issue #300)
+ * Removed purge-jobs legacy code from CGI scripts and templates (Issue #325)
+ * Added configure option --with-idle-exit-timeout (Issue #294)
+ * Added --with-systemd-timeoutstartsec configure option (Issue #298)
+ * DigestOptions now are applied for MD5 Digest authentication defined by RFC 2069 as well (Issue #287)
+ * Fixed compilation on Solaris (Issue #293)
+ * Fixed and improved German translations (Issue #296, Issue #297)
+ * Added warning and debug messages when loading printers if the queue is raw or with driver (Issue #286)
+ * Compilation now uses -fstack-protector-strong if available (Issue #285)
+ * Added support for CUPS running in a Snapcraft snap.
+ * Added basic OAuth 2.0 client support (Issue #100)
+ * Added support for AirPrint and Mopria clients (Issue #105)
+ * Added configure support for specifying systemd dependencies in the CUPS service file (Issue #144)
+ * Added several features and improvements to ipptool (Issue #153)
+ * Added a JSON output mode for ipptool.
+ * The ipptool command now correctly reports an error when a test file cannot be found.
+ * CUPS library now uses thread safe getpwnam_r and getpwuid_r functions (Issue #274)
+ * Fixed Kerberos authentication for the web interface (Issue #19)
+ * The ZPL sample driver now supports more "standard" label sizes (Issue #70)
+ * Fixed reporting of printer instances when enumerating and when no options are set for the main instance (Issue #71)
+ * Reverted USB read limit enforcement change from CUPS 2.2.12 (Issue #72)
+ * The IPP backend did not return the correct status code when a job was canceled at the printer/server (Issue #74)
+ * The testlang unit test program now loops over all of the available locales by default (Issue #85)
+ * The cupsfilter command now shows error messages when options are used incorrectly (Issue #88)
+ * The PPD functions now treat boolean values as case-insensitive (Issue #106)
+ * Temporary queue names no longer end with an underscore (Issue #110)
+ * The USB backend now runs as root (Issue #121)
+ * Added pkg-config file for libcups (Issue #122)
+ * Fixed a PPD memory leak caused by emulator definitions (Issue #124)
+ * Fixed a DISPLAY bug in ipptool (Issue #139)
+ * The scheduler now includes the [Job N] prefix for job log messages, even when using syslog logging (Issue #154)
+ * Added support for locales using the GB18030 character set (Issue #159)
+ * httpReconnect2 did not reset the socket file descriptor when the TLS negotiation failed (Apple #5907)
+ * httpUpdate did not reset the socket file descriptor when the TLS negotiation failed (Apple #5915)
+ * The IPP backend now retries Validate-Job requests (Issue #132)
+ * Now show better error messages when a driver interface program fails to provide a PPD file (Issue #148)
+ * Added dark mode support to the CUPS web interface (Issue #152)
+ * Added a workaround for Solaris in httpAddrConnect2 (Issue #156)
+ * Fixed an interaction between --remote-admin and --remote-any for the cupsctl command (Issue #158)
+ * Now use a 60 second timeout for reading USB backchannel data (Issue #160)
+ * The USB backend now tries harder to find a serial number (Issue #170)
+ * Fixed @IF(name) handling in cupsd.conf (Apple #5918)
+ * Fixed documentation and added examples for CUPS' limited CGI support (Apple #5940)
+ * Fixed the lpc command prompt (Apple #5946)
+ * Now always pass "localhost" in the Host: header when talking over a domain socket or the loopback interface (Issue #185)
+ * Fixed a job history update issue in the scheduler (Issue #187)
+ * Fixed job-pages-per-set value for duplex print jobs.
+ * Fixed an edge case in ippReadIO to make sure that only complete attributes and values are retained on an error (Issue #195)
+ * Hardened ippReadIO to prevent invalid IPP messages from being propagated (Issue #195, Issue #196)
+ * The scheduler now supports the "everywhere" model directly (Issue #201)
+ * Fixed some IPP Everywhere option mapping problems (Issue #238)
+ * Fixed support for "job-hold-until" with the Restart-Job operation (Issue #250)
+ * Fixed the default color/grayscale presets for IPP Everywhere PPDs (Issue #262)
+ * Fixed support for the 'offline-report' state for all USB backends (Issue #264)
+ * Documentation fixes (Issue #92, Issue #163, Issue #177, Issue #184)
+ * Localization updates (Issue #123, Issue #129, Issue #134, Issue #146, Issue #164)
+ * USB quirk updates (Issue #192, Issue #270, Apple #5766, Apple #5838, Apple #5843, Apple #5867)
+ * Web interface updates (Issue #142, Issue #218)
+ * The ippeveprinter tool now automatically uses an available port.
+ * Fixed several Windows TLS and hashing issues.
+ * Deprecated cups-config (Issue #97)
+ * Deprecated Kerberos (AuthType Negotiate) authentication (Issue #98)
+ * Removed support for the (long deprecated and unused) FontPath, ListenBackLog, LPDConfigFile, KeepAliveTimeout, RIPCache, and SMBConfigFile directives in cupsd.conf and cups-files.conf.
+ * Stubbed out deprecated httpMD5 functions.
+ * Add test for undefined page ranges during printing.
+- Dropped patch upstream_pull_174 because it it is included in this release
+- Dropped patch cups-2.1.0-cups-systemd-socket.patch because it it is included in this release (https://github.com/OpenPrinting/cups/commit/e96e96b4bd0d4e6f634bbb66b95d6e475501541c)
+- Changed upstream source packages signing key (https://github.com/OpenPrinting/cups/discussions/327#discussioncomment-2060579)
+- Re-enabled testsuite
+ * Also removed make check because since upstream change the two target are identical (https://github.com/OpenPrinting/cups/commit/96ba46ebc818b610b0e40cbc9d62ef1dcd3ec9b6#diff-76ed074a9305c04054cdebb9e9aad2d818052b07091de1f20cad0bbac34ffb52R239)
+- Changed cups-2.1.0-cups-systemd-socket.patch to accomodate new coding style
+- Changed cups-config-libs.orig to accommodate recent code changes (SSL->TLS)
+- Changed cups-2.1.0-default-webcontent-path.patch to accommodate code changes
+
+-------------------------------------------------------------------
Tue Feb 1 09:18:27 UTC 2022 - jsmeix@suse.de
- Enhanced harden_cups.service.patch by adding
Index: cups.keyring
===================================================================
Binary files cups.keyring (revision 380) and cups.keyring (revision 2) differ
Index: cups.spec
===================================================================
--- cups.spec (revision 380)
+++ cups.spec (revision 2)
@@ -18,9 +18,7 @@
# Cf. https://rpm.org/user_doc/conditional_builds.html
# by default enable testsuite (i.e. in the 'check' section run make check and make test)
-#bcond_without testsuite
-# disable testsuite for now until https://github.com/OpenPrinting/cups/issues/155 is fixed
-%bcond_with testsuite
+%bcond_without testsuite
# _tmpfilesdir is not defined in systemd macros up to openSUSE 13.2
%{!?_tmpfilesdir: %global _tmpfilesdir /usr/lib/tmpfiles.d }
@@ -29,34 +27,32 @@
# "zypper vcmp 2.3.b99 2.3.0" shows "2.3.b99 is older than 2.3.0" and
# "zypper vcmp 2.2.99 2.3b6" show "2.2.99 is older than 2.3b6" so that
# version upgrades from 2.2.x via 2.3.b* to 2.3.0 work:
-Version: 2.3.3op2
+Version: 2.4.1
Release: 0
Summary: The Common UNIX Printing System
License: Apache-2.0
Group: Hardware/Printing
URL: https://openprinting.github.io/cups
# To get Source0 go to https://github.com/OpenPrinting/cups/releases or use e.g.
-# wget --no-check-certificate -O cups-2.3.3op2-source.tar.gz https://github.com/OpenPrinting/cups/releases/download/v2.3.3op2/cups-2.3.3op2-source.tar.gz
-Source0: https://github.com/OpenPrinting/cups/releases/download/v2.3.3op2/cups-2.3.3op2-source.tar.gz
+# wget --no-check-certificate -O cups-2.4.1-source.tar.gz https://github.com/OpenPrinting/cups/releases/download/v2.4.1/cups-2.4.1-source.tar.gz
+Source0: https://github.com/OpenPrinting/cups/releases/download/v2.4.1/cups-2.4.1-source.tar.gz
# To get Source1 go to https://github.com/OpenPrinting/cups/releases or use e.g.
-# wget --no-check-certificate -O cups-2.3.3op2-source.tar.gz.sig https://github.com/OpenPrinting/cups/releases/download/v2.3.3op2/cups-2.3.3op2-source.tar.gz.sig
-Source1: https://github.com/OpenPrinting/cups/releases/download/v2.3.3op2/cups-2.3.3op2-source.tar.gz.sig
-# To get Source2 go to https://www.msweet.org/pgp.html
-# PGP Fingerprint: 845464660B686AAB36540B6F999559A027815955
+# wget --no-check-certificate -O cups-2.4.1-source.tar.gz.sig https://github.com/OpenPrinting/cups/releases/download/v2.4.1/cups-2.4.1-source.tar.gz.sig
+Source1: https://github.com/OpenPrinting/cups/releases/download/v2.4.1/cups-2.4.1-source.tar.gz.sig
+# To get Source2 use gpg --keyserver keys.openpgp.org --recv-keys 7082A0A50A2E92640F3880E0E4522DCC9B246FF7
+# See https://github.com/OpenPrinting/cups/discussions/327#discussioncomment-2060579
+# PGP Fingerprint: 7082A0A50A2E92640F3880E0E4522DCC9B246FF7
Source2: cups.keyring
# To manually verify Source0 with Source1 and Source2 do e.g.
# gpg --import cups.keyring
-# gpg --list-keys | grep -1 'Michael R Sweet' | grep -v 'expired'
-# gpg --verify cups-2.3.3op2-source.tar.gz.sig cups-2.3.3op2-source.tar.gz
+# gpg --list-keys | grep -1 'Zdenek Dohnal'
+# gpg --verify cups-2.4.1-source.tar.gz.sig cups-2.4.1-source.tar.gz
Source102: Postscript.ppd.gz
Source105: Postscript-level1.ppd.gz
Source106: Postscript-level2.ppd.gz
Source108: cups-client.conf
Source109: baselibs.conf
# Patch0...Patch9 is for patches from upstream:
-# Patch1 upstream_pull_174.patch is https://github.com/OpenPrinting/cups/pull/174
-# Use 60s timeout for read_thread, revert read limits
-Patch1: upstream_pull_174.patch
# Source10...Source99 is for sources from SUSE which are intended for upstream:
# Patch10...Patch99 is for patches from SUSE which are intended for upstream:
# Patch10 cups-2.1.0-choose-uri-template.patch adds 'smb://...' URIs to templates/choose-uri.tmpl:
@@ -66,8 +62,6 @@
# because the files of the CUPS web content are no documentation, see CUPS STR #3578
# and http://bugzilla.novell.com/show_bug.cgi?id=546023#c6 and subsequent comments:
Patch11: cups-2.1.0-default-webcontent-path.patch
-# Patch12 cups-2.1.0-cups-systemd-socket.patch Use systemd socket activation properly:
-Patch12: cups-2.1.0-cups-systemd-socket.patch
# Patch100...Patch999 is for private patches from SUSE which are not intended for upstream:
# Patch100 cups-pam.diff adds conf/pam.suse regarding support for PAM for SUSE:
Patch100: cups-pam.diff
@@ -83,9 +77,9 @@
Patch103: cups-1.4-do_not_strip_recommended_from_PPDs.patch
# Patch104 cups-config-libs.patch fixes option --libs in cups-config script:
Patch104: cups-config-libs.patch
-# Patch106 Fixes web UI Kerberos authentication (bsc#1175960)
-Patch106: fix-negotiate-authentication-between-CGIs-and-scheduler.patch
Patch107: harden_cups.service.patch
+# Patch108 downgrades the autoconf requirement to the autoconf available in tumbleweed as of writing
+Patch108: downgrade-autoconf-requirement.patch
# Build Requirements:
BuildRequires: dbus-1-devel
BuildRequires: fdupes
@@ -280,9 +274,6 @@
%prep
%setup -q
# Patch0...Patch9 is for patches from upstream:
-# Patch1 upstream_pull_174.patch is https://github.com/OpenPrinting/cups/pull/174
-# Use 60s timeout for read_thread, revert read limits
-%patch1 -p1
# Patch10...Patch99 is for patches from SUSE which are intended for upstream:
# Patch10 cups-2.1.0-choose-uri-template.patch adds 'smb://...' URIs to templates/choose-uri.tmpl:
%patch10 -b choose-uri-template.orig
@@ -291,8 +282,6 @@
# because the files of the CUPS web content are no documentation, see CUPS STR #3578
# and http://bugzilla.novell.com/show_bug.cgi?id=546023#c6 and subsequent comments:
%patch11 -b default-webcontent-path.orig
-# Patch12 cups-2.1.0-cups-systemd-socket.patch Use systemd socket activation properly:
-#patch12 -b cups-systemd-socket.orig
# Patch100...Patch999 is for private patches from SUSE which are not intended for upstream:
# Patch100 cups-pam.diff adds conf/pam.suse regarding support for PAM for SUSE:
%patch100 -b cups-pam.orig
@@ -308,9 +297,8 @@
%patch103 -b do_not_strip_recommended_from_PPDs.orig
# Patch104 cups-config-libs.patch fixes option --libs in cups-config script:
%patch104 -b cups-config-libs.orig
-# Patch106 Fixes web UI Kerberos authentication (bsc#1175960)
-%patch106 -p1
%patch107 -p1
+%patch108 -p1
%build
# Remove ".SILENT" rule for verbose build output
@@ -439,8 +427,6 @@
# There appears to be some kind of race condition when running make check and make test
# cf. https://github.com/OpenPrinting/cups/issues/155
# We print all logs for debugging purposes if either testsuite fails
-echo "DEBUG: running make check"
-bash -c 'make %{?_smp_mflags} check; EXIT=$?; if [ $EXIT -ne 0 ]; then cat test/*_log*-$(whoami); fi; exit $EXIT'
echo "DEBUG: running make test"
bash -c 'make %{?_smp_mflags} test; EXIT=$?; if [ $EXIT -ne 0 ]; then cat test/*_log*-$(whoami); fi; exit $EXIT'
%else
@@ -681,6 +667,7 @@
%files devel
%defattr(-,root,root)
+/usr/lib/pkgconfig/cups.pc
%{_includedir}/cups/
%{_libdir}/libcups.so
%{_libdir}/libcupsimage.so
Index: cups-2.4.1-source.tar.gz
===================================================================
Binary file cups-2.4.1-source.tar.gz (revision 2) added
Index: cups-2.4.1-source.tar.gz.sig
===================================================================
Binary file cups-2.4.1-source.tar.gz.sig (revision 2) added
Index: downgrade-autoconf-requirement.patch
===================================================================
--- downgrade-autoconf-requirement.patch (added)
+++ downgrade-autoconf-requirement.patch (revision 2)
@@ -0,0 +1,15 @@
+diff --git a/configure.ac b/configure.ac
+index a8c6c1040..6ace74a8d 100644
+--- a/configure.ac
++++ b/configure.ac
+@@ -9,8 +9,8 @@ dnl Licensed under Apache License v2.0. See the file "LICENSE" for more
+ dnl information.
+ dnl
+
+-dnl We need at least autoconf 2.71...
+-AC_PREREQ([2.71])
++dnl We need at least autoconf 2.69...
++AC_PREREQ([2.69])
+
+ dnl Package name and version...
+ AC_INIT([CUPS],[2.4.1],[https://github.com/openprinting/cups/issues],[cups],[https://openprinting.github.io/cups])
Index: cups-2.1.0-cups-systemd-socket.patch
===================================================================
--- cups-2.1.0-cups-systemd-socket.patch (revision 380)
+++ cups-2.1.0-cups-systemd-socket.patch (deleted)
@@ -1,43 +0,0 @@
---- scheduler/main.c.orig 2015-06-08 20:32:35.000000000 +0200
-+++ scheduler/main.c 2015-09-01 11:19:36.000000000 +0200
-@@ -656,7 +656,15 @@ main(int argc, /* I - Number of comm
-
- #if defined(HAVE_LAUNCHD) || defined(HAVE_SYSTEMD)
- if (OnDemand)
-+ {
- cupsdAddEvent(CUPSD_EVENT_SERVER_STARTED, NULL, NULL, "Scheduler started on demand.");
-+# ifdef HAVE_SYSTEMD
-+ sd_notifyf(0, "READY=1\n"
-+ "STATUS=Scheduler is running...\n"
-+ "MAINPID=%lu",
-+ (unsigned long) getpid());
-+# endif /* HAVE_SYSTEMD */
-+ }
- else
- #endif /* HAVE_LAUNCHD || HAVE_SYSTEMD */
- if (fg)
---- scheduler/org.cups.cupsd.path.in.orig 2014-03-21 15:50:24.000000000 +0100
-+++ scheduler/org.cups.cupsd.path.in 2015-09-01 11:20:37.000000000 +0200
-@@ -3,6 +3,7 @@ Description=CUPS Scheduler
-
- [Path]
- PathExists=@CUPS_CACHEDIR@/org.cups.cupsd
-+PathExistsGlob=@CUPS_REQUESTS@/d*
-
- [Install]
- WantedBy=multi-user.target
---- scheduler/org.cups.cupsd.service.in.orig 2014-10-21 13:54:05.000000000 +0200
-+++ scheduler/org.cups.cupsd.service.in 2015-09-01 11:22:09.000000000 +0200
-@@ -1,10 +1,11 @@
- [Unit]
- Description=CUPS Scheduler
- Documentation=man:cupsd(8)
-+After=network.target
-
- [Service]
- ExecStart=@sbindir@/cupsd -l
--Type=simple
-+Type=notify
-
- [Install]
- Also=org.cups.cupsd.socket org.cups.cupsd.path
Index: cups-2.3.3op2-source.tar.gz
===================================================================
Binary file cups-2.3.3op2-source.tar.gz (revision 380) deleted
Index: cups-2.3.3op2-source.tar.gz.sig
===================================================================
Binary file cups-2.3.3op2-source.tar.gz.sig (revision 380) deleted
Index: fix-negotiate-authentication-between-CGIs-and-scheduler.patch
===================================================================
--- fix-negotiate-authentication-between-CGIs-and-scheduler.patch (revision 380)
+++ fix-negotiate-authentication-between-CGIs-and-scheduler.patch (deleted)
@@ -1,223 +0,0 @@
-From d4521ed0df7e625ccf2bc079bab6f48c46ef9bf9 Mon Sep 17 00:00:00 2001
-From: Samuel Cabrero <scabrero@suse.de>
-Date: Mon, 26 Oct 2020 17:35:22 +0100
-Subject: [PATCH 1/4] Avoid infinite loop in admin.cgi when negotiate is used
-
-SetAuthorizationString with NULL argument sets an empty string.
-
-Related: #5596
-
-Signed-off-by: Samuel Cabrero <scabrero@suse.de>
----
- cups/auth.c | 2 +-
- 1 file changed, 1 insertion(+), 1 deletion(-)
-
-diff --git a/cups/auth.c b/cups/auth.c
-index db45bbba6..f2409350a 100644
---- a/cups/auth.c
-+++ b/cups/auth.c
-@@ -295,7 +295,7 @@ cupsDoAuthentication(
- }
- }
-
-- if (http->authstring)
-+ if (http->authstring && http->authstring[0])
- {
- DEBUG_printf(("1cupsDoAuthentication: authstring=\"%s\".", http->authstring));
-
---
-2.30.2
-
-
-From 61ad7780bc7d0593e3225d088ac6dff31badf801 Mon Sep 17 00:00:00 2001
-From: Samuel Cabrero <scabrero@suse.de>
-Date: Tue, 27 Oct 2020 16:11:41 +0100
-Subject: [PATCH 2/4] Add cups_is_local_connection() to check if connection is
- to localhost
-
-Related: #5596
-
-Signed-off-by: Samuel Cabrero <scabrero@suse.de>
----
- cups/auth.c | 11 ++++++++++-
- 1 file changed, 10 insertions(+), 1 deletion(-)
-
-diff --git a/cups/auth.c b/cups/auth.c
-index f2409350a..d2956438d 100644
---- a/cups/auth.c
-+++ b/cups/auth.c
-@@ -90,6 +90,7 @@ static void cups_gss_printf(OM_uint32 major_status, OM_uint32 minor_status,
- # define cups_gss_printf(major, minor, message)
- # endif /* DEBUG */
- #endif /* HAVE_GSSAPI */
-+static int cups_is_local_connection(http_t *http);
- static int cups_local_auth(http_t *http);
-
-
-@@ -916,6 +917,14 @@ cups_gss_printf(OM_uint32 major_status,/* I - Major status code */
- # endif /* DEBUG */
- #endif /* HAVE_GSSAPI */
-
-+static int /* O - 0 if not a local connection */
-+ /* 1 if local connection */
-+cups_is_local_connection(http_t *http) /* I - HTTP connection to server */
-+{
-+ if (!httpAddrLocalhost(http->hostaddr) && _cups_strcasecmp(http->hostname, "localhost") != 0)
-+ return 0;
-+ return 1;
-+}
-
- /*
- * 'cups_local_auth()' - Get the local authorization certificate if
-@@ -958,7 +967,7 @@ cups_local_auth(http_t *http) /* I - HTTP connection to server */
- * See if we are accessing localhost...
- */
-
-- if (!httpAddrLocalhost(http->hostaddr) && _cups_strcasecmp(http->hostname, "localhost") != 0)
-+ if (!cups_is_local_connection(http))
- {
- DEBUG_puts("8cups_local_auth: Not a local connection!");
- return (1);
---
-2.30.2
-
-
-From f629d079750a86b1b605c285f99c0dea3933ca50 Mon Sep 17 00:00:00 2001
-From: Samuel Cabrero <scabrero@suse.de>
-Date: Tue, 27 Oct 2020 16:23:30 +0100
-Subject: [PATCH 3/4] Try local kerberos ccache credentials only for remote
- servers
-
-If connecting to localhost then proceed to ask the client for the
-authorization using cupsGetPassword2. The get password callback will
-return 401 to the client with WWW-Authenticate: Negotiate.
-
-Fixes: #5596
-
-Signed-off-by: Samuel Cabrero <scabrero@suse.de>
----
- cups/auth.c | 10 ++++++----
- 1 file changed, 6 insertions(+), 4 deletions(-)
-
-diff --git a/cups/auth.c b/cups/auth.c
-index d2956438d..9661657fc 100644
---- a/cups/auth.c
-+++ b/cups/auth.c
-@@ -175,10 +175,10 @@ cupsDoAuthentication(
- DEBUG_printf(("2cupsDoAuthentication: Trying scheme \"%s\"...", scheme));
-
- #ifdef HAVE_GSSAPI
-- if (!_cups_strcasecmp(scheme, "Negotiate"))
-+ if (!_cups_strcasecmp(scheme, "Negotiate") && !cups_is_local_connection(http))
- {
- /*
-- * Kerberos authentication...
-+ * Kerberos authentication to remote server...
- */
-
- int gss_status; /* Auth status */
-@@ -202,7 +202,9 @@ cupsDoAuthentication(
- }
- else
- #endif /* HAVE_GSSAPI */
-- if (_cups_strcasecmp(scheme, "Basic") && _cups_strcasecmp(scheme, "Digest"))
-+ if (_cups_strcasecmp(scheme, "Basic") &&
-+ _cups_strcasecmp(scheme, "Digest") &&
-+ _cups_strcasecmp(scheme, "Negotiate"))
- {
- /*
- * Other schemes not yet supported...
-@@ -216,7 +218,7 @@ cupsDoAuthentication(
- * See if we should retry the current username:password...
- */
-
-- if ((http->digest_tries > 1 || !http->userpass[0]) && (!_cups_strcasecmp(scheme, "Basic") || (!_cups_strcasecmp(scheme, "Digest"))))
-+ if (http->digest_tries > 1 || !http->userpass[0])
- {
- /*
- * Nope - get a new password from the user...
---
-2.30.2
-
-
-From 0563a28b18b21d5574a5e0e38b74246146074bbf Mon Sep 17 00:00:00 2001
-From: Samuel Cabrero <scabrero@suse.de>
-Date: Tue, 27 Oct 2020 16:18:03 +0100
-Subject: [PATCH 4/4] Allow Local authentication for Negotiate
-
-PeerCred is also possible if address family is AF_LOCAL. This will allow
-the CGI programs to generate the authorization from the local
-certificates based on PID also when Negotiate is used for local
-connections:
-
-Client CGI
-Browser <- Remote conn -> admin.cgi <--- Localhost conn ---> Scheduler
- | | |
- + --- HTTP/POST /admin/ --> | |
- | + --- CUPS-Get-Devices ------------> |
- | | |
- | | <-- 401 Unauthorized --------------+
- | | WWW-Authenticate: |
- | | Negotiate, (PeerCred,) Local |
- | | |
- | <-- 401 Unauthorized -----+ |
- | WWW-Authenticate: | |
- | Negotiate | |
- | | |
- | --- HTTP/POST /admin/ --> | |
- | Authorization: + --- IPP CUPS-GetDevices ---------> |
- | Negotiate | Authorization: Local <cert> |
- | | |
-
-Fixes: #5596
-
-Signed-off-by: Samuel Cabrero <scabrero@suse.de>
----
- cups/auth.c | 5 -----
- scheduler/client.c | 9 ++-------
- 2 files changed, 2 insertions(+), 12 deletions(-)
-
-diff --git a/cups/auth.c b/cups/auth.c
-index 9661657fc..b6fec6b98 100644
---- a/cups/auth.c
-+++ b/cups/auth.c
-@@ -1043,11 +1043,6 @@ cups_local_auth(http_t *http) /* I - HTTP connection to server */
- }
- # endif /* HAVE_AUTHORIZATION_H */
-
--# ifdef HAVE_GSSAPI
-- if (cups_auth_find(www_auth, "Negotiate"))
-- return (1);
--# endif /* HAVE_GSSAPI */
--
- # if defined(SO_PEERCRED) && defined(AF_LOCAL)
- /*
- * See if we can authenticate using the peer credentials provided over a
-diff --git a/scheduler/client.c b/scheduler/client.c
-index c2ee8f12a..56797d58d 100644
---- a/scheduler/client.c
-+++ b/scheduler/client.c
-@@ -2109,18 +2109,13 @@ cupsdSendHeader(
- }
- else if (auth_type == CUPSD_AUTH_NEGOTIATE)
- {
--#if defined(SO_PEERCRED) && defined(AF_LOCAL)
-- if (httpAddrFamily(httpGetAddress(con->http)) == AF_LOCAL)
-- strlcpy(auth_str, "PeerCred", sizeof(auth_str));
-- else
--#endif /* SO_PEERCRED && AF_LOCAL */
- strlcpy(auth_str, "Negotiate", sizeof(auth_str));
- }
-
-- if (con->best && auth_type != CUPSD_AUTH_NEGOTIATE && !con->is_browser && !_cups_strcasecmp(httpGetHostname(con->http, NULL, 0), "localhost"))
-+ if (con->best && !con->is_browser && !_cups_strcasecmp(httpGetHostname(con->http, NULL, 0), "localhost"))
- {
- /*
-- * Add a "trc" (try root certification) parameter for local non-Kerberos
-+ * Add a "trc" (try root certification) parameter for local
- * requests when the request requires system group membership - then the
- * client knows the root certificate can/should be used.
- *
---
-2.30.2
-
Index: upstream_pull_174.patch
===================================================================
--- upstream_pull_174.patch (revision 380)
+++ upstream_pull_174.patch (deleted)
@@ -1,53 +0,0 @@
-From c37d71b1a31d26a4790166e2508822b18934a5c0 Mon Sep 17 00:00:00 2001
-From: Zdenek Dohnal <zdohnal@redhat.com>
-Date: Tue, 13 Apr 2021 15:44:14 +0200
-Subject: [PATCH 1/2] backend/usb-libusb.c: Use 60s timeout for reading at
- backchannel
-
-Some older models malfunction if timeout is too short.
----
- CHANGES.md | 1 +
- backend/usb-libusb.c | 2 +-
- 2 files changed, 2 insertions(+), 1 deletion(-)
-
---- a/backend/usb-libusb.c
-+++ b/backend/usb-libusb.c
-@@ -1704,7 +1704,7 @@ static void *read_thread(void *reference)
- readstatus = libusb_bulk_transfer(g.printer->handle,
- g.printer->read_endp,
- readbuffer, rbytes,
-- &rbytes, 250);
-+ &rbytes, 60000);
- if (readstatus == LIBUSB_SUCCESS && rbytes > 0)
- {
- fprintf(stderr, "DEBUG: Read %d bytes of back-channel data...\n", (int)rbytes);
-
-From 4cb6f6806cdbe040d478b266a1d351b19341dd79 Mon Sep 17 00:00:00 2001
-From: Zdenek Dohnal <zdohnal@redhat.com>
-Date: Tue, 13 Apr 2021 15:47:37 +0200
-Subject: [PATCH 2/2] backend/usb-libusb.c: Revert enforcing read limits
-
-This commit reverts the change introduced by 2.2.12 [1] - its
-implementation caused a regression with Lexmark filters.
-
-[1]
-https://github.com/apple/cups/commit/35e927f83529cd9b4bc37bcd418c50e307fced35
----
- CHANGES.md | 1 +
- backend/usb-libusb.c | 3 ++-
- 2 files changed, 3 insertions(+), 1 deletion(-)
-
-diff --git a/backend/usb-libusb.c b/backend/usb-libusb.c
-index fbb0d9d89..89b5182f7 100644
---- a/backend/usb-libusb.c
-+++ b/backend/usb-libusb.c
-@@ -1721,7 +1721,8 @@ static void *read_thread(void *reference)
- * Make sure this loop executes no more than once every 250 miliseconds...
- */
-
-- if ((g.wait_eof || !g.read_thread_stop))
-+ if ((readstatus != LIBUSB_SUCCESS || rbytes == 0) &&
-+ (g.wait_eof || !g.read_thread_stop))
- usleep(250000);
- }
- while (g.wait_eof || !g.read_thread_stop);
OBS-URL: https://build.opensuse.org/request/show/958348
OBS-URL: https://build.opensuse.org/package/show/Printing/cups?expand=0&rev=381
2022-03-03 13:19:05 +01:00
|
|
|
|
* Fixed the lpc command prompt (Apple #5946)
|
2022-03-04 09:58:18 +01:00
|
|
|
|
* Now always pass "localhost" in the Host: header when talking
|
|
|
|
|
over a domain socket or the loopback interface (Issue #185)
|
Accepting request 958348 from home:ajoga:branches:openSUSE:Factory
- Version upgrade to 2.4.1
- Dropped patch upstream_pull_174 because it it is included in this release
- Dropped patch cups-2.1.0-cups-systemd-socket.patch because it it is included in this release (https://github.com/OpenPrinting/cups/commit/e96e96b4bd0d4e6f634bbb66b95d6e475501541c)
- Changed upstream source packages signing key (https://github.com/OpenPrinting/cups/discussions/327#discussioncomment-2060579)
- Re-enabled testsuite
* Also removed make check because since upstream change the two target are identical (https://github.com/OpenPrinting/cups/commit/96ba46ebc818b610b0e40cbc9d62ef1dcd3ec9b6#diff-76ed074a9305c04054cdebb9e9aad2d818052b07091de1f20cad0bbac34ffb52R239)
- Changed cups-2.1.0-cups-systemd-socket.patch to accomodate new coding style
- Changed cups-config-libs.orig to accommodate recent code changes (SSL->TLS)
- Changed cups-2.1.0-default-webcontent-path.patch to accommodate code changes
old: Printing/cups
new: home:ajoga:branches:openSUSE:Factory/cups rev None
Index: cups-2.1.0-default-webcontent-path.patch
===================================================================
--- cups-2.1.0-default-webcontent-path.patch (revision 380)
+++ cups-2.1.0-default-webcontent-path.patch (revision 2)
@@ -1,17 +1,21 @@
---- config-scripts/cups-directories.m4.orig 2014-03-21 17:42:53.000000000 +0100
-+++ config-scripts/cups-directories.m4 2015-09-01 11:08:43.000000000 +0200
-@@ -206,11 +206,11 @@ fi
- AC_SUBST(MENUDIR)
+--- config-scripts/cups-directories.m4
++++ config-scripts/cups-directories.m4.orig
+@@ -166,15 +166,15 @@ AS_IF([test "x$menudir" = x], [
+ AC_SUBST([MENUDIR])
# Documentation files
--AC_ARG_WITH(docdir, [ --with-docdir set path for documentation],docdir="$withval",docdir="")
-+AC_ARG_WITH(docdir, [ --with-docdir set path and DocumentRoot directive for web content, default=datadir/cups/webcontent],docdir="$withval",docdir="")
+-AC_ARG_WITH([docdir], AS_HELP_STRING([--with-docdir], [set path for documentation]), [
++AC_ARG_WITH([docdir], AS_HELP_STRING([--with-docdir], [set path and DocumentRoot directive for web content, default=datadir/cups/webcontent]), [
+ docdir="$withval"
+ ], [
+ docdir=""
+ ])
- if test x$docdir = x; then
-- CUPS_DOCROOT="$datadir/doc/cups"
-- docdir="$datadir/doc/cups"
-+ CUPS_DOCROOT="$datadir/cups/webcontent"
-+ docdir="$datadir/cups/webcontent"
- else
- CUPS_DOCROOT="$docdir"
- fi
+ AS_IF([test x$docdir = x], [
+- CUPS_DOCROOT="$datadir/doc/cups"
+- docdir="$datadir/doc/cups"
++ CUPS_DOCROOT="$datadir/cups/webcontent"
++ docdir="$datadir/cups/webcontent"
+ ], [
+ CUPS_DOCROOT="$docdir"
+ ])
Index: cups-config-libs.patch
===================================================================
--- cups-config-libs.patch (revision 380)
+++ cups-config-libs.patch (revision 2)
@@ -4,7 +4,7 @@
# flags for compiler and linker...
CFLAGS=""
LDFLAGS="@EXPORT_LDFLAGS@"
--LIBS="@LIBGSSAPI@ @DNSSDLIBS@ @EXPORT_SSLLIBS@ @LIBZ@ @LIBS@"
+-LIBS="@LIBGSSAPI@ @DNSSDLIBS@ @EXPORT_TLSLIBS@ @LIBZ@ @LIBS@"
+LIBS=""
# Check for local invocation...
Index: cups.changes
===================================================================
--- cups.changes (revision 380)
+++ cups.changes (revision 2)
@@ -1,4 +1,88 @@
-------------------------------------------------------------------
+Tue Mar 1 18:16:11 UTC 2022 - Aurélien Joga <aurelienjoga@gmail.com>
+
+- Version upgrade to 2.4.1:
+ * The default color mode now is now configurable and defaults to the printer's reported default mode (Issue #277)
+ * Configuration script now checks linking for -Wl,-pie flags (Issue #303)
+ * Fixed memory leaks - in testi18n (Issue #313), in cups_enum_dests() (Issue #317), in _cupsEncodeOption() and http_tls_upgrade() (Issue #322)
+ * Fixed missing bracket in de/index.html (Issue #299)
+ * Fixed typos in configuration scripts (Issues #304, #316)
+ * Removed remaining legacy code for RIP_MAX_CACHE environment variable (Issue #323)
+ * Removed deprecated directives from cupsctl and cups-files.conf (Issue #300)
+ * Removed purge-jobs legacy code from CGI scripts and templates (Issue #325)
+ * Added configure option --with-idle-exit-timeout (Issue #294)
+ * Added --with-systemd-timeoutstartsec configure option (Issue #298)
+ * DigestOptions now are applied for MD5 Digest authentication defined by RFC 2069 as well (Issue #287)
+ * Fixed compilation on Solaris (Issue #293)
+ * Fixed and improved German translations (Issue #296, Issue #297)
+ * Added warning and debug messages when loading printers if the queue is raw or with driver (Issue #286)
+ * Compilation now uses -fstack-protector-strong if available (Issue #285)
+ * Added support for CUPS running in a Snapcraft snap.
+ * Added basic OAuth 2.0 client support (Issue #100)
+ * Added support for AirPrint and Mopria clients (Issue #105)
+ * Added configure support for specifying systemd dependencies in the CUPS service file (Issue #144)
+ * Added several features and improvements to ipptool (Issue #153)
+ * Added a JSON output mode for ipptool.
+ * The ipptool command now correctly reports an error when a test file cannot be found.
+ * CUPS library now uses thread safe getpwnam_r and getpwuid_r functions (Issue #274)
+ * Fixed Kerberos authentication for the web interface (Issue #19)
+ * The ZPL sample driver now supports more "standard" label sizes (Issue #70)
+ * Fixed reporting of printer instances when enumerating and when no options are set for the main instance (Issue #71)
+ * Reverted USB read limit enforcement change from CUPS 2.2.12 (Issue #72)
+ * The IPP backend did not return the correct status code when a job was canceled at the printer/server (Issue #74)
+ * The testlang unit test program now loops over all of the available locales by default (Issue #85)
+ * The cupsfilter command now shows error messages when options are used incorrectly (Issue #88)
+ * The PPD functions now treat boolean values as case-insensitive (Issue #106)
+ * Temporary queue names no longer end with an underscore (Issue #110)
+ * The USB backend now runs as root (Issue #121)
+ * Added pkg-config file for libcups (Issue #122)
+ * Fixed a PPD memory leak caused by emulator definitions (Issue #124)
+ * Fixed a DISPLAY bug in ipptool (Issue #139)
+ * The scheduler now includes the [Job N] prefix for job log messages, even when using syslog logging (Issue #154)
+ * Added support for locales using the GB18030 character set (Issue #159)
+ * httpReconnect2 did not reset the socket file descriptor when the TLS negotiation failed (Apple #5907)
+ * httpUpdate did not reset the socket file descriptor when the TLS negotiation failed (Apple #5915)
+ * The IPP backend now retries Validate-Job requests (Issue #132)
+ * Now show better error messages when a driver interface program fails to provide a PPD file (Issue #148)
+ * Added dark mode support to the CUPS web interface (Issue #152)
+ * Added a workaround for Solaris in httpAddrConnect2 (Issue #156)
+ * Fixed an interaction between --remote-admin and --remote-any for the cupsctl command (Issue #158)
+ * Now use a 60 second timeout for reading USB backchannel data (Issue #160)
+ * The USB backend now tries harder to find a serial number (Issue #170)
+ * Fixed @IF(name) handling in cupsd.conf (Apple #5918)
+ * Fixed documentation and added examples for CUPS' limited CGI support (Apple #5940)
+ * Fixed the lpc command prompt (Apple #5946)
+ * Now always pass "localhost" in the Host: header when talking over a domain socket or the loopback interface (Issue #185)
+ * Fixed a job history update issue in the scheduler (Issue #187)
+ * Fixed job-pages-per-set value for duplex print jobs.
+ * Fixed an edge case in ippReadIO to make sure that only complete attributes and values are retained on an error (Issue #195)
+ * Hardened ippReadIO to prevent invalid IPP messages from being propagated (Issue #195, Issue #196)
+ * The scheduler now supports the "everywhere" model directly (Issue #201)
+ * Fixed some IPP Everywhere option mapping problems (Issue #238)
+ * Fixed support for "job-hold-until" with the Restart-Job operation (Issue #250)
+ * Fixed the default color/grayscale presets for IPP Everywhere PPDs (Issue #262)
+ * Fixed support for the 'offline-report' state for all USB backends (Issue #264)
+ * Documentation fixes (Issue #92, Issue #163, Issue #177, Issue #184)
+ * Localization updates (Issue #123, Issue #129, Issue #134, Issue #146, Issue #164)
+ * USB quirk updates (Issue #192, Issue #270, Apple #5766, Apple #5838, Apple #5843, Apple #5867)
+ * Web interface updates (Issue #142, Issue #218)
+ * The ippeveprinter tool now automatically uses an available port.
+ * Fixed several Windows TLS and hashing issues.
+ * Deprecated cups-config (Issue #97)
+ * Deprecated Kerberos (AuthType Negotiate) authentication (Issue #98)
+ * Removed support for the (long deprecated and unused) FontPath, ListenBackLog, LPDConfigFile, KeepAliveTimeout, RIPCache, and SMBConfigFile directives in cupsd.conf and cups-files.conf.
+ * Stubbed out deprecated httpMD5 functions.
+ * Add test for undefined page ranges during printing.
+- Dropped patch upstream_pull_174 because it it is included in this release
+- Dropped patch cups-2.1.0-cups-systemd-socket.patch because it it is included in this release (https://github.com/OpenPrinting/cups/commit/e96e96b4bd0d4e6f634bbb66b95d6e475501541c)
+- Changed upstream source packages signing key (https://github.com/OpenPrinting/cups/discussions/327#discussioncomment-2060579)
+- Re-enabled testsuite
+ * Also removed make check because since upstream change the two target are identical (https://github.com/OpenPrinting/cups/commit/96ba46ebc818b610b0e40cbc9d62ef1dcd3ec9b6#diff-76ed074a9305c04054cdebb9e9aad2d818052b07091de1f20cad0bbac34ffb52R239)
+- Changed cups-2.1.0-cups-systemd-socket.patch to accomodate new coding style
+- Changed cups-config-libs.orig to accommodate recent code changes (SSL->TLS)
+- Changed cups-2.1.0-default-webcontent-path.patch to accommodate code changes
+
+-------------------------------------------------------------------
Tue Feb 1 09:18:27 UTC 2022 - jsmeix@suse.de
- Enhanced harden_cups.service.patch by adding
Index: cups.keyring
===================================================================
Binary files cups.keyring (revision 380) and cups.keyring (revision 2) differ
Index: cups.spec
===================================================================
--- cups.spec (revision 380)
+++ cups.spec (revision 2)
@@ -18,9 +18,7 @@
# Cf. https://rpm.org/user_doc/conditional_builds.html
# by default enable testsuite (i.e. in the 'check' section run make check and make test)
-#bcond_without testsuite
-# disable testsuite for now until https://github.com/OpenPrinting/cups/issues/155 is fixed
-%bcond_with testsuite
+%bcond_without testsuite
# _tmpfilesdir is not defined in systemd macros up to openSUSE 13.2
%{!?_tmpfilesdir: %global _tmpfilesdir /usr/lib/tmpfiles.d }
@@ -29,34 +27,32 @@
# "zypper vcmp 2.3.b99 2.3.0" shows "2.3.b99 is older than 2.3.0" and
# "zypper vcmp 2.2.99 2.3b6" show "2.2.99 is older than 2.3b6" so that
# version upgrades from 2.2.x via 2.3.b* to 2.3.0 work:
-Version: 2.3.3op2
+Version: 2.4.1
Release: 0
Summary: The Common UNIX Printing System
License: Apache-2.0
Group: Hardware/Printing
URL: https://openprinting.github.io/cups
# To get Source0 go to https://github.com/OpenPrinting/cups/releases or use e.g.
-# wget --no-check-certificate -O cups-2.3.3op2-source.tar.gz https://github.com/OpenPrinting/cups/releases/download/v2.3.3op2/cups-2.3.3op2-source.tar.gz
-Source0: https://github.com/OpenPrinting/cups/releases/download/v2.3.3op2/cups-2.3.3op2-source.tar.gz
+# wget --no-check-certificate -O cups-2.4.1-source.tar.gz https://github.com/OpenPrinting/cups/releases/download/v2.4.1/cups-2.4.1-source.tar.gz
+Source0: https://github.com/OpenPrinting/cups/releases/download/v2.4.1/cups-2.4.1-source.tar.gz
# To get Source1 go to https://github.com/OpenPrinting/cups/releases or use e.g.
-# wget --no-check-certificate -O cups-2.3.3op2-source.tar.gz.sig https://github.com/OpenPrinting/cups/releases/download/v2.3.3op2/cups-2.3.3op2-source.tar.gz.sig
-Source1: https://github.com/OpenPrinting/cups/releases/download/v2.3.3op2/cups-2.3.3op2-source.tar.gz.sig
-# To get Source2 go to https://www.msweet.org/pgp.html
-# PGP Fingerprint: 845464660B686AAB36540B6F999559A027815955
+# wget --no-check-certificate -O cups-2.4.1-source.tar.gz.sig https://github.com/OpenPrinting/cups/releases/download/v2.4.1/cups-2.4.1-source.tar.gz.sig
+Source1: https://github.com/OpenPrinting/cups/releases/download/v2.4.1/cups-2.4.1-source.tar.gz.sig
+# To get Source2 use gpg --keyserver keys.openpgp.org --recv-keys 7082A0A50A2E92640F3880E0E4522DCC9B246FF7
+# See https://github.com/OpenPrinting/cups/discussions/327#discussioncomment-2060579
+# PGP Fingerprint: 7082A0A50A2E92640F3880E0E4522DCC9B246FF7
Source2: cups.keyring
# To manually verify Source0 with Source1 and Source2 do e.g.
# gpg --import cups.keyring
-# gpg --list-keys | grep -1 'Michael R Sweet' | grep -v 'expired'
-# gpg --verify cups-2.3.3op2-source.tar.gz.sig cups-2.3.3op2-source.tar.gz
+# gpg --list-keys | grep -1 'Zdenek Dohnal'
+# gpg --verify cups-2.4.1-source.tar.gz.sig cups-2.4.1-source.tar.gz
Source102: Postscript.ppd.gz
Source105: Postscript-level1.ppd.gz
Source106: Postscript-level2.ppd.gz
Source108: cups-client.conf
Source109: baselibs.conf
# Patch0...Patch9 is for patches from upstream:
-# Patch1 upstream_pull_174.patch is https://github.com/OpenPrinting/cups/pull/174
-# Use 60s timeout for read_thread, revert read limits
-Patch1: upstream_pull_174.patch
# Source10...Source99 is for sources from SUSE which are intended for upstream:
# Patch10...Patch99 is for patches from SUSE which are intended for upstream:
# Patch10 cups-2.1.0-choose-uri-template.patch adds 'smb://...' URIs to templates/choose-uri.tmpl:
@@ -66,8 +62,6 @@
# because the files of the CUPS web content are no documentation, see CUPS STR #3578
# and http://bugzilla.novell.com/show_bug.cgi?id=546023#c6 and subsequent comments:
Patch11: cups-2.1.0-default-webcontent-path.patch
-# Patch12 cups-2.1.0-cups-systemd-socket.patch Use systemd socket activation properly:
-Patch12: cups-2.1.0-cups-systemd-socket.patch
# Patch100...Patch999 is for private patches from SUSE which are not intended for upstream:
# Patch100 cups-pam.diff adds conf/pam.suse regarding support for PAM for SUSE:
Patch100: cups-pam.diff
@@ -83,9 +77,9 @@
Patch103: cups-1.4-do_not_strip_recommended_from_PPDs.patch
# Patch104 cups-config-libs.patch fixes option --libs in cups-config script:
Patch104: cups-config-libs.patch
-# Patch106 Fixes web UI Kerberos authentication (bsc#1175960)
-Patch106: fix-negotiate-authentication-between-CGIs-and-scheduler.patch
Patch107: harden_cups.service.patch
+# Patch108 downgrades the autoconf requirement to the autoconf available in tumbleweed as of writing
+Patch108: downgrade-autoconf-requirement.patch
# Build Requirements:
BuildRequires: dbus-1-devel
BuildRequires: fdupes
@@ -280,9 +274,6 @@
%prep
%setup -q
# Patch0...Patch9 is for patches from upstream:
-# Patch1 upstream_pull_174.patch is https://github.com/OpenPrinting/cups/pull/174
-# Use 60s timeout for read_thread, revert read limits
-%patch1 -p1
# Patch10...Patch99 is for patches from SUSE which are intended for upstream:
# Patch10 cups-2.1.0-choose-uri-template.patch adds 'smb://...' URIs to templates/choose-uri.tmpl:
%patch10 -b choose-uri-template.orig
@@ -291,8 +282,6 @@
# because the files of the CUPS web content are no documentation, see CUPS STR #3578
# and http://bugzilla.novell.com/show_bug.cgi?id=546023#c6 and subsequent comments:
%patch11 -b default-webcontent-path.orig
-# Patch12 cups-2.1.0-cups-systemd-socket.patch Use systemd socket activation properly:
-#patch12 -b cups-systemd-socket.orig
# Patch100...Patch999 is for private patches from SUSE which are not intended for upstream:
# Patch100 cups-pam.diff adds conf/pam.suse regarding support for PAM for SUSE:
%patch100 -b cups-pam.orig
@@ -308,9 +297,8 @@
%patch103 -b do_not_strip_recommended_from_PPDs.orig
# Patch104 cups-config-libs.patch fixes option --libs in cups-config script:
%patch104 -b cups-config-libs.orig
-# Patch106 Fixes web UI Kerberos authentication (bsc#1175960)
-%patch106 -p1
%patch107 -p1
+%patch108 -p1
%build
# Remove ".SILENT" rule for verbose build output
@@ -439,8 +427,6 @@
# There appears to be some kind of race condition when running make check and make test
# cf. https://github.com/OpenPrinting/cups/issues/155
# We print all logs for debugging purposes if either testsuite fails
-echo "DEBUG: running make check"
-bash -c 'make %{?_smp_mflags} check; EXIT=$?; if [ $EXIT -ne 0 ]; then cat test/*_log*-$(whoami); fi; exit $EXIT'
echo "DEBUG: running make test"
bash -c 'make %{?_smp_mflags} test; EXIT=$?; if [ $EXIT -ne 0 ]; then cat test/*_log*-$(whoami); fi; exit $EXIT'
%else
@@ -681,6 +667,7 @@
%files devel
%defattr(-,root,root)
+/usr/lib/pkgconfig/cups.pc
%{_includedir}/cups/
%{_libdir}/libcups.so
%{_libdir}/libcupsimage.so
Index: cups-2.4.1-source.tar.gz
===================================================================
Binary file cups-2.4.1-source.tar.gz (revision 2) added
Index: cups-2.4.1-source.tar.gz.sig
===================================================================
Binary file cups-2.4.1-source.tar.gz.sig (revision 2) added
Index: downgrade-autoconf-requirement.patch
===================================================================
--- downgrade-autoconf-requirement.patch (added)
+++ downgrade-autoconf-requirement.patch (revision 2)
@@ -0,0 +1,15 @@
+diff --git a/configure.ac b/configure.ac
+index a8c6c1040..6ace74a8d 100644
+--- a/configure.ac
++++ b/configure.ac
+@@ -9,8 +9,8 @@ dnl Licensed under Apache License v2.0. See the file "LICENSE" for more
+ dnl information.
+ dnl
+
+-dnl We need at least autoconf 2.71...
+-AC_PREREQ([2.71])
++dnl We need at least autoconf 2.69...
++AC_PREREQ([2.69])
+
+ dnl Package name and version...
+ AC_INIT([CUPS],[2.4.1],[https://github.com/openprinting/cups/issues],[cups],[https://openprinting.github.io/cups])
Index: cups-2.1.0-cups-systemd-socket.patch
===================================================================
--- cups-2.1.0-cups-systemd-socket.patch (revision 380)
+++ cups-2.1.0-cups-systemd-socket.patch (deleted)
@@ -1,43 +0,0 @@
---- scheduler/main.c.orig 2015-06-08 20:32:35.000000000 +0200
-+++ scheduler/main.c 2015-09-01 11:19:36.000000000 +0200
-@@ -656,7 +656,15 @@ main(int argc, /* I - Number of comm
-
- #if defined(HAVE_LAUNCHD) || defined(HAVE_SYSTEMD)
- if (OnDemand)
-+ {
- cupsdAddEvent(CUPSD_EVENT_SERVER_STARTED, NULL, NULL, "Scheduler started on demand.");
-+# ifdef HAVE_SYSTEMD
-+ sd_notifyf(0, "READY=1\n"
-+ "STATUS=Scheduler is running...\n"
-+ "MAINPID=%lu",
-+ (unsigned long) getpid());
-+# endif /* HAVE_SYSTEMD */
-+ }
- else
- #endif /* HAVE_LAUNCHD || HAVE_SYSTEMD */
- if (fg)
---- scheduler/org.cups.cupsd.path.in.orig 2014-03-21 15:50:24.000000000 +0100
-+++ scheduler/org.cups.cupsd.path.in 2015-09-01 11:20:37.000000000 +0200
-@@ -3,6 +3,7 @@ Description=CUPS Scheduler
-
- [Path]
- PathExists=@CUPS_CACHEDIR@/org.cups.cupsd
-+PathExistsGlob=@CUPS_REQUESTS@/d*
-
- [Install]
- WantedBy=multi-user.target
---- scheduler/org.cups.cupsd.service.in.orig 2014-10-21 13:54:05.000000000 +0200
-+++ scheduler/org.cups.cupsd.service.in 2015-09-01 11:22:09.000000000 +0200
-@@ -1,10 +1,11 @@
- [Unit]
- Description=CUPS Scheduler
- Documentation=man:cupsd(8)
-+After=network.target
-
- [Service]
- ExecStart=@sbindir@/cupsd -l
--Type=simple
-+Type=notify
-
- [Install]
- Also=org.cups.cupsd.socket org.cups.cupsd.path
Index: cups-2.3.3op2-source.tar.gz
===================================================================
Binary file cups-2.3.3op2-source.tar.gz (revision 380) deleted
Index: cups-2.3.3op2-source.tar.gz.sig
===================================================================
Binary file cups-2.3.3op2-source.tar.gz.sig (revision 380) deleted
Index: fix-negotiate-authentication-between-CGIs-and-scheduler.patch
===================================================================
--- fix-negotiate-authentication-between-CGIs-and-scheduler.patch (revision 380)
+++ fix-negotiate-authentication-between-CGIs-and-scheduler.patch (deleted)
@@ -1,223 +0,0 @@
-From d4521ed0df7e625ccf2bc079bab6f48c46ef9bf9 Mon Sep 17 00:00:00 2001
-From: Samuel Cabrero <scabrero@suse.de>
-Date: Mon, 26 Oct 2020 17:35:22 +0100
-Subject: [PATCH 1/4] Avoid infinite loop in admin.cgi when negotiate is used
-
-SetAuthorizationString with NULL argument sets an empty string.
-
-Related: #5596
-
-Signed-off-by: Samuel Cabrero <scabrero@suse.de>
----
- cups/auth.c | 2 +-
- 1 file changed, 1 insertion(+), 1 deletion(-)
-
-diff --git a/cups/auth.c b/cups/auth.c
-index db45bbba6..f2409350a 100644
---- a/cups/auth.c
-+++ b/cups/auth.c
-@@ -295,7 +295,7 @@ cupsDoAuthentication(
- }
- }
-
-- if (http->authstring)
-+ if (http->authstring && http->authstring[0])
- {
- DEBUG_printf(("1cupsDoAuthentication: authstring=\"%s\".", http->authstring));
-
---
-2.30.2
-
-
-From 61ad7780bc7d0593e3225d088ac6dff31badf801 Mon Sep 17 00:00:00 2001
-From: Samuel Cabrero <scabrero@suse.de>
-Date: Tue, 27 Oct 2020 16:11:41 +0100
-Subject: [PATCH 2/4] Add cups_is_local_connection() to check if connection is
- to localhost
-
-Related: #5596
-
-Signed-off-by: Samuel Cabrero <scabrero@suse.de>
----
- cups/auth.c | 11 ++++++++++-
- 1 file changed, 10 insertions(+), 1 deletion(-)
-
-diff --git a/cups/auth.c b/cups/auth.c
-index f2409350a..d2956438d 100644
---- a/cups/auth.c
-+++ b/cups/auth.c
-@@ -90,6 +90,7 @@ static void cups_gss_printf(OM_uint32 major_status, OM_uint32 minor_status,
- # define cups_gss_printf(major, minor, message)
- # endif /* DEBUG */
- #endif /* HAVE_GSSAPI */
-+static int cups_is_local_connection(http_t *http);
- static int cups_local_auth(http_t *http);
-
-
-@@ -916,6 +917,14 @@ cups_gss_printf(OM_uint32 major_status,/* I - Major status code */
- # endif /* DEBUG */
- #endif /* HAVE_GSSAPI */
-
-+static int /* O - 0 if not a local connection */
-+ /* 1 if local connection */
-+cups_is_local_connection(http_t *http) /* I - HTTP connection to server */
-+{
-+ if (!httpAddrLocalhost(http->hostaddr) && _cups_strcasecmp(http->hostname, "localhost") != 0)
-+ return 0;
-+ return 1;
-+}
-
- /*
- * 'cups_local_auth()' - Get the local authorization certificate if
-@@ -958,7 +967,7 @@ cups_local_auth(http_t *http) /* I - HTTP connection to server */
- * See if we are accessing localhost...
- */
-
-- if (!httpAddrLocalhost(http->hostaddr) && _cups_strcasecmp(http->hostname, "localhost") != 0)
-+ if (!cups_is_local_connection(http))
- {
- DEBUG_puts("8cups_local_auth: Not a local connection!");
- return (1);
---
-2.30.2
-
-
-From f629d079750a86b1b605c285f99c0dea3933ca50 Mon Sep 17 00:00:00 2001
-From: Samuel Cabrero <scabrero@suse.de>
-Date: Tue, 27 Oct 2020 16:23:30 +0100
-Subject: [PATCH 3/4] Try local kerberos ccache credentials only for remote
- servers
-
-If connecting to localhost then proceed to ask the client for the
-authorization using cupsGetPassword2. The get password callback will
-return 401 to the client with WWW-Authenticate: Negotiate.
-
-Fixes: #5596
-
-Signed-off-by: Samuel Cabrero <scabrero@suse.de>
----
- cups/auth.c | 10 ++++++----
- 1 file changed, 6 insertions(+), 4 deletions(-)
-
-diff --git a/cups/auth.c b/cups/auth.c
-index d2956438d..9661657fc 100644
---- a/cups/auth.c
-+++ b/cups/auth.c
-@@ -175,10 +175,10 @@ cupsDoAuthentication(
- DEBUG_printf(("2cupsDoAuthentication: Trying scheme \"%s\"...", scheme));
-
- #ifdef HAVE_GSSAPI
-- if (!_cups_strcasecmp(scheme, "Negotiate"))
-+ if (!_cups_strcasecmp(scheme, "Negotiate") && !cups_is_local_connection(http))
- {
- /*
-- * Kerberos authentication...
-+ * Kerberos authentication to remote server...
- */
-
- int gss_status; /* Auth status */
-@@ -202,7 +202,9 @@ cupsDoAuthentication(
- }
- else
- #endif /* HAVE_GSSAPI */
-- if (_cups_strcasecmp(scheme, "Basic") && _cups_strcasecmp(scheme, "Digest"))
-+ if (_cups_strcasecmp(scheme, "Basic") &&
-+ _cups_strcasecmp(scheme, "Digest") &&
-+ _cups_strcasecmp(scheme, "Negotiate"))
- {
- /*
- * Other schemes not yet supported...
-@@ -216,7 +218,7 @@ cupsDoAuthentication(
- * See if we should retry the current username:password...
- */
-
-- if ((http->digest_tries > 1 || !http->userpass[0]) && (!_cups_strcasecmp(scheme, "Basic") || (!_cups_strcasecmp(scheme, "Digest"))))
-+ if (http->digest_tries > 1 || !http->userpass[0])
- {
- /*
- * Nope - get a new password from the user...
---
-2.30.2
-
-
-From 0563a28b18b21d5574a5e0e38b74246146074bbf Mon Sep 17 00:00:00 2001
-From: Samuel Cabrero <scabrero@suse.de>
-Date: Tue, 27 Oct 2020 16:18:03 +0100
-Subject: [PATCH 4/4] Allow Local authentication for Negotiate
-
-PeerCred is also possible if address family is AF_LOCAL. This will allow
-the CGI programs to generate the authorization from the local
-certificates based on PID also when Negotiate is used for local
-connections:
-
-Client CGI
-Browser <- Remote conn -> admin.cgi <--- Localhost conn ---> Scheduler
- | | |
- + --- HTTP/POST /admin/ --> | |
- | + --- CUPS-Get-Devices ------------> |
- | | |
- | | <-- 401 Unauthorized --------------+
- | | WWW-Authenticate: |
- | | Negotiate, (PeerCred,) Local |
- | | |
- | <-- 401 Unauthorized -----+ |
- | WWW-Authenticate: | |
- | Negotiate | |
- | | |
- | --- HTTP/POST /admin/ --> | |
- | Authorization: + --- IPP CUPS-GetDevices ---------> |
- | Negotiate | Authorization: Local <cert> |
- | | |
-
-Fixes: #5596
-
-Signed-off-by: Samuel Cabrero <scabrero@suse.de>
----
- cups/auth.c | 5 -----
- scheduler/client.c | 9 ++-------
- 2 files changed, 2 insertions(+), 12 deletions(-)
-
-diff --git a/cups/auth.c b/cups/auth.c
-index 9661657fc..b6fec6b98 100644
---- a/cups/auth.c
-+++ b/cups/auth.c
-@@ -1043,11 +1043,6 @@ cups_local_auth(http_t *http) /* I - HTTP connection to server */
- }
- # endif /* HAVE_AUTHORIZATION_H */
-
--# ifdef HAVE_GSSAPI
-- if (cups_auth_find(www_auth, "Negotiate"))
-- return (1);
--# endif /* HAVE_GSSAPI */
--
- # if defined(SO_PEERCRED) && defined(AF_LOCAL)
- /*
- * See if we can authenticate using the peer credentials provided over a
-diff --git a/scheduler/client.c b/scheduler/client.c
-index c2ee8f12a..56797d58d 100644
---- a/scheduler/client.c
-+++ b/scheduler/client.c
-@@ -2109,18 +2109,13 @@ cupsdSendHeader(
- }
- else if (auth_type == CUPSD_AUTH_NEGOTIATE)
- {
--#if defined(SO_PEERCRED) && defined(AF_LOCAL)
-- if (httpAddrFamily(httpGetAddress(con->http)) == AF_LOCAL)
-- strlcpy(auth_str, "PeerCred", sizeof(auth_str));
-- else
--#endif /* SO_PEERCRED && AF_LOCAL */
- strlcpy(auth_str, "Negotiate", sizeof(auth_str));
- }
-
-- if (con->best && auth_type != CUPSD_AUTH_NEGOTIATE && !con->is_browser && !_cups_strcasecmp(httpGetHostname(con->http, NULL, 0), "localhost"))
-+ if (con->best && !con->is_browser && !_cups_strcasecmp(httpGetHostname(con->http, NULL, 0), "localhost"))
- {
- /*
-- * Add a "trc" (try root certification) parameter for local non-Kerberos
-+ * Add a "trc" (try root certification) parameter for local
- * requests when the request requires system group membership - then the
- * client knows the root certificate can/should be used.
- *
---
-2.30.2
-
Index: upstream_pull_174.patch
===================================================================
--- upstream_pull_174.patch (revision 380)
+++ upstream_pull_174.patch (deleted)
@@ -1,53 +0,0 @@
-From c37d71b1a31d26a4790166e2508822b18934a5c0 Mon Sep 17 00:00:00 2001
-From: Zdenek Dohnal <zdohnal@redhat.com>
-Date: Tue, 13 Apr 2021 15:44:14 +0200
-Subject: [PATCH 1/2] backend/usb-libusb.c: Use 60s timeout for reading at
- backchannel
-
-Some older models malfunction if timeout is too short.
----
- CHANGES.md | 1 +
- backend/usb-libusb.c | 2 +-
- 2 files changed, 2 insertions(+), 1 deletion(-)
-
---- a/backend/usb-libusb.c
-+++ b/backend/usb-libusb.c
-@@ -1704,7 +1704,7 @@ static void *read_thread(void *reference)
- readstatus = libusb_bulk_transfer(g.printer->handle,
- g.printer->read_endp,
- readbuffer, rbytes,
-- &rbytes, 250);
-+ &rbytes, 60000);
- if (readstatus == LIBUSB_SUCCESS && rbytes > 0)
- {
- fprintf(stderr, "DEBUG: Read %d bytes of back-channel data...\n", (int)rbytes);
-
-From 4cb6f6806cdbe040d478b266a1d351b19341dd79 Mon Sep 17 00:00:00 2001
-From: Zdenek Dohnal <zdohnal@redhat.com>
-Date: Tue, 13 Apr 2021 15:47:37 +0200
-Subject: [PATCH 2/2] backend/usb-libusb.c: Revert enforcing read limits
-
-This commit reverts the change introduced by 2.2.12 [1] - its
-implementation caused a regression with Lexmark filters.
-
-[1]
-https://github.com/apple/cups/commit/35e927f83529cd9b4bc37bcd418c50e307fced35
----
- CHANGES.md | 1 +
- backend/usb-libusb.c | 3 ++-
- 2 files changed, 3 insertions(+), 1 deletion(-)
-
-diff --git a/backend/usb-libusb.c b/backend/usb-libusb.c
-index fbb0d9d89..89b5182f7 100644
---- a/backend/usb-libusb.c
-+++ b/backend/usb-libusb.c
-@@ -1721,7 +1721,8 @@ static void *read_thread(void *reference)
- * Make sure this loop executes no more than once every 250 miliseconds...
- */
-
-- if ((g.wait_eof || !g.read_thread_stop))
-+ if ((readstatus != LIBUSB_SUCCESS || rbytes == 0) &&
-+ (g.wait_eof || !g.read_thread_stop))
- usleep(250000);
- }
- while (g.wait_eof || !g.read_thread_stop);
OBS-URL: https://build.opensuse.org/request/show/958348
OBS-URL: https://build.opensuse.org/package/show/Printing/cups?expand=0&rev=381
2022-03-03 13:19:05 +01:00
|
|
|
|
* Fixed a job history update issue in the scheduler (Issue #187)
|
|
|
|
|
* Fixed job-pages-per-set value for duplex print jobs.
|
2022-03-04 09:58:18 +01:00
|
|
|
|
* Fixed an edge case in ippReadIO to make sure that only complete
|
|
|
|
|
attributes and values are retained on an error (Issue #195)
|
|
|
|
|
* Hardened ippReadIO to prevent invalid IPP messages from being
|
|
|
|
|
propagated (Issue #195, Issue #196)
|
|
|
|
|
* The scheduler now supports the "everywhere" model
|
|
|
|
|
directly (Issue #201)
|
Accepting request 958348 from home:ajoga:branches:openSUSE:Factory
- Version upgrade to 2.4.1
- Dropped patch upstream_pull_174 because it it is included in this release
- Dropped patch cups-2.1.0-cups-systemd-socket.patch because it it is included in this release (https://github.com/OpenPrinting/cups/commit/e96e96b4bd0d4e6f634bbb66b95d6e475501541c)
- Changed upstream source packages signing key (https://github.com/OpenPrinting/cups/discussions/327#discussioncomment-2060579)
- Re-enabled testsuite
* Also removed make check because since upstream change the two target are identical (https://github.com/OpenPrinting/cups/commit/96ba46ebc818b610b0e40cbc9d62ef1dcd3ec9b6#diff-76ed074a9305c04054cdebb9e9aad2d818052b07091de1f20cad0bbac34ffb52R239)
- Changed cups-2.1.0-cups-systemd-socket.patch to accomodate new coding style
- Changed cups-config-libs.orig to accommodate recent code changes (SSL->TLS)
- Changed cups-2.1.0-default-webcontent-path.patch to accommodate code changes
old: Printing/cups
new: home:ajoga:branches:openSUSE:Factory/cups rev None
Index: cups-2.1.0-default-webcontent-path.patch
===================================================================
--- cups-2.1.0-default-webcontent-path.patch (revision 380)
+++ cups-2.1.0-default-webcontent-path.patch (revision 2)
@@ -1,17 +1,21 @@
---- config-scripts/cups-directories.m4.orig 2014-03-21 17:42:53.000000000 +0100
-+++ config-scripts/cups-directories.m4 2015-09-01 11:08:43.000000000 +0200
-@@ -206,11 +206,11 @@ fi
- AC_SUBST(MENUDIR)
+--- config-scripts/cups-directories.m4
++++ config-scripts/cups-directories.m4.orig
+@@ -166,15 +166,15 @@ AS_IF([test "x$menudir" = x], [
+ AC_SUBST([MENUDIR])
# Documentation files
--AC_ARG_WITH(docdir, [ --with-docdir set path for documentation],docdir="$withval",docdir="")
-+AC_ARG_WITH(docdir, [ --with-docdir set path and DocumentRoot directive for web content, default=datadir/cups/webcontent],docdir="$withval",docdir="")
+-AC_ARG_WITH([docdir], AS_HELP_STRING([--with-docdir], [set path for documentation]), [
++AC_ARG_WITH([docdir], AS_HELP_STRING([--with-docdir], [set path and DocumentRoot directive for web content, default=datadir/cups/webcontent]), [
+ docdir="$withval"
+ ], [
+ docdir=""
+ ])
- if test x$docdir = x; then
-- CUPS_DOCROOT="$datadir/doc/cups"
-- docdir="$datadir/doc/cups"
-+ CUPS_DOCROOT="$datadir/cups/webcontent"
-+ docdir="$datadir/cups/webcontent"
- else
- CUPS_DOCROOT="$docdir"
- fi
+ AS_IF([test x$docdir = x], [
+- CUPS_DOCROOT="$datadir/doc/cups"
+- docdir="$datadir/doc/cups"
++ CUPS_DOCROOT="$datadir/cups/webcontent"
++ docdir="$datadir/cups/webcontent"
+ ], [
+ CUPS_DOCROOT="$docdir"
+ ])
Index: cups-config-libs.patch
===================================================================
--- cups-config-libs.patch (revision 380)
+++ cups-config-libs.patch (revision 2)
@@ -4,7 +4,7 @@
# flags for compiler and linker...
CFLAGS=""
LDFLAGS="@EXPORT_LDFLAGS@"
--LIBS="@LIBGSSAPI@ @DNSSDLIBS@ @EXPORT_SSLLIBS@ @LIBZ@ @LIBS@"
+-LIBS="@LIBGSSAPI@ @DNSSDLIBS@ @EXPORT_TLSLIBS@ @LIBZ@ @LIBS@"
+LIBS=""
# Check for local invocation...
Index: cups.changes
===================================================================
--- cups.changes (revision 380)
+++ cups.changes (revision 2)
@@ -1,4 +1,88 @@
-------------------------------------------------------------------
+Tue Mar 1 18:16:11 UTC 2022 - Aurélien Joga <aurelienjoga@gmail.com>
+
+- Version upgrade to 2.4.1:
+ * The default color mode now is now configurable and defaults to the printer's reported default mode (Issue #277)
+ * Configuration script now checks linking for -Wl,-pie flags (Issue #303)
+ * Fixed memory leaks - in testi18n (Issue #313), in cups_enum_dests() (Issue #317), in _cupsEncodeOption() and http_tls_upgrade() (Issue #322)
+ * Fixed missing bracket in de/index.html (Issue #299)
+ * Fixed typos in configuration scripts (Issues #304, #316)
+ * Removed remaining legacy code for RIP_MAX_CACHE environment variable (Issue #323)
+ * Removed deprecated directives from cupsctl and cups-files.conf (Issue #300)
+ * Removed purge-jobs legacy code from CGI scripts and templates (Issue #325)
+ * Added configure option --with-idle-exit-timeout (Issue #294)
+ * Added --with-systemd-timeoutstartsec configure option (Issue #298)
+ * DigestOptions now are applied for MD5 Digest authentication defined by RFC 2069 as well (Issue #287)
+ * Fixed compilation on Solaris (Issue #293)
+ * Fixed and improved German translations (Issue #296, Issue #297)
+ * Added warning and debug messages when loading printers if the queue is raw or with driver (Issue #286)
+ * Compilation now uses -fstack-protector-strong if available (Issue #285)
+ * Added support for CUPS running in a Snapcraft snap.
+ * Added basic OAuth 2.0 client support (Issue #100)
+ * Added support for AirPrint and Mopria clients (Issue #105)
+ * Added configure support for specifying systemd dependencies in the CUPS service file (Issue #144)
+ * Added several features and improvements to ipptool (Issue #153)
+ * Added a JSON output mode for ipptool.
+ * The ipptool command now correctly reports an error when a test file cannot be found.
+ * CUPS library now uses thread safe getpwnam_r and getpwuid_r functions (Issue #274)
+ * Fixed Kerberos authentication for the web interface (Issue #19)
+ * The ZPL sample driver now supports more "standard" label sizes (Issue #70)
+ * Fixed reporting of printer instances when enumerating and when no options are set for the main instance (Issue #71)
+ * Reverted USB read limit enforcement change from CUPS 2.2.12 (Issue #72)
+ * The IPP backend did not return the correct status code when a job was canceled at the printer/server (Issue #74)
+ * The testlang unit test program now loops over all of the available locales by default (Issue #85)
+ * The cupsfilter command now shows error messages when options are used incorrectly (Issue #88)
+ * The PPD functions now treat boolean values as case-insensitive (Issue #106)
+ * Temporary queue names no longer end with an underscore (Issue #110)
+ * The USB backend now runs as root (Issue #121)
+ * Added pkg-config file for libcups (Issue #122)
+ * Fixed a PPD memory leak caused by emulator definitions (Issue #124)
+ * Fixed a DISPLAY bug in ipptool (Issue #139)
+ * The scheduler now includes the [Job N] prefix for job log messages, even when using syslog logging (Issue #154)
+ * Added support for locales using the GB18030 character set (Issue #159)
+ * httpReconnect2 did not reset the socket file descriptor when the TLS negotiation failed (Apple #5907)
+ * httpUpdate did not reset the socket file descriptor when the TLS negotiation failed (Apple #5915)
+ * The IPP backend now retries Validate-Job requests (Issue #132)
+ * Now show better error messages when a driver interface program fails to provide a PPD file (Issue #148)
+ * Added dark mode support to the CUPS web interface (Issue #152)
+ * Added a workaround for Solaris in httpAddrConnect2 (Issue #156)
+ * Fixed an interaction between --remote-admin and --remote-any for the cupsctl command (Issue #158)
+ * Now use a 60 second timeout for reading USB backchannel data (Issue #160)
+ * The USB backend now tries harder to find a serial number (Issue #170)
+ * Fixed @IF(name) handling in cupsd.conf (Apple #5918)
+ * Fixed documentation and added examples for CUPS' limited CGI support (Apple #5940)
+ * Fixed the lpc command prompt (Apple #5946)
+ * Now always pass "localhost" in the Host: header when talking over a domain socket or the loopback interface (Issue #185)
+ * Fixed a job history update issue in the scheduler (Issue #187)
+ * Fixed job-pages-per-set value for duplex print jobs.
+ * Fixed an edge case in ippReadIO to make sure that only complete attributes and values are retained on an error (Issue #195)
+ * Hardened ippReadIO to prevent invalid IPP messages from being propagated (Issue #195, Issue #196)
+ * The scheduler now supports the "everywhere" model directly (Issue #201)
+ * Fixed some IPP Everywhere option mapping problems (Issue #238)
+ * Fixed support for "job-hold-until" with the Restart-Job operation (Issue #250)
+ * Fixed the default color/grayscale presets for IPP Everywhere PPDs (Issue #262)
+ * Fixed support for the 'offline-report' state for all USB backends (Issue #264)
+ * Documentation fixes (Issue #92, Issue #163, Issue #177, Issue #184)
+ * Localization updates (Issue #123, Issue #129, Issue #134, Issue #146, Issue #164)
+ * USB quirk updates (Issue #192, Issue #270, Apple #5766, Apple #5838, Apple #5843, Apple #5867)
+ * Web interface updates (Issue #142, Issue #218)
+ * The ippeveprinter tool now automatically uses an available port.
+ * Fixed several Windows TLS and hashing issues.
+ * Deprecated cups-config (Issue #97)
+ * Deprecated Kerberos (AuthType Negotiate) authentication (Issue #98)
+ * Removed support for the (long deprecated and unused) FontPath, ListenBackLog, LPDConfigFile, KeepAliveTimeout, RIPCache, and SMBConfigFile directives in cupsd.conf and cups-files.conf.
+ * Stubbed out deprecated httpMD5 functions.
+ * Add test for undefined page ranges during printing.
+- Dropped patch upstream_pull_174 because it it is included in this release
+- Dropped patch cups-2.1.0-cups-systemd-socket.patch because it it is included in this release (https://github.com/OpenPrinting/cups/commit/e96e96b4bd0d4e6f634bbb66b95d6e475501541c)
+- Changed upstream source packages signing key (https://github.com/OpenPrinting/cups/discussions/327#discussioncomment-2060579)
+- Re-enabled testsuite
+ * Also removed make check because since upstream change the two target are identical (https://github.com/OpenPrinting/cups/commit/96ba46ebc818b610b0e40cbc9d62ef1dcd3ec9b6#diff-76ed074a9305c04054cdebb9e9aad2d818052b07091de1f20cad0bbac34ffb52R239)
+- Changed cups-2.1.0-cups-systemd-socket.patch to accomodate new coding style
+- Changed cups-config-libs.orig to accommodate recent code changes (SSL->TLS)
+- Changed cups-2.1.0-default-webcontent-path.patch to accommodate code changes
+
+-------------------------------------------------------------------
Tue Feb 1 09:18:27 UTC 2022 - jsmeix@suse.de
- Enhanced harden_cups.service.patch by adding
Index: cups.keyring
===================================================================
Binary files cups.keyring (revision 380) and cups.keyring (revision 2) differ
Index: cups.spec
===================================================================
--- cups.spec (revision 380)
+++ cups.spec (revision 2)
@@ -18,9 +18,7 @@
# Cf. https://rpm.org/user_doc/conditional_builds.html
# by default enable testsuite (i.e. in the 'check' section run make check and make test)
-#bcond_without testsuite
-# disable testsuite for now until https://github.com/OpenPrinting/cups/issues/155 is fixed
-%bcond_with testsuite
+%bcond_without testsuite
# _tmpfilesdir is not defined in systemd macros up to openSUSE 13.2
%{!?_tmpfilesdir: %global _tmpfilesdir /usr/lib/tmpfiles.d }
@@ -29,34 +27,32 @@
# "zypper vcmp 2.3.b99 2.3.0" shows "2.3.b99 is older than 2.3.0" and
# "zypper vcmp 2.2.99 2.3b6" show "2.2.99 is older than 2.3b6" so that
# version upgrades from 2.2.x via 2.3.b* to 2.3.0 work:
-Version: 2.3.3op2
+Version: 2.4.1
Release: 0
Summary: The Common UNIX Printing System
License: Apache-2.0
Group: Hardware/Printing
URL: https://openprinting.github.io/cups
# To get Source0 go to https://github.com/OpenPrinting/cups/releases or use e.g.
-# wget --no-check-certificate -O cups-2.3.3op2-source.tar.gz https://github.com/OpenPrinting/cups/releases/download/v2.3.3op2/cups-2.3.3op2-source.tar.gz
-Source0: https://github.com/OpenPrinting/cups/releases/download/v2.3.3op2/cups-2.3.3op2-source.tar.gz
+# wget --no-check-certificate -O cups-2.4.1-source.tar.gz https://github.com/OpenPrinting/cups/releases/download/v2.4.1/cups-2.4.1-source.tar.gz
+Source0: https://github.com/OpenPrinting/cups/releases/download/v2.4.1/cups-2.4.1-source.tar.gz
# To get Source1 go to https://github.com/OpenPrinting/cups/releases or use e.g.
-# wget --no-check-certificate -O cups-2.3.3op2-source.tar.gz.sig https://github.com/OpenPrinting/cups/releases/download/v2.3.3op2/cups-2.3.3op2-source.tar.gz.sig
-Source1: https://github.com/OpenPrinting/cups/releases/download/v2.3.3op2/cups-2.3.3op2-source.tar.gz.sig
-# To get Source2 go to https://www.msweet.org/pgp.html
-# PGP Fingerprint: 845464660B686AAB36540B6F999559A027815955
+# wget --no-check-certificate -O cups-2.4.1-source.tar.gz.sig https://github.com/OpenPrinting/cups/releases/download/v2.4.1/cups-2.4.1-source.tar.gz.sig
+Source1: https://github.com/OpenPrinting/cups/releases/download/v2.4.1/cups-2.4.1-source.tar.gz.sig
+# To get Source2 use gpg --keyserver keys.openpgp.org --recv-keys 7082A0A50A2E92640F3880E0E4522DCC9B246FF7
+# See https://github.com/OpenPrinting/cups/discussions/327#discussioncomment-2060579
+# PGP Fingerprint: 7082A0A50A2E92640F3880E0E4522DCC9B246FF7
Source2: cups.keyring
# To manually verify Source0 with Source1 and Source2 do e.g.
# gpg --import cups.keyring
-# gpg --list-keys | grep -1 'Michael R Sweet' | grep -v 'expired'
-# gpg --verify cups-2.3.3op2-source.tar.gz.sig cups-2.3.3op2-source.tar.gz
+# gpg --list-keys | grep -1 'Zdenek Dohnal'
+# gpg --verify cups-2.4.1-source.tar.gz.sig cups-2.4.1-source.tar.gz
Source102: Postscript.ppd.gz
Source105: Postscript-level1.ppd.gz
Source106: Postscript-level2.ppd.gz
Source108: cups-client.conf
Source109: baselibs.conf
# Patch0...Patch9 is for patches from upstream:
-# Patch1 upstream_pull_174.patch is https://github.com/OpenPrinting/cups/pull/174
-# Use 60s timeout for read_thread, revert read limits
-Patch1: upstream_pull_174.patch
# Source10...Source99 is for sources from SUSE which are intended for upstream:
# Patch10...Patch99 is for patches from SUSE which are intended for upstream:
# Patch10 cups-2.1.0-choose-uri-template.patch adds 'smb://...' URIs to templates/choose-uri.tmpl:
@@ -66,8 +62,6 @@
# because the files of the CUPS web content are no documentation, see CUPS STR #3578
# and http://bugzilla.novell.com/show_bug.cgi?id=546023#c6 and subsequent comments:
Patch11: cups-2.1.0-default-webcontent-path.patch
-# Patch12 cups-2.1.0-cups-systemd-socket.patch Use systemd socket activation properly:
-Patch12: cups-2.1.0-cups-systemd-socket.patch
# Patch100...Patch999 is for private patches from SUSE which are not intended for upstream:
# Patch100 cups-pam.diff adds conf/pam.suse regarding support for PAM for SUSE:
Patch100: cups-pam.diff
@@ -83,9 +77,9 @@
Patch103: cups-1.4-do_not_strip_recommended_from_PPDs.patch
# Patch104 cups-config-libs.patch fixes option --libs in cups-config script:
Patch104: cups-config-libs.patch
-# Patch106 Fixes web UI Kerberos authentication (bsc#1175960)
-Patch106: fix-negotiate-authentication-between-CGIs-and-scheduler.patch
Patch107: harden_cups.service.patch
+# Patch108 downgrades the autoconf requirement to the autoconf available in tumbleweed as of writing
+Patch108: downgrade-autoconf-requirement.patch
# Build Requirements:
BuildRequires: dbus-1-devel
BuildRequires: fdupes
@@ -280,9 +274,6 @@
%prep
%setup -q
# Patch0...Patch9 is for patches from upstream:
-# Patch1 upstream_pull_174.patch is https://github.com/OpenPrinting/cups/pull/174
-# Use 60s timeout for read_thread, revert read limits
-%patch1 -p1
# Patch10...Patch99 is for patches from SUSE which are intended for upstream:
# Patch10 cups-2.1.0-choose-uri-template.patch adds 'smb://...' URIs to templates/choose-uri.tmpl:
%patch10 -b choose-uri-template.orig
@@ -291,8 +282,6 @@
# because the files of the CUPS web content are no documentation, see CUPS STR #3578
# and http://bugzilla.novell.com/show_bug.cgi?id=546023#c6 and subsequent comments:
%patch11 -b default-webcontent-path.orig
-# Patch12 cups-2.1.0-cups-systemd-socket.patch Use systemd socket activation properly:
-#patch12 -b cups-systemd-socket.orig
# Patch100...Patch999 is for private patches from SUSE which are not intended for upstream:
# Patch100 cups-pam.diff adds conf/pam.suse regarding support for PAM for SUSE:
%patch100 -b cups-pam.orig
@@ -308,9 +297,8 @@
%patch103 -b do_not_strip_recommended_from_PPDs.orig
# Patch104 cups-config-libs.patch fixes option --libs in cups-config script:
%patch104 -b cups-config-libs.orig
-# Patch106 Fixes web UI Kerberos authentication (bsc#1175960)
-%patch106 -p1
%patch107 -p1
+%patch108 -p1
%build
# Remove ".SILENT" rule for verbose build output
@@ -439,8 +427,6 @@
# There appears to be some kind of race condition when running make check and make test
# cf. https://github.com/OpenPrinting/cups/issues/155
# We print all logs for debugging purposes if either testsuite fails
-echo "DEBUG: running make check"
-bash -c 'make %{?_smp_mflags} check; EXIT=$?; if [ $EXIT -ne 0 ]; then cat test/*_log*-$(whoami); fi; exit $EXIT'
echo "DEBUG: running make test"
bash -c 'make %{?_smp_mflags} test; EXIT=$?; if [ $EXIT -ne 0 ]; then cat test/*_log*-$(whoami); fi; exit $EXIT'
%else
@@ -681,6 +667,7 @@
%files devel
%defattr(-,root,root)
+/usr/lib/pkgconfig/cups.pc
%{_includedir}/cups/
%{_libdir}/libcups.so
%{_libdir}/libcupsimage.so
Index: cups-2.4.1-source.tar.gz
===================================================================
Binary file cups-2.4.1-source.tar.gz (revision 2) added
Index: cups-2.4.1-source.tar.gz.sig
===================================================================
Binary file cups-2.4.1-source.tar.gz.sig (revision 2) added
Index: downgrade-autoconf-requirement.patch
===================================================================
--- downgrade-autoconf-requirement.patch (added)
+++ downgrade-autoconf-requirement.patch (revision 2)
@@ -0,0 +1,15 @@
+diff --git a/configure.ac b/configure.ac
+index a8c6c1040..6ace74a8d 100644
+--- a/configure.ac
++++ b/configure.ac
+@@ -9,8 +9,8 @@ dnl Licensed under Apache License v2.0. See the file "LICENSE" for more
+ dnl information.
+ dnl
+
+-dnl We need at least autoconf 2.71...
+-AC_PREREQ([2.71])
++dnl We need at least autoconf 2.69...
++AC_PREREQ([2.69])
+
+ dnl Package name and version...
+ AC_INIT([CUPS],[2.4.1],[https://github.com/openprinting/cups/issues],[cups],[https://openprinting.github.io/cups])
Index: cups-2.1.0-cups-systemd-socket.patch
===================================================================
--- cups-2.1.0-cups-systemd-socket.patch (revision 380)
+++ cups-2.1.0-cups-systemd-socket.patch (deleted)
@@ -1,43 +0,0 @@
---- scheduler/main.c.orig 2015-06-08 20:32:35.000000000 +0200
-+++ scheduler/main.c 2015-09-01 11:19:36.000000000 +0200
-@@ -656,7 +656,15 @@ main(int argc, /* I - Number of comm
-
- #if defined(HAVE_LAUNCHD) || defined(HAVE_SYSTEMD)
- if (OnDemand)
-+ {
- cupsdAddEvent(CUPSD_EVENT_SERVER_STARTED, NULL, NULL, "Scheduler started on demand.");
-+# ifdef HAVE_SYSTEMD
-+ sd_notifyf(0, "READY=1\n"
-+ "STATUS=Scheduler is running...\n"
-+ "MAINPID=%lu",
-+ (unsigned long) getpid());
-+# endif /* HAVE_SYSTEMD */
-+ }
- else
- #endif /* HAVE_LAUNCHD || HAVE_SYSTEMD */
- if (fg)
---- scheduler/org.cups.cupsd.path.in.orig 2014-03-21 15:50:24.000000000 +0100
-+++ scheduler/org.cups.cupsd.path.in 2015-09-01 11:20:37.000000000 +0200
-@@ -3,6 +3,7 @@ Description=CUPS Scheduler
-
- [Path]
- PathExists=@CUPS_CACHEDIR@/org.cups.cupsd
-+PathExistsGlob=@CUPS_REQUESTS@/d*
-
- [Install]
- WantedBy=multi-user.target
---- scheduler/org.cups.cupsd.service.in.orig 2014-10-21 13:54:05.000000000 +0200
-+++ scheduler/org.cups.cupsd.service.in 2015-09-01 11:22:09.000000000 +0200
-@@ -1,10 +1,11 @@
- [Unit]
- Description=CUPS Scheduler
- Documentation=man:cupsd(8)
-+After=network.target
-
- [Service]
- ExecStart=@sbindir@/cupsd -l
--Type=simple
-+Type=notify
-
- [Install]
- Also=org.cups.cupsd.socket org.cups.cupsd.path
Index: cups-2.3.3op2-source.tar.gz
===================================================================
Binary file cups-2.3.3op2-source.tar.gz (revision 380) deleted
Index: cups-2.3.3op2-source.tar.gz.sig
===================================================================
Binary file cups-2.3.3op2-source.tar.gz.sig (revision 380) deleted
Index: fix-negotiate-authentication-between-CGIs-and-scheduler.patch
===================================================================
--- fix-negotiate-authentication-between-CGIs-and-scheduler.patch (revision 380)
+++ fix-negotiate-authentication-between-CGIs-and-scheduler.patch (deleted)
@@ -1,223 +0,0 @@
-From d4521ed0df7e625ccf2bc079bab6f48c46ef9bf9 Mon Sep 17 00:00:00 2001
-From: Samuel Cabrero <scabrero@suse.de>
-Date: Mon, 26 Oct 2020 17:35:22 +0100
-Subject: [PATCH 1/4] Avoid infinite loop in admin.cgi when negotiate is used
-
-SetAuthorizationString with NULL argument sets an empty string.
-
-Related: #5596
-
-Signed-off-by: Samuel Cabrero <scabrero@suse.de>
----
- cups/auth.c | 2 +-
- 1 file changed, 1 insertion(+), 1 deletion(-)
-
-diff --git a/cups/auth.c b/cups/auth.c
-index db45bbba6..f2409350a 100644
---- a/cups/auth.c
-+++ b/cups/auth.c
-@@ -295,7 +295,7 @@ cupsDoAuthentication(
- }
- }
-
-- if (http->authstring)
-+ if (http->authstring && http->authstring[0])
- {
- DEBUG_printf(("1cupsDoAuthentication: authstring=\"%s\".", http->authstring));
-
---
-2.30.2
-
-
-From 61ad7780bc7d0593e3225d088ac6dff31badf801 Mon Sep 17 00:00:00 2001
-From: Samuel Cabrero <scabrero@suse.de>
-Date: Tue, 27 Oct 2020 16:11:41 +0100
-Subject: [PATCH 2/4] Add cups_is_local_connection() to check if connection is
- to localhost
-
-Related: #5596
-
-Signed-off-by: Samuel Cabrero <scabrero@suse.de>
----
- cups/auth.c | 11 ++++++++++-
- 1 file changed, 10 insertions(+), 1 deletion(-)
-
-diff --git a/cups/auth.c b/cups/auth.c
-index f2409350a..d2956438d 100644
---- a/cups/auth.c
-+++ b/cups/auth.c
-@@ -90,6 +90,7 @@ static void cups_gss_printf(OM_uint32 major_status, OM_uint32 minor_status,
- # define cups_gss_printf(major, minor, message)
- # endif /* DEBUG */
- #endif /* HAVE_GSSAPI */
-+static int cups_is_local_connection(http_t *http);
- static int cups_local_auth(http_t *http);
-
-
-@@ -916,6 +917,14 @@ cups_gss_printf(OM_uint32 major_status,/* I - Major status code */
- # endif /* DEBUG */
- #endif /* HAVE_GSSAPI */
-
-+static int /* O - 0 if not a local connection */
-+ /* 1 if local connection */
-+cups_is_local_connection(http_t *http) /* I - HTTP connection to server */
-+{
-+ if (!httpAddrLocalhost(http->hostaddr) && _cups_strcasecmp(http->hostname, "localhost") != 0)
-+ return 0;
-+ return 1;
-+}
-
- /*
- * 'cups_local_auth()' - Get the local authorization certificate if
-@@ -958,7 +967,7 @@ cups_local_auth(http_t *http) /* I - HTTP connection to server */
- * See if we are accessing localhost...
- */
-
-- if (!httpAddrLocalhost(http->hostaddr) && _cups_strcasecmp(http->hostname, "localhost") != 0)
-+ if (!cups_is_local_connection(http))
- {
- DEBUG_puts("8cups_local_auth: Not a local connection!");
- return (1);
---
-2.30.2
-
-
-From f629d079750a86b1b605c285f99c0dea3933ca50 Mon Sep 17 00:00:00 2001
-From: Samuel Cabrero <scabrero@suse.de>
-Date: Tue, 27 Oct 2020 16:23:30 +0100
-Subject: [PATCH 3/4] Try local kerberos ccache credentials only for remote
- servers
-
-If connecting to localhost then proceed to ask the client for the
-authorization using cupsGetPassword2. The get password callback will
-return 401 to the client with WWW-Authenticate: Negotiate.
-
-Fixes: #5596
-
-Signed-off-by: Samuel Cabrero <scabrero@suse.de>
----
- cups/auth.c | 10 ++++++----
- 1 file changed, 6 insertions(+), 4 deletions(-)
-
-diff --git a/cups/auth.c b/cups/auth.c
-index d2956438d..9661657fc 100644
---- a/cups/auth.c
-+++ b/cups/auth.c
-@@ -175,10 +175,10 @@ cupsDoAuthentication(
- DEBUG_printf(("2cupsDoAuthentication: Trying scheme \"%s\"...", scheme));
-
- #ifdef HAVE_GSSAPI
-- if (!_cups_strcasecmp(scheme, "Negotiate"))
-+ if (!_cups_strcasecmp(scheme, "Negotiate") && !cups_is_local_connection(http))
- {
- /*
-- * Kerberos authentication...
-+ * Kerberos authentication to remote server...
- */
-
- int gss_status; /* Auth status */
-@@ -202,7 +202,9 @@ cupsDoAuthentication(
- }
- else
- #endif /* HAVE_GSSAPI */
-- if (_cups_strcasecmp(scheme, "Basic") && _cups_strcasecmp(scheme, "Digest"))
-+ if (_cups_strcasecmp(scheme, "Basic") &&
-+ _cups_strcasecmp(scheme, "Digest") &&
-+ _cups_strcasecmp(scheme, "Negotiate"))
- {
- /*
- * Other schemes not yet supported...
-@@ -216,7 +218,7 @@ cupsDoAuthentication(
- * See if we should retry the current username:password...
- */
-
-- if ((http->digest_tries > 1 || !http->userpass[0]) && (!_cups_strcasecmp(scheme, "Basic") || (!_cups_strcasecmp(scheme, "Digest"))))
-+ if (http->digest_tries > 1 || !http->userpass[0])
- {
- /*
- * Nope - get a new password from the user...
---
-2.30.2
-
-
-From 0563a28b18b21d5574a5e0e38b74246146074bbf Mon Sep 17 00:00:00 2001
-From: Samuel Cabrero <scabrero@suse.de>
-Date: Tue, 27 Oct 2020 16:18:03 +0100
-Subject: [PATCH 4/4] Allow Local authentication for Negotiate
-
-PeerCred is also possible if address family is AF_LOCAL. This will allow
-the CGI programs to generate the authorization from the local
-certificates based on PID also when Negotiate is used for local
-connections:
-
-Client CGI
-Browser <- Remote conn -> admin.cgi <--- Localhost conn ---> Scheduler
- | | |
- + --- HTTP/POST /admin/ --> | |
- | + --- CUPS-Get-Devices ------------> |
- | | |
- | | <-- 401 Unauthorized --------------+
- | | WWW-Authenticate: |
- | | Negotiate, (PeerCred,) Local |
- | | |
- | <-- 401 Unauthorized -----+ |
- | WWW-Authenticate: | |
- | Negotiate | |
- | | |
- | --- HTTP/POST /admin/ --> | |
- | Authorization: + --- IPP CUPS-GetDevices ---------> |
- | Negotiate | Authorization: Local <cert> |
- | | |
-
-Fixes: #5596
-
-Signed-off-by: Samuel Cabrero <scabrero@suse.de>
----
- cups/auth.c | 5 -----
- scheduler/client.c | 9 ++-------
- 2 files changed, 2 insertions(+), 12 deletions(-)
-
-diff --git a/cups/auth.c b/cups/auth.c
-index 9661657fc..b6fec6b98 100644
---- a/cups/auth.c
-+++ b/cups/auth.c
-@@ -1043,11 +1043,6 @@ cups_local_auth(http_t *http) /* I - HTTP connection to server */
- }
- # endif /* HAVE_AUTHORIZATION_H */
-
--# ifdef HAVE_GSSAPI
-- if (cups_auth_find(www_auth, "Negotiate"))
-- return (1);
--# endif /* HAVE_GSSAPI */
--
- # if defined(SO_PEERCRED) && defined(AF_LOCAL)
- /*
- * See if we can authenticate using the peer credentials provided over a
-diff --git a/scheduler/client.c b/scheduler/client.c
-index c2ee8f12a..56797d58d 100644
---- a/scheduler/client.c
-+++ b/scheduler/client.c
-@@ -2109,18 +2109,13 @@ cupsdSendHeader(
- }
- else if (auth_type == CUPSD_AUTH_NEGOTIATE)
- {
--#if defined(SO_PEERCRED) && defined(AF_LOCAL)
-- if (httpAddrFamily(httpGetAddress(con->http)) == AF_LOCAL)
-- strlcpy(auth_str, "PeerCred", sizeof(auth_str));
-- else
--#endif /* SO_PEERCRED && AF_LOCAL */
- strlcpy(auth_str, "Negotiate", sizeof(auth_str));
- }
-
-- if (con->best && auth_type != CUPSD_AUTH_NEGOTIATE && !con->is_browser && !_cups_strcasecmp(httpGetHostname(con->http, NULL, 0), "localhost"))
-+ if (con->best && !con->is_browser && !_cups_strcasecmp(httpGetHostname(con->http, NULL, 0), "localhost"))
- {
- /*
-- * Add a "trc" (try root certification) parameter for local non-Kerberos
-+ * Add a "trc" (try root certification) parameter for local
- * requests when the request requires system group membership - then the
- * client knows the root certificate can/should be used.
- *
---
-2.30.2
-
Index: upstream_pull_174.patch
===================================================================
--- upstream_pull_174.patch (revision 380)
+++ upstream_pull_174.patch (deleted)
@@ -1,53 +0,0 @@
-From c37d71b1a31d26a4790166e2508822b18934a5c0 Mon Sep 17 00:00:00 2001
-From: Zdenek Dohnal <zdohnal@redhat.com>
-Date: Tue, 13 Apr 2021 15:44:14 +0200
-Subject: [PATCH 1/2] backend/usb-libusb.c: Use 60s timeout for reading at
- backchannel
-
-Some older models malfunction if timeout is too short.
----
- CHANGES.md | 1 +
- backend/usb-libusb.c | 2 +-
- 2 files changed, 2 insertions(+), 1 deletion(-)
-
---- a/backend/usb-libusb.c
-+++ b/backend/usb-libusb.c
-@@ -1704,7 +1704,7 @@ static void *read_thread(void *reference)
- readstatus = libusb_bulk_transfer(g.printer->handle,
- g.printer->read_endp,
- readbuffer, rbytes,
-- &rbytes, 250);
-+ &rbytes, 60000);
- if (readstatus == LIBUSB_SUCCESS && rbytes > 0)
- {
- fprintf(stderr, "DEBUG: Read %d bytes of back-channel data...\n", (int)rbytes);
-
-From 4cb6f6806cdbe040d478b266a1d351b19341dd79 Mon Sep 17 00:00:00 2001
-From: Zdenek Dohnal <zdohnal@redhat.com>
-Date: Tue, 13 Apr 2021 15:47:37 +0200
-Subject: [PATCH 2/2] backend/usb-libusb.c: Revert enforcing read limits
-
-This commit reverts the change introduced by 2.2.12 [1] - its
-implementation caused a regression with Lexmark filters.
-
-[1]
-https://github.com/apple/cups/commit/35e927f83529cd9b4bc37bcd418c50e307fced35
----
- CHANGES.md | 1 +
- backend/usb-libusb.c | 3 ++-
- 2 files changed, 3 insertions(+), 1 deletion(-)
-
-diff --git a/backend/usb-libusb.c b/backend/usb-libusb.c
-index fbb0d9d89..89b5182f7 100644
---- a/backend/usb-libusb.c
-+++ b/backend/usb-libusb.c
-@@ -1721,7 +1721,8 @@ static void *read_thread(void *reference)
- * Make sure this loop executes no more than once every 250 miliseconds...
- */
-
-- if ((g.wait_eof || !g.read_thread_stop))
-+ if ((readstatus != LIBUSB_SUCCESS || rbytes == 0) &&
-+ (g.wait_eof || !g.read_thread_stop))
- usleep(250000);
- }
- while (g.wait_eof || !g.read_thread_stop);
OBS-URL: https://build.opensuse.org/request/show/958348
OBS-URL: https://build.opensuse.org/package/show/Printing/cups?expand=0&rev=381
2022-03-03 13:19:05 +01:00
|
|
|
|
* Fixed some IPP Everywhere option mapping problems (Issue #238)
|
2022-03-04 09:58:18 +01:00
|
|
|
|
* Fixed support for "job-hold-until" with the Restart-Job
|
|
|
|
|
operation (Issue #250)
|
|
|
|
|
* Fixed the default color/grayscale presets for
|
|
|
|
|
IPP Everywhere PPDs (Issue #262)
|
|
|
|
|
* Fixed support for the 'offline-report' state for all
|
|
|
|
|
USB backends (Issue #264)
|
|
|
|
|
* Documentation fixes (Issue #92, Issue #163, Issue #177,
|
|
|
|
|
Issue #184)
|
|
|
|
|
* Localization updates (Issue #123, Issue #129, Issue #134,
|
|
|
|
|
Issue #146, Issue #164)
|
|
|
|
|
* USB quirk updates (Issue #192, Issue #270, Apple #5766,
|
|
|
|
|
Apple #5838, Apple #5843, Apple #5867)
|
Accepting request 958348 from home:ajoga:branches:openSUSE:Factory
- Version upgrade to 2.4.1
- Dropped patch upstream_pull_174 because it it is included in this release
- Dropped patch cups-2.1.0-cups-systemd-socket.patch because it it is included in this release (https://github.com/OpenPrinting/cups/commit/e96e96b4bd0d4e6f634bbb66b95d6e475501541c)
- Changed upstream source packages signing key (https://github.com/OpenPrinting/cups/discussions/327#discussioncomment-2060579)
- Re-enabled testsuite
* Also removed make check because since upstream change the two target are identical (https://github.com/OpenPrinting/cups/commit/96ba46ebc818b610b0e40cbc9d62ef1dcd3ec9b6#diff-76ed074a9305c04054cdebb9e9aad2d818052b07091de1f20cad0bbac34ffb52R239)
- Changed cups-2.1.0-cups-systemd-socket.patch to accomodate new coding style
- Changed cups-config-libs.orig to accommodate recent code changes (SSL->TLS)
- Changed cups-2.1.0-default-webcontent-path.patch to accommodate code changes
old: Printing/cups
new: home:ajoga:branches:openSUSE:Factory/cups rev None
Index: cups-2.1.0-default-webcontent-path.patch
===================================================================
--- cups-2.1.0-default-webcontent-path.patch (revision 380)
+++ cups-2.1.0-default-webcontent-path.patch (revision 2)
@@ -1,17 +1,21 @@
---- config-scripts/cups-directories.m4.orig 2014-03-21 17:42:53.000000000 +0100
-+++ config-scripts/cups-directories.m4 2015-09-01 11:08:43.000000000 +0200
-@@ -206,11 +206,11 @@ fi
- AC_SUBST(MENUDIR)
+--- config-scripts/cups-directories.m4
++++ config-scripts/cups-directories.m4.orig
+@@ -166,15 +166,15 @@ AS_IF([test "x$menudir" = x], [
+ AC_SUBST([MENUDIR])
# Documentation files
--AC_ARG_WITH(docdir, [ --with-docdir set path for documentation],docdir="$withval",docdir="")
-+AC_ARG_WITH(docdir, [ --with-docdir set path and DocumentRoot directive for web content, default=datadir/cups/webcontent],docdir="$withval",docdir="")
+-AC_ARG_WITH([docdir], AS_HELP_STRING([--with-docdir], [set path for documentation]), [
++AC_ARG_WITH([docdir], AS_HELP_STRING([--with-docdir], [set path and DocumentRoot directive for web content, default=datadir/cups/webcontent]), [
+ docdir="$withval"
+ ], [
+ docdir=""
+ ])
- if test x$docdir = x; then
-- CUPS_DOCROOT="$datadir/doc/cups"
-- docdir="$datadir/doc/cups"
-+ CUPS_DOCROOT="$datadir/cups/webcontent"
-+ docdir="$datadir/cups/webcontent"
- else
- CUPS_DOCROOT="$docdir"
- fi
+ AS_IF([test x$docdir = x], [
+- CUPS_DOCROOT="$datadir/doc/cups"
+- docdir="$datadir/doc/cups"
++ CUPS_DOCROOT="$datadir/cups/webcontent"
++ docdir="$datadir/cups/webcontent"
+ ], [
+ CUPS_DOCROOT="$docdir"
+ ])
Index: cups-config-libs.patch
===================================================================
--- cups-config-libs.patch (revision 380)
+++ cups-config-libs.patch (revision 2)
@@ -4,7 +4,7 @@
# flags for compiler and linker...
CFLAGS=""
LDFLAGS="@EXPORT_LDFLAGS@"
--LIBS="@LIBGSSAPI@ @DNSSDLIBS@ @EXPORT_SSLLIBS@ @LIBZ@ @LIBS@"
+-LIBS="@LIBGSSAPI@ @DNSSDLIBS@ @EXPORT_TLSLIBS@ @LIBZ@ @LIBS@"
+LIBS=""
# Check for local invocation...
Index: cups.changes
===================================================================
--- cups.changes (revision 380)
+++ cups.changes (revision 2)
@@ -1,4 +1,88 @@
-------------------------------------------------------------------
+Tue Mar 1 18:16:11 UTC 2022 - Aurélien Joga <aurelienjoga@gmail.com>
+
+- Version upgrade to 2.4.1:
+ * The default color mode now is now configurable and defaults to the printer's reported default mode (Issue #277)
+ * Configuration script now checks linking for -Wl,-pie flags (Issue #303)
+ * Fixed memory leaks - in testi18n (Issue #313), in cups_enum_dests() (Issue #317), in _cupsEncodeOption() and http_tls_upgrade() (Issue #322)
+ * Fixed missing bracket in de/index.html (Issue #299)
+ * Fixed typos in configuration scripts (Issues #304, #316)
+ * Removed remaining legacy code for RIP_MAX_CACHE environment variable (Issue #323)
+ * Removed deprecated directives from cupsctl and cups-files.conf (Issue #300)
+ * Removed purge-jobs legacy code from CGI scripts and templates (Issue #325)
+ * Added configure option --with-idle-exit-timeout (Issue #294)
+ * Added --with-systemd-timeoutstartsec configure option (Issue #298)
+ * DigestOptions now are applied for MD5 Digest authentication defined by RFC 2069 as well (Issue #287)
+ * Fixed compilation on Solaris (Issue #293)
+ * Fixed and improved German translations (Issue #296, Issue #297)
+ * Added warning and debug messages when loading printers if the queue is raw or with driver (Issue #286)
+ * Compilation now uses -fstack-protector-strong if available (Issue #285)
+ * Added support for CUPS running in a Snapcraft snap.
+ * Added basic OAuth 2.0 client support (Issue #100)
+ * Added support for AirPrint and Mopria clients (Issue #105)
+ * Added configure support for specifying systemd dependencies in the CUPS service file (Issue #144)
+ * Added several features and improvements to ipptool (Issue #153)
+ * Added a JSON output mode for ipptool.
+ * The ipptool command now correctly reports an error when a test file cannot be found.
+ * CUPS library now uses thread safe getpwnam_r and getpwuid_r functions (Issue #274)
+ * Fixed Kerberos authentication for the web interface (Issue #19)
+ * The ZPL sample driver now supports more "standard" label sizes (Issue #70)
+ * Fixed reporting of printer instances when enumerating and when no options are set for the main instance (Issue #71)
+ * Reverted USB read limit enforcement change from CUPS 2.2.12 (Issue #72)
+ * The IPP backend did not return the correct status code when a job was canceled at the printer/server (Issue #74)
+ * The testlang unit test program now loops over all of the available locales by default (Issue #85)
+ * The cupsfilter command now shows error messages when options are used incorrectly (Issue #88)
+ * The PPD functions now treat boolean values as case-insensitive (Issue #106)
+ * Temporary queue names no longer end with an underscore (Issue #110)
+ * The USB backend now runs as root (Issue #121)
+ * Added pkg-config file for libcups (Issue #122)
+ * Fixed a PPD memory leak caused by emulator definitions (Issue #124)
+ * Fixed a DISPLAY bug in ipptool (Issue #139)
+ * The scheduler now includes the [Job N] prefix for job log messages, even when using syslog logging (Issue #154)
+ * Added support for locales using the GB18030 character set (Issue #159)
+ * httpReconnect2 did not reset the socket file descriptor when the TLS negotiation failed (Apple #5907)
+ * httpUpdate did not reset the socket file descriptor when the TLS negotiation failed (Apple #5915)
+ * The IPP backend now retries Validate-Job requests (Issue #132)
+ * Now show better error messages when a driver interface program fails to provide a PPD file (Issue #148)
+ * Added dark mode support to the CUPS web interface (Issue #152)
+ * Added a workaround for Solaris in httpAddrConnect2 (Issue #156)
+ * Fixed an interaction between --remote-admin and --remote-any for the cupsctl command (Issue #158)
+ * Now use a 60 second timeout for reading USB backchannel data (Issue #160)
+ * The USB backend now tries harder to find a serial number (Issue #170)
+ * Fixed @IF(name) handling in cupsd.conf (Apple #5918)
+ * Fixed documentation and added examples for CUPS' limited CGI support (Apple #5940)
+ * Fixed the lpc command prompt (Apple #5946)
+ * Now always pass "localhost" in the Host: header when talking over a domain socket or the loopback interface (Issue #185)
+ * Fixed a job history update issue in the scheduler (Issue #187)
+ * Fixed job-pages-per-set value for duplex print jobs.
+ * Fixed an edge case in ippReadIO to make sure that only complete attributes and values are retained on an error (Issue #195)
+ * Hardened ippReadIO to prevent invalid IPP messages from being propagated (Issue #195, Issue #196)
+ * The scheduler now supports the "everywhere" model directly (Issue #201)
+ * Fixed some IPP Everywhere option mapping problems (Issue #238)
+ * Fixed support for "job-hold-until" with the Restart-Job operation (Issue #250)
+ * Fixed the default color/grayscale presets for IPP Everywhere PPDs (Issue #262)
+ * Fixed support for the 'offline-report' state for all USB backends (Issue #264)
+ * Documentation fixes (Issue #92, Issue #163, Issue #177, Issue #184)
+ * Localization updates (Issue #123, Issue #129, Issue #134, Issue #146, Issue #164)
+ * USB quirk updates (Issue #192, Issue #270, Apple #5766, Apple #5838, Apple #5843, Apple #5867)
+ * Web interface updates (Issue #142, Issue #218)
+ * The ippeveprinter tool now automatically uses an available port.
+ * Fixed several Windows TLS and hashing issues.
+ * Deprecated cups-config (Issue #97)
+ * Deprecated Kerberos (AuthType Negotiate) authentication (Issue #98)
+ * Removed support for the (long deprecated and unused) FontPath, ListenBackLog, LPDConfigFile, KeepAliveTimeout, RIPCache, and SMBConfigFile directives in cupsd.conf and cups-files.conf.
+ * Stubbed out deprecated httpMD5 functions.
+ * Add test for undefined page ranges during printing.
+- Dropped patch upstream_pull_174 because it it is included in this release
+- Dropped patch cups-2.1.0-cups-systemd-socket.patch because it it is included in this release (https://github.com/OpenPrinting/cups/commit/e96e96b4bd0d4e6f634bbb66b95d6e475501541c)
+- Changed upstream source packages signing key (https://github.com/OpenPrinting/cups/discussions/327#discussioncomment-2060579)
+- Re-enabled testsuite
+ * Also removed make check because since upstream change the two target are identical (https://github.com/OpenPrinting/cups/commit/96ba46ebc818b610b0e40cbc9d62ef1dcd3ec9b6#diff-76ed074a9305c04054cdebb9e9aad2d818052b07091de1f20cad0bbac34ffb52R239)
+- Changed cups-2.1.0-cups-systemd-socket.patch to accomodate new coding style
+- Changed cups-config-libs.orig to accommodate recent code changes (SSL->TLS)
+- Changed cups-2.1.0-default-webcontent-path.patch to accommodate code changes
+
+-------------------------------------------------------------------
Tue Feb 1 09:18:27 UTC 2022 - jsmeix@suse.de
- Enhanced harden_cups.service.patch by adding
Index: cups.keyring
===================================================================
Binary files cups.keyring (revision 380) and cups.keyring (revision 2) differ
Index: cups.spec
===================================================================
--- cups.spec (revision 380)
+++ cups.spec (revision 2)
@@ -18,9 +18,7 @@
# Cf. https://rpm.org/user_doc/conditional_builds.html
# by default enable testsuite (i.e. in the 'check' section run make check and make test)
-#bcond_without testsuite
-# disable testsuite for now until https://github.com/OpenPrinting/cups/issues/155 is fixed
-%bcond_with testsuite
+%bcond_without testsuite
# _tmpfilesdir is not defined in systemd macros up to openSUSE 13.2
%{!?_tmpfilesdir: %global _tmpfilesdir /usr/lib/tmpfiles.d }
@@ -29,34 +27,32 @@
# "zypper vcmp 2.3.b99 2.3.0" shows "2.3.b99 is older than 2.3.0" and
# "zypper vcmp 2.2.99 2.3b6" show "2.2.99 is older than 2.3b6" so that
# version upgrades from 2.2.x via 2.3.b* to 2.3.0 work:
-Version: 2.3.3op2
+Version: 2.4.1
Release: 0
Summary: The Common UNIX Printing System
License: Apache-2.0
Group: Hardware/Printing
URL: https://openprinting.github.io/cups
# To get Source0 go to https://github.com/OpenPrinting/cups/releases or use e.g.
-# wget --no-check-certificate -O cups-2.3.3op2-source.tar.gz https://github.com/OpenPrinting/cups/releases/download/v2.3.3op2/cups-2.3.3op2-source.tar.gz
-Source0: https://github.com/OpenPrinting/cups/releases/download/v2.3.3op2/cups-2.3.3op2-source.tar.gz
+# wget --no-check-certificate -O cups-2.4.1-source.tar.gz https://github.com/OpenPrinting/cups/releases/download/v2.4.1/cups-2.4.1-source.tar.gz
+Source0: https://github.com/OpenPrinting/cups/releases/download/v2.4.1/cups-2.4.1-source.tar.gz
# To get Source1 go to https://github.com/OpenPrinting/cups/releases or use e.g.
-# wget --no-check-certificate -O cups-2.3.3op2-source.tar.gz.sig https://github.com/OpenPrinting/cups/releases/download/v2.3.3op2/cups-2.3.3op2-source.tar.gz.sig
-Source1: https://github.com/OpenPrinting/cups/releases/download/v2.3.3op2/cups-2.3.3op2-source.tar.gz.sig
-# To get Source2 go to https://www.msweet.org/pgp.html
-# PGP Fingerprint: 845464660B686AAB36540B6F999559A027815955
+# wget --no-check-certificate -O cups-2.4.1-source.tar.gz.sig https://github.com/OpenPrinting/cups/releases/download/v2.4.1/cups-2.4.1-source.tar.gz.sig
+Source1: https://github.com/OpenPrinting/cups/releases/download/v2.4.1/cups-2.4.1-source.tar.gz.sig
+# To get Source2 use gpg --keyserver keys.openpgp.org --recv-keys 7082A0A50A2E92640F3880E0E4522DCC9B246FF7
+# See https://github.com/OpenPrinting/cups/discussions/327#discussioncomment-2060579
+# PGP Fingerprint: 7082A0A50A2E92640F3880E0E4522DCC9B246FF7
Source2: cups.keyring
# To manually verify Source0 with Source1 and Source2 do e.g.
# gpg --import cups.keyring
-# gpg --list-keys | grep -1 'Michael R Sweet' | grep -v 'expired'
-# gpg --verify cups-2.3.3op2-source.tar.gz.sig cups-2.3.3op2-source.tar.gz
+# gpg --list-keys | grep -1 'Zdenek Dohnal'
+# gpg --verify cups-2.4.1-source.tar.gz.sig cups-2.4.1-source.tar.gz
Source102: Postscript.ppd.gz
Source105: Postscript-level1.ppd.gz
Source106: Postscript-level2.ppd.gz
Source108: cups-client.conf
Source109: baselibs.conf
# Patch0...Patch9 is for patches from upstream:
-# Patch1 upstream_pull_174.patch is https://github.com/OpenPrinting/cups/pull/174
-# Use 60s timeout for read_thread, revert read limits
-Patch1: upstream_pull_174.patch
# Source10...Source99 is for sources from SUSE which are intended for upstream:
# Patch10...Patch99 is for patches from SUSE which are intended for upstream:
# Patch10 cups-2.1.0-choose-uri-template.patch adds 'smb://...' URIs to templates/choose-uri.tmpl:
@@ -66,8 +62,6 @@
# because the files of the CUPS web content are no documentation, see CUPS STR #3578
# and http://bugzilla.novell.com/show_bug.cgi?id=546023#c6 and subsequent comments:
Patch11: cups-2.1.0-default-webcontent-path.patch
-# Patch12 cups-2.1.0-cups-systemd-socket.patch Use systemd socket activation properly:
-Patch12: cups-2.1.0-cups-systemd-socket.patch
# Patch100...Patch999 is for private patches from SUSE which are not intended for upstream:
# Patch100 cups-pam.diff adds conf/pam.suse regarding support for PAM for SUSE:
Patch100: cups-pam.diff
@@ -83,9 +77,9 @@
Patch103: cups-1.4-do_not_strip_recommended_from_PPDs.patch
# Patch104 cups-config-libs.patch fixes option --libs in cups-config script:
Patch104: cups-config-libs.patch
-# Patch106 Fixes web UI Kerberos authentication (bsc#1175960)
-Patch106: fix-negotiate-authentication-between-CGIs-and-scheduler.patch
Patch107: harden_cups.service.patch
+# Patch108 downgrades the autoconf requirement to the autoconf available in tumbleweed as of writing
+Patch108: downgrade-autoconf-requirement.patch
# Build Requirements:
BuildRequires: dbus-1-devel
BuildRequires: fdupes
@@ -280,9 +274,6 @@
%prep
%setup -q
# Patch0...Patch9 is for patches from upstream:
-# Patch1 upstream_pull_174.patch is https://github.com/OpenPrinting/cups/pull/174
-# Use 60s timeout for read_thread, revert read limits
-%patch1 -p1
# Patch10...Patch99 is for patches from SUSE which are intended for upstream:
# Patch10 cups-2.1.0-choose-uri-template.patch adds 'smb://...' URIs to templates/choose-uri.tmpl:
%patch10 -b choose-uri-template.orig
@@ -291,8 +282,6 @@
# because the files of the CUPS web content are no documentation, see CUPS STR #3578
# and http://bugzilla.novell.com/show_bug.cgi?id=546023#c6 and subsequent comments:
%patch11 -b default-webcontent-path.orig
-# Patch12 cups-2.1.0-cups-systemd-socket.patch Use systemd socket activation properly:
-#patch12 -b cups-systemd-socket.orig
# Patch100...Patch999 is for private patches from SUSE which are not intended for upstream:
# Patch100 cups-pam.diff adds conf/pam.suse regarding support for PAM for SUSE:
%patch100 -b cups-pam.orig
@@ -308,9 +297,8 @@
%patch103 -b do_not_strip_recommended_from_PPDs.orig
# Patch104 cups-config-libs.patch fixes option --libs in cups-config script:
%patch104 -b cups-config-libs.orig
-# Patch106 Fixes web UI Kerberos authentication (bsc#1175960)
-%patch106 -p1
%patch107 -p1
+%patch108 -p1
%build
# Remove ".SILENT" rule for verbose build output
@@ -439,8 +427,6 @@
# There appears to be some kind of race condition when running make check and make test
# cf. https://github.com/OpenPrinting/cups/issues/155
# We print all logs for debugging purposes if either testsuite fails
-echo "DEBUG: running make check"
-bash -c 'make %{?_smp_mflags} check; EXIT=$?; if [ $EXIT -ne 0 ]; then cat test/*_log*-$(whoami); fi; exit $EXIT'
echo "DEBUG: running make test"
bash -c 'make %{?_smp_mflags} test; EXIT=$?; if [ $EXIT -ne 0 ]; then cat test/*_log*-$(whoami); fi; exit $EXIT'
%else
@@ -681,6 +667,7 @@
%files devel
%defattr(-,root,root)
+/usr/lib/pkgconfig/cups.pc
%{_includedir}/cups/
%{_libdir}/libcups.so
%{_libdir}/libcupsimage.so
Index: cups-2.4.1-source.tar.gz
===================================================================
Binary file cups-2.4.1-source.tar.gz (revision 2) added
Index: cups-2.4.1-source.tar.gz.sig
===================================================================
Binary file cups-2.4.1-source.tar.gz.sig (revision 2) added
Index: downgrade-autoconf-requirement.patch
===================================================================
--- downgrade-autoconf-requirement.patch (added)
+++ downgrade-autoconf-requirement.patch (revision 2)
@@ -0,0 +1,15 @@
+diff --git a/configure.ac b/configure.ac
+index a8c6c1040..6ace74a8d 100644
+--- a/configure.ac
++++ b/configure.ac
+@@ -9,8 +9,8 @@ dnl Licensed under Apache License v2.0. See the file "LICENSE" for more
+ dnl information.
+ dnl
+
+-dnl We need at least autoconf 2.71...
+-AC_PREREQ([2.71])
++dnl We need at least autoconf 2.69...
++AC_PREREQ([2.69])
+
+ dnl Package name and version...
+ AC_INIT([CUPS],[2.4.1],[https://github.com/openprinting/cups/issues],[cups],[https://openprinting.github.io/cups])
Index: cups-2.1.0-cups-systemd-socket.patch
===================================================================
--- cups-2.1.0-cups-systemd-socket.patch (revision 380)
+++ cups-2.1.0-cups-systemd-socket.patch (deleted)
@@ -1,43 +0,0 @@
---- scheduler/main.c.orig 2015-06-08 20:32:35.000000000 +0200
-+++ scheduler/main.c 2015-09-01 11:19:36.000000000 +0200
-@@ -656,7 +656,15 @@ main(int argc, /* I - Number of comm
-
- #if defined(HAVE_LAUNCHD) || defined(HAVE_SYSTEMD)
- if (OnDemand)
-+ {
- cupsdAddEvent(CUPSD_EVENT_SERVER_STARTED, NULL, NULL, "Scheduler started on demand.");
-+# ifdef HAVE_SYSTEMD
-+ sd_notifyf(0, "READY=1\n"
-+ "STATUS=Scheduler is running...\n"
-+ "MAINPID=%lu",
-+ (unsigned long) getpid());
-+# endif /* HAVE_SYSTEMD */
-+ }
- else
- #endif /* HAVE_LAUNCHD || HAVE_SYSTEMD */
- if (fg)
---- scheduler/org.cups.cupsd.path.in.orig 2014-03-21 15:50:24.000000000 +0100
-+++ scheduler/org.cups.cupsd.path.in 2015-09-01 11:20:37.000000000 +0200
-@@ -3,6 +3,7 @@ Description=CUPS Scheduler
-
- [Path]
- PathExists=@CUPS_CACHEDIR@/org.cups.cupsd
-+PathExistsGlob=@CUPS_REQUESTS@/d*
-
- [Install]
- WantedBy=multi-user.target
---- scheduler/org.cups.cupsd.service.in.orig 2014-10-21 13:54:05.000000000 +0200
-+++ scheduler/org.cups.cupsd.service.in 2015-09-01 11:22:09.000000000 +0200
-@@ -1,10 +1,11 @@
- [Unit]
- Description=CUPS Scheduler
- Documentation=man:cupsd(8)
-+After=network.target
-
- [Service]
- ExecStart=@sbindir@/cupsd -l
--Type=simple
-+Type=notify
-
- [Install]
- Also=org.cups.cupsd.socket org.cups.cupsd.path
Index: cups-2.3.3op2-source.tar.gz
===================================================================
Binary file cups-2.3.3op2-source.tar.gz (revision 380) deleted
Index: cups-2.3.3op2-source.tar.gz.sig
===================================================================
Binary file cups-2.3.3op2-source.tar.gz.sig (revision 380) deleted
Index: fix-negotiate-authentication-between-CGIs-and-scheduler.patch
===================================================================
--- fix-negotiate-authentication-between-CGIs-and-scheduler.patch (revision 380)
+++ fix-negotiate-authentication-between-CGIs-and-scheduler.patch (deleted)
@@ -1,223 +0,0 @@
-From d4521ed0df7e625ccf2bc079bab6f48c46ef9bf9 Mon Sep 17 00:00:00 2001
-From: Samuel Cabrero <scabrero@suse.de>
-Date: Mon, 26 Oct 2020 17:35:22 +0100
-Subject: [PATCH 1/4] Avoid infinite loop in admin.cgi when negotiate is used
-
-SetAuthorizationString with NULL argument sets an empty string.
-
-Related: #5596
-
-Signed-off-by: Samuel Cabrero <scabrero@suse.de>
----
- cups/auth.c | 2 +-
- 1 file changed, 1 insertion(+), 1 deletion(-)
-
-diff --git a/cups/auth.c b/cups/auth.c
-index db45bbba6..f2409350a 100644
---- a/cups/auth.c
-+++ b/cups/auth.c
-@@ -295,7 +295,7 @@ cupsDoAuthentication(
- }
- }
-
-- if (http->authstring)
-+ if (http->authstring && http->authstring[0])
- {
- DEBUG_printf(("1cupsDoAuthentication: authstring=\"%s\".", http->authstring));
-
---
-2.30.2
-
-
-From 61ad7780bc7d0593e3225d088ac6dff31badf801 Mon Sep 17 00:00:00 2001
-From: Samuel Cabrero <scabrero@suse.de>
-Date: Tue, 27 Oct 2020 16:11:41 +0100
-Subject: [PATCH 2/4] Add cups_is_local_connection() to check if connection is
- to localhost
-
-Related: #5596
-
-Signed-off-by: Samuel Cabrero <scabrero@suse.de>
----
- cups/auth.c | 11 ++++++++++-
- 1 file changed, 10 insertions(+), 1 deletion(-)
-
-diff --git a/cups/auth.c b/cups/auth.c
-index f2409350a..d2956438d 100644
---- a/cups/auth.c
-+++ b/cups/auth.c
-@@ -90,6 +90,7 @@ static void cups_gss_printf(OM_uint32 major_status, OM_uint32 minor_status,
- # define cups_gss_printf(major, minor, message)
- # endif /* DEBUG */
- #endif /* HAVE_GSSAPI */
-+static int cups_is_local_connection(http_t *http);
- static int cups_local_auth(http_t *http);
-
-
-@@ -916,6 +917,14 @@ cups_gss_printf(OM_uint32 major_status,/* I - Major status code */
- # endif /* DEBUG */
- #endif /* HAVE_GSSAPI */
-
-+static int /* O - 0 if not a local connection */
-+ /* 1 if local connection */
-+cups_is_local_connection(http_t *http) /* I - HTTP connection to server */
-+{
-+ if (!httpAddrLocalhost(http->hostaddr) && _cups_strcasecmp(http->hostname, "localhost") != 0)
-+ return 0;
-+ return 1;
-+}
-
- /*
- * 'cups_local_auth()' - Get the local authorization certificate if
-@@ -958,7 +967,7 @@ cups_local_auth(http_t *http) /* I - HTTP connection to server */
- * See if we are accessing localhost...
- */
-
-- if (!httpAddrLocalhost(http->hostaddr) && _cups_strcasecmp(http->hostname, "localhost") != 0)
-+ if (!cups_is_local_connection(http))
- {
- DEBUG_puts("8cups_local_auth: Not a local connection!");
- return (1);
---
-2.30.2
-
-
-From f629d079750a86b1b605c285f99c0dea3933ca50 Mon Sep 17 00:00:00 2001
-From: Samuel Cabrero <scabrero@suse.de>
-Date: Tue, 27 Oct 2020 16:23:30 +0100
-Subject: [PATCH 3/4] Try local kerberos ccache credentials only for remote
- servers
-
-If connecting to localhost then proceed to ask the client for the
-authorization using cupsGetPassword2. The get password callback will
-return 401 to the client with WWW-Authenticate: Negotiate.
-
-Fixes: #5596
-
-Signed-off-by: Samuel Cabrero <scabrero@suse.de>
----
- cups/auth.c | 10 ++++++----
- 1 file changed, 6 insertions(+), 4 deletions(-)
-
-diff --git a/cups/auth.c b/cups/auth.c
-index d2956438d..9661657fc 100644
---- a/cups/auth.c
-+++ b/cups/auth.c
-@@ -175,10 +175,10 @@ cupsDoAuthentication(
- DEBUG_printf(("2cupsDoAuthentication: Trying scheme \"%s\"...", scheme));
-
- #ifdef HAVE_GSSAPI
-- if (!_cups_strcasecmp(scheme, "Negotiate"))
-+ if (!_cups_strcasecmp(scheme, "Negotiate") && !cups_is_local_connection(http))
- {
- /*
-- * Kerberos authentication...
-+ * Kerberos authentication to remote server...
- */
-
- int gss_status; /* Auth status */
-@@ -202,7 +202,9 @@ cupsDoAuthentication(
- }
- else
- #endif /* HAVE_GSSAPI */
-- if (_cups_strcasecmp(scheme, "Basic") && _cups_strcasecmp(scheme, "Digest"))
-+ if (_cups_strcasecmp(scheme, "Basic") &&
-+ _cups_strcasecmp(scheme, "Digest") &&
-+ _cups_strcasecmp(scheme, "Negotiate"))
- {
- /*
- * Other schemes not yet supported...
-@@ -216,7 +218,7 @@ cupsDoAuthentication(
- * See if we should retry the current username:password...
- */
-
-- if ((http->digest_tries > 1 || !http->userpass[0]) && (!_cups_strcasecmp(scheme, "Basic") || (!_cups_strcasecmp(scheme, "Digest"))))
-+ if (http->digest_tries > 1 || !http->userpass[0])
- {
- /*
- * Nope - get a new password from the user...
---
-2.30.2
-
-
-From 0563a28b18b21d5574a5e0e38b74246146074bbf Mon Sep 17 00:00:00 2001
-From: Samuel Cabrero <scabrero@suse.de>
-Date: Tue, 27 Oct 2020 16:18:03 +0100
-Subject: [PATCH 4/4] Allow Local authentication for Negotiate
-
-PeerCred is also possible if address family is AF_LOCAL. This will allow
-the CGI programs to generate the authorization from the local
-certificates based on PID also when Negotiate is used for local
-connections:
-
-Client CGI
-Browser <- Remote conn -> admin.cgi <--- Localhost conn ---> Scheduler
- | | |
- + --- HTTP/POST /admin/ --> | |
- | + --- CUPS-Get-Devices ------------> |
- | | |
- | | <-- 401 Unauthorized --------------+
- | | WWW-Authenticate: |
- | | Negotiate, (PeerCred,) Local |
- | | |
- | <-- 401 Unauthorized -----+ |
- | WWW-Authenticate: | |
- | Negotiate | |
- | | |
- | --- HTTP/POST /admin/ --> | |
- | Authorization: + --- IPP CUPS-GetDevices ---------> |
- | Negotiate | Authorization: Local <cert> |
- | | |
-
-Fixes: #5596
-
-Signed-off-by: Samuel Cabrero <scabrero@suse.de>
----
- cups/auth.c | 5 -----
- scheduler/client.c | 9 ++-------
- 2 files changed, 2 insertions(+), 12 deletions(-)
-
-diff --git a/cups/auth.c b/cups/auth.c
-index 9661657fc..b6fec6b98 100644
---- a/cups/auth.c
-+++ b/cups/auth.c
-@@ -1043,11 +1043,6 @@ cups_local_auth(http_t *http) /* I - HTTP connection to server */
- }
- # endif /* HAVE_AUTHORIZATION_H */
-
--# ifdef HAVE_GSSAPI
-- if (cups_auth_find(www_auth, "Negotiate"))
-- return (1);
--# endif /* HAVE_GSSAPI */
--
- # if defined(SO_PEERCRED) && defined(AF_LOCAL)
- /*
- * See if we can authenticate using the peer credentials provided over a
-diff --git a/scheduler/client.c b/scheduler/client.c
-index c2ee8f12a..56797d58d 100644
---- a/scheduler/client.c
-+++ b/scheduler/client.c
-@@ -2109,18 +2109,13 @@ cupsdSendHeader(
- }
- else if (auth_type == CUPSD_AUTH_NEGOTIATE)
- {
--#if defined(SO_PEERCRED) && defined(AF_LOCAL)
-- if (httpAddrFamily(httpGetAddress(con->http)) == AF_LOCAL)
-- strlcpy(auth_str, "PeerCred", sizeof(auth_str));
-- else
--#endif /* SO_PEERCRED && AF_LOCAL */
- strlcpy(auth_str, "Negotiate", sizeof(auth_str));
- }
-
-- if (con->best && auth_type != CUPSD_AUTH_NEGOTIATE && !con->is_browser && !_cups_strcasecmp(httpGetHostname(con->http, NULL, 0), "localhost"))
-+ if (con->best && !con->is_browser && !_cups_strcasecmp(httpGetHostname(con->http, NULL, 0), "localhost"))
- {
- /*
-- * Add a "trc" (try root certification) parameter for local non-Kerberos
-+ * Add a "trc" (try root certification) parameter for local
- * requests when the request requires system group membership - then the
- * client knows the root certificate can/should be used.
- *
---
-2.30.2
-
Index: upstream_pull_174.patch
===================================================================
--- upstream_pull_174.patch (revision 380)
+++ upstream_pull_174.patch (deleted)
@@ -1,53 +0,0 @@
-From c37d71b1a31d26a4790166e2508822b18934a5c0 Mon Sep 17 00:00:00 2001
-From: Zdenek Dohnal <zdohnal@redhat.com>
-Date: Tue, 13 Apr 2021 15:44:14 +0200
-Subject: [PATCH 1/2] backend/usb-libusb.c: Use 60s timeout for reading at
- backchannel
-
-Some older models malfunction if timeout is too short.
----
- CHANGES.md | 1 +
- backend/usb-libusb.c | 2 +-
- 2 files changed, 2 insertions(+), 1 deletion(-)
-
---- a/backend/usb-libusb.c
-+++ b/backend/usb-libusb.c
-@@ -1704,7 +1704,7 @@ static void *read_thread(void *reference)
- readstatus = libusb_bulk_transfer(g.printer->handle,
- g.printer->read_endp,
- readbuffer, rbytes,
-- &rbytes, 250);
-+ &rbytes, 60000);
- if (readstatus == LIBUSB_SUCCESS && rbytes > 0)
- {
- fprintf(stderr, "DEBUG: Read %d bytes of back-channel data...\n", (int)rbytes);
-
-From 4cb6f6806cdbe040d478b266a1d351b19341dd79 Mon Sep 17 00:00:00 2001
-From: Zdenek Dohnal <zdohnal@redhat.com>
-Date: Tue, 13 Apr 2021 15:47:37 +0200
-Subject: [PATCH 2/2] backend/usb-libusb.c: Revert enforcing read limits
-
-This commit reverts the change introduced by 2.2.12 [1] - its
-implementation caused a regression with Lexmark filters.
-
-[1]
-https://github.com/apple/cups/commit/35e927f83529cd9b4bc37bcd418c50e307fced35
----
- CHANGES.md | 1 +
- backend/usb-libusb.c | 3 ++-
- 2 files changed, 3 insertions(+), 1 deletion(-)
-
-diff --git a/backend/usb-libusb.c b/backend/usb-libusb.c
-index fbb0d9d89..89b5182f7 100644
---- a/backend/usb-libusb.c
-+++ b/backend/usb-libusb.c
-@@ -1721,7 +1721,8 @@ static void *read_thread(void *reference)
- * Make sure this loop executes no more than once every 250 miliseconds...
- */
-
-- if ((g.wait_eof || !g.read_thread_stop))
-+ if ((readstatus != LIBUSB_SUCCESS || rbytes == 0) &&
-+ (g.wait_eof || !g.read_thread_stop))
- usleep(250000);
- }
- while (g.wait_eof || !g.read_thread_stop);
OBS-URL: https://build.opensuse.org/request/show/958348
OBS-URL: https://build.opensuse.org/package/show/Printing/cups?expand=0&rev=381
2022-03-03 13:19:05 +01:00
|
|
|
|
* Web interface updates (Issue #142, Issue #218)
|
2022-03-04 09:58:18 +01:00
|
|
|
|
* The ippeveprinter tool now automatically uses an
|
|
|
|
|
available port.
|
Accepting request 958348 from home:ajoga:branches:openSUSE:Factory
- Version upgrade to 2.4.1
- Dropped patch upstream_pull_174 because it it is included in this release
- Dropped patch cups-2.1.0-cups-systemd-socket.patch because it it is included in this release (https://github.com/OpenPrinting/cups/commit/e96e96b4bd0d4e6f634bbb66b95d6e475501541c)
- Changed upstream source packages signing key (https://github.com/OpenPrinting/cups/discussions/327#discussioncomment-2060579)
- Re-enabled testsuite
* Also removed make check because since upstream change the two target are identical (https://github.com/OpenPrinting/cups/commit/96ba46ebc818b610b0e40cbc9d62ef1dcd3ec9b6#diff-76ed074a9305c04054cdebb9e9aad2d818052b07091de1f20cad0bbac34ffb52R239)
- Changed cups-2.1.0-cups-systemd-socket.patch to accomodate new coding style
- Changed cups-config-libs.orig to accommodate recent code changes (SSL->TLS)
- Changed cups-2.1.0-default-webcontent-path.patch to accommodate code changes
old: Printing/cups
new: home:ajoga:branches:openSUSE:Factory/cups rev None
Index: cups-2.1.0-default-webcontent-path.patch
===================================================================
--- cups-2.1.0-default-webcontent-path.patch (revision 380)
+++ cups-2.1.0-default-webcontent-path.patch (revision 2)
@@ -1,17 +1,21 @@
---- config-scripts/cups-directories.m4.orig 2014-03-21 17:42:53.000000000 +0100
-+++ config-scripts/cups-directories.m4 2015-09-01 11:08:43.000000000 +0200
-@@ -206,11 +206,11 @@ fi
- AC_SUBST(MENUDIR)
+--- config-scripts/cups-directories.m4
++++ config-scripts/cups-directories.m4.orig
+@@ -166,15 +166,15 @@ AS_IF([test "x$menudir" = x], [
+ AC_SUBST([MENUDIR])
# Documentation files
--AC_ARG_WITH(docdir, [ --with-docdir set path for documentation],docdir="$withval",docdir="")
-+AC_ARG_WITH(docdir, [ --with-docdir set path and DocumentRoot directive for web content, default=datadir/cups/webcontent],docdir="$withval",docdir="")
+-AC_ARG_WITH([docdir], AS_HELP_STRING([--with-docdir], [set path for documentation]), [
++AC_ARG_WITH([docdir], AS_HELP_STRING([--with-docdir], [set path and DocumentRoot directive for web content, default=datadir/cups/webcontent]), [
+ docdir="$withval"
+ ], [
+ docdir=""
+ ])
- if test x$docdir = x; then
-- CUPS_DOCROOT="$datadir/doc/cups"
-- docdir="$datadir/doc/cups"
-+ CUPS_DOCROOT="$datadir/cups/webcontent"
-+ docdir="$datadir/cups/webcontent"
- else
- CUPS_DOCROOT="$docdir"
- fi
+ AS_IF([test x$docdir = x], [
+- CUPS_DOCROOT="$datadir/doc/cups"
+- docdir="$datadir/doc/cups"
++ CUPS_DOCROOT="$datadir/cups/webcontent"
++ docdir="$datadir/cups/webcontent"
+ ], [
+ CUPS_DOCROOT="$docdir"
+ ])
Index: cups-config-libs.patch
===================================================================
--- cups-config-libs.patch (revision 380)
+++ cups-config-libs.patch (revision 2)
@@ -4,7 +4,7 @@
# flags for compiler and linker...
CFLAGS=""
LDFLAGS="@EXPORT_LDFLAGS@"
--LIBS="@LIBGSSAPI@ @DNSSDLIBS@ @EXPORT_SSLLIBS@ @LIBZ@ @LIBS@"
+-LIBS="@LIBGSSAPI@ @DNSSDLIBS@ @EXPORT_TLSLIBS@ @LIBZ@ @LIBS@"
+LIBS=""
# Check for local invocation...
Index: cups.changes
===================================================================
--- cups.changes (revision 380)
+++ cups.changes (revision 2)
@@ -1,4 +1,88 @@
-------------------------------------------------------------------
+Tue Mar 1 18:16:11 UTC 2022 - Aurélien Joga <aurelienjoga@gmail.com>
+
+- Version upgrade to 2.4.1:
+ * The default color mode now is now configurable and defaults to the printer's reported default mode (Issue #277)
+ * Configuration script now checks linking for -Wl,-pie flags (Issue #303)
+ * Fixed memory leaks - in testi18n (Issue #313), in cups_enum_dests() (Issue #317), in _cupsEncodeOption() and http_tls_upgrade() (Issue #322)
+ * Fixed missing bracket in de/index.html (Issue #299)
+ * Fixed typos in configuration scripts (Issues #304, #316)
+ * Removed remaining legacy code for RIP_MAX_CACHE environment variable (Issue #323)
+ * Removed deprecated directives from cupsctl and cups-files.conf (Issue #300)
+ * Removed purge-jobs legacy code from CGI scripts and templates (Issue #325)
+ * Added configure option --with-idle-exit-timeout (Issue #294)
+ * Added --with-systemd-timeoutstartsec configure option (Issue #298)
+ * DigestOptions now are applied for MD5 Digest authentication defined by RFC 2069 as well (Issue #287)
+ * Fixed compilation on Solaris (Issue #293)
+ * Fixed and improved German translations (Issue #296, Issue #297)
+ * Added warning and debug messages when loading printers if the queue is raw or with driver (Issue #286)
+ * Compilation now uses -fstack-protector-strong if available (Issue #285)
+ * Added support for CUPS running in a Snapcraft snap.
+ * Added basic OAuth 2.0 client support (Issue #100)
+ * Added support for AirPrint and Mopria clients (Issue #105)
+ * Added configure support for specifying systemd dependencies in the CUPS service file (Issue #144)
+ * Added several features and improvements to ipptool (Issue #153)
+ * Added a JSON output mode for ipptool.
+ * The ipptool command now correctly reports an error when a test file cannot be found.
+ * CUPS library now uses thread safe getpwnam_r and getpwuid_r functions (Issue #274)
+ * Fixed Kerberos authentication for the web interface (Issue #19)
+ * The ZPL sample driver now supports more "standard" label sizes (Issue #70)
+ * Fixed reporting of printer instances when enumerating and when no options are set for the main instance (Issue #71)
+ * Reverted USB read limit enforcement change from CUPS 2.2.12 (Issue #72)
+ * The IPP backend did not return the correct status code when a job was canceled at the printer/server (Issue #74)
+ * The testlang unit test program now loops over all of the available locales by default (Issue #85)
+ * The cupsfilter command now shows error messages when options are used incorrectly (Issue #88)
+ * The PPD functions now treat boolean values as case-insensitive (Issue #106)
+ * Temporary queue names no longer end with an underscore (Issue #110)
+ * The USB backend now runs as root (Issue #121)
+ * Added pkg-config file for libcups (Issue #122)
+ * Fixed a PPD memory leak caused by emulator definitions (Issue #124)
+ * Fixed a DISPLAY bug in ipptool (Issue #139)
+ * The scheduler now includes the [Job N] prefix for job log messages, even when using syslog logging (Issue #154)
+ * Added support for locales using the GB18030 character set (Issue #159)
+ * httpReconnect2 did not reset the socket file descriptor when the TLS negotiation failed (Apple #5907)
+ * httpUpdate did not reset the socket file descriptor when the TLS negotiation failed (Apple #5915)
+ * The IPP backend now retries Validate-Job requests (Issue #132)
+ * Now show better error messages when a driver interface program fails to provide a PPD file (Issue #148)
+ * Added dark mode support to the CUPS web interface (Issue #152)
+ * Added a workaround for Solaris in httpAddrConnect2 (Issue #156)
+ * Fixed an interaction between --remote-admin and --remote-any for the cupsctl command (Issue #158)
+ * Now use a 60 second timeout for reading USB backchannel data (Issue #160)
+ * The USB backend now tries harder to find a serial number (Issue #170)
+ * Fixed @IF(name) handling in cupsd.conf (Apple #5918)
+ * Fixed documentation and added examples for CUPS' limited CGI support (Apple #5940)
+ * Fixed the lpc command prompt (Apple #5946)
+ * Now always pass "localhost" in the Host: header when talking over a domain socket or the loopback interface (Issue #185)
+ * Fixed a job history update issue in the scheduler (Issue #187)
+ * Fixed job-pages-per-set value for duplex print jobs.
+ * Fixed an edge case in ippReadIO to make sure that only complete attributes and values are retained on an error (Issue #195)
+ * Hardened ippReadIO to prevent invalid IPP messages from being propagated (Issue #195, Issue #196)
+ * The scheduler now supports the "everywhere" model directly (Issue #201)
+ * Fixed some IPP Everywhere option mapping problems (Issue #238)
+ * Fixed support for "job-hold-until" with the Restart-Job operation (Issue #250)
+ * Fixed the default color/grayscale presets for IPP Everywhere PPDs (Issue #262)
+ * Fixed support for the 'offline-report' state for all USB backends (Issue #264)
+ * Documentation fixes (Issue #92, Issue #163, Issue #177, Issue #184)
+ * Localization updates (Issue #123, Issue #129, Issue #134, Issue #146, Issue #164)
+ * USB quirk updates (Issue #192, Issue #270, Apple #5766, Apple #5838, Apple #5843, Apple #5867)
+ * Web interface updates (Issue #142, Issue #218)
+ * The ippeveprinter tool now automatically uses an available port.
+ * Fixed several Windows TLS and hashing issues.
+ * Deprecated cups-config (Issue #97)
+ * Deprecated Kerberos (AuthType Negotiate) authentication (Issue #98)
+ * Removed support for the (long deprecated and unused) FontPath, ListenBackLog, LPDConfigFile, KeepAliveTimeout, RIPCache, and SMBConfigFile directives in cupsd.conf and cups-files.conf.
+ * Stubbed out deprecated httpMD5 functions.
+ * Add test for undefined page ranges during printing.
+- Dropped patch upstream_pull_174 because it it is included in this release
+- Dropped patch cups-2.1.0-cups-systemd-socket.patch because it it is included in this release (https://github.com/OpenPrinting/cups/commit/e96e96b4bd0d4e6f634bbb66b95d6e475501541c)
+- Changed upstream source packages signing key (https://github.com/OpenPrinting/cups/discussions/327#discussioncomment-2060579)
+- Re-enabled testsuite
+ * Also removed make check because since upstream change the two target are identical (https://github.com/OpenPrinting/cups/commit/96ba46ebc818b610b0e40cbc9d62ef1dcd3ec9b6#diff-76ed074a9305c04054cdebb9e9aad2d818052b07091de1f20cad0bbac34ffb52R239)
+- Changed cups-2.1.0-cups-systemd-socket.patch to accomodate new coding style
+- Changed cups-config-libs.orig to accommodate recent code changes (SSL->TLS)
+- Changed cups-2.1.0-default-webcontent-path.patch to accommodate code changes
+
+-------------------------------------------------------------------
Tue Feb 1 09:18:27 UTC 2022 - jsmeix@suse.de
- Enhanced harden_cups.service.patch by adding
Index: cups.keyring
===================================================================
Binary files cups.keyring (revision 380) and cups.keyring (revision 2) differ
Index: cups.spec
===================================================================
--- cups.spec (revision 380)
+++ cups.spec (revision 2)
@@ -18,9 +18,7 @@
# Cf. https://rpm.org/user_doc/conditional_builds.html
# by default enable testsuite (i.e. in the 'check' section run make check and make test)
-#bcond_without testsuite
-# disable testsuite for now until https://github.com/OpenPrinting/cups/issues/155 is fixed
-%bcond_with testsuite
+%bcond_without testsuite
# _tmpfilesdir is not defined in systemd macros up to openSUSE 13.2
%{!?_tmpfilesdir: %global _tmpfilesdir /usr/lib/tmpfiles.d }
@@ -29,34 +27,32 @@
# "zypper vcmp 2.3.b99 2.3.0" shows "2.3.b99 is older than 2.3.0" and
# "zypper vcmp 2.2.99 2.3b6" show "2.2.99 is older than 2.3b6" so that
# version upgrades from 2.2.x via 2.3.b* to 2.3.0 work:
-Version: 2.3.3op2
+Version: 2.4.1
Release: 0
Summary: The Common UNIX Printing System
License: Apache-2.0
Group: Hardware/Printing
URL: https://openprinting.github.io/cups
# To get Source0 go to https://github.com/OpenPrinting/cups/releases or use e.g.
-# wget --no-check-certificate -O cups-2.3.3op2-source.tar.gz https://github.com/OpenPrinting/cups/releases/download/v2.3.3op2/cups-2.3.3op2-source.tar.gz
-Source0: https://github.com/OpenPrinting/cups/releases/download/v2.3.3op2/cups-2.3.3op2-source.tar.gz
+# wget --no-check-certificate -O cups-2.4.1-source.tar.gz https://github.com/OpenPrinting/cups/releases/download/v2.4.1/cups-2.4.1-source.tar.gz
+Source0: https://github.com/OpenPrinting/cups/releases/download/v2.4.1/cups-2.4.1-source.tar.gz
# To get Source1 go to https://github.com/OpenPrinting/cups/releases or use e.g.
-# wget --no-check-certificate -O cups-2.3.3op2-source.tar.gz.sig https://github.com/OpenPrinting/cups/releases/download/v2.3.3op2/cups-2.3.3op2-source.tar.gz.sig
-Source1: https://github.com/OpenPrinting/cups/releases/download/v2.3.3op2/cups-2.3.3op2-source.tar.gz.sig
-# To get Source2 go to https://www.msweet.org/pgp.html
-# PGP Fingerprint: 845464660B686AAB36540B6F999559A027815955
+# wget --no-check-certificate -O cups-2.4.1-source.tar.gz.sig https://github.com/OpenPrinting/cups/releases/download/v2.4.1/cups-2.4.1-source.tar.gz.sig
+Source1: https://github.com/OpenPrinting/cups/releases/download/v2.4.1/cups-2.4.1-source.tar.gz.sig
+# To get Source2 use gpg --keyserver keys.openpgp.org --recv-keys 7082A0A50A2E92640F3880E0E4522DCC9B246FF7
+# See https://github.com/OpenPrinting/cups/discussions/327#discussioncomment-2060579
+# PGP Fingerprint: 7082A0A50A2E92640F3880E0E4522DCC9B246FF7
Source2: cups.keyring
# To manually verify Source0 with Source1 and Source2 do e.g.
# gpg --import cups.keyring
-# gpg --list-keys | grep -1 'Michael R Sweet' | grep -v 'expired'
-# gpg --verify cups-2.3.3op2-source.tar.gz.sig cups-2.3.3op2-source.tar.gz
+# gpg --list-keys | grep -1 'Zdenek Dohnal'
+# gpg --verify cups-2.4.1-source.tar.gz.sig cups-2.4.1-source.tar.gz
Source102: Postscript.ppd.gz
Source105: Postscript-level1.ppd.gz
Source106: Postscript-level2.ppd.gz
Source108: cups-client.conf
Source109: baselibs.conf
# Patch0...Patch9 is for patches from upstream:
-# Patch1 upstream_pull_174.patch is https://github.com/OpenPrinting/cups/pull/174
-# Use 60s timeout for read_thread, revert read limits
-Patch1: upstream_pull_174.patch
# Source10...Source99 is for sources from SUSE which are intended for upstream:
# Patch10...Patch99 is for patches from SUSE which are intended for upstream:
# Patch10 cups-2.1.0-choose-uri-template.patch adds 'smb://...' URIs to templates/choose-uri.tmpl:
@@ -66,8 +62,6 @@
# because the files of the CUPS web content are no documentation, see CUPS STR #3578
# and http://bugzilla.novell.com/show_bug.cgi?id=546023#c6 and subsequent comments:
Patch11: cups-2.1.0-default-webcontent-path.patch
-# Patch12 cups-2.1.0-cups-systemd-socket.patch Use systemd socket activation properly:
-Patch12: cups-2.1.0-cups-systemd-socket.patch
# Patch100...Patch999 is for private patches from SUSE which are not intended for upstream:
# Patch100 cups-pam.diff adds conf/pam.suse regarding support for PAM for SUSE:
Patch100: cups-pam.diff
@@ -83,9 +77,9 @@
Patch103: cups-1.4-do_not_strip_recommended_from_PPDs.patch
# Patch104 cups-config-libs.patch fixes option --libs in cups-config script:
Patch104: cups-config-libs.patch
-# Patch106 Fixes web UI Kerberos authentication (bsc#1175960)
-Patch106: fix-negotiate-authentication-between-CGIs-and-scheduler.patch
Patch107: harden_cups.service.patch
+# Patch108 downgrades the autoconf requirement to the autoconf available in tumbleweed as of writing
+Patch108: downgrade-autoconf-requirement.patch
# Build Requirements:
BuildRequires: dbus-1-devel
BuildRequires: fdupes
@@ -280,9 +274,6 @@
%prep
%setup -q
# Patch0...Patch9 is for patches from upstream:
-# Patch1 upstream_pull_174.patch is https://github.com/OpenPrinting/cups/pull/174
-# Use 60s timeout for read_thread, revert read limits
-%patch1 -p1
# Patch10...Patch99 is for patches from SUSE which are intended for upstream:
# Patch10 cups-2.1.0-choose-uri-template.patch adds 'smb://...' URIs to templates/choose-uri.tmpl:
%patch10 -b choose-uri-template.orig
@@ -291,8 +282,6 @@
# because the files of the CUPS web content are no documentation, see CUPS STR #3578
# and http://bugzilla.novell.com/show_bug.cgi?id=546023#c6 and subsequent comments:
%patch11 -b default-webcontent-path.orig
-# Patch12 cups-2.1.0-cups-systemd-socket.patch Use systemd socket activation properly:
-#patch12 -b cups-systemd-socket.orig
# Patch100...Patch999 is for private patches from SUSE which are not intended for upstream:
# Patch100 cups-pam.diff adds conf/pam.suse regarding support for PAM for SUSE:
%patch100 -b cups-pam.orig
@@ -308,9 +297,8 @@
%patch103 -b do_not_strip_recommended_from_PPDs.orig
# Patch104 cups-config-libs.patch fixes option --libs in cups-config script:
%patch104 -b cups-config-libs.orig
-# Patch106 Fixes web UI Kerberos authentication (bsc#1175960)
-%patch106 -p1
%patch107 -p1
+%patch108 -p1
%build
# Remove ".SILENT" rule for verbose build output
@@ -439,8 +427,6 @@
# There appears to be some kind of race condition when running make check and make test
# cf. https://github.com/OpenPrinting/cups/issues/155
# We print all logs for debugging purposes if either testsuite fails
-echo "DEBUG: running make check"
-bash -c 'make %{?_smp_mflags} check; EXIT=$?; if [ $EXIT -ne 0 ]; then cat test/*_log*-$(whoami); fi; exit $EXIT'
echo "DEBUG: running make test"
bash -c 'make %{?_smp_mflags} test; EXIT=$?; if [ $EXIT -ne 0 ]; then cat test/*_log*-$(whoami); fi; exit $EXIT'
%else
@@ -681,6 +667,7 @@
%files devel
%defattr(-,root,root)
+/usr/lib/pkgconfig/cups.pc
%{_includedir}/cups/
%{_libdir}/libcups.so
%{_libdir}/libcupsimage.so
Index: cups-2.4.1-source.tar.gz
===================================================================
Binary file cups-2.4.1-source.tar.gz (revision 2) added
Index: cups-2.4.1-source.tar.gz.sig
===================================================================
Binary file cups-2.4.1-source.tar.gz.sig (revision 2) added
Index: downgrade-autoconf-requirement.patch
===================================================================
--- downgrade-autoconf-requirement.patch (added)
+++ downgrade-autoconf-requirement.patch (revision 2)
@@ -0,0 +1,15 @@
+diff --git a/configure.ac b/configure.ac
+index a8c6c1040..6ace74a8d 100644
+--- a/configure.ac
++++ b/configure.ac
+@@ -9,8 +9,8 @@ dnl Licensed under Apache License v2.0. See the file "LICENSE" for more
+ dnl information.
+ dnl
+
+-dnl We need at least autoconf 2.71...
+-AC_PREREQ([2.71])
++dnl We need at least autoconf 2.69...
++AC_PREREQ([2.69])
+
+ dnl Package name and version...
+ AC_INIT([CUPS],[2.4.1],[https://github.com/openprinting/cups/issues],[cups],[https://openprinting.github.io/cups])
Index: cups-2.1.0-cups-systemd-socket.patch
===================================================================
--- cups-2.1.0-cups-systemd-socket.patch (revision 380)
+++ cups-2.1.0-cups-systemd-socket.patch (deleted)
@@ -1,43 +0,0 @@
---- scheduler/main.c.orig 2015-06-08 20:32:35.000000000 +0200
-+++ scheduler/main.c 2015-09-01 11:19:36.000000000 +0200
-@@ -656,7 +656,15 @@ main(int argc, /* I - Number of comm
-
- #if defined(HAVE_LAUNCHD) || defined(HAVE_SYSTEMD)
- if (OnDemand)
-+ {
- cupsdAddEvent(CUPSD_EVENT_SERVER_STARTED, NULL, NULL, "Scheduler started on demand.");
-+# ifdef HAVE_SYSTEMD
-+ sd_notifyf(0, "READY=1\n"
-+ "STATUS=Scheduler is running...\n"
-+ "MAINPID=%lu",
-+ (unsigned long) getpid());
-+# endif /* HAVE_SYSTEMD */
-+ }
- else
- #endif /* HAVE_LAUNCHD || HAVE_SYSTEMD */
- if (fg)
---- scheduler/org.cups.cupsd.path.in.orig 2014-03-21 15:50:24.000000000 +0100
-+++ scheduler/org.cups.cupsd.path.in 2015-09-01 11:20:37.000000000 +0200
-@@ -3,6 +3,7 @@ Description=CUPS Scheduler
-
- [Path]
- PathExists=@CUPS_CACHEDIR@/org.cups.cupsd
-+PathExistsGlob=@CUPS_REQUESTS@/d*
-
- [Install]
- WantedBy=multi-user.target
---- scheduler/org.cups.cupsd.service.in.orig 2014-10-21 13:54:05.000000000 +0200
-+++ scheduler/org.cups.cupsd.service.in 2015-09-01 11:22:09.000000000 +0200
-@@ -1,10 +1,11 @@
- [Unit]
- Description=CUPS Scheduler
- Documentation=man:cupsd(8)
-+After=network.target
-
- [Service]
- ExecStart=@sbindir@/cupsd -l
--Type=simple
-+Type=notify
-
- [Install]
- Also=org.cups.cupsd.socket org.cups.cupsd.path
Index: cups-2.3.3op2-source.tar.gz
===================================================================
Binary file cups-2.3.3op2-source.tar.gz (revision 380) deleted
Index: cups-2.3.3op2-source.tar.gz.sig
===================================================================
Binary file cups-2.3.3op2-source.tar.gz.sig (revision 380) deleted
Index: fix-negotiate-authentication-between-CGIs-and-scheduler.patch
===================================================================
--- fix-negotiate-authentication-between-CGIs-and-scheduler.patch (revision 380)
+++ fix-negotiate-authentication-between-CGIs-and-scheduler.patch (deleted)
@@ -1,223 +0,0 @@
-From d4521ed0df7e625ccf2bc079bab6f48c46ef9bf9 Mon Sep 17 00:00:00 2001
-From: Samuel Cabrero <scabrero@suse.de>
-Date: Mon, 26 Oct 2020 17:35:22 +0100
-Subject: [PATCH 1/4] Avoid infinite loop in admin.cgi when negotiate is used
-
-SetAuthorizationString with NULL argument sets an empty string.
-
-Related: #5596
-
-Signed-off-by: Samuel Cabrero <scabrero@suse.de>
----
- cups/auth.c | 2 +-
- 1 file changed, 1 insertion(+), 1 deletion(-)
-
-diff --git a/cups/auth.c b/cups/auth.c
-index db45bbba6..f2409350a 100644
---- a/cups/auth.c
-+++ b/cups/auth.c
-@@ -295,7 +295,7 @@ cupsDoAuthentication(
- }
- }
-
-- if (http->authstring)
-+ if (http->authstring && http->authstring[0])
- {
- DEBUG_printf(("1cupsDoAuthentication: authstring=\"%s\".", http->authstring));
-
---
-2.30.2
-
-
-From 61ad7780bc7d0593e3225d088ac6dff31badf801 Mon Sep 17 00:00:00 2001
-From: Samuel Cabrero <scabrero@suse.de>
-Date: Tue, 27 Oct 2020 16:11:41 +0100
-Subject: [PATCH 2/4] Add cups_is_local_connection() to check if connection is
- to localhost
-
-Related: #5596
-
-Signed-off-by: Samuel Cabrero <scabrero@suse.de>
----
- cups/auth.c | 11 ++++++++++-
- 1 file changed, 10 insertions(+), 1 deletion(-)
-
-diff --git a/cups/auth.c b/cups/auth.c
-index f2409350a..d2956438d 100644
---- a/cups/auth.c
-+++ b/cups/auth.c
-@@ -90,6 +90,7 @@ static void cups_gss_printf(OM_uint32 major_status, OM_uint32 minor_status,
- # define cups_gss_printf(major, minor, message)
- # endif /* DEBUG */
- #endif /* HAVE_GSSAPI */
-+static int cups_is_local_connection(http_t *http);
- static int cups_local_auth(http_t *http);
-
-
-@@ -916,6 +917,14 @@ cups_gss_printf(OM_uint32 major_status,/* I - Major status code */
- # endif /* DEBUG */
- #endif /* HAVE_GSSAPI */
-
-+static int /* O - 0 if not a local connection */
-+ /* 1 if local connection */
-+cups_is_local_connection(http_t *http) /* I - HTTP connection to server */
-+{
-+ if (!httpAddrLocalhost(http->hostaddr) && _cups_strcasecmp(http->hostname, "localhost") != 0)
-+ return 0;
-+ return 1;
-+}
-
- /*
- * 'cups_local_auth()' - Get the local authorization certificate if
-@@ -958,7 +967,7 @@ cups_local_auth(http_t *http) /* I - HTTP connection to server */
- * See if we are accessing localhost...
- */
-
-- if (!httpAddrLocalhost(http->hostaddr) && _cups_strcasecmp(http->hostname, "localhost") != 0)
-+ if (!cups_is_local_connection(http))
- {
- DEBUG_puts("8cups_local_auth: Not a local connection!");
- return (1);
---
-2.30.2
-
-
-From f629d079750a86b1b605c285f99c0dea3933ca50 Mon Sep 17 00:00:00 2001
-From: Samuel Cabrero <scabrero@suse.de>
-Date: Tue, 27 Oct 2020 16:23:30 +0100
-Subject: [PATCH 3/4] Try local kerberos ccache credentials only for remote
- servers
-
-If connecting to localhost then proceed to ask the client for the
-authorization using cupsGetPassword2. The get password callback will
-return 401 to the client with WWW-Authenticate: Negotiate.
-
-Fixes: #5596
-
-Signed-off-by: Samuel Cabrero <scabrero@suse.de>
----
- cups/auth.c | 10 ++++++----
- 1 file changed, 6 insertions(+), 4 deletions(-)
-
-diff --git a/cups/auth.c b/cups/auth.c
-index d2956438d..9661657fc 100644
---- a/cups/auth.c
-+++ b/cups/auth.c
-@@ -175,10 +175,10 @@ cupsDoAuthentication(
- DEBUG_printf(("2cupsDoAuthentication: Trying scheme \"%s\"...", scheme));
-
- #ifdef HAVE_GSSAPI
-- if (!_cups_strcasecmp(scheme, "Negotiate"))
-+ if (!_cups_strcasecmp(scheme, "Negotiate") && !cups_is_local_connection(http))
- {
- /*
-- * Kerberos authentication...
-+ * Kerberos authentication to remote server...
- */
-
- int gss_status; /* Auth status */
-@@ -202,7 +202,9 @@ cupsDoAuthentication(
- }
- else
- #endif /* HAVE_GSSAPI */
-- if (_cups_strcasecmp(scheme, "Basic") && _cups_strcasecmp(scheme, "Digest"))
-+ if (_cups_strcasecmp(scheme, "Basic") &&
-+ _cups_strcasecmp(scheme, "Digest") &&
-+ _cups_strcasecmp(scheme, "Negotiate"))
- {
- /*
- * Other schemes not yet supported...
-@@ -216,7 +218,7 @@ cupsDoAuthentication(
- * See if we should retry the current username:password...
- */
-
-- if ((http->digest_tries > 1 || !http->userpass[0]) && (!_cups_strcasecmp(scheme, "Basic") || (!_cups_strcasecmp(scheme, "Digest"))))
-+ if (http->digest_tries > 1 || !http->userpass[0])
- {
- /*
- * Nope - get a new password from the user...
---
-2.30.2
-
-
-From 0563a28b18b21d5574a5e0e38b74246146074bbf Mon Sep 17 00:00:00 2001
-From: Samuel Cabrero <scabrero@suse.de>
-Date: Tue, 27 Oct 2020 16:18:03 +0100
-Subject: [PATCH 4/4] Allow Local authentication for Negotiate
-
-PeerCred is also possible if address family is AF_LOCAL. This will allow
-the CGI programs to generate the authorization from the local
-certificates based on PID also when Negotiate is used for local
-connections:
-
-Client CGI
-Browser <- Remote conn -> admin.cgi <--- Localhost conn ---> Scheduler
- | | |
- + --- HTTP/POST /admin/ --> | |
- | + --- CUPS-Get-Devices ------------> |
- | | |
- | | <-- 401 Unauthorized --------------+
- | | WWW-Authenticate: |
- | | Negotiate, (PeerCred,) Local |
- | | |
- | <-- 401 Unauthorized -----+ |
- | WWW-Authenticate: | |
- | Negotiate | |
- | | |
- | --- HTTP/POST /admin/ --> | |
- | Authorization: + --- IPP CUPS-GetDevices ---------> |
- | Negotiate | Authorization: Local <cert> |
- | | |
-
-Fixes: #5596
-
-Signed-off-by: Samuel Cabrero <scabrero@suse.de>
----
- cups/auth.c | 5 -----
- scheduler/client.c | 9 ++-------
- 2 files changed, 2 insertions(+), 12 deletions(-)
-
-diff --git a/cups/auth.c b/cups/auth.c
-index 9661657fc..b6fec6b98 100644
---- a/cups/auth.c
-+++ b/cups/auth.c
-@@ -1043,11 +1043,6 @@ cups_local_auth(http_t *http) /* I - HTTP connection to server */
- }
- # endif /* HAVE_AUTHORIZATION_H */
-
--# ifdef HAVE_GSSAPI
-- if (cups_auth_find(www_auth, "Negotiate"))
-- return (1);
--# endif /* HAVE_GSSAPI */
--
- # if defined(SO_PEERCRED) && defined(AF_LOCAL)
- /*
- * See if we can authenticate using the peer credentials provided over a
-diff --git a/scheduler/client.c b/scheduler/client.c
-index c2ee8f12a..56797d58d 100644
---- a/scheduler/client.c
-+++ b/scheduler/client.c
-@@ -2109,18 +2109,13 @@ cupsdSendHeader(
- }
- else if (auth_type == CUPSD_AUTH_NEGOTIATE)
- {
--#if defined(SO_PEERCRED) && defined(AF_LOCAL)
-- if (httpAddrFamily(httpGetAddress(con->http)) == AF_LOCAL)
-- strlcpy(auth_str, "PeerCred", sizeof(auth_str));
-- else
--#endif /* SO_PEERCRED && AF_LOCAL */
- strlcpy(auth_str, "Negotiate", sizeof(auth_str));
- }
-
-- if (con->best && auth_type != CUPSD_AUTH_NEGOTIATE && !con->is_browser && !_cups_strcasecmp(httpGetHostname(con->http, NULL, 0), "localhost"))
-+ if (con->best && !con->is_browser && !_cups_strcasecmp(httpGetHostname(con->http, NULL, 0), "localhost"))
- {
- /*
-- * Add a "trc" (try root certification) parameter for local non-Kerberos
-+ * Add a "trc" (try root certification) parameter for local
- * requests when the request requires system group membership - then the
- * client knows the root certificate can/should be used.
- *
---
-2.30.2
-
Index: upstream_pull_174.patch
===================================================================
--- upstream_pull_174.patch (revision 380)
+++ upstream_pull_174.patch (deleted)
@@ -1,53 +0,0 @@
-From c37d71b1a31d26a4790166e2508822b18934a5c0 Mon Sep 17 00:00:00 2001
-From: Zdenek Dohnal <zdohnal@redhat.com>
-Date: Tue, 13 Apr 2021 15:44:14 +0200
-Subject: [PATCH 1/2] backend/usb-libusb.c: Use 60s timeout for reading at
- backchannel
-
-Some older models malfunction if timeout is too short.
----
- CHANGES.md | 1 +
- backend/usb-libusb.c | 2 +-
- 2 files changed, 2 insertions(+), 1 deletion(-)
-
---- a/backend/usb-libusb.c
-+++ b/backend/usb-libusb.c
-@@ -1704,7 +1704,7 @@ static void *read_thread(void *reference)
- readstatus = libusb_bulk_transfer(g.printer->handle,
- g.printer->read_endp,
- readbuffer, rbytes,
-- &rbytes, 250);
-+ &rbytes, 60000);
- if (readstatus == LIBUSB_SUCCESS && rbytes > 0)
- {
- fprintf(stderr, "DEBUG: Read %d bytes of back-channel data...\n", (int)rbytes);
-
-From 4cb6f6806cdbe040d478b266a1d351b19341dd79 Mon Sep 17 00:00:00 2001
-From: Zdenek Dohnal <zdohnal@redhat.com>
-Date: Tue, 13 Apr 2021 15:47:37 +0200
-Subject: [PATCH 2/2] backend/usb-libusb.c: Revert enforcing read limits
-
-This commit reverts the change introduced by 2.2.12 [1] - its
-implementation caused a regression with Lexmark filters.
-
-[1]
-https://github.com/apple/cups/commit/35e927f83529cd9b4bc37bcd418c50e307fced35
----
- CHANGES.md | 1 +
- backend/usb-libusb.c | 3 ++-
- 2 files changed, 3 insertions(+), 1 deletion(-)
-
-diff --git a/backend/usb-libusb.c b/backend/usb-libusb.c
-index fbb0d9d89..89b5182f7 100644
---- a/backend/usb-libusb.c
-+++ b/backend/usb-libusb.c
-@@ -1721,7 +1721,8 @@ static void *read_thread(void *reference)
- * Make sure this loop executes no more than once every 250 miliseconds...
- */
-
-- if ((g.wait_eof || !g.read_thread_stop))
-+ if ((readstatus != LIBUSB_SUCCESS || rbytes == 0) &&
-+ (g.wait_eof || !g.read_thread_stop))
- usleep(250000);
- }
- while (g.wait_eof || !g.read_thread_stop);
OBS-URL: https://build.opensuse.org/request/show/958348
OBS-URL: https://build.opensuse.org/package/show/Printing/cups?expand=0&rev=381
2022-03-03 13:19:05 +01:00
|
|
|
|
* Fixed several Windows TLS and hashing issues.
|
|
|
|
|
* Deprecated cups-config (Issue #97)
|
2022-03-04 09:58:18 +01:00
|
|
|
|
* Deprecated Kerberos (AuthType Negotiate)
|
|
|
|
|
authentication (Issue #98)
|
|
|
|
|
* Removed support for the (long deprecated and unused)
|
|
|
|
|
FontPath, ListenBackLog, LPDConfigFile, KeepAliveTimeout,
|
|
|
|
|
RIPCache, and SMBConfigFile directives in cupsd.conf
|
|
|
|
|
and cups-files.conf.
|
Accepting request 958348 from home:ajoga:branches:openSUSE:Factory
- Version upgrade to 2.4.1
- Dropped patch upstream_pull_174 because it it is included in this release
- Dropped patch cups-2.1.0-cups-systemd-socket.patch because it it is included in this release (https://github.com/OpenPrinting/cups/commit/e96e96b4bd0d4e6f634bbb66b95d6e475501541c)
- Changed upstream source packages signing key (https://github.com/OpenPrinting/cups/discussions/327#discussioncomment-2060579)
- Re-enabled testsuite
* Also removed make check because since upstream change the two target are identical (https://github.com/OpenPrinting/cups/commit/96ba46ebc818b610b0e40cbc9d62ef1dcd3ec9b6#diff-76ed074a9305c04054cdebb9e9aad2d818052b07091de1f20cad0bbac34ffb52R239)
- Changed cups-2.1.0-cups-systemd-socket.patch to accomodate new coding style
- Changed cups-config-libs.orig to accommodate recent code changes (SSL->TLS)
- Changed cups-2.1.0-default-webcontent-path.patch to accommodate code changes
old: Printing/cups
new: home:ajoga:branches:openSUSE:Factory/cups rev None
Index: cups-2.1.0-default-webcontent-path.patch
===================================================================
--- cups-2.1.0-default-webcontent-path.patch (revision 380)
+++ cups-2.1.0-default-webcontent-path.patch (revision 2)
@@ -1,17 +1,21 @@
---- config-scripts/cups-directories.m4.orig 2014-03-21 17:42:53.000000000 +0100
-+++ config-scripts/cups-directories.m4 2015-09-01 11:08:43.000000000 +0200
-@@ -206,11 +206,11 @@ fi
- AC_SUBST(MENUDIR)
+--- config-scripts/cups-directories.m4
++++ config-scripts/cups-directories.m4.orig
+@@ -166,15 +166,15 @@ AS_IF([test "x$menudir" = x], [
+ AC_SUBST([MENUDIR])
# Documentation files
--AC_ARG_WITH(docdir, [ --with-docdir set path for documentation],docdir="$withval",docdir="")
-+AC_ARG_WITH(docdir, [ --with-docdir set path and DocumentRoot directive for web content, default=datadir/cups/webcontent],docdir="$withval",docdir="")
+-AC_ARG_WITH([docdir], AS_HELP_STRING([--with-docdir], [set path for documentation]), [
++AC_ARG_WITH([docdir], AS_HELP_STRING([--with-docdir], [set path and DocumentRoot directive for web content, default=datadir/cups/webcontent]), [
+ docdir="$withval"
+ ], [
+ docdir=""
+ ])
- if test x$docdir = x; then
-- CUPS_DOCROOT="$datadir/doc/cups"
-- docdir="$datadir/doc/cups"
-+ CUPS_DOCROOT="$datadir/cups/webcontent"
-+ docdir="$datadir/cups/webcontent"
- else
- CUPS_DOCROOT="$docdir"
- fi
+ AS_IF([test x$docdir = x], [
+- CUPS_DOCROOT="$datadir/doc/cups"
+- docdir="$datadir/doc/cups"
++ CUPS_DOCROOT="$datadir/cups/webcontent"
++ docdir="$datadir/cups/webcontent"
+ ], [
+ CUPS_DOCROOT="$docdir"
+ ])
Index: cups-config-libs.patch
===================================================================
--- cups-config-libs.patch (revision 380)
+++ cups-config-libs.patch (revision 2)
@@ -4,7 +4,7 @@
# flags for compiler and linker...
CFLAGS=""
LDFLAGS="@EXPORT_LDFLAGS@"
--LIBS="@LIBGSSAPI@ @DNSSDLIBS@ @EXPORT_SSLLIBS@ @LIBZ@ @LIBS@"
+-LIBS="@LIBGSSAPI@ @DNSSDLIBS@ @EXPORT_TLSLIBS@ @LIBZ@ @LIBS@"
+LIBS=""
# Check for local invocation...
Index: cups.changes
===================================================================
--- cups.changes (revision 380)
+++ cups.changes (revision 2)
@@ -1,4 +1,88 @@
-------------------------------------------------------------------
+Tue Mar 1 18:16:11 UTC 2022 - Aurélien Joga <aurelienjoga@gmail.com>
+
+- Version upgrade to 2.4.1:
+ * The default color mode now is now configurable and defaults to the printer's reported default mode (Issue #277)
+ * Configuration script now checks linking for -Wl,-pie flags (Issue #303)
+ * Fixed memory leaks - in testi18n (Issue #313), in cups_enum_dests() (Issue #317), in _cupsEncodeOption() and http_tls_upgrade() (Issue #322)
+ * Fixed missing bracket in de/index.html (Issue #299)
+ * Fixed typos in configuration scripts (Issues #304, #316)
+ * Removed remaining legacy code for RIP_MAX_CACHE environment variable (Issue #323)
+ * Removed deprecated directives from cupsctl and cups-files.conf (Issue #300)
+ * Removed purge-jobs legacy code from CGI scripts and templates (Issue #325)
+ * Added configure option --with-idle-exit-timeout (Issue #294)
+ * Added --with-systemd-timeoutstartsec configure option (Issue #298)
+ * DigestOptions now are applied for MD5 Digest authentication defined by RFC 2069 as well (Issue #287)
+ * Fixed compilation on Solaris (Issue #293)
+ * Fixed and improved German translations (Issue #296, Issue #297)
+ * Added warning and debug messages when loading printers if the queue is raw or with driver (Issue #286)
+ * Compilation now uses -fstack-protector-strong if available (Issue #285)
+ * Added support for CUPS running in a Snapcraft snap.
+ * Added basic OAuth 2.0 client support (Issue #100)
+ * Added support for AirPrint and Mopria clients (Issue #105)
+ * Added configure support for specifying systemd dependencies in the CUPS service file (Issue #144)
+ * Added several features and improvements to ipptool (Issue #153)
+ * Added a JSON output mode for ipptool.
+ * The ipptool command now correctly reports an error when a test file cannot be found.
+ * CUPS library now uses thread safe getpwnam_r and getpwuid_r functions (Issue #274)
+ * Fixed Kerberos authentication for the web interface (Issue #19)
+ * The ZPL sample driver now supports more "standard" label sizes (Issue #70)
+ * Fixed reporting of printer instances when enumerating and when no options are set for the main instance (Issue #71)
+ * Reverted USB read limit enforcement change from CUPS 2.2.12 (Issue #72)
+ * The IPP backend did not return the correct status code when a job was canceled at the printer/server (Issue #74)
+ * The testlang unit test program now loops over all of the available locales by default (Issue #85)
+ * The cupsfilter command now shows error messages when options are used incorrectly (Issue #88)
+ * The PPD functions now treat boolean values as case-insensitive (Issue #106)
+ * Temporary queue names no longer end with an underscore (Issue #110)
+ * The USB backend now runs as root (Issue #121)
+ * Added pkg-config file for libcups (Issue #122)
+ * Fixed a PPD memory leak caused by emulator definitions (Issue #124)
+ * Fixed a DISPLAY bug in ipptool (Issue #139)
+ * The scheduler now includes the [Job N] prefix for job log messages, even when using syslog logging (Issue #154)
+ * Added support for locales using the GB18030 character set (Issue #159)
+ * httpReconnect2 did not reset the socket file descriptor when the TLS negotiation failed (Apple #5907)
+ * httpUpdate did not reset the socket file descriptor when the TLS negotiation failed (Apple #5915)
+ * The IPP backend now retries Validate-Job requests (Issue #132)
+ * Now show better error messages when a driver interface program fails to provide a PPD file (Issue #148)
+ * Added dark mode support to the CUPS web interface (Issue #152)
+ * Added a workaround for Solaris in httpAddrConnect2 (Issue #156)
+ * Fixed an interaction between --remote-admin and --remote-any for the cupsctl command (Issue #158)
+ * Now use a 60 second timeout for reading USB backchannel data (Issue #160)
+ * The USB backend now tries harder to find a serial number (Issue #170)
+ * Fixed @IF(name) handling in cupsd.conf (Apple #5918)
+ * Fixed documentation and added examples for CUPS' limited CGI support (Apple #5940)
+ * Fixed the lpc command prompt (Apple #5946)
+ * Now always pass "localhost" in the Host: header when talking over a domain socket or the loopback interface (Issue #185)
+ * Fixed a job history update issue in the scheduler (Issue #187)
+ * Fixed job-pages-per-set value for duplex print jobs.
+ * Fixed an edge case in ippReadIO to make sure that only complete attributes and values are retained on an error (Issue #195)
+ * Hardened ippReadIO to prevent invalid IPP messages from being propagated (Issue #195, Issue #196)
+ * The scheduler now supports the "everywhere" model directly (Issue #201)
+ * Fixed some IPP Everywhere option mapping problems (Issue #238)
+ * Fixed support for "job-hold-until" with the Restart-Job operation (Issue #250)
+ * Fixed the default color/grayscale presets for IPP Everywhere PPDs (Issue #262)
+ * Fixed support for the 'offline-report' state for all USB backends (Issue #264)
+ * Documentation fixes (Issue #92, Issue #163, Issue #177, Issue #184)
+ * Localization updates (Issue #123, Issue #129, Issue #134, Issue #146, Issue #164)
+ * USB quirk updates (Issue #192, Issue #270, Apple #5766, Apple #5838, Apple #5843, Apple #5867)
+ * Web interface updates (Issue #142, Issue #218)
+ * The ippeveprinter tool now automatically uses an available port.
+ * Fixed several Windows TLS and hashing issues.
+ * Deprecated cups-config (Issue #97)
+ * Deprecated Kerberos (AuthType Negotiate) authentication (Issue #98)
+ * Removed support for the (long deprecated and unused) FontPath, ListenBackLog, LPDConfigFile, KeepAliveTimeout, RIPCache, and SMBConfigFile directives in cupsd.conf and cups-files.conf.
+ * Stubbed out deprecated httpMD5 functions.
+ * Add test for undefined page ranges during printing.
+- Dropped patch upstream_pull_174 because it it is included in this release
+- Dropped patch cups-2.1.0-cups-systemd-socket.patch because it it is included in this release (https://github.com/OpenPrinting/cups/commit/e96e96b4bd0d4e6f634bbb66b95d6e475501541c)
+- Changed upstream source packages signing key (https://github.com/OpenPrinting/cups/discussions/327#discussioncomment-2060579)
+- Re-enabled testsuite
+ * Also removed make check because since upstream change the two target are identical (https://github.com/OpenPrinting/cups/commit/96ba46ebc818b610b0e40cbc9d62ef1dcd3ec9b6#diff-76ed074a9305c04054cdebb9e9aad2d818052b07091de1f20cad0bbac34ffb52R239)
+- Changed cups-2.1.0-cups-systemd-socket.patch to accomodate new coding style
+- Changed cups-config-libs.orig to accommodate recent code changes (SSL->TLS)
+- Changed cups-2.1.0-default-webcontent-path.patch to accommodate code changes
+
+-------------------------------------------------------------------
Tue Feb 1 09:18:27 UTC 2022 - jsmeix@suse.de
- Enhanced harden_cups.service.patch by adding
Index: cups.keyring
===================================================================
Binary files cups.keyring (revision 380) and cups.keyring (revision 2) differ
Index: cups.spec
===================================================================
--- cups.spec (revision 380)
+++ cups.spec (revision 2)
@@ -18,9 +18,7 @@
# Cf. https://rpm.org/user_doc/conditional_builds.html
# by default enable testsuite (i.e. in the 'check' section run make check and make test)
-#bcond_without testsuite
-# disable testsuite for now until https://github.com/OpenPrinting/cups/issues/155 is fixed
-%bcond_with testsuite
+%bcond_without testsuite
# _tmpfilesdir is not defined in systemd macros up to openSUSE 13.2
%{!?_tmpfilesdir: %global _tmpfilesdir /usr/lib/tmpfiles.d }
@@ -29,34 +27,32 @@
# "zypper vcmp 2.3.b99 2.3.0" shows "2.3.b99 is older than 2.3.0" and
# "zypper vcmp 2.2.99 2.3b6" show "2.2.99 is older than 2.3b6" so that
# version upgrades from 2.2.x via 2.3.b* to 2.3.0 work:
-Version: 2.3.3op2
+Version: 2.4.1
Release: 0
Summary: The Common UNIX Printing System
License: Apache-2.0
Group: Hardware/Printing
URL: https://openprinting.github.io/cups
# To get Source0 go to https://github.com/OpenPrinting/cups/releases or use e.g.
-# wget --no-check-certificate -O cups-2.3.3op2-source.tar.gz https://github.com/OpenPrinting/cups/releases/download/v2.3.3op2/cups-2.3.3op2-source.tar.gz
-Source0: https://github.com/OpenPrinting/cups/releases/download/v2.3.3op2/cups-2.3.3op2-source.tar.gz
+# wget --no-check-certificate -O cups-2.4.1-source.tar.gz https://github.com/OpenPrinting/cups/releases/download/v2.4.1/cups-2.4.1-source.tar.gz
+Source0: https://github.com/OpenPrinting/cups/releases/download/v2.4.1/cups-2.4.1-source.tar.gz
# To get Source1 go to https://github.com/OpenPrinting/cups/releases or use e.g.
-# wget --no-check-certificate -O cups-2.3.3op2-source.tar.gz.sig https://github.com/OpenPrinting/cups/releases/download/v2.3.3op2/cups-2.3.3op2-source.tar.gz.sig
-Source1: https://github.com/OpenPrinting/cups/releases/download/v2.3.3op2/cups-2.3.3op2-source.tar.gz.sig
-# To get Source2 go to https://www.msweet.org/pgp.html
-# PGP Fingerprint: 845464660B686AAB36540B6F999559A027815955
+# wget --no-check-certificate -O cups-2.4.1-source.tar.gz.sig https://github.com/OpenPrinting/cups/releases/download/v2.4.1/cups-2.4.1-source.tar.gz.sig
+Source1: https://github.com/OpenPrinting/cups/releases/download/v2.4.1/cups-2.4.1-source.tar.gz.sig
+# To get Source2 use gpg --keyserver keys.openpgp.org --recv-keys 7082A0A50A2E92640F3880E0E4522DCC9B246FF7
+# See https://github.com/OpenPrinting/cups/discussions/327#discussioncomment-2060579
+# PGP Fingerprint: 7082A0A50A2E92640F3880E0E4522DCC9B246FF7
Source2: cups.keyring
# To manually verify Source0 with Source1 and Source2 do e.g.
# gpg --import cups.keyring
-# gpg --list-keys | grep -1 'Michael R Sweet' | grep -v 'expired'
-# gpg --verify cups-2.3.3op2-source.tar.gz.sig cups-2.3.3op2-source.tar.gz
+# gpg --list-keys | grep -1 'Zdenek Dohnal'
+# gpg --verify cups-2.4.1-source.tar.gz.sig cups-2.4.1-source.tar.gz
Source102: Postscript.ppd.gz
Source105: Postscript-level1.ppd.gz
Source106: Postscript-level2.ppd.gz
Source108: cups-client.conf
Source109: baselibs.conf
# Patch0...Patch9 is for patches from upstream:
-# Patch1 upstream_pull_174.patch is https://github.com/OpenPrinting/cups/pull/174
-# Use 60s timeout for read_thread, revert read limits
-Patch1: upstream_pull_174.patch
# Source10...Source99 is for sources from SUSE which are intended for upstream:
# Patch10...Patch99 is for patches from SUSE which are intended for upstream:
# Patch10 cups-2.1.0-choose-uri-template.patch adds 'smb://...' URIs to templates/choose-uri.tmpl:
@@ -66,8 +62,6 @@
# because the files of the CUPS web content are no documentation, see CUPS STR #3578
# and http://bugzilla.novell.com/show_bug.cgi?id=546023#c6 and subsequent comments:
Patch11: cups-2.1.0-default-webcontent-path.patch
-# Patch12 cups-2.1.0-cups-systemd-socket.patch Use systemd socket activation properly:
-Patch12: cups-2.1.0-cups-systemd-socket.patch
# Patch100...Patch999 is for private patches from SUSE which are not intended for upstream:
# Patch100 cups-pam.diff adds conf/pam.suse regarding support for PAM for SUSE:
Patch100: cups-pam.diff
@@ -83,9 +77,9 @@
Patch103: cups-1.4-do_not_strip_recommended_from_PPDs.patch
# Patch104 cups-config-libs.patch fixes option --libs in cups-config script:
Patch104: cups-config-libs.patch
-# Patch106 Fixes web UI Kerberos authentication (bsc#1175960)
-Patch106: fix-negotiate-authentication-between-CGIs-and-scheduler.patch
Patch107: harden_cups.service.patch
+# Patch108 downgrades the autoconf requirement to the autoconf available in tumbleweed as of writing
+Patch108: downgrade-autoconf-requirement.patch
# Build Requirements:
BuildRequires: dbus-1-devel
BuildRequires: fdupes
@@ -280,9 +274,6 @@
%prep
%setup -q
# Patch0...Patch9 is for patches from upstream:
-# Patch1 upstream_pull_174.patch is https://github.com/OpenPrinting/cups/pull/174
-# Use 60s timeout for read_thread, revert read limits
-%patch1 -p1
# Patch10...Patch99 is for patches from SUSE which are intended for upstream:
# Patch10 cups-2.1.0-choose-uri-template.patch adds 'smb://...' URIs to templates/choose-uri.tmpl:
%patch10 -b choose-uri-template.orig
@@ -291,8 +282,6 @@
# because the files of the CUPS web content are no documentation, see CUPS STR #3578
# and http://bugzilla.novell.com/show_bug.cgi?id=546023#c6 and subsequent comments:
%patch11 -b default-webcontent-path.orig
-# Patch12 cups-2.1.0-cups-systemd-socket.patch Use systemd socket activation properly:
-#patch12 -b cups-systemd-socket.orig
# Patch100...Patch999 is for private patches from SUSE which are not intended for upstream:
# Patch100 cups-pam.diff adds conf/pam.suse regarding support for PAM for SUSE:
%patch100 -b cups-pam.orig
@@ -308,9 +297,8 @@
%patch103 -b do_not_strip_recommended_from_PPDs.orig
# Patch104 cups-config-libs.patch fixes option --libs in cups-config script:
%patch104 -b cups-config-libs.orig
-# Patch106 Fixes web UI Kerberos authentication (bsc#1175960)
-%patch106 -p1
%patch107 -p1
+%patch108 -p1
%build
# Remove ".SILENT" rule for verbose build output
@@ -439,8 +427,6 @@
# There appears to be some kind of race condition when running make check and make test
# cf. https://github.com/OpenPrinting/cups/issues/155
# We print all logs for debugging purposes if either testsuite fails
-echo "DEBUG: running make check"
-bash -c 'make %{?_smp_mflags} check; EXIT=$?; if [ $EXIT -ne 0 ]; then cat test/*_log*-$(whoami); fi; exit $EXIT'
echo "DEBUG: running make test"
bash -c 'make %{?_smp_mflags} test; EXIT=$?; if [ $EXIT -ne 0 ]; then cat test/*_log*-$(whoami); fi; exit $EXIT'
%else
@@ -681,6 +667,7 @@
%files devel
%defattr(-,root,root)
+/usr/lib/pkgconfig/cups.pc
%{_includedir}/cups/
%{_libdir}/libcups.so
%{_libdir}/libcupsimage.so
Index: cups-2.4.1-source.tar.gz
===================================================================
Binary file cups-2.4.1-source.tar.gz (revision 2) added
Index: cups-2.4.1-source.tar.gz.sig
===================================================================
Binary file cups-2.4.1-source.tar.gz.sig (revision 2) added
Index: downgrade-autoconf-requirement.patch
===================================================================
--- downgrade-autoconf-requirement.patch (added)
+++ downgrade-autoconf-requirement.patch (revision 2)
@@ -0,0 +1,15 @@
+diff --git a/configure.ac b/configure.ac
+index a8c6c1040..6ace74a8d 100644
+--- a/configure.ac
++++ b/configure.ac
+@@ -9,8 +9,8 @@ dnl Licensed under Apache License v2.0. See the file "LICENSE" for more
+ dnl information.
+ dnl
+
+-dnl We need at least autoconf 2.71...
+-AC_PREREQ([2.71])
++dnl We need at least autoconf 2.69...
++AC_PREREQ([2.69])
+
+ dnl Package name and version...
+ AC_INIT([CUPS],[2.4.1],[https://github.com/openprinting/cups/issues],[cups],[https://openprinting.github.io/cups])
Index: cups-2.1.0-cups-systemd-socket.patch
===================================================================
--- cups-2.1.0-cups-systemd-socket.patch (revision 380)
+++ cups-2.1.0-cups-systemd-socket.patch (deleted)
@@ -1,43 +0,0 @@
---- scheduler/main.c.orig 2015-06-08 20:32:35.000000000 +0200
-+++ scheduler/main.c 2015-09-01 11:19:36.000000000 +0200
-@@ -656,7 +656,15 @@ main(int argc, /* I - Number of comm
-
- #if defined(HAVE_LAUNCHD) || defined(HAVE_SYSTEMD)
- if (OnDemand)
-+ {
- cupsdAddEvent(CUPSD_EVENT_SERVER_STARTED, NULL, NULL, "Scheduler started on demand.");
-+# ifdef HAVE_SYSTEMD
-+ sd_notifyf(0, "READY=1\n"
-+ "STATUS=Scheduler is running...\n"
-+ "MAINPID=%lu",
-+ (unsigned long) getpid());
-+# endif /* HAVE_SYSTEMD */
-+ }
- else
- #endif /* HAVE_LAUNCHD || HAVE_SYSTEMD */
- if (fg)
---- scheduler/org.cups.cupsd.path.in.orig 2014-03-21 15:50:24.000000000 +0100
-+++ scheduler/org.cups.cupsd.path.in 2015-09-01 11:20:37.000000000 +0200
-@@ -3,6 +3,7 @@ Description=CUPS Scheduler
-
- [Path]
- PathExists=@CUPS_CACHEDIR@/org.cups.cupsd
-+PathExistsGlob=@CUPS_REQUESTS@/d*
-
- [Install]
- WantedBy=multi-user.target
---- scheduler/org.cups.cupsd.service.in.orig 2014-10-21 13:54:05.000000000 +0200
-+++ scheduler/org.cups.cupsd.service.in 2015-09-01 11:22:09.000000000 +0200
-@@ -1,10 +1,11 @@
- [Unit]
- Description=CUPS Scheduler
- Documentation=man:cupsd(8)
-+After=network.target
-
- [Service]
- ExecStart=@sbindir@/cupsd -l
--Type=simple
-+Type=notify
-
- [Install]
- Also=org.cups.cupsd.socket org.cups.cupsd.path
Index: cups-2.3.3op2-source.tar.gz
===================================================================
Binary file cups-2.3.3op2-source.tar.gz (revision 380) deleted
Index: cups-2.3.3op2-source.tar.gz.sig
===================================================================
Binary file cups-2.3.3op2-source.tar.gz.sig (revision 380) deleted
Index: fix-negotiate-authentication-between-CGIs-and-scheduler.patch
===================================================================
--- fix-negotiate-authentication-between-CGIs-and-scheduler.patch (revision 380)
+++ fix-negotiate-authentication-between-CGIs-and-scheduler.patch (deleted)
@@ -1,223 +0,0 @@
-From d4521ed0df7e625ccf2bc079bab6f48c46ef9bf9 Mon Sep 17 00:00:00 2001
-From: Samuel Cabrero <scabrero@suse.de>
-Date: Mon, 26 Oct 2020 17:35:22 +0100
-Subject: [PATCH 1/4] Avoid infinite loop in admin.cgi when negotiate is used
-
-SetAuthorizationString with NULL argument sets an empty string.
-
-Related: #5596
-
-Signed-off-by: Samuel Cabrero <scabrero@suse.de>
----
- cups/auth.c | 2 +-
- 1 file changed, 1 insertion(+), 1 deletion(-)
-
-diff --git a/cups/auth.c b/cups/auth.c
-index db45bbba6..f2409350a 100644
---- a/cups/auth.c
-+++ b/cups/auth.c
-@@ -295,7 +295,7 @@ cupsDoAuthentication(
- }
- }
-
-- if (http->authstring)
-+ if (http->authstring && http->authstring[0])
- {
- DEBUG_printf(("1cupsDoAuthentication: authstring=\"%s\".", http->authstring));
-
---
-2.30.2
-
-
-From 61ad7780bc7d0593e3225d088ac6dff31badf801 Mon Sep 17 00:00:00 2001
-From: Samuel Cabrero <scabrero@suse.de>
-Date: Tue, 27 Oct 2020 16:11:41 +0100
-Subject: [PATCH 2/4] Add cups_is_local_connection() to check if connection is
- to localhost
-
-Related: #5596
-
-Signed-off-by: Samuel Cabrero <scabrero@suse.de>
----
- cups/auth.c | 11 ++++++++++-
- 1 file changed, 10 insertions(+), 1 deletion(-)
-
-diff --git a/cups/auth.c b/cups/auth.c
-index f2409350a..d2956438d 100644
---- a/cups/auth.c
-+++ b/cups/auth.c
-@@ -90,6 +90,7 @@ static void cups_gss_printf(OM_uint32 major_status, OM_uint32 minor_status,
- # define cups_gss_printf(major, minor, message)
- # endif /* DEBUG */
- #endif /* HAVE_GSSAPI */
-+static int cups_is_local_connection(http_t *http);
- static int cups_local_auth(http_t *http);
-
-
-@@ -916,6 +917,14 @@ cups_gss_printf(OM_uint32 major_status,/* I - Major status code */
- # endif /* DEBUG */
- #endif /* HAVE_GSSAPI */
-
-+static int /* O - 0 if not a local connection */
-+ /* 1 if local connection */
-+cups_is_local_connection(http_t *http) /* I - HTTP connection to server */
-+{
-+ if (!httpAddrLocalhost(http->hostaddr) && _cups_strcasecmp(http->hostname, "localhost") != 0)
-+ return 0;
-+ return 1;
-+}
-
- /*
- * 'cups_local_auth()' - Get the local authorization certificate if
-@@ -958,7 +967,7 @@ cups_local_auth(http_t *http) /* I - HTTP connection to server */
- * See if we are accessing localhost...
- */
-
-- if (!httpAddrLocalhost(http->hostaddr) && _cups_strcasecmp(http->hostname, "localhost") != 0)
-+ if (!cups_is_local_connection(http))
- {
- DEBUG_puts("8cups_local_auth: Not a local connection!");
- return (1);
---
-2.30.2
-
-
-From f629d079750a86b1b605c285f99c0dea3933ca50 Mon Sep 17 00:00:00 2001
-From: Samuel Cabrero <scabrero@suse.de>
-Date: Tue, 27 Oct 2020 16:23:30 +0100
-Subject: [PATCH 3/4] Try local kerberos ccache credentials only for remote
- servers
-
-If connecting to localhost then proceed to ask the client for the
-authorization using cupsGetPassword2. The get password callback will
-return 401 to the client with WWW-Authenticate: Negotiate.
-
-Fixes: #5596
-
-Signed-off-by: Samuel Cabrero <scabrero@suse.de>
----
- cups/auth.c | 10 ++++++----
- 1 file changed, 6 insertions(+), 4 deletions(-)
-
-diff --git a/cups/auth.c b/cups/auth.c
-index d2956438d..9661657fc 100644
---- a/cups/auth.c
-+++ b/cups/auth.c
-@@ -175,10 +175,10 @@ cupsDoAuthentication(
- DEBUG_printf(("2cupsDoAuthentication: Trying scheme \"%s\"...", scheme));
-
- #ifdef HAVE_GSSAPI
-- if (!_cups_strcasecmp(scheme, "Negotiate"))
-+ if (!_cups_strcasecmp(scheme, "Negotiate") && !cups_is_local_connection(http))
- {
- /*
-- * Kerberos authentication...
-+ * Kerberos authentication to remote server...
- */
-
- int gss_status; /* Auth status */
-@@ -202,7 +202,9 @@ cupsDoAuthentication(
- }
- else
- #endif /* HAVE_GSSAPI */
-- if (_cups_strcasecmp(scheme, "Basic") && _cups_strcasecmp(scheme, "Digest"))
-+ if (_cups_strcasecmp(scheme, "Basic") &&
-+ _cups_strcasecmp(scheme, "Digest") &&
-+ _cups_strcasecmp(scheme, "Negotiate"))
- {
- /*
- * Other schemes not yet supported...
-@@ -216,7 +218,7 @@ cupsDoAuthentication(
- * See if we should retry the current username:password...
- */
-
-- if ((http->digest_tries > 1 || !http->userpass[0]) && (!_cups_strcasecmp(scheme, "Basic") || (!_cups_strcasecmp(scheme, "Digest"))))
-+ if (http->digest_tries > 1 || !http->userpass[0])
- {
- /*
- * Nope - get a new password from the user...
---
-2.30.2
-
-
-From 0563a28b18b21d5574a5e0e38b74246146074bbf Mon Sep 17 00:00:00 2001
-From: Samuel Cabrero <scabrero@suse.de>
-Date: Tue, 27 Oct 2020 16:18:03 +0100
-Subject: [PATCH 4/4] Allow Local authentication for Negotiate
-
-PeerCred is also possible if address family is AF_LOCAL. This will allow
-the CGI programs to generate the authorization from the local
-certificates based on PID also when Negotiate is used for local
-connections:
-
-Client CGI
-Browser <- Remote conn -> admin.cgi <--- Localhost conn ---> Scheduler
- | | |
- + --- HTTP/POST /admin/ --> | |
- | + --- CUPS-Get-Devices ------------> |
- | | |
- | | <-- 401 Unauthorized --------------+
- | | WWW-Authenticate: |
- | | Negotiate, (PeerCred,) Local |
- | | |
- | <-- 401 Unauthorized -----+ |
- | WWW-Authenticate: | |
- | Negotiate | |
- | | |
- | --- HTTP/POST /admin/ --> | |
- | Authorization: + --- IPP CUPS-GetDevices ---------> |
- | Negotiate | Authorization: Local <cert> |
- | | |
-
-Fixes: #5596
-
-Signed-off-by: Samuel Cabrero <scabrero@suse.de>
----
- cups/auth.c | 5 -----
- scheduler/client.c | 9 ++-------
- 2 files changed, 2 insertions(+), 12 deletions(-)
-
-diff --git a/cups/auth.c b/cups/auth.c
-index 9661657fc..b6fec6b98 100644
---- a/cups/auth.c
-+++ b/cups/auth.c
-@@ -1043,11 +1043,6 @@ cups_local_auth(http_t *http) /* I - HTTP connection to server */
- }
- # endif /* HAVE_AUTHORIZATION_H */
-
--# ifdef HAVE_GSSAPI
-- if (cups_auth_find(www_auth, "Negotiate"))
-- return (1);
--# endif /* HAVE_GSSAPI */
--
- # if defined(SO_PEERCRED) && defined(AF_LOCAL)
- /*
- * See if we can authenticate using the peer credentials provided over a
-diff --git a/scheduler/client.c b/scheduler/client.c
-index c2ee8f12a..56797d58d 100644
---- a/scheduler/client.c
-+++ b/scheduler/client.c
-@@ -2109,18 +2109,13 @@ cupsdSendHeader(
- }
- else if (auth_type == CUPSD_AUTH_NEGOTIATE)
- {
--#if defined(SO_PEERCRED) && defined(AF_LOCAL)
-- if (httpAddrFamily(httpGetAddress(con->http)) == AF_LOCAL)
-- strlcpy(auth_str, "PeerCred", sizeof(auth_str));
-- else
--#endif /* SO_PEERCRED && AF_LOCAL */
- strlcpy(auth_str, "Negotiate", sizeof(auth_str));
- }
-
-- if (con->best && auth_type != CUPSD_AUTH_NEGOTIATE && !con->is_browser && !_cups_strcasecmp(httpGetHostname(con->http, NULL, 0), "localhost"))
-+ if (con->best && !con->is_browser && !_cups_strcasecmp(httpGetHostname(con->http, NULL, 0), "localhost"))
- {
- /*
-- * Add a "trc" (try root certification) parameter for local non-Kerberos
-+ * Add a "trc" (try root certification) parameter for local
- * requests when the request requires system group membership - then the
- * client knows the root certificate can/should be used.
- *
---
-2.30.2
-
Index: upstream_pull_174.patch
===================================================================
--- upstream_pull_174.patch (revision 380)
+++ upstream_pull_174.patch (deleted)
@@ -1,53 +0,0 @@
-From c37d71b1a31d26a4790166e2508822b18934a5c0 Mon Sep 17 00:00:00 2001
-From: Zdenek Dohnal <zdohnal@redhat.com>
-Date: Tue, 13 Apr 2021 15:44:14 +0200
-Subject: [PATCH 1/2] backend/usb-libusb.c: Use 60s timeout for reading at
- backchannel
-
-Some older models malfunction if timeout is too short.
----
- CHANGES.md | 1 +
- backend/usb-libusb.c | 2 +-
- 2 files changed, 2 insertions(+), 1 deletion(-)
-
---- a/backend/usb-libusb.c
-+++ b/backend/usb-libusb.c
-@@ -1704,7 +1704,7 @@ static void *read_thread(void *reference)
- readstatus = libusb_bulk_transfer(g.printer->handle,
- g.printer->read_endp,
- readbuffer, rbytes,
-- &rbytes, 250);
-+ &rbytes, 60000);
- if (readstatus == LIBUSB_SUCCESS && rbytes > 0)
- {
- fprintf(stderr, "DEBUG: Read %d bytes of back-channel data...\n", (int)rbytes);
-
-From 4cb6f6806cdbe040d478b266a1d351b19341dd79 Mon Sep 17 00:00:00 2001
-From: Zdenek Dohnal <zdohnal@redhat.com>
-Date: Tue, 13 Apr 2021 15:47:37 +0200
-Subject: [PATCH 2/2] backend/usb-libusb.c: Revert enforcing read limits
-
-This commit reverts the change introduced by 2.2.12 [1] - its
-implementation caused a regression with Lexmark filters.
-
-[1]
-https://github.com/apple/cups/commit/35e927f83529cd9b4bc37bcd418c50e307fced35
----
- CHANGES.md | 1 +
- backend/usb-libusb.c | 3 ++-
- 2 files changed, 3 insertions(+), 1 deletion(-)
-
-diff --git a/backend/usb-libusb.c b/backend/usb-libusb.c
-index fbb0d9d89..89b5182f7 100644
---- a/backend/usb-libusb.c
-+++ b/backend/usb-libusb.c
-@@ -1721,7 +1721,8 @@ static void *read_thread(void *reference)
- * Make sure this loop executes no more than once every 250 miliseconds...
- */
-
-- if ((g.wait_eof || !g.read_thread_stop))
-+ if ((readstatus != LIBUSB_SUCCESS || rbytes == 0) &&
-+ (g.wait_eof || !g.read_thread_stop))
- usleep(250000);
- }
- while (g.wait_eof || !g.read_thread_stop);
OBS-URL: https://build.opensuse.org/request/show/958348
OBS-URL: https://build.opensuse.org/package/show/Printing/cups?expand=0&rev=381
2022-03-03 13:19:05 +01:00
|
|
|
|
* Stubbed out deprecated httpMD5 functions.
|
|
|
|
|
* Add test for undefined page ranges during printing.
|
2022-03-22 15:14:23 +01:00
|
|
|
|
- downgrade-autoconf-requirement.patch downgrades the
|
|
|
|
|
autoconf requirement to what is currently available in openSUSE
|
|
|
|
|
- fix-negotiate-authentication-between-CGIs-and-scheduler.patch
|
|
|
|
|
is obsolete because it is included in the upstream code, see
|
|
|
|
|
https://github.com/OpenPrinting/cups/commit/3ff789ee90b18205c735e42e599eb3ee3043e88a
|
|
|
|
|
https://github.com/OpenPrinting/cups/pull/19
|
|
|
|
|
https://github.com/apple/cups/pull/5847
|
|
|
|
|
https://github.com/apple/cups/issues/5596
|
|
|
|
|
- upstream_pull_174.patch
|
|
|
|
|
is obsolete because it is included in the upstream code, see
|
|
|
|
|
https://github.com/OpenPrinting/cups/commit/43edb9df51b977d92929b084186dcd67d4f5ca44
|
|
|
|
|
https://github.com/OpenPrinting/cups/pull/174
|
|
|
|
|
https://github.com/OpenPrinting/cups/issues/72
|
|
|
|
|
- patch cups-2.1.0-cups-systemd-socket.patch
|
|
|
|
|
is obsolete because it is included in the upstream code, see
|
2022-03-04 09:58:18 +01:00
|
|
|
|
https://github.com/OpenPrinting/cups/commit/e96e96b4bd0d4e6f634bbb66b95d6e475501541c
|
2022-03-04 13:48:44 +01:00
|
|
|
|
- Updated upstream source tarball signing key in cups.keyring, see
|
2022-03-04 09:58:18 +01:00
|
|
|
|
https://github.com/OpenPrinting/cups/discussions/327#discussioncomment-2060579
|
2022-03-04 13:48:44 +01:00
|
|
|
|
- Re-enabled the CUPS upstream testsuite via 'make test'
|
|
|
|
|
and removed 'make check' because since the upstream commit
|
|
|
|
|
https://github.com/OpenPrinting/cups/commit/96ba46ebc818b610b0e40cbc9d62ef1dcd3ec9b6
|
|
|
|
|
the two Makefile targets 'test' and 'check' are identical.
|
2022-03-04 09:58:18 +01:00
|
|
|
|
- Changed cups-2.1.0-cups-systemd-socket.patch
|
|
|
|
|
to accomodate new coding style
|
|
|
|
|
- Changed cups-config-libs.orig to accommodate
|
|
|
|
|
recent code changes (SSL->TLS)
|
|
|
|
|
- Changed cups-2.1.0-default-webcontent-path.patch
|
|
|
|
|
to accommodate code changes
|
Accepting request 958348 from home:ajoga:branches:openSUSE:Factory
- Version upgrade to 2.4.1
- Dropped patch upstream_pull_174 because it it is included in this release
- Dropped patch cups-2.1.0-cups-systemd-socket.patch because it it is included in this release (https://github.com/OpenPrinting/cups/commit/e96e96b4bd0d4e6f634bbb66b95d6e475501541c)
- Changed upstream source packages signing key (https://github.com/OpenPrinting/cups/discussions/327#discussioncomment-2060579)
- Re-enabled testsuite
* Also removed make check because since upstream change the two target are identical (https://github.com/OpenPrinting/cups/commit/96ba46ebc818b610b0e40cbc9d62ef1dcd3ec9b6#diff-76ed074a9305c04054cdebb9e9aad2d818052b07091de1f20cad0bbac34ffb52R239)
- Changed cups-2.1.0-cups-systemd-socket.patch to accomodate new coding style
- Changed cups-config-libs.orig to accommodate recent code changes (SSL->TLS)
- Changed cups-2.1.0-default-webcontent-path.patch to accommodate code changes
old: Printing/cups
new: home:ajoga:branches:openSUSE:Factory/cups rev None
Index: cups-2.1.0-default-webcontent-path.patch
===================================================================
--- cups-2.1.0-default-webcontent-path.patch (revision 380)
+++ cups-2.1.0-default-webcontent-path.patch (revision 2)
@@ -1,17 +1,21 @@
---- config-scripts/cups-directories.m4.orig 2014-03-21 17:42:53.000000000 +0100
-+++ config-scripts/cups-directories.m4 2015-09-01 11:08:43.000000000 +0200
-@@ -206,11 +206,11 @@ fi
- AC_SUBST(MENUDIR)
+--- config-scripts/cups-directories.m4
++++ config-scripts/cups-directories.m4.orig
+@@ -166,15 +166,15 @@ AS_IF([test "x$menudir" = x], [
+ AC_SUBST([MENUDIR])
# Documentation files
--AC_ARG_WITH(docdir, [ --with-docdir set path for documentation],docdir="$withval",docdir="")
-+AC_ARG_WITH(docdir, [ --with-docdir set path and DocumentRoot directive for web content, default=datadir/cups/webcontent],docdir="$withval",docdir="")
+-AC_ARG_WITH([docdir], AS_HELP_STRING([--with-docdir], [set path for documentation]), [
++AC_ARG_WITH([docdir], AS_HELP_STRING([--with-docdir], [set path and DocumentRoot directive for web content, default=datadir/cups/webcontent]), [
+ docdir="$withval"
+ ], [
+ docdir=""
+ ])
- if test x$docdir = x; then
-- CUPS_DOCROOT="$datadir/doc/cups"
-- docdir="$datadir/doc/cups"
-+ CUPS_DOCROOT="$datadir/cups/webcontent"
-+ docdir="$datadir/cups/webcontent"
- else
- CUPS_DOCROOT="$docdir"
- fi
+ AS_IF([test x$docdir = x], [
+- CUPS_DOCROOT="$datadir/doc/cups"
+- docdir="$datadir/doc/cups"
++ CUPS_DOCROOT="$datadir/cups/webcontent"
++ docdir="$datadir/cups/webcontent"
+ ], [
+ CUPS_DOCROOT="$docdir"
+ ])
Index: cups-config-libs.patch
===================================================================
--- cups-config-libs.patch (revision 380)
+++ cups-config-libs.patch (revision 2)
@@ -4,7 +4,7 @@
# flags for compiler and linker...
CFLAGS=""
LDFLAGS="@EXPORT_LDFLAGS@"
--LIBS="@LIBGSSAPI@ @DNSSDLIBS@ @EXPORT_SSLLIBS@ @LIBZ@ @LIBS@"
+-LIBS="@LIBGSSAPI@ @DNSSDLIBS@ @EXPORT_TLSLIBS@ @LIBZ@ @LIBS@"
+LIBS=""
# Check for local invocation...
Index: cups.changes
===================================================================
--- cups.changes (revision 380)
+++ cups.changes (revision 2)
@@ -1,4 +1,88 @@
-------------------------------------------------------------------
+Tue Mar 1 18:16:11 UTC 2022 - Aurélien Joga <aurelienjoga@gmail.com>
+
+- Version upgrade to 2.4.1:
+ * The default color mode now is now configurable and defaults to the printer's reported default mode (Issue #277)
+ * Configuration script now checks linking for -Wl,-pie flags (Issue #303)
+ * Fixed memory leaks - in testi18n (Issue #313), in cups_enum_dests() (Issue #317), in _cupsEncodeOption() and http_tls_upgrade() (Issue #322)
+ * Fixed missing bracket in de/index.html (Issue #299)
+ * Fixed typos in configuration scripts (Issues #304, #316)
+ * Removed remaining legacy code for RIP_MAX_CACHE environment variable (Issue #323)
+ * Removed deprecated directives from cupsctl and cups-files.conf (Issue #300)
+ * Removed purge-jobs legacy code from CGI scripts and templates (Issue #325)
+ * Added configure option --with-idle-exit-timeout (Issue #294)
+ * Added --with-systemd-timeoutstartsec configure option (Issue #298)
+ * DigestOptions now are applied for MD5 Digest authentication defined by RFC 2069 as well (Issue #287)
+ * Fixed compilation on Solaris (Issue #293)
+ * Fixed and improved German translations (Issue #296, Issue #297)
+ * Added warning and debug messages when loading printers if the queue is raw or with driver (Issue #286)
+ * Compilation now uses -fstack-protector-strong if available (Issue #285)
+ * Added support for CUPS running in a Snapcraft snap.
+ * Added basic OAuth 2.0 client support (Issue #100)
+ * Added support for AirPrint and Mopria clients (Issue #105)
+ * Added configure support for specifying systemd dependencies in the CUPS service file (Issue #144)
+ * Added several features and improvements to ipptool (Issue #153)
+ * Added a JSON output mode for ipptool.
+ * The ipptool command now correctly reports an error when a test file cannot be found.
+ * CUPS library now uses thread safe getpwnam_r and getpwuid_r functions (Issue #274)
+ * Fixed Kerberos authentication for the web interface (Issue #19)
+ * The ZPL sample driver now supports more "standard" label sizes (Issue #70)
+ * Fixed reporting of printer instances when enumerating and when no options are set for the main instance (Issue #71)
+ * Reverted USB read limit enforcement change from CUPS 2.2.12 (Issue #72)
+ * The IPP backend did not return the correct status code when a job was canceled at the printer/server (Issue #74)
+ * The testlang unit test program now loops over all of the available locales by default (Issue #85)
+ * The cupsfilter command now shows error messages when options are used incorrectly (Issue #88)
+ * The PPD functions now treat boolean values as case-insensitive (Issue #106)
+ * Temporary queue names no longer end with an underscore (Issue #110)
+ * The USB backend now runs as root (Issue #121)
+ * Added pkg-config file for libcups (Issue #122)
+ * Fixed a PPD memory leak caused by emulator definitions (Issue #124)
+ * Fixed a DISPLAY bug in ipptool (Issue #139)
+ * The scheduler now includes the [Job N] prefix for job log messages, even when using syslog logging (Issue #154)
+ * Added support for locales using the GB18030 character set (Issue #159)
+ * httpReconnect2 did not reset the socket file descriptor when the TLS negotiation failed (Apple #5907)
+ * httpUpdate did not reset the socket file descriptor when the TLS negotiation failed (Apple #5915)
+ * The IPP backend now retries Validate-Job requests (Issue #132)
+ * Now show better error messages when a driver interface program fails to provide a PPD file (Issue #148)
+ * Added dark mode support to the CUPS web interface (Issue #152)
+ * Added a workaround for Solaris in httpAddrConnect2 (Issue #156)
+ * Fixed an interaction between --remote-admin and --remote-any for the cupsctl command (Issue #158)
+ * Now use a 60 second timeout for reading USB backchannel data (Issue #160)
+ * The USB backend now tries harder to find a serial number (Issue #170)
+ * Fixed @IF(name) handling in cupsd.conf (Apple #5918)
+ * Fixed documentation and added examples for CUPS' limited CGI support (Apple #5940)
+ * Fixed the lpc command prompt (Apple #5946)
+ * Now always pass "localhost" in the Host: header when talking over a domain socket or the loopback interface (Issue #185)
+ * Fixed a job history update issue in the scheduler (Issue #187)
+ * Fixed job-pages-per-set value for duplex print jobs.
+ * Fixed an edge case in ippReadIO to make sure that only complete attributes and values are retained on an error (Issue #195)
+ * Hardened ippReadIO to prevent invalid IPP messages from being propagated (Issue #195, Issue #196)
+ * The scheduler now supports the "everywhere" model directly (Issue #201)
+ * Fixed some IPP Everywhere option mapping problems (Issue #238)
+ * Fixed support for "job-hold-until" with the Restart-Job operation (Issue #250)
+ * Fixed the default color/grayscale presets for IPP Everywhere PPDs (Issue #262)
+ * Fixed support for the 'offline-report' state for all USB backends (Issue #264)
+ * Documentation fixes (Issue #92, Issue #163, Issue #177, Issue #184)
+ * Localization updates (Issue #123, Issue #129, Issue #134, Issue #146, Issue #164)
+ * USB quirk updates (Issue #192, Issue #270, Apple #5766, Apple #5838, Apple #5843, Apple #5867)
+ * Web interface updates (Issue #142, Issue #218)
+ * The ippeveprinter tool now automatically uses an available port.
+ * Fixed several Windows TLS and hashing issues.
+ * Deprecated cups-config (Issue #97)
+ * Deprecated Kerberos (AuthType Negotiate) authentication (Issue #98)
+ * Removed support for the (long deprecated and unused) FontPath, ListenBackLog, LPDConfigFile, KeepAliveTimeout, RIPCache, and SMBConfigFile directives in cupsd.conf and cups-files.conf.
+ * Stubbed out deprecated httpMD5 functions.
+ * Add test for undefined page ranges during printing.
+- Dropped patch upstream_pull_174 because it it is included in this release
+- Dropped patch cups-2.1.0-cups-systemd-socket.patch because it it is included in this release (https://github.com/OpenPrinting/cups/commit/e96e96b4bd0d4e6f634bbb66b95d6e475501541c)
+- Changed upstream source packages signing key (https://github.com/OpenPrinting/cups/discussions/327#discussioncomment-2060579)
+- Re-enabled testsuite
+ * Also removed make check because since upstream change the two target are identical (https://github.com/OpenPrinting/cups/commit/96ba46ebc818b610b0e40cbc9d62ef1dcd3ec9b6#diff-76ed074a9305c04054cdebb9e9aad2d818052b07091de1f20cad0bbac34ffb52R239)
+- Changed cups-2.1.0-cups-systemd-socket.patch to accomodate new coding style
+- Changed cups-config-libs.orig to accommodate recent code changes (SSL->TLS)
+- Changed cups-2.1.0-default-webcontent-path.patch to accommodate code changes
+
+-------------------------------------------------------------------
Tue Feb 1 09:18:27 UTC 2022 - jsmeix@suse.de
- Enhanced harden_cups.service.patch by adding
Index: cups.keyring
===================================================================
Binary files cups.keyring (revision 380) and cups.keyring (revision 2) differ
Index: cups.spec
===================================================================
--- cups.spec (revision 380)
+++ cups.spec (revision 2)
@@ -18,9 +18,7 @@
# Cf. https://rpm.org/user_doc/conditional_builds.html
# by default enable testsuite (i.e. in the 'check' section run make check and make test)
-#bcond_without testsuite
-# disable testsuite for now until https://github.com/OpenPrinting/cups/issues/155 is fixed
-%bcond_with testsuite
+%bcond_without testsuite
# _tmpfilesdir is not defined in systemd macros up to openSUSE 13.2
%{!?_tmpfilesdir: %global _tmpfilesdir /usr/lib/tmpfiles.d }
@@ -29,34 +27,32 @@
# "zypper vcmp 2.3.b99 2.3.0" shows "2.3.b99 is older than 2.3.0" and
# "zypper vcmp 2.2.99 2.3b6" show "2.2.99 is older than 2.3b6" so that
# version upgrades from 2.2.x via 2.3.b* to 2.3.0 work:
-Version: 2.3.3op2
+Version: 2.4.1
Release: 0
Summary: The Common UNIX Printing System
License: Apache-2.0
Group: Hardware/Printing
URL: https://openprinting.github.io/cups
# To get Source0 go to https://github.com/OpenPrinting/cups/releases or use e.g.
-# wget --no-check-certificate -O cups-2.3.3op2-source.tar.gz https://github.com/OpenPrinting/cups/releases/download/v2.3.3op2/cups-2.3.3op2-source.tar.gz
-Source0: https://github.com/OpenPrinting/cups/releases/download/v2.3.3op2/cups-2.3.3op2-source.tar.gz
+# wget --no-check-certificate -O cups-2.4.1-source.tar.gz https://github.com/OpenPrinting/cups/releases/download/v2.4.1/cups-2.4.1-source.tar.gz
+Source0: https://github.com/OpenPrinting/cups/releases/download/v2.4.1/cups-2.4.1-source.tar.gz
# To get Source1 go to https://github.com/OpenPrinting/cups/releases or use e.g.
-# wget --no-check-certificate -O cups-2.3.3op2-source.tar.gz.sig https://github.com/OpenPrinting/cups/releases/download/v2.3.3op2/cups-2.3.3op2-source.tar.gz.sig
-Source1: https://github.com/OpenPrinting/cups/releases/download/v2.3.3op2/cups-2.3.3op2-source.tar.gz.sig
-# To get Source2 go to https://www.msweet.org/pgp.html
-# PGP Fingerprint: 845464660B686AAB36540B6F999559A027815955
+# wget --no-check-certificate -O cups-2.4.1-source.tar.gz.sig https://github.com/OpenPrinting/cups/releases/download/v2.4.1/cups-2.4.1-source.tar.gz.sig
+Source1: https://github.com/OpenPrinting/cups/releases/download/v2.4.1/cups-2.4.1-source.tar.gz.sig
+# To get Source2 use gpg --keyserver keys.openpgp.org --recv-keys 7082A0A50A2E92640F3880E0E4522DCC9B246FF7
+# See https://github.com/OpenPrinting/cups/discussions/327#discussioncomment-2060579
+# PGP Fingerprint: 7082A0A50A2E92640F3880E0E4522DCC9B246FF7
Source2: cups.keyring
# To manually verify Source0 with Source1 and Source2 do e.g.
# gpg --import cups.keyring
-# gpg --list-keys | grep -1 'Michael R Sweet' | grep -v 'expired'
-# gpg --verify cups-2.3.3op2-source.tar.gz.sig cups-2.3.3op2-source.tar.gz
+# gpg --list-keys | grep -1 'Zdenek Dohnal'
+# gpg --verify cups-2.4.1-source.tar.gz.sig cups-2.4.1-source.tar.gz
Source102: Postscript.ppd.gz
Source105: Postscript-level1.ppd.gz
Source106: Postscript-level2.ppd.gz
Source108: cups-client.conf
Source109: baselibs.conf
# Patch0...Patch9 is for patches from upstream:
-# Patch1 upstream_pull_174.patch is https://github.com/OpenPrinting/cups/pull/174
-# Use 60s timeout for read_thread, revert read limits
-Patch1: upstream_pull_174.patch
# Source10...Source99 is for sources from SUSE which are intended for upstream:
# Patch10...Patch99 is for patches from SUSE which are intended for upstream:
# Patch10 cups-2.1.0-choose-uri-template.patch adds 'smb://...' URIs to templates/choose-uri.tmpl:
@@ -66,8 +62,6 @@
# because the files of the CUPS web content are no documentation, see CUPS STR #3578
# and http://bugzilla.novell.com/show_bug.cgi?id=546023#c6 and subsequent comments:
Patch11: cups-2.1.0-default-webcontent-path.patch
-# Patch12 cups-2.1.0-cups-systemd-socket.patch Use systemd socket activation properly:
-Patch12: cups-2.1.0-cups-systemd-socket.patch
# Patch100...Patch999 is for private patches from SUSE which are not intended for upstream:
# Patch100 cups-pam.diff adds conf/pam.suse regarding support for PAM for SUSE:
Patch100: cups-pam.diff
@@ -83,9 +77,9 @@
Patch103: cups-1.4-do_not_strip_recommended_from_PPDs.patch
# Patch104 cups-config-libs.patch fixes option --libs in cups-config script:
Patch104: cups-config-libs.patch
-# Patch106 Fixes web UI Kerberos authentication (bsc#1175960)
-Patch106: fix-negotiate-authentication-between-CGIs-and-scheduler.patch
Patch107: harden_cups.service.patch
+# Patch108 downgrades the autoconf requirement to the autoconf available in tumbleweed as of writing
+Patch108: downgrade-autoconf-requirement.patch
# Build Requirements:
BuildRequires: dbus-1-devel
BuildRequires: fdupes
@@ -280,9 +274,6 @@
%prep
%setup -q
# Patch0...Patch9 is for patches from upstream:
-# Patch1 upstream_pull_174.patch is https://github.com/OpenPrinting/cups/pull/174
-# Use 60s timeout for read_thread, revert read limits
-%patch1 -p1
# Patch10...Patch99 is for patches from SUSE which are intended for upstream:
# Patch10 cups-2.1.0-choose-uri-template.patch adds 'smb://...' URIs to templates/choose-uri.tmpl:
%patch10 -b choose-uri-template.orig
@@ -291,8 +282,6 @@
# because the files of the CUPS web content are no documentation, see CUPS STR #3578
# and http://bugzilla.novell.com/show_bug.cgi?id=546023#c6 and subsequent comments:
%patch11 -b default-webcontent-path.orig
-# Patch12 cups-2.1.0-cups-systemd-socket.patch Use systemd socket activation properly:
-#patch12 -b cups-systemd-socket.orig
# Patch100...Patch999 is for private patches from SUSE which are not intended for upstream:
# Patch100 cups-pam.diff adds conf/pam.suse regarding support for PAM for SUSE:
%patch100 -b cups-pam.orig
@@ -308,9 +297,8 @@
%patch103 -b do_not_strip_recommended_from_PPDs.orig
# Patch104 cups-config-libs.patch fixes option --libs in cups-config script:
%patch104 -b cups-config-libs.orig
-# Patch106 Fixes web UI Kerberos authentication (bsc#1175960)
-%patch106 -p1
%patch107 -p1
+%patch108 -p1
%build
# Remove ".SILENT" rule for verbose build output
@@ -439,8 +427,6 @@
# There appears to be some kind of race condition when running make check and make test
# cf. https://github.com/OpenPrinting/cups/issues/155
# We print all logs for debugging purposes if either testsuite fails
-echo "DEBUG: running make check"
-bash -c 'make %{?_smp_mflags} check; EXIT=$?; if [ $EXIT -ne 0 ]; then cat test/*_log*-$(whoami); fi; exit $EXIT'
echo "DEBUG: running make test"
bash -c 'make %{?_smp_mflags} test; EXIT=$?; if [ $EXIT -ne 0 ]; then cat test/*_log*-$(whoami); fi; exit $EXIT'
%else
@@ -681,6 +667,7 @@
%files devel
%defattr(-,root,root)
+/usr/lib/pkgconfig/cups.pc
%{_includedir}/cups/
%{_libdir}/libcups.so
%{_libdir}/libcupsimage.so
Index: cups-2.4.1-source.tar.gz
===================================================================
Binary file cups-2.4.1-source.tar.gz (revision 2) added
Index: cups-2.4.1-source.tar.gz.sig
===================================================================
Binary file cups-2.4.1-source.tar.gz.sig (revision 2) added
Index: downgrade-autoconf-requirement.patch
===================================================================
--- downgrade-autoconf-requirement.patch (added)
+++ downgrade-autoconf-requirement.patch (revision 2)
@@ -0,0 +1,15 @@
+diff --git a/configure.ac b/configure.ac
+index a8c6c1040..6ace74a8d 100644
+--- a/configure.ac
++++ b/configure.ac
+@@ -9,8 +9,8 @@ dnl Licensed under Apache License v2.0. See the file "LICENSE" for more
+ dnl information.
+ dnl
+
+-dnl We need at least autoconf 2.71...
+-AC_PREREQ([2.71])
++dnl We need at least autoconf 2.69...
++AC_PREREQ([2.69])
+
+ dnl Package name and version...
+ AC_INIT([CUPS],[2.4.1],[https://github.com/openprinting/cups/issues],[cups],[https://openprinting.github.io/cups])
Index: cups-2.1.0-cups-systemd-socket.patch
===================================================================
--- cups-2.1.0-cups-systemd-socket.patch (revision 380)
+++ cups-2.1.0-cups-systemd-socket.patch (deleted)
@@ -1,43 +0,0 @@
---- scheduler/main.c.orig 2015-06-08 20:32:35.000000000 +0200
-+++ scheduler/main.c 2015-09-01 11:19:36.000000000 +0200
-@@ -656,7 +656,15 @@ main(int argc, /* I - Number of comm
-
- #if defined(HAVE_LAUNCHD) || defined(HAVE_SYSTEMD)
- if (OnDemand)
-+ {
- cupsdAddEvent(CUPSD_EVENT_SERVER_STARTED, NULL, NULL, "Scheduler started on demand.");
-+# ifdef HAVE_SYSTEMD
-+ sd_notifyf(0, "READY=1\n"
-+ "STATUS=Scheduler is running...\n"
-+ "MAINPID=%lu",
-+ (unsigned long) getpid());
-+# endif /* HAVE_SYSTEMD */
-+ }
- else
- #endif /* HAVE_LAUNCHD || HAVE_SYSTEMD */
- if (fg)
---- scheduler/org.cups.cupsd.path.in.orig 2014-03-21 15:50:24.000000000 +0100
-+++ scheduler/org.cups.cupsd.path.in 2015-09-01 11:20:37.000000000 +0200
-@@ -3,6 +3,7 @@ Description=CUPS Scheduler
-
- [Path]
- PathExists=@CUPS_CACHEDIR@/org.cups.cupsd
-+PathExistsGlob=@CUPS_REQUESTS@/d*
-
- [Install]
- WantedBy=multi-user.target
---- scheduler/org.cups.cupsd.service.in.orig 2014-10-21 13:54:05.000000000 +0200
-+++ scheduler/org.cups.cupsd.service.in 2015-09-01 11:22:09.000000000 +0200
-@@ -1,10 +1,11 @@
- [Unit]
- Description=CUPS Scheduler
- Documentation=man:cupsd(8)
-+After=network.target
-
- [Service]
- ExecStart=@sbindir@/cupsd -l
--Type=simple
-+Type=notify
-
- [Install]
- Also=org.cups.cupsd.socket org.cups.cupsd.path
Index: cups-2.3.3op2-source.tar.gz
===================================================================
Binary file cups-2.3.3op2-source.tar.gz (revision 380) deleted
Index: cups-2.3.3op2-source.tar.gz.sig
===================================================================
Binary file cups-2.3.3op2-source.tar.gz.sig (revision 380) deleted
Index: fix-negotiate-authentication-between-CGIs-and-scheduler.patch
===================================================================
--- fix-negotiate-authentication-between-CGIs-and-scheduler.patch (revision 380)
+++ fix-negotiate-authentication-between-CGIs-and-scheduler.patch (deleted)
@@ -1,223 +0,0 @@
-From d4521ed0df7e625ccf2bc079bab6f48c46ef9bf9 Mon Sep 17 00:00:00 2001
-From: Samuel Cabrero <scabrero@suse.de>
-Date: Mon, 26 Oct 2020 17:35:22 +0100
-Subject: [PATCH 1/4] Avoid infinite loop in admin.cgi when negotiate is used
-
-SetAuthorizationString with NULL argument sets an empty string.
-
-Related: #5596
-
-Signed-off-by: Samuel Cabrero <scabrero@suse.de>
----
- cups/auth.c | 2 +-
- 1 file changed, 1 insertion(+), 1 deletion(-)
-
-diff --git a/cups/auth.c b/cups/auth.c
-index db45bbba6..f2409350a 100644
---- a/cups/auth.c
-+++ b/cups/auth.c
-@@ -295,7 +295,7 @@ cupsDoAuthentication(
- }
- }
-
-- if (http->authstring)
-+ if (http->authstring && http->authstring[0])
- {
- DEBUG_printf(("1cupsDoAuthentication: authstring=\"%s\".", http->authstring));
-
---
-2.30.2
-
-
-From 61ad7780bc7d0593e3225d088ac6dff31badf801 Mon Sep 17 00:00:00 2001
-From: Samuel Cabrero <scabrero@suse.de>
-Date: Tue, 27 Oct 2020 16:11:41 +0100
-Subject: [PATCH 2/4] Add cups_is_local_connection() to check if connection is
- to localhost
-
-Related: #5596
-
-Signed-off-by: Samuel Cabrero <scabrero@suse.de>
----
- cups/auth.c | 11 ++++++++++-
- 1 file changed, 10 insertions(+), 1 deletion(-)
-
-diff --git a/cups/auth.c b/cups/auth.c
-index f2409350a..d2956438d 100644
---- a/cups/auth.c
-+++ b/cups/auth.c
-@@ -90,6 +90,7 @@ static void cups_gss_printf(OM_uint32 major_status, OM_uint32 minor_status,
- # define cups_gss_printf(major, minor, message)
- # endif /* DEBUG */
- #endif /* HAVE_GSSAPI */
-+static int cups_is_local_connection(http_t *http);
- static int cups_local_auth(http_t *http);
-
-
-@@ -916,6 +917,14 @@ cups_gss_printf(OM_uint32 major_status,/* I - Major status code */
- # endif /* DEBUG */
- #endif /* HAVE_GSSAPI */
-
-+static int /* O - 0 if not a local connection */
-+ /* 1 if local connection */
-+cups_is_local_connection(http_t *http) /* I - HTTP connection to server */
-+{
-+ if (!httpAddrLocalhost(http->hostaddr) && _cups_strcasecmp(http->hostname, "localhost") != 0)
-+ return 0;
-+ return 1;
-+}
-
- /*
- * 'cups_local_auth()' - Get the local authorization certificate if
-@@ -958,7 +967,7 @@ cups_local_auth(http_t *http) /* I - HTTP connection to server */
- * See if we are accessing localhost...
- */
-
-- if (!httpAddrLocalhost(http->hostaddr) && _cups_strcasecmp(http->hostname, "localhost") != 0)
-+ if (!cups_is_local_connection(http))
- {
- DEBUG_puts("8cups_local_auth: Not a local connection!");
- return (1);
---
-2.30.2
-
-
-From f629d079750a86b1b605c285f99c0dea3933ca50 Mon Sep 17 00:00:00 2001
-From: Samuel Cabrero <scabrero@suse.de>
-Date: Tue, 27 Oct 2020 16:23:30 +0100
-Subject: [PATCH 3/4] Try local kerberos ccache credentials only for remote
- servers
-
-If connecting to localhost then proceed to ask the client for the
-authorization using cupsGetPassword2. The get password callback will
-return 401 to the client with WWW-Authenticate: Negotiate.
-
-Fixes: #5596
-
-Signed-off-by: Samuel Cabrero <scabrero@suse.de>
----
- cups/auth.c | 10 ++++++----
- 1 file changed, 6 insertions(+), 4 deletions(-)
-
-diff --git a/cups/auth.c b/cups/auth.c
-index d2956438d..9661657fc 100644
---- a/cups/auth.c
-+++ b/cups/auth.c
-@@ -175,10 +175,10 @@ cupsDoAuthentication(
- DEBUG_printf(("2cupsDoAuthentication: Trying scheme \"%s\"...", scheme));
-
- #ifdef HAVE_GSSAPI
-- if (!_cups_strcasecmp(scheme, "Negotiate"))
-+ if (!_cups_strcasecmp(scheme, "Negotiate") && !cups_is_local_connection(http))
- {
- /*
-- * Kerberos authentication...
-+ * Kerberos authentication to remote server...
- */
-
- int gss_status; /* Auth status */
-@@ -202,7 +202,9 @@ cupsDoAuthentication(
- }
- else
- #endif /* HAVE_GSSAPI */
-- if (_cups_strcasecmp(scheme, "Basic") && _cups_strcasecmp(scheme, "Digest"))
-+ if (_cups_strcasecmp(scheme, "Basic") &&
-+ _cups_strcasecmp(scheme, "Digest") &&
-+ _cups_strcasecmp(scheme, "Negotiate"))
- {
- /*
- * Other schemes not yet supported...
-@@ -216,7 +218,7 @@ cupsDoAuthentication(
- * See if we should retry the current username:password...
- */
-
-- if ((http->digest_tries > 1 || !http->userpass[0]) && (!_cups_strcasecmp(scheme, "Basic") || (!_cups_strcasecmp(scheme, "Digest"))))
-+ if (http->digest_tries > 1 || !http->userpass[0])
- {
- /*
- * Nope - get a new password from the user...
---
-2.30.2
-
-
-From 0563a28b18b21d5574a5e0e38b74246146074bbf Mon Sep 17 00:00:00 2001
-From: Samuel Cabrero <scabrero@suse.de>
-Date: Tue, 27 Oct 2020 16:18:03 +0100
-Subject: [PATCH 4/4] Allow Local authentication for Negotiate
-
-PeerCred is also possible if address family is AF_LOCAL. This will allow
-the CGI programs to generate the authorization from the local
-certificates based on PID also when Negotiate is used for local
-connections:
-
-Client CGI
-Browser <- Remote conn -> admin.cgi <--- Localhost conn ---> Scheduler
- | | |
- + --- HTTP/POST /admin/ --> | |
- | + --- CUPS-Get-Devices ------------> |
- | | |
- | | <-- 401 Unauthorized --------------+
- | | WWW-Authenticate: |
- | | Negotiate, (PeerCred,) Local |
- | | |
- | <-- 401 Unauthorized -----+ |
- | WWW-Authenticate: | |
- | Negotiate | |
- | | |
- | --- HTTP/POST /admin/ --> | |
- | Authorization: + --- IPP CUPS-GetDevices ---------> |
- | Negotiate | Authorization: Local <cert> |
- | | |
-
-Fixes: #5596
-
-Signed-off-by: Samuel Cabrero <scabrero@suse.de>
----
- cups/auth.c | 5 -----
- scheduler/client.c | 9 ++-------
- 2 files changed, 2 insertions(+), 12 deletions(-)
-
-diff --git a/cups/auth.c b/cups/auth.c
-index 9661657fc..b6fec6b98 100644
---- a/cups/auth.c
-+++ b/cups/auth.c
-@@ -1043,11 +1043,6 @@ cups_local_auth(http_t *http) /* I - HTTP connection to server */
- }
- # endif /* HAVE_AUTHORIZATION_H */
-
--# ifdef HAVE_GSSAPI
-- if (cups_auth_find(www_auth, "Negotiate"))
-- return (1);
--# endif /* HAVE_GSSAPI */
--
- # if defined(SO_PEERCRED) && defined(AF_LOCAL)
- /*
- * See if we can authenticate using the peer credentials provided over a
-diff --git a/scheduler/client.c b/scheduler/client.c
-index c2ee8f12a..56797d58d 100644
---- a/scheduler/client.c
-+++ b/scheduler/client.c
-@@ -2109,18 +2109,13 @@ cupsdSendHeader(
- }
- else if (auth_type == CUPSD_AUTH_NEGOTIATE)
- {
--#if defined(SO_PEERCRED) && defined(AF_LOCAL)
-- if (httpAddrFamily(httpGetAddress(con->http)) == AF_LOCAL)
-- strlcpy(auth_str, "PeerCred", sizeof(auth_str));
-- else
--#endif /* SO_PEERCRED && AF_LOCAL */
- strlcpy(auth_str, "Negotiate", sizeof(auth_str));
- }
-
-- if (con->best && auth_type != CUPSD_AUTH_NEGOTIATE && !con->is_browser && !_cups_strcasecmp(httpGetHostname(con->http, NULL, 0), "localhost"))
-+ if (con->best && !con->is_browser && !_cups_strcasecmp(httpGetHostname(con->http, NULL, 0), "localhost"))
- {
- /*
-- * Add a "trc" (try root certification) parameter for local non-Kerberos
-+ * Add a "trc" (try root certification) parameter for local
- * requests when the request requires system group membership - then the
- * client knows the root certificate can/should be used.
- *
---
-2.30.2
-
Index: upstream_pull_174.patch
===================================================================
--- upstream_pull_174.patch (revision 380)
+++ upstream_pull_174.patch (deleted)
@@ -1,53 +0,0 @@
-From c37d71b1a31d26a4790166e2508822b18934a5c0 Mon Sep 17 00:00:00 2001
-From: Zdenek Dohnal <zdohnal@redhat.com>
-Date: Tue, 13 Apr 2021 15:44:14 +0200
-Subject: [PATCH 1/2] backend/usb-libusb.c: Use 60s timeout for reading at
- backchannel
-
-Some older models malfunction if timeout is too short.
----
- CHANGES.md | 1 +
- backend/usb-libusb.c | 2 +-
- 2 files changed, 2 insertions(+), 1 deletion(-)
-
---- a/backend/usb-libusb.c
-+++ b/backend/usb-libusb.c
-@@ -1704,7 +1704,7 @@ static void *read_thread(void *reference)
- readstatus = libusb_bulk_transfer(g.printer->handle,
- g.printer->read_endp,
- readbuffer, rbytes,
-- &rbytes, 250);
-+ &rbytes, 60000);
- if (readstatus == LIBUSB_SUCCESS && rbytes > 0)
- {
- fprintf(stderr, "DEBUG: Read %d bytes of back-channel data...\n", (int)rbytes);
-
-From 4cb6f6806cdbe040d478b266a1d351b19341dd79 Mon Sep 17 00:00:00 2001
-From: Zdenek Dohnal <zdohnal@redhat.com>
-Date: Tue, 13 Apr 2021 15:47:37 +0200
-Subject: [PATCH 2/2] backend/usb-libusb.c: Revert enforcing read limits
-
-This commit reverts the change introduced by 2.2.12 [1] - its
-implementation caused a regression with Lexmark filters.
-
-[1]
-https://github.com/apple/cups/commit/35e927f83529cd9b4bc37bcd418c50e307fced35
----
- CHANGES.md | 1 +
- backend/usb-libusb.c | 3 ++-
- 2 files changed, 3 insertions(+), 1 deletion(-)
-
-diff --git a/backend/usb-libusb.c b/backend/usb-libusb.c
-index fbb0d9d89..89b5182f7 100644
---- a/backend/usb-libusb.c
-+++ b/backend/usb-libusb.c
-@@ -1721,7 +1721,8 @@ static void *read_thread(void *reference)
- * Make sure this loop executes no more than once every 250 miliseconds...
- */
-
-- if ((g.wait_eof || !g.read_thread_stop))
-+ if ((readstatus != LIBUSB_SUCCESS || rbytes == 0) &&
-+ (g.wait_eof || !g.read_thread_stop))
- usleep(250000);
- }
- while (g.wait_eof || !g.read_thread_stop);
OBS-URL: https://build.opensuse.org/request/show/958348
OBS-URL: https://build.opensuse.org/package/show/Printing/cups?expand=0&rev=381
2022-03-03 13:19:05 +01:00
|
|
|
|
|
2022-02-01 11:06:35 +01:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Feb 1 09:18:27 UTC 2022 - jsmeix@suse.de
|
|
|
|
|
|
|
|
|
|
- Enhanced harden_cups.service.patch by adding
|
|
|
|
|
ReadWritePaths=/etc/cups
|
|
|
|
|
because cupsd needs write access in /etc/cups
|
|
|
|
|
(boo#1195288)
|
|
|
|
|
|
2021-06-07 14:13:39 +02:00
|
|
|
|
-------------------------------------------------------------------
|
2021-11-24 11:41:59 +01:00
|
|
|
|
Fri Oct 15 07:31:10 UTC 2021 - Johannes Segitz <jsegitz@suse.com>
|
|
|
|
|
|
2022-03-04 13:48:44 +01:00
|
|
|
|
- Added hardening to systemd service(s) (bsc#1181400), see
|
|
|
|
|
https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
|
|
|
|
|
Added patch: harden_cups.service.patch
|
2021-11-24 11:41:59 +01:00
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
2021-06-07 14:13:39 +02:00
|
|
|
|
Mon Jun 7 13:23:25 CEST 2021 - jsmeix@suse.de
|
|
|
|
|
|
|
|
|
|
- Provide /usr/share/cups/ppdc/ in the "cups" main package
|
|
|
|
|
to avoid that "lpinfo -m" results in /var/log/cups/error_log
|
|
|
|
|
things like "ppdc: Unable to find include file font.defs"
|
|
|
|
|
or "ppdc: Unable to find include file hp.h" and then
|
|
|
|
|
"Bad driver information file /usr/share/cups/drv/sample.drv"
|
|
|
|
|
(bsc#1186843)
|
|
|
|
|
|
2021-05-03 10:34:56 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon May 3 09:57:33 CEST 2021 - jsmeix@suse.de
|
|
|
|
|
|
|
|
|
|
- When cupsd creates directories with specific owner group
|
|
|
|
|
and permissions (usually owner is 'root' and group matches
|
|
|
|
|
"configure --with-cups-group=lp") specify same owner group and
|
|
|
|
|
permissions in the RPM spec file to ensure those directories
|
|
|
|
|
are installed by RPM with the right settings because if those
|
|
|
|
|
directories were installed by RPM with different settings then
|
|
|
|
|
cupsd would use them as is and not adjust its specific owner
|
|
|
|
|
group and permissions which could lead to privilege escalation
|
|
|
|
|
from 'lp' user to 'root' via symlink attacks e.g. if owner is
|
|
|
|
|
falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)
|
|
|
|
|
|
2021-04-20 11:14:33 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Apr 20 10:57:45 CEST 2021 - jsmeix@suse.de
|
|
|
|
|
|
|
|
|
|
- upstream_pull_174.patch is
|
|
|
|
|
https://github.com/OpenPrinting/cups/pull/174
|
|
|
|
|
"Use 60s timeout for read_thread, revert read limits"
|
|
|
|
|
to fix printing with older USB printers
|
|
|
|
|
- New upstream URL https://openprinting.github.io/cups
|
|
|
|
|
|
2021-04-06 12:09:56 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Apr 6 11:34:50 CEST 2021 - jsmeix@suse.de
|
|
|
|
|
|
|
|
|
|
- Disable testsuite for now via "bcond_with testsuite"
|
|
|
|
|
until https://github.com/OpenPrinting/cups/issues/155 is fixed
|
|
|
|
|
|
2021-03-31 11:01:50 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Mar 25 20:47:22 CET 2021 - Florian <sp1ritCS@protonmail.com>
|
|
|
|
|
|
|
|
|
|
- Add "testsuite" conditional that disables anything within %check
|
|
|
|
|
|
2021-03-19 13:58:06 +01:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Mar 19 12:02:38 UTC 2021 - Samuel Cabrero <scabrero@suse.de>
|
|
|
|
|
|
|
|
|
|
- fix-negotiate-authentication-between-CGIs-and-scheduler.patch
|
|
|
|
|
fixes web UI Kerberos authentication (bsc#1175960)
|
|
|
|
|
|
2021-03-31 11:01:50 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Mar 19 11:25:44 UTC 2021 - Florian <sp1ritCS@protonmail.com>
|
|
|
|
|
|
|
|
|
|
- Upstream changed to https://github.com/OpenPrinting/cups
|
2021-04-06 12:09:56 +02:00
|
|
|
|
- Added %check section to specfile that executes
|
|
|
|
|
the old 'make check' and the new (see 2.3.3op1) 'make test'
|
2021-03-31 11:01:50 +02:00
|
|
|
|
- Version upgrade to 2.3.3op2:
|
2021-04-06 12:09:56 +02:00
|
|
|
|
* Security: Fixed a buffer (read) overflow
|
|
|
|
|
in the ippReadIO function (CVE-2020-10001)
|
|
|
|
|
* Clarified the documentation for the "Listen" directive
|
|
|
|
|
* Fixed duplicate ColorModel entries for AirPrint printers
|
|
|
|
|
* Fixed directory/permission defaults for Debian
|
|
|
|
|
kfreebsd-based systems
|
|
|
|
|
* Fixed crash bug in ppdOpen
|
|
|
|
|
* Fixed regression in snprintf emulation function
|
|
|
|
|
* The scheduler's systemd service file now waits
|
|
|
|
|
for the nslcd service to start
|
|
|
|
|
* The libusb-based USB backend now uses a simpler read timer
|
|
|
|
|
implementation to avoid a regression in a previous change
|
|
|
|
|
* The PPD caching code now only tracks the APPrinterIconPath
|
|
|
|
|
value on macOS
|
|
|
|
|
* Fixed segfault in help.cgi when searching in man pages
|
|
|
|
|
* Root certificates were incorrectly stored in "~/.cups/ssl".
|
|
|
|
|
* Version upgrade to 2.3.3op1:
|
|
|
|
|
* The automated test suite can now be activated using make test
|
|
|
|
|
for consistency with other projects and CI environments - the
|
|
|
|
|
old make check continues to work as well, and the previous test
|
|
|
|
|
server behavior can be accessed by running make testserver.
|
|
|
|
|
* ippeveprinter now supports multiple icons and strings files.
|
|
|
|
|
* ippeveprinter now uses the system's FQDN with Avahi.
|
|
|
|
|
* ippeveprinter now supports Get-Printer-Attributes on "/".
|
|
|
|
|
* ippeveprinter now uses a deterministic "printer-uuid" value.
|
|
|
|
|
* ippeveprinter now uses system sounds on macOS
|
|
|
|
|
for Identify-Printer.
|
|
|
|
|
* Updated ippfind to look for files in "~/Desktop" on Windows.
|
|
|
|
|
* Updated ippfind to honor SKIP-XXX directives with PAUSE.
|
|
|
|
|
* Updated IPP Everywhere support to work around printers that only
|
|
|
|
|
advertise color raster support but really also support grayscale
|
|
|
|
|
* ipptool now supports DNS-SD URIs like
|
|
|
|
|
ipps://My%20Printer._ipps._tcp.local
|
|
|
|
|
* The scheduler now allows root backends to have world read
|
|
|
|
|
permissions but not world execute permissions
|
|
|
|
|
* Failures to bind IPv6 listener sockets no longer cause errors
|
|
|
|
|
if IPv6 is disabled on the host
|
|
|
|
|
* The SNMP backend now supports the HP and Ricoh vendor MIBs
|
|
|
|
|
* The scheduler no longer includes a timestamp in files it writes
|
|
|
|
|
* The systemd service names are now "cups.service"
|
|
|
|
|
and "cups-lpd.service"
|
|
|
|
|
* The scheduler no longer adds the local hostname to
|
|
|
|
|
the ServerAlias list
|
|
|
|
|
* Added LogFileGroup directive in "cups-files.conf" to control
|
|
|
|
|
the group owner of log files
|
|
|
|
|
* Added --with-max-log-size configure option
|
|
|
|
|
* Added --enable-sync-on-close configure option
|
|
|
|
|
* Added --with-error-policy configure option
|
|
|
|
|
* IPP Everywhere PPDs could have an "unknown" default InputSlot
|
|
|
|
|
* The httpAddrListen function now uses a listen backlog of 128.
|
|
|
|
|
* Added USB quirks
|
|
|
|
|
* Fixed IPP Everywhere v1.1 conformance issues in ippeveprinter.
|
|
|
|
|
* Fixed DNS-SD name collision support in ippeveprinter.
|
|
|
|
|
* Fixed compiler and code analyzer warnings.
|
|
|
|
|
* Fixed TLS support on Windows.
|
|
|
|
|
* Fixed ippfind sub-type searches with Avahi.
|
|
|
|
|
* Fixed the default hostname used by ippeveprinter on macOS.
|
|
|
|
|
* Fixed resolution of local IPP-USB printers with Avahi.
|
|
|
|
|
* Fixed coverity issues
|
|
|
|
|
* Fixed httpAddrConnect issues
|
|
|
|
|
* Fixed web interface device URI issue
|
|
|
|
|
* Fixed lp/lpr "printer/class not found" error reporting
|
|
|
|
|
* Fixed xinetd support for LPD clients
|
|
|
|
|
* Fixed libtool build issue
|
|
|
|
|
* Fixed a memory leak in the scheduler
|
|
|
|
|
* Fixed a potential integer overflow in the PPD hashing code
|
|
|
|
|
* Fixed output-bin and print-quality handling issues
|
|
|
|
|
* Fixed PPD options getting mapped to odd IPP values
|
|
|
|
|
like "tray---4"
|
|
|
|
|
* Fixed remote access to the cupsd.conf and log files
|
|
|
|
|
* Fixed the automated test suite when running in certain
|
|
|
|
|
build/CI environments
|
|
|
|
|
* Fixed a logging regression caused by a previous change
|
|
|
|
|
for Apple issue #5604
|
|
|
|
|
* Fixed fax phone number handling with GNOME
|
|
|
|
|
* Fixed potential rounding error in rastertopwg filter
|
|
|
|
|
* Fixed the "uri-security-supported" value from the scheduler
|
|
|
|
|
* Fixed IPP backend crash bug with "printer-alert" values
|
|
|
|
|
* Removed old Solaris inetconv(1m) reference in cups-lpd man page
|
|
|
|
|
* Fixed default options that incorrectly use the "custom" prefix
|
|
|
|
|
* Fixed a memory leak when resolving DNS-SD URIs
|
|
|
|
|
* Fixed systemd status reporting by adopting the notify interface
|
|
|
|
|
* Fixed crash in rastertopwg
|
|
|
|
|
* Fixed cupsManualCopies values in IPP Everywhere PPDs
|
|
|
|
|
- Removed let-cupsd-start-after-network.patch
|
|
|
|
|
as it is no longer required
|
2021-03-31 11:01:50 +02:00
|
|
|
|
- Removed CVE-2020-10001.patch as a fix as been merged upstream
|
2021-04-06 12:09:56 +02:00
|
|
|
|
- Removed section of specfile responsible for
|
|
|
|
|
renaming "org.cups.cups*" systemd files to cups*, due to
|
|
|
|
|
upstream renaming these files
|
2021-03-31 11:01:50 +02:00
|
|
|
|
|
2021-03-19 09:01:02 +01:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Mar 18 18:18:18 UTC 2021 - olaf@aepfle.de
|
|
|
|
|
|
|
|
|
|
- Remove code comments from expanded scriptlets to reduce size
|
2021-04-06 12:09:56 +02:00
|
|
|
|
cf. https://build.opensuse.org/request/show/879976
|
2021-03-19 09:01:02 +01:00
|
|
|
|
|
2021-02-02 14:43:11 +01:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Feb 2 14:22:38 CET 2021 - jsmeix@suse.de
|
|
|
|
|
|
|
|
|
|
- CVE-2020-10001.patch fixes CVE-2020-10001 (bsc#1180520)
|
|
|
|
|
access to uninitialized buffer in ipp.c
|
|
|
|
|
|
2020-10-22 10:44:04 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Oct 14 09:11:00 UTC 2020 - Michael Gorse <mgorse@suse.com>
|
|
|
|
|
|
|
|
|
|
- Version upgrade to 2.3.3:
|
2021-04-06 12:09:56 +02:00
|
|
|
|
* CVE-2020-3898: The 'ppdOpen' function did not handle invalid UI
|
|
|
|
|
constraint. 'ppdcSource::get_resolution' function did not
|
2020-10-22 10:44:04 +02:00
|
|
|
|
handle invalid resolution strings.
|
2021-04-06 12:09:56 +02:00
|
|
|
|
* CVE-2019-8842: The 'ippReadIO' function may under-read an
|
2020-10-22 10:44:04 +02:00
|
|
|
|
extension field.
|
2021-04-06 12:09:56 +02:00
|
|
|
|
* Fixed WARNING_OPTIONS support for GCC 9.x
|
2020-10-22 10:44:04 +02:00
|
|
|
|
Changes in CUPS 2.3.2:
|
|
|
|
|
Localization updates
|
|
|
|
|
Changes in CUPS 2.3.1:
|
2021-04-06 12:09:56 +02:00
|
|
|
|
* CVE-2019-2228: The 'ippSetValuetag' function did not validate
|
2020-10-22 10:44:04 +02:00
|
|
|
|
the default language value.
|
2021-04-06 12:09:56 +02:00
|
|
|
|
* Fixed a crash bug in the web interface.
|
|
|
|
|
* The PPD cache code now looks up page sizes using their
|
2020-10-22 10:44:04 +02:00
|
|
|
|
dimensions.
|
2021-04-06 12:09:56 +02:00
|
|
|
|
* PPD files containing "custom" option keywords did not work.
|
|
|
|
|
* Added a workaround for the scheduler's systemd support.
|
|
|
|
|
* Added a DigestOptions directive for the 'client.conf' file to
|
2020-10-22 10:44:04 +02:00
|
|
|
|
control whether MD5-based Digest authentication is allowed.
|
2021-04-06 12:09:56 +02:00
|
|
|
|
* Fixed a bug in the handling of printer resource files.
|
|
|
|
|
* The libusb-based USB backend now reports an error when the
|
2020-10-22 10:44:04 +02:00
|
|
|
|
distribution permissions are wrong.
|
2021-04-06 12:09:56 +02:00
|
|
|
|
* Added paint can labels to Dymo driver.
|
|
|
|
|
* The 'ippeveprinter' program now supports authentication.
|
|
|
|
|
* The 'ippeveprinter' program now advertises DNS-SD services on
|
2020-10-22 10:44:04 +02:00
|
|
|
|
the correct interfaces, and provides a way to turn them off.
|
2021-04-06 12:09:56 +02:00
|
|
|
|
* The '--with-dbusdir' option was ignored by the configure
|
2020-10-22 10:44:04 +02:00
|
|
|
|
script.
|
2021-04-06 12:09:56 +02:00
|
|
|
|
* Sandboxed applications were not able to get the default
|
2020-10-22 10:44:04 +02:00
|
|
|
|
printer.
|
2021-04-06 12:09:56 +02:00
|
|
|
|
* Log file access controls were not preserved by 'cupsctl'.
|
|
|
|
|
* Default printers set with 'lpoptions' did not work in all
|
2020-10-22 10:44:04 +02:00
|
|
|
|
cases.
|
2021-04-06 12:09:56 +02:00
|
|
|
|
* Fixed an error in the jobs web interface template.
|
|
|
|
|
* Fixed an off-by-one error in 'ippEnumString'.
|
|
|
|
|
* Fixed some new compiler warnings.
|
|
|
|
|
* Fixed a few issues with the Apple Raster support.
|
|
|
|
|
* The IPP backend did not detect all cases where a job should be
|
2020-10-22 10:44:04 +02:00
|
|
|
|
retried using a raster format.
|
2021-04-06 12:09:56 +02:00
|
|
|
|
* Fixed spelling of "fold-accordion".
|
|
|
|
|
* Fixed the default common name for TLS certificates used by
|
|
|
|
|
'ippeveprinter'.
|
|
|
|
|
* Fixed the option names used for IPP Everywhere finishing
|
2020-10-22 10:44:04 +02:00
|
|
|
|
options.
|
2021-04-06 12:09:56 +02:00
|
|
|
|
* Added support for the second roll of the DYMO Twin/DUO label
|
2020-10-22 10:44:04 +02:00
|
|
|
|
printers.
|
|
|
|
|
Changes in CUPS v2.3.0:
|
2021-04-06 12:09:56 +02:00
|
|
|
|
* CVE-2019-8696 and CVE-2019-8675: Fixed SNMP buffer overflows.
|
|
|
|
|
* Added a GPL2/LGPL2 exception to the new CUPS license terms.
|
|
|
|
|
* Fixed a bug in the scheduler job cleanup code.
|
|
|
|
|
* Fixed builds when there is no TLS library.
|
|
|
|
|
* "make" failed with GZIP options.
|
|
|
|
|
* Fixed potential excess logging from the scheduler when removing
|
2020-10-22 10:44:04 +02:00
|
|
|
|
job files.
|
2021-04-06 12:09:56 +02:00
|
|
|
|
* Fixed a NULL pointer dereference bug in 'httpGetSubField2'.
|
|
|
|
|
* Added FIPS-140 workarounds for GNU TLS.
|
|
|
|
|
* The scheduler no longer provides a default value for the
|
2020-10-22 10:44:04 +02:00
|
|
|
|
description.
|
2021-04-06 12:09:56 +02:00
|
|
|
|
* The scheduler now logs jobs held for authentication using the
|
2020-10-22 10:44:04 +02:00
|
|
|
|
error level so it is clear what happened.
|
2021-04-06 12:09:56 +02:00
|
|
|
|
* The 'lpadmin' command did not always update the PPD file for
|
|
|
|
|
changes to the 'cupsIPPSupplies' and 'cupsSNMPSupplies' keywords.
|
|
|
|
|
* The scheduler now uses both the group's membership list as well
|
2020-10-22 10:44:04 +02:00
|
|
|
|
as the various OS-specific membership functions to determine
|
|
|
|
|
whether a user belongs to a named group.
|
2021-04-06 12:09:56 +02:00
|
|
|
|
* Added USB quirks rule for HP LaserJet 1015.
|
|
|
|
|
* Fixed some PPD parser issues.
|
|
|
|
|
* The IPP parser no longer allows invalid member attributes in
|
2020-10-22 10:44:04 +02:00
|
|
|
|
collections.
|
2021-04-06 12:09:56 +02:00
|
|
|
|
* The configure script now treats the "wheel" group as a
|
2020-10-22 10:44:04 +02:00
|
|
|
|
potential system group.
|
2021-04-06 12:09:56 +02:00
|
|
|
|
* Fixed IPP buffer overflow.
|
|
|
|
|
* Fixed memory disclosure issue in the scheduler.
|
|
|
|
|
* Fixed DoS issues in the scheduler.
|
|
|
|
|
* Fixed an issue with unsupported "sides" values in the IPP
|
2020-10-22 10:44:04 +02:00
|
|
|
|
backend.
|
2021-04-06 12:09:56 +02:00
|
|
|
|
* The scheduler would restart continuously when idle and printers
|
2020-10-22 10:44:04 +02:00
|
|
|
|
were not shared.
|
2021-04-06 12:09:56 +02:00
|
|
|
|
* Fixed an issue with 'EXPECT !name WITH-VALUE ...' tests.
|
|
|
|
|
* Fixed a command ordering issue in the Zebra ZPL driver.
|
|
|
|
|
* Fixed a memory leak in 'ppdOpen'.
|
2020-10-22 10:44:04 +02:00
|
|
|
|
Changes in CUPS v2.3rc1:
|
2021-04-06 12:09:56 +02:00
|
|
|
|
* The 'cups-config' script no longer adds extra libraries when linking against
|
2020-10-22 10:44:04 +02:00
|
|
|
|
shared libraries.
|
2021-04-06 12:09:56 +02:00
|
|
|
|
* The supplied example print documents have been optimized for
|
2020-10-22 10:44:04 +02:00
|
|
|
|
size.
|
2021-04-06 12:09:56 +02:00
|
|
|
|
* The 'cupsctl' command now prevents setting "cups-files.conf"
|
2020-10-22 10:44:04 +02:00
|
|
|
|
directives.
|
2021-04-06 12:09:56 +02:00
|
|
|
|
* The "forbidden" message in the web interface is now explained.
|
|
|
|
|
* The footer in the web interface covered some content on small
|
2020-10-22 10:44:04 +02:00
|
|
|
|
displays.
|
2021-04-06 12:09:56 +02:00
|
|
|
|
* The libusb-based USB backend now enforces read limits,
|
2020-10-22 10:44:04 +02:00
|
|
|
|
improving print speed in many cases.
|
2021-04-06 12:09:56 +02:00
|
|
|
|
* The 'ippeveprinter' command now looks for print commands in
|
2020-10-22 10:44:04 +02:00
|
|
|
|
the "command" subdirectory.
|
2021-04-06 12:09:56 +02:00
|
|
|
|
* The 'ipptool' command now supports '$date-current' and
|
|
|
|
|
'$date-start' variables to insert the current and starting date
|
2020-10-22 10:44:04 +02:00
|
|
|
|
and time values, as well as ISO-8601 relative time values such
|
|
|
|
|
as "PT30S" for 30 seconds in the future.
|
|
|
|
|
Changes in CUPS v2.3b8
|
2021-04-06 12:09:56 +02:00
|
|
|
|
* Media size matching now uses a tolerance of 0.5mm.
|
|
|
|
|
* The lpadmin command would hang with a bad PPD file.
|
|
|
|
|
* Fixed a potential crash bug in cups-driverd.
|
|
|
|
|
* Fixed a performance regression with large PPDs.
|
|
|
|
|
* Fixed a memory reallocation bug in HTTP header value expansion.
|
|
|
|
|
* Timed out job submission now yields an error.
|
|
|
|
|
* Restored minimal support for the 'Emulators' keyword in PPD
|
2020-10-22 10:44:04 +02:00
|
|
|
|
files to allow old Samsung printer drivers to continue to work.
|
2021-04-06 12:09:56 +02:00
|
|
|
|
* The scheduler did not encode octetString values like
|
2020-10-22 10:44:04 +02:00
|
|
|
|
"job-password" correctly for the print filters.
|
2021-04-06 12:09:56 +02:00
|
|
|
|
* The 'cupsCheckDestSupported' function did not check octetString
|
2020-10-22 10:44:04 +02:00
|
|
|
|
values correctly.
|
2021-04-06 12:09:56 +02:00
|
|
|
|
* Added support for 'UserAgentTokens' directive in "client.conf".
|
|
|
|
|
* Updated the systemd service file for cupsd.
|
|
|
|
|
* The 'ippValidateAttribute' function did not catch all instances
|
2020-10-22 10:44:04 +02:00
|
|
|
|
of invalid UTF-8 strings.
|
2021-04-06 12:09:56 +02:00
|
|
|
|
* Fixed an issue with the self-signed certificates generated by
|
2020-10-22 10:44:04 +02:00
|
|
|
|
GNU TLS.
|
2021-04-06 12:09:56 +02:00
|
|
|
|
* Fixed a potential memory leak when reading at the end of a
|
2020-10-22 10:44:04 +02:00
|
|
|
|
file.
|
2021-04-06 12:09:56 +02:00
|
|
|
|
* Fixed potential unaligned accesses in the string pool.
|
|
|
|
|
* Fixed a potential memory leak when loading a PPD file.
|
|
|
|
|
* Added a USB quirks rule for the Lexmark E120n.
|
|
|
|
|
* Updated the USB quirks rule for Zebra label printers.
|
|
|
|
|
* The lpadmin command, web interface, and scheduler all queried
|
2020-10-22 10:44:04 +02:00
|
|
|
|
an IPP Everywhere printer differently, resulting in different
|
|
|
|
|
PPDs for the same printer.
|
2021-04-06 12:09:56 +02:00
|
|
|
|
* The web interface no longer provides access to the log files.
|
|
|
|
|
* Non-Kerberized printing to Windows via IPP was broken.
|
|
|
|
|
* The scheduler no longer stops a printer if an error occurs when
|
2020-10-22 10:44:04 +02:00
|
|
|
|
a job is canceled or aborted.
|
2021-04-06 12:09:56 +02:00
|
|
|
|
* Added a USB quirks rule for the DYMO 450 Turbo.
|
|
|
|
|
* Added a USB quirks rule for Xerox printers.
|
|
|
|
|
* The scheduler's self-signed certificate did not include all of
|
2020-10-22 10:44:04 +02:00
|
|
|
|
the alternate names for the server when using GNU TLS.
|
2021-04-06 12:09:56 +02:00
|
|
|
|
* Fixed some PPD caching and IPP Everywhere PPD
|
2020-10-22 10:44:04 +02:00
|
|
|
|
accounting/password bugs.
|
2021-04-06 12:09:56 +02:00
|
|
|
|
* Fixed 'PreserveJobHistory' bug with time values.
|
|
|
|
|
* The scheduler no longer advertises the HTTP methods it
|
2020-10-22 10:44:04 +02:00
|
|
|
|
supports.
|
2021-04-06 12:09:56 +02:00
|
|
|
|
* The scheduler did not always idle exit as quickly as it could.
|
|
|
|
|
* Added a new 'ippeveprinter' command based on the old ippserver
|
2020-10-22 10:44:04 +02:00
|
|
|
|
sample code.
|
|
|
|
|
Changes in CUPS v2.3b7
|
2021-04-06 12:09:56 +02:00
|
|
|
|
* Running ppdmerge with the same input and output filenames did
|
2020-10-22 10:44:04 +02:00
|
|
|
|
not work as advertised.
|
2021-04-06 12:09:56 +02:00
|
|
|
|
* Rebase let-cupsd-start-after-network.patch and
|
2020-10-22 10:44:04 +02:00
|
|
|
|
cups-config-libs.patch.
|
2021-04-06 12:09:56 +02:00
|
|
|
|
* Drop issue5509-fix-utf-8-validation-issue.patch and
|
2020-10-22 10:44:04 +02:00
|
|
|
|
issue5453.patch: fixed upstream.
|
|
|
|
|
|
2020-06-25 17:01:23 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Jun 25 12:24:13 UTC 2020 - Ludwig Nussel <lnussel@suse.de>
|
|
|
|
|
|
2021-04-06 12:09:56 +02:00
|
|
|
|
- make cups-devel pull in cups-rpm-helper to fix printer driver
|
|
|
|
|
provides (boo#1172407)
|
2020-06-25 17:01:23 +02:00
|
|
|
|
|
2019-02-21 13:56:32 +01:00
|
|
|
|
-------------------------------------------------------------------
|
2020-06-08 15:11:58 +02:00
|
|
|
|
Fri Jun 5 10:25:47 UTC 2020 - Callum Farmer <callumjfarmer13@gmail.com>
|
|
|
|
|
|
|
|
|
|
- Fixes for %_libexecdir changing to /usr/libexec
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
2019-02-21 13:56:32 +01:00
|
|
|
|
Thu Feb 21 12:44:01 CET 2019 - vliaskovitis@suse.com
|
|
|
|
|
|
|
|
|
|
- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
|
|
|
|
|
Fixes https://github.com/apple/cups/issues/5509
|
|
|
|
|
- Remove libcupscgi1, libcupsmime1, libcupsppdc1 from
|
|
|
|
|
baselibs.conf
|
|
|
|
|
|
2018-12-10 15:55:11 +01:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Dec 10 14:09:12 CET 2018 - jsmeix@suse.de
|
|
|
|
|
|
|
|
|
|
- Version upgrade to 2.3b6:
|
|
|
|
|
This is the sixth beta of the CUPS 2.3 series which adopts the
|
|
|
|
|
new CUPS license, adds support for IPP presets and finishing
|
|
|
|
|
templates, and fixes a number of bugs and "polish" issues.
|
|
|
|
|
For details see https://github.com/apple/cups/releases
|
|
|
|
|
or the CHANGES.md file.
|
|
|
|
|
Backward incompatible changes:
|
|
|
|
|
* The cupsaddsmb program has been removed (Issue #5449)
|
|
|
|
|
* The cupstestdsc program has been removed (Issue #5450)
|
|
|
|
|
* The cupscgi, cupsmime, and cupsppdc support libraries
|
|
|
|
|
are no longer installed as shared libraries.
|
|
|
|
|
Changes include:
|
|
|
|
|
* CVE-2018-4700: Linux session cookies used a predictable
|
|
|
|
|
random number seed.
|
|
|
|
|
* The lpoptions command now works with IPP Everywhere printers
|
|
|
|
|
that have not yet been added as local queues (Issue #5045)
|
|
|
|
|
* The lpadmin command would create a non-working printer
|
|
|
|
|
in some error cases (Issue #5305)
|
|
|
|
|
* The scheduler would crash if an empty AccessLog directive
|
|
|
|
|
was specified (Issue #5309)
|
|
|
|
|
* The scheduler did not idle-exit on some
|
|
|
|
|
Linux distributions (Issue #5319)
|
|
|
|
|
* Fixed a regression in the changes to ippValidateAttribute
|
|
|
|
|
(Issue #5322, Issue #5330)
|
|
|
|
|
* Fixed a crash bug in the Epson dot matrix driver (Issue #5323)
|
|
|
|
|
* Automatic debug logging of job errors did not work
|
|
|
|
|
with systemd (Issue #5337)
|
|
|
|
|
* The web interface did not list the
|
|
|
|
|
IPP Everywhere "driver" (Issue #5338)
|
|
|
|
|
* The scheduler did not report all of the supported job options
|
|
|
|
|
and values (Issue #5340)
|
|
|
|
|
* The IPP Everywhere "driver" now properly supports
|
|
|
|
|
face-up printers (Issue #5345)
|
|
|
|
|
* Fixed some typos in the label printer drivers (Issue #5350)
|
|
|
|
|
* Setting the Community name to the empty string in snmp.conf
|
|
|
|
|
now disables SNMP supply level monitoring by all the
|
|
|
|
|
standard network backends (Issue #5354)
|
|
|
|
|
* Multi-file jobs could get stuck if the backend failed
|
|
|
|
|
(Issue #5359, Issue #5413)
|
|
|
|
|
* The IPP Everywhere "driver" no longer does local filtering
|
|
|
|
|
when printing to a shared CUPS printer (Issue #5361)
|
|
|
|
|
* The lpadmin command now correctly reports IPP errors
|
|
|
|
|
when configuring an IPP Everywhere printer (Issue #5370)
|
|
|
|
|
* Fixed some memory leaks discovered by Coverity (Issue #5375)
|
|
|
|
|
* The PPD compiler incorrectly terminated JCL options
|
|
|
|
|
(Issue #5379)
|
|
|
|
|
* The cupstestppd utility did not generate errors for
|
|
|
|
|
missing/mismatched CloseUI/JCLCloseUI keywords (Issue #5381)
|
|
|
|
|
* The scheduler now reports the actual location
|
|
|
|
|
of the log file (Issue #5398)
|
|
|
|
|
* The generated PPD files for IPP Everywhere printers
|
|
|
|
|
did not contain the cupsManualCopies keyword (Issue #5433)
|
|
|
|
|
* Kerberos credentials might be truncated (Issue #5435)
|
|
|
|
|
* The handling of MaxJobTime 0 did not match the documentation
|
|
|
|
|
(Issue #5438)
|
|
|
|
|
* Fixed a bug adding a queue with the -E option (Issue #5440)
|
|
|
|
|
* The scheduler did not validate that required initial request
|
|
|
|
|
attributes were in the operation group (rdar://41098178)
|
|
|
|
|
* Fixed an issue with HTTP Digest authentication
|
|
|
|
|
(rdar://41709086)
|
|
|
|
|
* The scheduler could crash when job history was purged
|
|
|
|
|
(rdar://42198057)
|
|
|
|
|
* Fixed a crash bug when mapping PPD duplex options
|
|
|
|
|
to IPP attributes (rdar://46183976)
|
|
|
|
|
* Fixed a memory leak for some IPP (extension) syntaxes.
|
|
|
|
|
* The snmp backend is now deprecated.
|
|
|
|
|
- issue5453.patch fixes https://github.com/apple/cups/issues/5453
|
|
|
|
|
- Version upgrade to 2.3b5:
|
|
|
|
|
This is the fifth beta of the CUPS 2.3 series which adopts the
|
|
|
|
|
new CUPS license, adds support for IPP presets and finishing
|
|
|
|
|
templates, and fixes a number of bugs and "polish" issues.
|
|
|
|
|
For details see https://github.com/apple/cups/releases
|
|
|
|
|
or the CHANGES.md file.
|
|
|
|
|
Changes include:
|
|
|
|
|
* The ipptool program no longer checks for duplicate attributes
|
|
|
|
|
when running in list or CSV mode (Issue #5278)
|
|
|
|
|
* The cupsCreateJob, cupsPrintFile2, and cupsPrintFiles2 APIs
|
|
|
|
|
did not use the supplied HTTP connection (Issue #5288)
|
|
|
|
|
* Fixed another crash in the scheduler when adding an IPP
|
|
|
|
|
Everywhere printer (Issue #5290)
|
|
|
|
|
* Added a workaround for certain web browsers that
|
|
|
|
|
do not support multiple authentication schemes
|
|
|
|
|
in a single response header (Issue #5289)
|
|
|
|
|
* Fixed policy limits containing the All operation (Issue #5296)
|
|
|
|
|
* The scheduler was always restarted after idle-exit
|
|
|
|
|
with systemd (Issue #5297)
|
|
|
|
|
* The mailto notifier did not wait for the
|
|
|
|
|
welcome message (Issue #5312)
|
|
|
|
|
* Fixed a parsing bug in the pstops filter (Issue #5321)
|
|
|
|
|
* The scheduler allowed environment variables to be specified
|
|
|
|
|
in the cupsd.conf file (rdar://37836779, rdar://37836995,
|
|
|
|
|
rdar://37837252, rdar://37837581)
|
|
|
|
|
* Fax queues did not support pause (p) or
|
|
|
|
|
wait-for-dialtone (w) characters (rdar://39212256)
|
|
|
|
|
* The scheduler did not validate notify-recipient-uri values
|
|
|
|
|
properly (rdar://40068936)
|
|
|
|
|
* The IPP parser allowed invalid group tags (rdar://40442124)
|
|
|
|
|
* Fixed a parsing bug in the new authentication code.
|
|
|
|
|
- issue5296_fix_policy_limits_using_All.patch is obsolete
|
|
|
|
|
because it is fixed upstream (see "Issue #5296" above)
|
|
|
|
|
|
2018-10-18 07:50:09 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Oct 18 05:42:23 UTC 2018 - Dr. Werner Fink <werner@suse.de>
|
|
|
|
|
|
|
|
|
|
- Add patch let-cupsd-start-after-network.patch
|
2018-12-10 15:55:11 +01:00
|
|
|
|
Let cuspd start after possible network connection (boo#1111351)
|
2018-10-18 07:50:09 +02:00
|
|
|
|
This let cupsd also stop before a used network connection goes
|
|
|
|
|
down, hence the cusp does not lock due waiting on remote printers.
|
|
|
|
|
|
2018-09-19 10:39:04 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Sep 14 05:30:55 UTC 2018 - antoine.belvire@opensuse.org
|
|
|
|
|
|
|
|
|
|
- Fix warning message upon update (boo#1050845): Remove template
|
|
|
|
|
service cups-lpd@ from service_* macro in scriptlets.
|
|
|
|
|
|
2018-04-18 14:39:26 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Apr 18 13:44:46 CEST 2018 - jsmeix@suse.de
|
|
|
|
|
|
|
|
|
|
- issue5296_fix_policy_limits_using_All.patch fixes
|
|
|
|
|
https://github.com/apple/cups/issues/5296
|
|
|
|
|
by only the actually relevant part of
|
|
|
|
|
https://github.com/apple/cups/commit/0873f681e43c04972b3d6bc90bdbdedb29e6e913
|
|
|
|
|
(follow-up of boo#936309 and bsc#577936 starting at comment 13)
|
|
|
|
|
|
2018-03-28 14:57:32 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Mar 28 13:58:32 CEST 2018 - jsmeix@suse.de
|
|
|
|
|
|
|
|
|
|
- Version upgrade to 2.3b4:
|
|
|
|
|
This is the fourth beta of the CUPS 2.3 series.
|
|
|
|
|
For details see https://github.com/apple/cups/releases
|
|
|
|
|
or the CHANGES.md file.
|
|
|
|
|
Changes include:
|
|
|
|
|
* Additional security fixes for:
|
|
|
|
|
bsc#1061066 DBUS library aborts caller process
|
|
|
|
|
in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
|
|
|
|
|
and
|
|
|
|
|
bsc#1087018 CVE-2017-18248: cups: The add_job function in
|
|
|
|
|
scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
|
|
|
|
|
enabled, can be crashed by remote attackers by sending print
|
|
|
|
|
jobs with an invalid username, related to a D-Bus notification
|
|
|
|
|
which are the CUPS upstream issues
|
|
|
|
|
https://github.com/apple/cups/issues/5143
|
|
|
|
|
Remote DoS attack against cupsd via invalid username
|
|
|
|
|
and malicious D-Bus library
|
|
|
|
|
and
|
|
|
|
|
https://github.com/apple/cups/issues/5186
|
|
|
|
|
squash non-UTF-8 strings into ASCII on plain IPP level
|
|
|
|
|
and
|
|
|
|
|
https://github.com/apple/cups/issues/5229
|
|
|
|
|
persistently substitute invalid job attributes
|
|
|
|
|
with default values - not only in add_job
|
|
|
|
|
see also
|
|
|
|
|
bsc#1087072 dbus-1:
|
|
|
|
|
Disable assertions to prevent un-expected DDoS attacks
|
|
|
|
|
* NOTICE: Raw print queues are now deprecated (Issue #5269)
|
|
|
|
|
so that now there is a warning message when you
|
|
|
|
|
add or modify a queue to use the "raw driver" but
|
|
|
|
|
raw printing will continue to work through CUPS 2.3.x, cf.
|
|
|
|
|
https://lists.cups.org/pipermail/cups/2018-March/074060.html
|
|
|
|
|
* Kerberized printing to another CUPS server did not work
|
|
|
|
|
correctly (Issue #5233)
|
|
|
|
|
* The scheduler now supports using temporary print queues
|
|
|
|
|
for older IPP/1.1 print queues like those shared by CUPS 1.3
|
|
|
|
|
and earlier (Issue #5241)
|
|
|
|
|
* Systemd did not restart cupsd when configuration changes
|
|
|
|
|
were made that required a restart (Issue #5263)
|
|
|
|
|
* Fixed an Avahi crash bug in the scheduler (Issue #5268)
|
|
|
|
|
* TLS connections now properly timeout (rdar://34938533)
|
2021-04-06 12:09:56 +02:00
|
|
|
|
* Removed support for the '-D_PPD_DEPRECATED=""' developer
|
2018-03-28 14:57:32 +02:00
|
|
|
|
cheat - the PPD API should no longer be used.
|
2021-04-06 12:09:56 +02:00
|
|
|
|
* Removed support for '-D_IPP_PRIVATE_STRUCTURES=1' developer
|
2018-03-28 14:57:32 +02:00
|
|
|
|
cheat - the IPP accessor functions should be used instead.
|
|
|
|
|
* The symlink rastertodymo -> rastertolabel
|
|
|
|
|
in /usr/lib/cups/filter is no longer provided.
|
|
|
|
|
- Removed fix_filter_Makefile.patch
|
|
|
|
|
because since CUPS 2.3b4 it is fixed in the upstream code via
|
|
|
|
|
https://github.com/apple/cups/issues/5247 more precisely via
|
|
|
|
|
https://github.com/apple/cups/commit/ab89234de2d9bf36bb59f2aa4873d98e95ca4df2
|
|
|
|
|
|
2018-02-09 12:12:59 +01:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Feb 8 14:21:22 CET 2018 - jsmeix@suse.de
|
|
|
|
|
|
|
|
|
|
- Version upgrade to 2.3b3:
|
|
|
|
|
This is the third beta of the CUPS 2.3 series.
|
|
|
|
|
For details see https://github.com/apple/cups/releases
|
|
|
|
|
Changes include:
|
|
|
|
|
* More fixes for printing to old CUPS servers (Issue #5211)
|
|
|
|
|
* Additional changes for the scheduler to substitute
|
|
|
|
|
default values for invalid job attributes
|
|
|
|
|
when running in "relaxed conformance" mode
|
|
|
|
|
(Issue #5229 - a follow-up of issues #5186 and #5143)
|
|
|
|
|
A detailed list of changes can be found in the CHANGES.md file.
|
|
|
|
|
- fix_filter_Makefile.patch fixes
|
|
|
|
|
https://github.com/apple/cups/issues/5247
|
|
|
|
|
|
2018-01-18 11:51:51 +01:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Jan 18 10:26:58 CET 2018 - jsmeix@suse.de
|
|
|
|
|
|
|
|
|
|
- Version upgrade to 2.3b2:
|
|
|
|
|
This is the second beta of the CUPS 2.3 series.
|
|
|
|
|
For details see https://github.com/apple/cups/releases
|
|
|
|
|
Changes include:
|
|
|
|
|
* Printing to old CUPS servers has been fixed (Issue #5211)
|
|
|
|
|
A detailed list of changes can be found in the CHANGES.md file.
|
|
|
|
|
|
2017-12-20 12:43:22 +01:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Dec 20 11:40:23 CET 2017 - jsmeix@suse.de
|
|
|
|
|
|
|
|
|
|
- Version upgrade to 2.3b1:
|
|
|
|
|
This is the first beta of the CUPS 2.3 series which
|
|
|
|
|
adopts the new CUPS license (Apache License, Version 2.0),
|
|
|
|
|
adds support for IPP presets and finishing templates,
|
|
|
|
|
and fixes a number of bugs and "polish" issues.
|
|
|
|
|
For details see https://github.com/apple/cups/releases
|
2018-01-18 11:51:51 +01:00
|
|
|
|
Changes include:
|
|
|
|
|
* CUPS is now provided under the Apache License, Version 2.0
|
|
|
|
|
* The CUPS library now supports the latest HTTP Digest
|
|
|
|
|
authentication specification including support for SHA-256
|
|
|
|
|
(Issue #4862)
|
|
|
|
|
* Dropped RSS subscription management from the
|
|
|
|
|
web interface (Issue #5012)
|
|
|
|
|
* The lpadmin command now provides a better error message when
|
|
|
|
|
an unsupported System V interface script is used (Issue #5111)
|
|
|
|
|
* The SSLOptions directive now supports MinTLS and MaxTLS
|
|
|
|
|
options to control the minimum and maximum TLS versions
|
|
|
|
|
that will be allowed, respectively (Issue #5119)
|
|
|
|
|
* Dropped hard-coded CGI scripting language support (Issue #5124)
|
|
|
|
|
* The scheduler now substitutes default values for invalid
|
|
|
|
|
job attributes when running in "relaxed conformance"
|
2018-02-09 12:12:59 +01:00
|
|
|
|
mode (Issue #5186 - a follow-up of issue #5143)
|
2018-01-18 11:51:51 +01:00
|
|
|
|
A detailed list of changes can be found in the CHANGES.md file.
|
2017-12-20 12:43:22 +01:00
|
|
|
|
|
2017-11-14 17:13:38 +01:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Nov 14 13:23:21 UTC 2017 - christophe@krop.fr
|
|
|
|
|
|
2017-12-20 12:43:22 +01:00
|
|
|
|
- Make sure cups-libs-<targettype> is removed.
|
2017-11-14 17:13:38 +01:00
|
|
|
|
|
2017-11-07 15:56:40 +01:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Nov 7 14:40:42 CET 2017 - jsmeix@suse.de
|
|
|
|
|
|
|
|
|
|
- Version upgrade to 2.2.6:
|
|
|
|
|
CUPS 2.2.6 is a general bug fix release.
|
|
|
|
|
For details see https://github.com/apple/cups/releases
|
|
|
|
|
Changes include:
|
|
|
|
|
* DBUS notifications could crash the scheduler (Issue #5143)
|
|
|
|
|
(see also bsc#1061066 "DBUS library aborts caller process")
|
2018-01-18 11:51:51 +01:00
|
|
|
|
A detailed list of changes can be found in the CHANGES.md file.
|
2017-11-07 15:56:40 +01:00
|
|
|
|
|
2017-10-20 14:22:46 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Oct 20 14:01:23 CEST 2017 - jsmeix@suse.de
|
|
|
|
|
|
|
|
|
|
- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
|
|
|
|
|
that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
|
|
|
|
|
- Version upgrade to 2.2.5:
|
|
|
|
|
CUPS 2.2.5 is a general bug fix release.
|
|
|
|
|
For details see https://github.com/apple/cups/releases
|
|
|
|
|
- Version upgrade to 2.2.4:
|
|
|
|
|
CUPS 2.2.4 is a general bug fix release.
|
|
|
|
|
For details see https://github.com/apple/cups/releases
|
|
|
|
|
- Removed
|
|
|
|
|
0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
|
|
|
|
|
0002-Save-work-on-Avahi-code.patch
|
|
|
|
|
0003-Avahi-fixes-for-cupsEnumDests.patch
|
|
|
|
|
because since CUPS 2.2.4 it is fixed in the upstream code
|
|
|
|
|
via https://github.com/apple/cups/pull/4989 more precisely via
|
|
|
|
|
https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
|
|
|
|
|
https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
|
|
|
|
|
https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7
|
|
|
|
|
|
2017-10-17 11:55:46 +02:00
|
|
|
|
-------------------------------------------------------------------
|
2017-10-18 09:29:02 +02:00
|
|
|
|
Wed Oct 18 06:11:10 UTC 2017 - opensuse@dstoecker.de
|
|
|
|
|
|
|
|
|
|
- Fix typo in requires
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
2017-10-17 11:55:46 +02:00
|
|
|
|
Fri Oct 13 11:11:10 UTC 2017 - jengelh@inai.de
|
|
|
|
|
|
|
|
|
|
- Implement shared library packaging guideline [boo#862112]
|
|
|
|
|
- Update package descriptions.
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Sat Sep 30 08:52:42 UTC 2017 - jengelh@inai.de
|
|
|
|
|
|
|
|
|
|
- Remove redundant Requires(pre) line — the use of %post -p
|
|
|
|
|
already implies it.
|
|
|
|
|
|
2017-09-20 13:07:34 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Sep 20 08:24:24 UTC 2017 - schwab@suse.de
|
|
|
|
|
|
|
|
|
|
- Pre-require user(lp) in cups-libs
|
|
|
|
|
|
2017-06-08 16:03:34 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Jun 8 15:52:34 CEST 2017 - jsmeix@suse.de
|
|
|
|
|
|
|
|
|
|
- In /usr/lib/tmpfiles.d/cups.conf use
|
|
|
|
|
group 'root' for /run/cups/certs (boo#1042916).
|
|
|
|
|
|
2017-05-23 10:06:08 +02:00
|
|
|
|
-------------------------------------------------------------------
|
2017-06-02 11:41:37 +02:00
|
|
|
|
Fri Jun 2 10:32:33 CEST 2017 - jsmeix@suse.de
|
|
|
|
|
|
|
|
|
|
- Major backward incompatible change since CUPS 2.2.0:
|
|
|
|
|
There is no longer the directory /etc/cups/interfaces because
|
|
|
|
|
since CUPS 2.2.0 so called "System V style Interface Scripts"
|
|
|
|
|
are no longer supported for security reasons (see below the
|
|
|
|
|
entry about the changes included in CUPS 2.2.0).
|
|
|
|
|
- Disabled cups-2.1.0-cups-systemd-socket.patch
|
|
|
|
|
because it does no longer apply which needs to be examined
|
|
|
|
|
and decided by someone who knows about systemd internals.
|
|
|
|
|
- Disabled
|
|
|
|
|
0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
|
|
|
|
|
0002-Save-work-on-Avahi-code.patch
|
|
|
|
|
0003-Avahi-fixes-for-cupsEnumDests.patch
|
|
|
|
|
because they do no longer apply which needs to be examined
|
|
|
|
|
and decided by someone who knows about Avahi internals.
|
|
|
|
|
- Version upgrade to 2.2.3:
|
|
|
|
|
CUPS 2.2.3 is a general bug fix release.
|
|
|
|
|
See https://github.com/apple/cups/releases
|
|
|
|
|
Changes include:
|
|
|
|
|
* The IPP backend could get into an infinite loop for certain
|
|
|
|
|
errors, causing a hung queue (rdar://problem/28008717)
|
|
|
|
|
* The scheduler could pause responding to client requests in
|
|
|
|
|
order to save state changes to disk (rdar://problem/28690656)
|
|
|
|
|
* Added support for PPD finishing keywords
|
|
|
|
|
(Issue #4960, Issue #4961, Issue #4962)
|
|
|
|
|
* The IPP backend did not send a media-col attribute for just
|
|
|
|
|
the source or type (Issue #4963)
|
|
|
|
|
* IPP Everywhere print queues did not always support all print
|
|
|
|
|
qualities supported by the printer (Issue #4953)
|
|
|
|
|
* IPP Everywhere print queues did not always support all media
|
|
|
|
|
types supported by the printer (Issue #4953)
|
|
|
|
|
* The IPP Everywhere PPD generator did not return useful error
|
|
|
|
|
messages (Issue #4954)
|
|
|
|
|
* The IPP Everywhere finishings support did not work correctly
|
|
|
|
|
with common UI or command-line options (Issue #4976)
|
|
|
|
|
* Fixed an error handling issue for the network backends
|
|
|
|
|
(Issue #4979)
|
|
|
|
|
* The "reprint job" option was not available for some canceled
|
|
|
|
|
jobs (Issue #4915)
|
|
|
|
|
* Updated the job listing in the web interface (Issue #4978)
|
|
|
|
|
A detailed list of changes can be found in the CHANGES.txt file.
|
|
|
|
|
- Version upgrade to 2.2.2:
|
|
|
|
|
CUPS 2.2.2 is a general bug fix release.
|
|
|
|
|
See https://github.com/apple/cups/releases
|
|
|
|
|
Changes include:
|
|
|
|
|
* Fixed some issues with IPP Everywhere printer support
|
|
|
|
|
(Issue #4893, Issue #4909, Issue #4916, Issue #4921,
|
|
|
|
|
Issue #4923, Issue #4932, Issue #4933, Issue #4938)
|
|
|
|
|
* The rastertopwg filter could crash with certain input
|
|
|
|
|
(Issue #4942)
|
|
|
|
|
* The scheduler did not detect when an encrypted connection
|
|
|
|
|
was closed by the client on Linux (Issue #4901)
|
|
|
|
|
* The cups-lpd program did not catch all legacy usage
|
|
|
|
|
of ISO-8859-1 (Issue #4899)
|
|
|
|
|
* The scheduler no longer creates log files on startup
|
|
|
|
|
(<rdar://problem/28332470>)
|
|
|
|
|
* The ippContainsString function now uses case-insensitive
|
|
|
|
|
comparisons for mimeMediaType, name, and text values in
|
|
|
|
|
conformance with RFC 2911.
|
|
|
|
|
* The network backends now log the addresses that were found
|
|
|
|
|
for a printer (<rdar://problem/29268474>)
|
|
|
|
|
* Let's Encrypt certificates did not work when the hostname
|
|
|
|
|
contained uppercase letters (Issue #4919)
|
|
|
|
|
* Fixed reporting of printed pages in the web interface
|
|
|
|
|
(Issue #4924)
|
|
|
|
|
* Updated systemd config files (Issue #4935)
|
|
|
|
|
A detailed list of changes can be found in the CHANGES.txt file.
|
|
|
|
|
- Version upgrade to 2.2.1:
|
|
|
|
|
CUPS 2.2.1 is a general bug fix release.
|
|
|
|
|
See https://github.com/apple/cups/releases
|
|
|
|
|
Changes include:
|
|
|
|
|
* Added "CreateSelfSignedCerts" directive for cups-files.conf
|
|
|
|
|
to control whether the scheduler automatically creates
|
|
|
|
|
its own self-signed X.509 certificates for TLS connections
|
|
|
|
|
(Issue #4876)
|
|
|
|
|
* http*Connect did not handle partial failures (Issue #4870)
|
|
|
|
|
* cupsHashData did not use the correct hashing algorithm
|
|
|
|
|
(<rdar://problem/28209220>)
|
|
|
|
|
* Updated man pages (PR #4885)
|
|
|
|
|
A detailed list of changes can be found in the CHANGES.txt file.
|
|
|
|
|
- Version upgrade to 2.2.0:
|
|
|
|
|
CUPS 2.2.0 adds support for local IPP Everywhere print queues
|
|
|
|
|
and includes several performance and security improvements.
|
|
|
|
|
See https://github.com/apple/cups/releases
|
|
|
|
|
Changes include:
|
|
|
|
|
* Normalized the TLS certificate validation code and added
|
|
|
|
|
additional error messages to aid troubleshooting.
|
|
|
|
|
* http*Connect did not work on Linux when cupsd was not running
|
|
|
|
|
(Issue #4870)
|
|
|
|
|
* The --no-remote-any option of cupsctl had no effect
|
|
|
|
|
(Issue #4866)
|
|
|
|
|
* http*Connect did not return early when all addresses failed
|
|
|
|
|
(Issue #4870)
|
|
|
|
|
* The IPP backend did not validate TLS credentials properly.
|
|
|
|
|
* The printer-state-message attribute was not cleared after a
|
|
|
|
|
print job with no errors (Issue #4851)
|
|
|
|
|
* The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
|
|
|
|
|
operations did not always return an error for failed
|
|
|
|
|
adds (Issue #4854)
|
|
|
|
|
* PPD files with names longer than 127 bytes did not work
|
|
|
|
|
(Issue #4860)
|
|
|
|
|
* CUPS now supports Let's Encrypt certificates on Linux.
|
|
|
|
|
* All CUPS commands now support POSIX options (Issue #4813)
|
|
|
|
|
* The scheduler now restarts faster (Issue #4760)
|
|
|
|
|
* Improved performance of web interface with large numbers
|
|
|
|
|
of jobs (Issue #3819)
|
|
|
|
|
* Encrypted printing can now be limited to only trusted
|
|
|
|
|
printers and servers (<rdar://problem/25711658>)
|
|
|
|
|
* The scheduler now advertises PWG Raster attributes for
|
|
|
|
|
IPP Everywhere clients (Issue #4428)
|
|
|
|
|
* The scheduler now logs informational messages for jobs
|
|
|
|
|
at LogLevel "info" (Issue #4815)
|
|
|
|
|
* The scheduler now uses the getgrouplist function
|
|
|
|
|
when available (Issue #4611)
|
|
|
|
|
* The IPP backend no longer enables compression by default
|
|
|
|
|
except for certain raster formats that generally benefit
|
|
|
|
|
from it (<rdar://problem/25166952>)
|
|
|
|
|
* The scheduler did not handle out-of-disk situations
|
|
|
|
|
gracefully (Issue #4742)
|
|
|
|
|
* The LPD mini-daemon now detects invalid UTF-8 sequences
|
|
|
|
|
in job, document, and user names (Issue #4748)
|
|
|
|
|
* The IPP backend now continues on to the next job
|
|
|
|
|
when the remote server/printer puts the job on hold
|
|
|
|
|
(<rdar://problem/24858548>)
|
|
|
|
|
* The scheduler did not cancel multi-document jobs immediately
|
|
|
|
|
(<rdar://problem/24854834>)
|
|
|
|
|
* The scheduler did not return non-shared printers to local
|
|
|
|
|
clients unless they connected to the domain socket
|
|
|
|
|
(<rdar://problem/24566996>)
|
|
|
|
|
* The scheduler now reads the spool directory if one or more
|
|
|
|
|
job cache entries point to deleted jobs
|
|
|
|
|
(<rdar://problem/24048846>)
|
|
|
|
|
* Added support for disc media sizes (<rdar://problem/20219536>)
|
|
|
|
|
* The httpAddrConnect and httpConnect* APIs now try connecting
|
|
|
|
|
to multiple addresses in parallel (<rdar://problem/20643153>)
|
|
|
|
|
* Interface scripts are no longer supported for security reasons
|
|
|
|
|
(<rdar://problem/23135640>)
|
|
|
|
|
A detailed list of changes can be found in the CHANGES.txt file.
|
|
|
|
|
- Version upgrade to 2.1.4:
|
|
|
|
|
CUPS 2.1.4 is a general bug fix release.
|
|
|
|
|
See https://github.com/apple/cups/releases
|
|
|
|
|
Changes include:
|
|
|
|
|
* Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
|
|
|
|
|
* Fixed printing of multiple files to raw queues (Issue #4782)
|
|
|
|
|
* The scheduler did not implement the Hold-New-Jobs opertion
|
|
|
|
|
correctly (Issue #4767)
|
|
|
|
|
* The cups-lpd mini-daemon incorrectly included the document-name
|
|
|
|
|
attribute when creating a job. It should only be included when
|
|
|
|
|
sending a job (Issue #4790)
|
|
|
|
|
A detailed list of changes can be found in the CHANGES.txt file.
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
2017-05-23 10:06:08 +02:00
|
|
|
|
Sat May 20 08:24:11 UTC 2017 - dimstar@opensuse.org
|
|
|
|
|
|
|
|
|
|
- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
|
|
|
|
|
suse_version >= 1315: give OBS a better chance to break up build
|
|
|
|
|
cycles.
|
|
|
|
|
|
2017-04-21 10:44:45 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Apr 20 16:26:52 UTC 2017 - alarrosa@suse.com
|
|
|
|
|
|
|
|
|
|
- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
|
|
|
|
|
0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
|
|
|
|
|
0002-Save-work-on-Avahi-code.patch and
|
|
|
|
|
0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
|
|
|
|
|
finally commited to cups 2.2 sources in response to
|
|
|
|
|
https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
|
|
|
|
|
to react to the ALL_FOR_NOW avahi event (and also include a similar
|
|
|
|
|
fix for the dnssd case). Related to bsc#955432.
|
|
|
|
|
|
2017-04-12 16:14:55 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Apr 10 17:37:16 UTC 2017 - alarrosa@suse.com
|
|
|
|
|
|
|
|
|
|
- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
|
|
|
|
|
Avahi sends an ALL_FOR_NOW event when it finishes sending
|
|
|
|
|
its cache contents. This patch makes cupsEnumDests finish
|
|
|
|
|
when the signal is received so it doesn't block the caller
|
|
|
|
|
doing nothing until the timeout finishes (related to bsc#955432,
|
|
|
|
|
submitted upstream at https://github.com/apple/cups/pull/4989)
|
|
|
|
|
|
2017-03-31 13:31:24 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Mar 29 13:41:15 UTC 2017 - kukuk@suse.com
|
|
|
|
|
|
|
|
|
|
- Add /etc/cups to cups-libs package [bsc#1025689]
|
|
|
|
|
|
2016-12-13 15:20:06 +01:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Dec 12 13:59:53 UTC 2016 - dimstar@opensuse.org
|
|
|
|
|
|
|
|
|
|
- Replace pkgconfig(libsystemd-daemon) BuildRequires with
|
|
|
|
|
pkgconfig(libsystemd) on openSUSE 13.2 and newer: the various
|
|
|
|
|
sub-libraries have been merged into libsystemd since version 209.
|
|
|
|
|
openSUSE 13.1 was the last product to ship systemd 208.
|
|
|
|
|
|
2016-07-01 15:52:54 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Jun 28 10:43:40 UTC 2016 - kamikazow@web.de
|
|
|
|
|
|
|
|
|
|
- Remove CUPS.desktop and pixmap
|
2016-07-01 20:18:13 +02:00
|
|
|
|
* Obsoletes patch cups-1.3.9-desktop_file.patch
|
2016-07-01 15:52:54 +02:00
|
|
|
|
|
2016-03-01 10:53:13 +01:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Feb 29 14:06:50 UTC 2016 - michael@stroeder.com
|
|
|
|
|
|
2016-03-01 11:19:22 +01:00
|
|
|
|
- Version upgrade to 2.1.3:
|
|
|
|
|
CUPS 2.1.3 fixes some issues in the scheduler, sample drivers,
|
|
|
|
|
and user commands.
|
|
|
|
|
A detailed list of changes can be found in the CHANGES.txt file.
|
|
|
|
|
Changes include (excerpt):
|
|
|
|
|
* The scheduler should not exit under memory pressure
|
|
|
|
|
(<rdar://problem/23255001>)
|
|
|
|
|
* Fixed some issues in ipptool for skipped tests
|
|
|
|
|
(<rdar://problem/24137160>)
|
|
|
|
|
* The "lp -H resume" command did not reset the
|
|
|
|
|
"job-state-reasons" attribute value (STR #4752)
|
|
|
|
|
* The scheduler did not allow access to resource files
|
|
|
|
|
(icons, etc.) when the web interface was disabled (STR #4755)
|
|
|
|
|
- Version upgrade to 2.1.2:
|
|
|
|
|
CUPS 2.1.2 fixes an issue in the 2.1.1 source archives which
|
|
|
|
|
actually contained a current 2.2 snapshot.
|
|
|
|
|
There are no other changes.
|
|
|
|
|
- Version upgrade to 2.1.1:
|
|
|
|
|
CUPS 2.1.1 fixes a number of USB and IPP printing issues,
|
|
|
|
|
addresses some error reporting and hardening issues in
|
|
|
|
|
the scheduler, and updates some localizations.
|
|
|
|
|
A detailed list of changes can be found in the CHANGES.txt file.
|
|
|
|
|
Changes include (excerpt):
|
|
|
|
|
* Security hardening fixes (<rdar://problem/23131948>,
|
|
|
|
|
<rdar://problem/23132108>, <rdar://problem/23132353>,
|
|
|
|
|
<rdar://problem/23132803>, <rdar://problem/23133230>,
|
|
|
|
|
<rdar://problem/23133393>, <rdar://problem/23133466>,
|
|
|
|
|
<rdar://problem/23133833>, <rdar://problem/23133998>,
|
|
|
|
|
<rdar://problem/23134228>, <rdar://problem/23134299>,
|
|
|
|
|
<rdar://problem/23134356>, <rdar://problem/23134415>,
|
|
|
|
|
<rdar://problem/23134506>, <rdar://problem/23135066>,
|
|
|
|
|
<rdar://problem/23135122>, <rdar://problem/23135207>,
|
|
|
|
|
<rdar://problem/23144290>, <rdar://problem/23144358>,
|
|
|
|
|
<rdar://problem/23144461>)
|
|
|
|
|
* The cupsGetPPD* functions did not work with IPP printers
|
|
|
|
|
(STR #4725)
|
|
|
|
|
* Some older HP LaserJet printers need a delayed close when
|
|
|
|
|
printing using the libusb-based USB backend (STR #4549)
|
|
|
|
|
* The libusb-based USB backend did not unload the kernel usblp
|
|
|
|
|
module if it was preventing the backend from accessing the
|
|
|
|
|
printer (STR #4707)
|
|
|
|
|
* Current Primera printers were incorrectly reported as Fargo
|
|
|
|
|
printers (STR #4708)
|
|
|
|
|
* The IPP backend did not always handle jobs getting canceled
|
|
|
|
|
at the printer (<rdar://problem/22716820>)
|
|
|
|
|
* Added USB quirk for Canon MP530 (STR #4730)
|
|
|
|
|
* The scheduler did not deliver job notifications for jobs
|
|
|
|
|
submitted to classes (STR #4733)
|
|
|
|
|
* Changing the printer-is-shared value for a remote queue
|
|
|
|
|
did not produce an error (STR #4738)
|
|
|
|
|
* The IPP backend incorrectly included the job-password
|
|
|
|
|
attribute in Validate-Job requests (<rdar://problem/23531939>)
|
2016-03-01 10:53:13 +01:00
|
|
|
|
|
2015-09-20 11:27:18 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Sun Sep 20 08:54:01 UTC 2015 - meissner@suse.com
|
|
|
|
|
|
|
|
|
|
- add -devel to build a 32bit wine on 64bit only Leap systems.
|
|
|
|
|
|
2015-09-01 14:47:12 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Sep 1 11:55:07 CEST 2015 - jsmeix@suse.de
|
|
|
|
|
|
|
|
|
|
- Version upgrade to 2.1.0:
|
|
|
|
|
CUPS 2.1.0 offers improved support for IPP Everywhere,
|
|
|
|
|
adds support for advanced logging using journald on Linux, and
|
|
|
|
|
includes new security features for encrypted printing and
|
|
|
|
|
reduced network visibility in the default configuration.
|
|
|
|
|
A detailed list of changes can be found in the CHANGES.txt file.
|
|
|
|
|
Changes include (excerpt):
|
|
|
|
|
* Added support for 3D printers (basic types only,
|
|
|
|
|
no built-in filters) based on PWG white paper.
|
|
|
|
|
* The IPP backend now stops sending print data
|
|
|
|
|
if the printer indicates the job has been aborted
|
|
|
|
|
or canceled (<rdar://problem/17837631>)
|
|
|
|
|
* The IPP backend now sends the job-pages-per-set
|
|
|
|
|
attribute when printing multiple copy jobs with
|
|
|
|
|
finishings (<rdar://problem/16792757>)
|
|
|
|
|
* The IPP backend now updates the cupsMandatory values when the
|
|
|
|
|
printer configuration changes (<rdar://problem/18126570>)
|
|
|
|
|
* No longer install banner files since third-party banner
|
|
|
|
|
filters now supply their own (STR #4518)
|
|
|
|
|
* The scheduler no longer listens on the loopback
|
|
|
|
|
interface unless the web interface or printer sharing
|
|
|
|
|
are enabled (<rdar://problem/9136448>)
|
|
|
|
|
* Added a PPD generator for IPP Everywhere printers (STR #4258)
|
|
|
|
|
* Now install "default" versions of more configuration
|
|
|
|
|
files (<rdar://problem/19024491>) in particular
|
|
|
|
|
cups-files.conf.default and snmp.conf.default
|
|
|
|
|
* Added SSLOptions values to allow Diffie-Hellman key exchange
|
|
|
|
|
and disable TLS/1.0 support.
|
|
|
|
|
* Updated the scheduler to support more IPP Everywhere
|
|
|
|
|
attributes (STR #4630)
|
|
|
|
|
* The scheduler now supports advanced ASL and journald logging
|
|
|
|
|
when "syslog" output is configured (STR #4474)
|
|
|
|
|
* The scheduler now supports logging to stderr when running
|
|
|
|
|
in the foreground (STR #4505)
|
|
|
|
|
- Adapted patches so that they apply to CUPS 2.1.0 sources:
|
|
|
|
|
* cups-2.1.0-choose-uri-template.patch replaces
|
|
|
|
|
cups-1.2rc1-template.patch
|
|
|
|
|
* cups-2.1.0-default-webcontent-path.patch replaces
|
|
|
|
|
cups-1.4.3-default-webcontent-path.patch
|
|
|
|
|
* cups-2.1.0-cups-systemd-socket.patch replaces
|
|
|
|
|
cups-systemd-socket.patch
|
|
|
|
|
|
2015-09-01 09:38:56 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Sep 1 07:36:59 UTC 2015 - tchvatal@suse.com
|
|
|
|
|
|
2015-09-01 14:47:12 +02:00
|
|
|
|
- Fix bnc#943950, escape the macro call %systemd-tmpfiles
|
2015-09-02 11:39:40 +02:00
|
|
|
|
in comment.
|
2015-09-01 09:38:56 +02:00
|
|
|
|
|
2015-07-01 15:50:32 +02:00
|
|
|
|
-------------------------------------------------------------------
|
2015-08-21 09:09:25 +02:00
|
|
|
|
Thu Aug 20 14:07:47 UTC 2015 - tchvatal@suse.com
|
|
|
|
|
|
|
|
|
|
- Add gpg verification for the tarball
|
|
|
|
|
- Version update to 2.0.4:
|
|
|
|
|
* Fixed a bug in cupsRasterWritePixels (STR #4650)
|
|
|
|
|
* Fixed redirection in the web interface (STR #4538)
|
2015-09-01 14:47:12 +02:00
|
|
|
|
* The IPP backend did not respond to side-channel
|
|
|
|
|
requests (STR #4645)
|
|
|
|
|
* The scheduler did not start all pending jobs
|
|
|
|
|
at once (STR #4646)
|
|
|
|
|
* The web search incorrectly searched time-at-xxx
|
|
|
|
|
values (STR #4652)
|
2015-08-21 09:09:25 +02:00
|
|
|
|
* Fixed an RPM spec file issue (STR #4657)
|
2015-09-01 14:47:12 +02:00
|
|
|
|
* The scheduler incorrectly started jobs while canceling
|
|
|
|
|
multiple jobs (STR #4648)
|
|
|
|
|
* Fixed processing of server overrides without
|
|
|
|
|
port numbers (STR #4675)
|
2015-08-21 09:09:25 +02:00
|
|
|
|
* Documentation changes (STR #4651, STR #4674)
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
2015-07-01 15:50:32 +02:00
|
|
|
|
Wed Jul 1 14:44:57 CEST 2015 - jsmeix@suse.de
|
|
|
|
|
|
|
|
|
|
- cups-2.0.3-additional_policies.patch replaces
|
|
|
|
|
cups-1.7-additional_policies.patch that still adds the same
|
|
|
|
|
"allowallforanybody" policy but now with separated "Limit All"
|
|
|
|
|
to avoid https://www.cups.org/str.php?L4659 (boo#936309).
|
|
|
|
|
- Added "-p /bin/bash" to RPM shell commands scriptlets that
|
|
|
|
|
enforces bash to be safe against any possible "bashisms", cf
|
|
|
|
|
https://en.opensuse.org/openSUSE:Packaging_scriptlet_snippets
|
|
|
|
|
|
2015-06-25 10:03:07 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Jun 25 08:00:20 UTC 2015 - tchvatal@suse.com
|
|
|
|
|
|
2015-07-01 15:50:32 +02:00
|
|
|
|
- Fix the previous commit by using direct systemd call and
|
|
|
|
|
ensuring we work even on older distros
|
2015-06-25 10:03:07 +02:00
|
|
|
|
|
2015-06-22 14:23:06 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Jun 22 12:22:42 UTC 2015 - tchvatal@suse.com
|
|
|
|
|
|
|
|
|
|
- Fix postin-without-tmpfile-creation and run %tmpfiles_create
|
|
|
|
|
macro on our cups.conf
|
|
|
|
|
|
2015-06-09 11:10:04 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Jun 9 10:07:17 CEST 2015 - jsmeix@suse.de
|
|
|
|
|
|
|
|
|
|
- Version upgrade to 2.0.3:
|
|
|
|
|
The new release addresses two security vulnerabilities,
|
|
|
|
|
add localizations for German and Russian, and includes several
|
|
|
|
|
general bug fixes. Changes include (excerpt):
|
|
|
|
|
* Security: Fixed CERT VU #810572 CVE-2015-1158 CVE-2015-1159
|
|
|
|
|
exploiting the dynamic linker (STR #4609) (bsc#924208)
|
|
|
|
|
* Security: The scheduler could hang with malformed gzip data
|
|
|
|
|
(STR #4602)
|
|
|
|
|
* Restored missing generic printer icon file (STR #4587)
|
|
|
|
|
* Fixed logging of configuration errors to show up as errors
|
|
|
|
|
(STR #4582)
|
|
|
|
|
* Fixed potential buffer overflows in raster code and filters
|
|
|
|
|
(STR #4598, STR #4599, STR #4600, STR #4601)
|
|
|
|
|
* Fixed <Limit> inside <Location> (STR #4575)
|
|
|
|
|
* Fixed lpadmin when both -m and -o are used (STR #4578)
|
|
|
|
|
* The web interface always showed support for 2-sided printing
|
|
|
|
|
(STR #4595)
|
|
|
|
|
* cupsRasterReadHeader did not fully validate the raster header
|
|
|
|
|
(STR #4596)
|
|
|
|
|
* The rastertopwg filter did not check for truncated input
|
|
|
|
|
(STR #4597)
|
|
|
|
|
* The cups-lpd mini-daemon did not check for request parameters
|
|
|
|
|
(STR #4603)
|
|
|
|
|
* The scheduler could get caught in a busy loop (STR #4605)
|
|
|
|
|
* The sample Epson driver could crash (STR #4616)
|
|
|
|
|
* The IPP backend now correctly monitors jobs
|
|
|
|
|
(<rdar://problem/20495955>)
|
|
|
|
|
* The ppdhtml and ppdpo utilities crashed when the -D option
|
|
|
|
|
was used before a driver information file (STR #4627)
|
|
|
|
|
* ippfind incorrectly substituted "=port" for service_port.
|
|
|
|
|
* The IPP/1.1 test file did not handle the initial print job
|
|
|
|
|
completing early (STR #4576)
|
|
|
|
|
* Fixed a memory leak in cupsConnectDest (STR #4634)
|
|
|
|
|
* PWG Raster Format output contained invalid ImageBox values
|
|
|
|
|
(<rdar://problem/21144309>)
|
|
|
|
|
* Added Russian translation (STR #4577)
|
|
|
|
|
* Added German translation (STR #4635)
|
|
|
|
|
- cups-busy-loop.patch fixed STR #4605 is obsolete because
|
|
|
|
|
it is fixed upstream (see above).
|
|
|
|
|
- cleaned up this whole RPM changlog (wrapped too long lines if
|
|
|
|
|
possible and removed trailing whitespaces).
|
|
|
|
|
|
2015-03-28 14:42:00 +01:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Sat Mar 28 13:03:28 UTC 2015 - mimi.vx@gmail.com
|
|
|
|
|
|
2015-06-09 11:10:04 +02:00
|
|
|
|
- Add patch cups-busy-loop.patch to fix rh#1179596 , cups#4605
|
2015-03-28 14:42:00 +01:00
|
|
|
|
|
2014-11-25 17:11:18 +01:00
|
|
|
|
-------------------------------------------------------------------
|
2015-02-16 16:27:41 +01:00
|
|
|
|
Thu Feb 12 13:50:58 UTC 2015 - tchvatal@suse.com
|
2014-11-25 17:11:18 +01:00
|
|
|
|
|
2015-02-16 16:27:41 +01:00
|
|
|
|
- Add back the posttrans cleanup script as it is needed
|
2014-11-25 17:11:18 +01:00
|
|
|
|
|
2014-11-04 13:56:21 +01:00
|
|
|
|
-------------------------------------------------------------------
|
2015-02-16 16:27:41 +01:00
|
|
|
|
Thu Feb 12 09:22:30 UTC 2015 - tchvatal@suse.com
|
2014-11-04 13:56:21 +01:00
|
|
|
|
|
2015-02-16 16:27:41 +01:00
|
|
|
|
- Add patch cups-systemd-socket.patch to fix socket activation
|
|
|
|
|
and to match socket approach Fedora has.
|
2014-11-04 13:56:21 +01:00
|
|
|
|
|
2014-10-13 12:12:22 +02:00
|
|
|
|
-------------------------------------------------------------------
|
2015-02-16 16:27:41 +01:00
|
|
|
|
Thu Feb 12 09:12:05 UTC 2015 - tchvatal@suse.com
|
2014-10-13 12:12:22 +02:00
|
|
|
|
|
2015-02-16 16:27:41 +01:00
|
|
|
|
- Version bump to 2.0.2:
|
2015-06-09 11:10:04 +02:00
|
|
|
|
* Security: cupsRasterReadPixels buffer overflow with invalid
|
|
|
|
|
page header and compressed raster data (STR #4551)
|
|
|
|
|
* Mapping of PPD keywords to IPP keywords did not work if the PPD
|
|
|
|
|
keyword was already an IPP keyword (<rdar://problem/19121005>)
|
2015-02-16 16:27:41 +01:00
|
|
|
|
* cupsGetPPD* sent bad requests (STR #4567)
|
|
|
|
|
* For detailed list see CHANGES.txt file
|
2014-10-13 12:12:22 +02:00
|
|
|
|
|
2014-09-02 15:58:54 +02:00
|
|
|
|
-------------------------------------------------------------------
|
2015-02-16 16:27:41 +01:00
|
|
|
|
Thu Feb 12 09:10:09 UTC 2015 - tchvatal@suse.com
|
2014-09-02 15:58:54 +02:00
|
|
|
|
|
2015-02-16 16:27:41 +01:00
|
|
|
|
- Enable PIE for build
|
2014-09-02 15:58:54 +02:00
|
|
|
|
|
2014-09-02 15:39:36 +02:00
|
|
|
|
-------------------------------------------------------------------
|
2015-02-16 16:27:41 +01:00
|
|
|
|
Fri Jan 30 10:44:47 UTC 2015 - tchvatal@suse.com
|
2014-09-02 15:39:36 +02:00
|
|
|
|
|
2015-02-16 16:27:41 +01:00
|
|
|
|
- Remove legacy paralel-port support as it is not really needed
|
|
|
|
|
as most do not want it
|
2014-09-02 15:39:36 +02:00
|
|
|
|
|
2014-04-11 10:08:52 +02:00
|
|
|
|
-------------------------------------------------------------------
|
2015-02-16 16:27:41 +01:00
|
|
|
|
Fri Jan 30 10:39:41 UTC 2015 - tchvatal@suse.com
|
2014-05-22 12:18:17 +02:00
|
|
|
|
|
2015-02-16 16:27:41 +01:00
|
|
|
|
- Update descriptions to just state what changed and let user
|
|
|
|
|
find it out.
|
|
|
|
|
- Add back comment about %fdupes
|
2015-06-09 11:10:04 +02:00
|
|
|
|
- Remove exit 0 on scriptlets as it is provided by
|
|
|
|
|
the %service bla ones already
|
2015-02-16 16:27:41 +01:00
|
|
|
|
- Fix the comment about openSUSE version on tmpfilesdir declaration
|
2014-05-22 12:18:17 +02:00
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
2015-02-16 16:27:41 +01:00
|
|
|
|
Fri Jan 16 16:00:20 UTC 2015 - tchvatal@suse.com
|
2014-04-11 10:08:52 +02:00
|
|
|
|
|
2015-02-16 16:27:41 +01:00
|
|
|
|
- cups-2.0.1 update:
|
|
|
|
|
* lengthy list of changes see the upstream CHANGES.txt that is
|
|
|
|
|
distributed with the package
|
|
|
|
|
* Disabling of sslv3 to mitigate poodle
|
|
|
|
|
- Use gnutls to provide SSLOPtions configuration directive
|
|
|
|
|
* openssl is no longer supported upstream
|
|
|
|
|
* Remove the with-openssl-exception from license
|
|
|
|
|
- Remove cups.sysconfig as it is not used with systemd based distros
|
|
|
|
|
- Purposely lose support for SLE11 as it doubles size of some of the
|
|
|
|
|
sections and keep suppor for openSUSE+SLE12
|
|
|
|
|
* even with the conditions we would have to go unencrypted only
|
|
|
|
|
as needs newer gnutls, so don't bother with keeping the compat
|
|
|
|
|
- Use upstream service and socket files to allow more working tools
|
2015-02-16 16:45:11 +01:00
|
|
|
|
- Removed patches:
|
|
|
|
|
* cups-0001-systemd-add-systemd-socket-activation-and-unit-files.patch
|
|
|
|
|
* cups-0002-systemd-listen-only-on-localhost-for-socket-activation.patch
|
|
|
|
|
* cups-0003-systemd-secure-cups.service-unit-file.patch
|
|
|
|
|
* cups-1.3.6-access_conf.patch
|
|
|
|
|
* cups-1.5-additional_policies.patch
|
|
|
|
|
* cups-1.5.4-CVE-2012-5519.patch
|
|
|
|
|
* cups-1.5.4-strftime.patch
|
|
|
|
|
* cups-move-everything-to-run.patch
|
|
|
|
|
* cups-polld_avoid_busy_loop.patch
|
|
|
|
|
* cups-provides-cupsd-service.patch
|
|
|
|
|
* str4190.patch
|
|
|
|
|
* str4351.patch
|
|
|
|
|
* str4450.CVE-2014-3537.str4455.CVE-2014-5029.CVE-2014-5030.CVE-2014-5031.CUPS-1.5.4.patch
|
|
|
|
|
- Refreshed patches:
|
|
|
|
|
* cups-1.3.9-desktop_file.patch
|
|
|
|
|
* cups-config-libs.patch
|
|
|
|
|
- Added patches:
|
|
|
|
|
* cups-1.7-additional_policies.patch
|
|
|
|
|
* cups-systemd-socket.patch
|
2014-04-11 10:08:52 +02:00
|
|
|
|
|
2014-02-20 14:44:57 +01:00
|
|
|
|
-------------------------------------------------------------------
|
2015-02-16 16:27:41 +01:00
|
|
|
|
Tue Sep 23 13:57:31 CEST 2014 - ro@suse.de
|
2014-02-20 14:44:57 +01:00
|
|
|
|
|
2015-02-16 16:27:41 +01:00
|
|
|
|
- change BuildRequires for systemd to pkgconfig(systemd)
|
|
|
|
|
and pkgconfig(libsystemd-daemon) to avoid build-cycles
|
2014-02-20 14:44:57 +01:00
|
|
|
|
|
2014-02-19 16:37:56 +01:00
|
|
|
|
-------------------------------------------------------------------
|
2015-02-16 16:27:41 +01:00
|
|
|
|
Mon Aug 25 13:19:19 CEST 2014 - jsmeix@suse.de
|
2014-02-19 16:37:56 +01:00
|
|
|
|
|
2015-02-16 16:27:41 +01:00
|
|
|
|
- Version upgrade to 1.7.5:
|
|
|
|
|
CUPS 1.7.5 addresses some minor issues and expands upon the
|
|
|
|
|
symlink security protection. Changes include (excerpt):
|
|
|
|
|
* Security: Addressed some more situations where symlinked
|
|
|
|
|
files would be served by the web interface (CVE-2014-5029
|
|
|
|
|
CVE-2014-5030 CVE-2014-5031 STR #4455 and bnc#887240).
|
|
|
|
|
* The LPD backend did not work with some versions
|
|
|
|
|
of glibc (STR #4452)
|
|
|
|
|
* CGI scripts did not work (STR #4454)
|
|
|
|
|
- str4455-1.7.patch (see the previous entry below)
|
|
|
|
|
is obsolete because it is fixed upstream since CUPS 1.7.5.
|
|
|
|
|
- Let fdupes only create symlinks in /usr/share/cups/templates/ to
|
|
|
|
|
avoid a symlink /usr/share/cups/webcontent/images/cups-icon.png
|
|
|
|
|
because since CUPS 1.7.4/1.7.5 the cupsd web server does
|
|
|
|
|
no longer follow symlinks to avoid the security issues
|
|
|
|
|
mentioned in the previous two entries below
|
|
|
|
|
(fixes bnc#892587 a regression of bnc#887240).
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Jul 29 16:41:10 CEST 2014 - jsmeix@suse.de
|
|
|
|
|
|
|
|
|
|
- str4455-1.7.patch complements the incomplete fix for
|
|
|
|
|
CVE-2014-3537 STR#445 in the CUPS 1.7.4 sources
|
|
|
|
|
to fix the subsequent CVE-2014-5029 CVE-2014-5030
|
|
|
|
|
CVE-2014-5031 STR#4455 (bnc#887240).
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Jul 15 11:13:14 CEST 2014 - jsmeix@suse.de
|
|
|
|
|
|
|
|
|
|
- Version upgrade to 1.7.4:
|
|
|
|
|
CUPS 1.7.4 fixes several networking and build issues,
|
|
|
|
|
and addresses a symlink security issue CVE-2014-3537.
|
|
|
|
|
Changes since 1.7.3 include (excerpt):
|
|
|
|
|
* Security: The web interface incorrectly served symlinked files
|
|
|
|
|
and files that were not world-readable, potentially leading to
|
|
|
|
|
a disclosure of information (CVE-2014-3537, STR #4450,
|
|
|
|
|
and bnc#887240).
|
|
|
|
|
* The "snmp" option did not work with the network backends
|
|
|
|
|
(STR #4422).
|
|
|
|
|
* The User directive in client.conf did not override the USER
|
|
|
|
|
environment variable (STR #4426).
|
|
|
|
|
* The web interface now properly shows a "Go" button for
|
|
|
|
|
all text-based browsers (STR #4425).
|
|
|
|
|
* The MaxJobTime directive now properly supports time
|
|
|
|
|
values (STR #4434).
|
|
|
|
|
* Fixed an "IPP read error" race condition issue (STR #4440).
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Jun 2 13:21:31 CEST 2014 - jsmeix@suse.de
|
|
|
|
|
|
|
|
|
|
- Version upgrade to 1.7.3:
|
|
|
|
|
CUPS 1.7.3 includes a number of general bug fixes.
|
|
|
|
|
Changes since 1.7.2 include (excerpt):
|
|
|
|
|
* Fixed mapping of OutputBin values such as "Tray1".
|
|
|
|
|
* Several ippGet* functions incorrectly returned -1
|
|
|
|
|
instead of 0 on error.
|
|
|
|
|
* Fixed an authentication race condition in
|
|
|
|
|
cupsSendRequest (STR #4403).
|
|
|
|
|
* The scheduler did not add the "job-hold-until-specified"
|
|
|
|
|
reason when holding a job using the lp command (STR #4405).
|
|
|
|
|
* Auto-typing of PWG Raster files did not work (STR #4417).
|
|
|
|
|
* IPP queues using hardcoded credentials would ask
|
|
|
|
|
for credentials (STR #4371).
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Apr 23 14:24:12 CEST 2014 - jsmeix@suse.de
|
|
|
|
|
|
|
|
|
|
- Version upgrade to 1.7.2:
|
|
|
|
|
CUPS 1.7.2 addresses a web interface redirection security issue,
|
2015-06-09 11:10:04 +02:00
|
|
|
|
some scheduler crashed on Linux, and other general bug fixes.
|
2015-02-16 16:27:41 +01:00
|
|
|
|
Changes since 1.7.1 include (excerpt):
|
|
|
|
|
* CVE-2014-2856: The scheduler now blocks URLs containing
|
|
|
|
|
embedded HTML (STR #4356 and bnc#873899).
|
|
|
|
|
* cupsDoIORequest could miss the server status, causing failed
|
|
|
|
|
lpadmin and other administrative commands (STR #4386).
|
|
|
|
|
* Fixed a D-BUS threading issue that caused the scheduler
|
|
|
|
|
to crash (STR #4347).
|
|
|
|
|
* The scheduler now automatically reconnects to Avahi
|
|
|
|
|
as needed (STR #4370, STR #4373).
|
|
|
|
|
- str4351.patch that fixed STR #4351: cups-lpd hugh jobs (>2G) fail
|
|
|
|
|
is obsolete because it is fixed upstream since CUPS 1.7.2.
|
|
|
|
|
- Removed the CUPS banner files in /usr/share/cups/banners/ and
|
|
|
|
|
the CUPS testpage /usr/share/cups/data/testprint (which is also
|
|
|
|
|
a CUPS banner file type) because they do no longer work
|
|
|
|
|
since CUPS >= 1.6 (see http://www.cups.org/str.php?L4120)
|
|
|
|
|
because there is no longer a filter for Linux that can convert
|
|
|
|
|
the CUPS banner files. Since CUPS >= 1.6 only the banner files
|
|
|
|
|
and testpage in the cups-filters package work via the
|
|
|
|
|
cups-filters PDF workflow and the cups-filters package also
|
|
|
|
|
provides the matching bannertopdf filter (bnc#873376).
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Apr 11 14:52:41 CEST 2014 - jsmeix@suse.de
|
|
|
|
|
|
|
|
|
|
- In case of systemd use --with-rundir=/run/cups
|
|
|
|
|
instead of --with-rundir=/run (bnc#871640).
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Feb 27 12:49:42 CET 2014 - jsmeix@suse.de
|
2014-02-14 09:37:00 +01:00
|
|
|
|
|
2015-02-16 16:27:41 +01:00
|
|
|
|
- str4351.patch from CUPS upstream fixes
|
|
|
|
|
https://www.cups.org/str.php?L4351
|
|
|
|
|
"STR #4351 cups-lpd hugh jobs (>2G) fail"
|
|
|
|
|
(bnc#864782).
|
2014-02-14 09:37:00 +01:00
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
2015-02-16 16:27:41 +01:00
|
|
|
|
Wed Feb 26 15:20:02 CET 2014 - jsmeix@suse.de
|
|
|
|
|
|
|
|
|
|
- Version upgrade to 1.7.1 (fate#314630):
|
|
|
|
|
CUPS >= 1.6 has major incompatible changes compared to CUPS
|
|
|
|
|
up to version 1.5.4 in particular when printing via network:
|
|
|
|
|
* The IPP protocol default version increased form 1.1 to 2.0.
|
|
|
|
|
Older IPP servers like CUPS 1.3.x (e.g. in SLE11)
|
|
|
|
|
reject IPP 2.0 requests with "Bad Request" (STR #4231).
|
|
|
|
|
By adding '/version=1.1' to ServerName in client.conf
|
|
|
|
|
(e.g. ServerName older.server.example.com/version=1.1)
|
|
|
|
|
or the CUPS_SERVER environment variable value or by
|
|
|
|
|
adding it to the server name value of the '-h' opion
|
|
|
|
|
(e.g. lpstat -h older.server.example.com/version=1.1 -p)
|
|
|
|
|
the older IPP protocol version for older servers
|
|
|
|
|
must be explicitly specified.
|
2015-06-09 11:10:04 +02:00
|
|
|
|
* CUPS Browsing is dropped in CUPS but the new package
|
|
|
|
|
cups-filters provides the cups-browsed that provides
|
2015-02-16 16:27:41 +01:00
|
|
|
|
basic CUPS Browsing and Polling functionality.
|
|
|
|
|
The native protocol in CUPS for automatic client discovery
|
|
|
|
|
of printers is now DNS-SD.
|
|
|
|
|
* Some printing filters and backends are dropped in CUPS
|
|
|
|
|
but the new package cups-filters provides them so that
|
|
|
|
|
cups-filters is usually needed (recommended by RPM)
|
|
|
|
|
but cups-filters is not strictly required.
|
|
|
|
|
* The cupsd configuration directives are split into two files
|
|
|
|
|
cupsd.conf (can also be modified via HTTP PUT e.g. via cupsctl)
|
|
|
|
|
and cups-files.conf (can only be modified manually by root)
|
|
|
|
|
to have better default protection against misuse of privileges
|
|
|
|
|
by normal users who have been specifically allowed
|
|
|
|
|
by root to do cupsd configuration changes
|
|
|
|
|
(STR #4223 CVE-2012-5519 bnc#789566).
|
|
|
|
|
See the entries below for more information.
|
|
|
|
|
For details see the openSUSE Bugzilla bnc#735404 issue.
|
|
|
|
|
CUPS 1.7.1 improves network and USB printing, fixes some
|
|
|
|
|
scheduler issues, and addresses a minor security issue
|
|
|
|
|
in the lppasswd program.
|
|
|
|
|
Changes since 1.7.0 include (excerpt):
|
|
|
|
|
* Security: the lppasswd program incorrectly used settings
|
|
|
|
|
from ~/.cups/client.conf (STR #4319)
|
|
|
|
|
* ATTR messages could cause string pool memory corruption
|
|
|
|
|
in the scheduler (<rdar://problem/15382819>)
|
|
|
|
|
* Printing to a raw queue could result in corrupt output
|
|
|
|
|
due to opportunistic compression (<rdar://problem/15008524>)
|
|
|
|
|
* Japanese PPDs using with the Shift-JIS encoding
|
|
|
|
|
did not work (<rdar://problem/15427759>)
|
|
|
|
|
* The libusb-based USB backend incorrectly used write
|
|
|
|
|
timeouts (<rdar://problem/15564888>)
|
|
|
|
|
* The IPP backend did not wait for a busy printer
|
|
|
|
|
to become available before attempting to print
|
|
|
|
|
(<rdar://problem/15465667>)
|
|
|
|
|
* Using "@IF(name)" in an Allow or Deny rule
|
|
|
|
|
did not work (STR #4328)
|
|
|
|
|
* The D-BUS notifier did not remove its lockfile (STR #4314)
|
|
|
|
|
* CUPS incorrectly used the USER environment variable when
|
2015-06-09 11:10:04 +02:00
|
|
|
|
the name did not match the user ID (STR #4327)
|
2015-02-16 16:27:41 +01:00
|
|
|
|
For details see the CHANGES.txt file.
|
|
|
|
|
- cups-1.7-additional_policies.patch adds the 'allowallforanybody'
|
|
|
|
|
policy to cupsd.conf (fate#303515) and replaces
|
|
|
|
|
cups-1.6.2-adapt_cupsd.conf_defaults_for_SUSE.patch
|
|
|
|
|
- Clean up of systemd unit files (bnc#857372):
|
|
|
|
|
Make it working again as simple and secure as it worked
|
|
|
|
|
all the time in the past by providing only one single
|
|
|
|
|
systemd unit file cups.service. In particular currently YaST
|
|
|
|
|
cannot manage services with additional other systemd unit files.
|
|
|
|
|
Furthermore systemd socket activation is currently insecure
|
|
|
|
|
in case of IPv6 (CVE-2012-6094 bnc#795624).
|
2014-02-14 09:37:00 +01:00
|
|
|
|
- Clean up how cupsd is launched (via SysVinit or systemd)
|
|
|
|
|
by maintaining strictly separated sections in cups.spec:
|
|
|
|
|
Either for launching cupsd via systemd (if have_systemd is set)
|
|
|
|
|
or for launching cupsd via SysVinit (if have_systemd is not set).
|
2015-02-16 16:27:41 +01:00
|
|
|
|
SysVinit support cannot be removed because CUPS 1.7.1 still
|
|
|
|
|
builds and can be used even for SLE11.
|
2014-02-14 09:37:00 +01:00
|
|
|
|
- The default group of users who are allowed to do cupsd
|
|
|
|
|
configuration changes via requests to the running cupsd
|
|
|
|
|
(i.e. the SystemGroup directive in cupsd.conf) is set
|
2015-02-16 16:27:41 +01:00
|
|
|
|
to 'root' only (related to STR #4223 CVE-2012-5519 bnc#789566).
|
|
|
|
|
In this context a general security advice:
|
2014-02-14 09:37:00 +01:00
|
|
|
|
When root allows normal users to do system administration tasks
|
|
|
|
|
(in particular when root allows normal users to administer
|
|
|
|
|
system processes - i.e. processes that run as root), then
|
|
|
|
|
this or that kind of privilege escalation will be possible.
|
|
|
|
|
Only trustworthy users who do not misuse their privileges
|
|
|
|
|
may get allowed to do specific system administration tasks.
|
|
|
|
|
|
2014-01-29 16:05:09 +01:00
|
|
|
|
-------------------------------------------------------------------
|
2015-02-16 16:27:41 +01:00
|
|
|
|
Wed Oct 30 10:25:24 CET 2013 - jsmeix@suse.de
|
|
|
|
|
|
|
|
|
|
- Version upgrade to 1.7.0
|
|
|
|
|
CUPS >= 1.6 has major incompatible changes compared to CUPS 1.5.
|
|
|
|
|
See the entries below for more information.
|
|
|
|
|
For details see the openSUSE Bugzilla bnc#735404 issue.
|
|
|
|
|
Changes since 1.7rc1 include (excerpt):
|
|
|
|
|
* The lpadmin command did not send the PPD name from
|
|
|
|
|
the "-m" option (<rdar://problem/15264697>).
|
|
|
|
|
* The scheduler did not respond using the hostname
|
|
|
|
|
specified by the client (<rdar://problem/14583574>).
|
|
|
|
|
* Fixed a couple memory leaks in ippfind that were
|
|
|
|
|
reported by Clang.
|
|
|
|
|
* Fixed a compile issue on 64-bit Linux with Clang - need
|
|
|
|
|
to use the -pie option instead of -Wl,-pie now
|
|
|
|
|
(<rdar://problem/14480938>).
|
|
|
|
|
* The scheduler incorrectly did not pass a FINAL_CONTENT_TYPE
|
|
|
|
|
environment variable to the filters or backend
|
|
|
|
|
(<rdar://problem/14355011>).
|
|
|
|
|
For details see the CHANGES.txt file.
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Jul 16 16:40:56 CEST 2013 - jsmeix@suse.de
|
|
|
|
|
|
|
|
|
|
- Version upgrade to 1.7rc1 only for testing purpose.
|
|
|
|
|
CUPS >= 1.6 has major incompatible changes compared to CUPS 1.5.
|
|
|
|
|
After a version upgrade to CUPS >= 1.6 printing in the network
|
|
|
|
|
would no longer work as it did up to CUPS 1.5.
|
|
|
|
|
For details regarding incompatible changes in CUPS >= 1.6 see
|
|
|
|
|
https://bugzilla.novell.com/show_bug.cgi?id=735404
|
|
|
|
|
and follow the links therein.
|
|
|
|
|
The 1.7 series is primarily a "polish" release with improved
|
|
|
|
|
support for paid, PIN, and release printing, expanded support
|
|
|
|
|
for IPP Everywhere, automatic support for data compression,
|
2015-06-09 11:10:04 +02:00
|
|
|
|
and improved CUPS APIs.
|
2015-02-16 16:27:41 +01:00
|
|
|
|
CUPS 1.7rc1 is the first release candidate for CUPS 1.7.0
|
|
|
|
|
and includes the fixes from CUPS 1.6.3, adds a new
|
|
|
|
|
ippfind utility, fixes some issues in the ipptool utility,
|
|
|
|
|
and fixes some general printing bugs.
|
|
|
|
|
For details what is new in CUPS 1.7 see the CHANGES.txt file.
|
|
|
|
|
Excerpt:
|
|
|
|
|
* Printer xxx-default values were not reported by
|
|
|
|
|
Get-Printer-Attributes or lpoptions (<rdar://problem/14401795>)
|
|
|
|
|
* Added a new ippfind tool for finding IPP printers and
|
|
|
|
|
other Bonjour services (<rdar://problem/13876199>)
|
|
|
|
|
- Version upgrade to 1.6.3
|
|
|
|
|
CUPS 1.6.3 fixes some compatibility issues with servers
|
|
|
|
|
running CUPS 1.3.12 or older, fixes some general printing bugs,
|
|
|
|
|
and fixes some minor security issues.
|
|
|
|
|
For details what is new in CUPS 1.6 see the CHANGES-1.6.txt file.
|
|
|
|
|
Excerpt:
|
|
|
|
|
* The lp, lpq, lpr, and lpstat now display an error message
|
|
|
|
|
advising the use of the /version=1.1 ServerName option
|
|
|
|
|
(<rdar://problem/14290628>)
|
|
|
|
|
* Added documentation about the /version=1.1 option to ServerName
|
|
|
|
|
in client.conf (<rdar://problem/14216262>)
|
|
|
|
|
* The lp, lpq, lpr, and lpstat commands incorrectly ignored
|
|
|
|
|
the default printer set in the lpoptions file
|
|
|
|
|
(<rdar://problem/14216472>)
|
|
|
|
|
* Printing using "ipps" URIs was not encrypted.
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Mar 19 10:19:41 CET 2013 - jsmeix@suse.de
|
|
|
|
|
|
|
|
|
|
- Version upgrade to 1.6.2.
|
|
|
|
|
CUPS 1.6 has major incompatible changes compared to CUPS 1.5.
|
|
|
|
|
For details regarding incompatible changes in CUPS 1.6 see
|
|
|
|
|
https://bugzilla.novell.com/show_bug.cgi?id=735404
|
|
|
|
|
and follow the links therein.
|
|
|
|
|
For details what is new in CUPS 1.6 see the CHANGES.txt file.
|
|
|
|
|
Excerpt:
|
|
|
|
|
* Security: All file, directory, user, and group settings
|
|
|
|
|
are now stored in a separate cups-files.conf configuration
|
|
|
|
|
file that cannot be set through the CUPS web interface
|
|
|
|
|
or APIs (STR #4223).
|
|
|
|
|
* The IPP backend could crash if the printer disconnects
|
|
|
|
|
early (STR #4284).
|
|
|
|
|
* cupsGetPPD did not work with statically-configured CUPS
|
|
|
|
|
shared queues (STR #4178).
|
|
|
|
|
* Bad IPP responses could crash ipptool (STR #4262).
|
|
|
|
|
* Updated USB quirk rules for various printers
|
|
|
|
|
(STR #4217, STR #4263, STR #4286).
|
|
|
|
|
* Added USB blacklisting for printers that require a custom
|
|
|
|
|
backend (STR #4218).
|
|
|
|
|
* The CUPS library did not always detect a timed out connection
|
|
|
|
|
to the server which could cause temporary loss of printing
|
|
|
|
|
from applications (STR #4187).
|
|
|
|
|
* The IPP backend now stops queues when the server configuration
|
|
|
|
|
prevents successful job submission (STR #4125).
|
|
|
|
|
* CUPS 1.6 clients using the ServerName directive in client.conf
|
|
|
|
|
did not work with CUPS 1.3.x or older servers
|
|
|
|
|
(STR #4231, STR #4291).
|
|
|
|
|
* The scheduler could crash when using Avahi
|
|
|
|
|
(STR #4183, STR #4192, STR #4200, STR #4213).
|
|
|
|
|
* The IPP backend could get stuck in an endless loop on certain
|
|
|
|
|
network errors (STR #4194).
|
|
|
|
|
* The scheduler no longer allows job-name values that are
|
|
|
|
|
not valid network Unicode strings (STR #4072).
|
|
|
|
|
* The network backends now support disabling of SNMP supply
|
|
|
|
|
level queries via the "snmp" URI option (STR #4106).
|
|
|
|
|
* The IPP backend did not specify the compression used
|
|
|
|
|
(STR #4181).
|
|
|
|
|
* The scheduler did not recognize dnssd: or ipps: URIs as
|
|
|
|
|
Bonjour shared queues (STR #4158).
|
|
|
|
|
* Applications could not get the PPD file for
|
|
|
|
|
statically-configured Bonjour-shared print queues (STR #4159).
|
|
|
|
|
* Fixed a USB backend compatibility issue on systems using
|
|
|
|
|
libusb (STR #4155, STR #4191).
|
|
|
|
|
* Some Bonjour features were not available on systems
|
|
|
|
|
with Avahi (STR #4156).
|
|
|
|
|
- cups-1.6.1-revertSTR3929_to_default_IPP_1.1_again.patch is
|
|
|
|
|
obsolete because it is fixed upstream (STR #4231, STR #4291).
|
|
|
|
|
- cups-1.6.2-adapt_cupsd.conf_defaults_for_SUSE.patch
|
|
|
|
|
replaces cups-1.6.1-adapt_cupsd.conf_defaults_for_SUSE.patch
|
|
|
|
|
- Adapted cups-client.conf template file for CUPS 1.6.
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Nov 28 15:04:58 CET 2012 - jsmeix@suse.de
|
|
|
|
|
|
|
|
|
|
- cups-1.6.1-adapt_cupsd.conf_defaults_for_SUSE.patch
|
|
|
|
|
adapts the defaults in cupsd.conf for SUSE.
|
|
|
|
|
It replaces cups-1.3.6-access_conf.patch that
|
|
|
|
|
added 'Allow 127.0.0.2' to cupsd.conf to allow access
|
|
|
|
|
for the loopback IP address 127.0.0.2 which is set for
|
|
|
|
|
the hostname by SUSE in /etc/hosts at least up to
|
|
|
|
|
SLE10 products.
|
|
|
|
|
It also replaces cups-1.5-additional_policies.patch
|
|
|
|
|
that added the 'allowallforanybody' policy to cupsd.conf
|
|
|
|
|
see https://fate.novell.com/303515
|
|
|
|
|
Furthermore it fixes some issues with the CUPS upstream
|
|
|
|
|
defaults i.e. removal of no longer supported keywords
|
|
|
|
|
BrowseOrder BrowseAllow DefaultAuthType (otherwise cupsd
|
|
|
|
|
prints error messages of the form "Unknown directive
|
|
|
|
|
BrowseOrder on line 22").
|
|
|
|
|
- cups-1.6.1-revertSTR3929_to_default_IPP_1.1_again.patch
|
|
|
|
|
reverts the incompatible change in CUPS 1.6
|
|
|
|
|
that makes IPP version 2.0 default
|
|
|
|
|
(see https://www.cups.org/str.php?L3929)
|
|
|
|
|
back to using IPP version 1.1 by default.
|
|
|
|
|
Otherwise CUPS 1.6 on clients cannot talk to older CUPS
|
|
|
|
|
servers in particular not to CUPS 1.3.9 on SLE11.
|
|
|
|
|
E.g. on a CUPS 1.6 client "lpstat -h sle11.cups.server -p"
|
|
|
|
|
would fail on the client with "lpstat: Bad Request" and
|
|
|
|
|
the CUPS 1.3.9 server logs in /var/log/cups/error_log the
|
|
|
|
|
lines "E ... cupsdReadClient: ... IPP Read Error!"
|
|
|
|
|
and "D ... cupsdSendError: ... code=400 (Bad Request)".
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Nov 27 15:50:16 CET 2012 - jsmeix@suse.de
|
|
|
|
|
|
|
|
|
|
- Version upgrade to 1.6.1.
|
|
|
|
|
CUPS 1.6 has major incompatible changes compared to CUPS 1.5.
|
|
|
|
|
After a version upgrade to CUPS 1.6 printing in the network
|
|
|
|
|
would no longer work as it did up to CUPS 1.5.
|
|
|
|
|
For an overview about what is new in CUPS 1.6 see
|
|
|
|
|
http://www.cups.org/documentation.php/doc-1.6/whatsnew.html
|
|
|
|
|
For details regarding incompatible changes in CUPS 1.6 see
|
|
|
|
|
https://bugzilla.novell.com/show_bug.cgi?id=735404
|
|
|
|
|
and follow the links therein.
|
|
|
|
|
For details what is new in CUPS 1.6 see the CHANGES.txt file.
|
|
|
|
|
Excerpt:
|
|
|
|
|
* CUPS now supports color management using colord (STR #3808).
|
|
|
|
|
* CUPS now supports Bonjour using Avahi (STR #3066).
|
|
|
|
|
* The "brightness", "columns", "fitplot", "gamma", "hue",
|
|
|
|
|
"natural-scaling", "penwidth", "position", "ppi",
|
|
|
|
|
"saturation", and "scaling" options are not longer
|
|
|
|
|
supported (STR #4010).
|
|
|
|
|
* Added new destination connection and enumeration functions
|
|
|
|
|
via new dynamic destination APIs (STR #3924).
|
|
|
|
|
* Added new option, localization, and job submission functions
|
|
|
|
|
via new APIs that do not depend on PPD files (STR #3925).
|
|
|
|
|
* The scheduler now supports a DefaultAuthType of "auto" to
|
|
|
|
|
automatically choose between Basic (username/password)
|
|
|
|
|
and Negotiate (Kerberos) authentication.
|
|
|
|
|
* CUPS no longer supports automatic remote printers or
|
|
|
|
|
implicit classes via the CUPS, LDAP, or SLP protocols
|
|
|
|
|
(STR #3922, STR #3923).
|
|
|
|
|
* The PPD APIs are now deprecated and will be removed
|
|
|
|
|
in a future version of CUPS (STR #3927).
|
|
|
|
|
* The default IPP version for requests is now 2.0 (STR #3929).
|
|
|
|
|
* The IPP APIs no longer expose the ipp_t or ipp_attribute_t
|
|
|
|
|
structures and instead provide accessor functions (STR #3928).
|
|
|
|
|
* The scheduler will no longer run programs with group write
|
|
|
|
|
permission.
|
|
|
|
|
* The PHP module has been removed (STR #3932).
|
|
|
|
|
* The bannertops, commandtoescpx, commandtopclx, imagetops,
|
|
|
|
|
imagetoraster, pdftops, rastertoescpx, rastertopclx,
|
|
|
|
|
and texttops filters have been removed (STR #3930).
|
|
|
|
|
* The serial and parallel backends have been removed (STR #3935).
|
|
|
|
|
- Adapted cups-config-libs.patch for CUPS 1.6.1
|
|
|
|
|
(IMGLIBS is no longer present in cups-config.in).
|
2012-11-16 14:53:24 +01:00
|
|
|
|
|
2012-10-18 17:03:53 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Oct 18 12:07:09 UTC 2012 - coolo@suse.com
|
|
|
|
|
|
2015-06-09 11:10:04 +02:00
|
|
|
|
- buildrequire systemd through the pkgconfig provide to get
|
2012-10-18 17:03:53 +02:00
|
|
|
|
systemd-mini in build environment (to break cycle)
|
|
|
|
|
|
2012-09-27 09:45:29 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Sep 27 07:27:01 UTC 2012 - mmeister@suse.com
|
|
|
|
|
|
|
|
|
|
- Version upgrade to 1.5.4 (mainly a bugfix release) that fixes
|
|
|
|
|
some IPP printing issues.
|
|
|
|
|
Excerpt:
|
2015-06-09 11:10:04 +02:00
|
|
|
|
* The IPP backend no longer tries to get the job status for
|
|
|
|
|
printers that do not implement the required operation
|
2012-09-27 09:45:29 +02:00
|
|
|
|
(STR #4083).
|
2015-06-09 11:10:04 +02:00
|
|
|
|
* Sending a document in an unsupported format to an IPP printer
|
2012-09-27 09:45:29 +02:00
|
|
|
|
now automatically cancels the job (STR #4093).
|
|
|
|
|
* The IPP backend now treats the client-error-not-possible
|
2015-06-09 11:10:04 +02:00
|
|
|
|
status code as a job history issue, allowing IPP printing to
|
2012-09-27 09:45:29 +02:00
|
|
|
|
Windows to work(STR #4047).
|
|
|
|
|
For a complete list see the CHANGES.txt file.
|
|
|
|
|
- revert_cups-ssl.m4_to_1.5.2.patch is now obsolete because of
|
|
|
|
|
an upstream fix.
|
|
|
|
|
|
2012-09-05 00:58:37 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Sep 4 14:55:57 UTC 2012 - cfarrell@suse.com
|
|
|
|
|
|
|
|
|
|
- license update: SUSE-GPL-2.0-with-openssl-exception and LGPL-2.1
|
2012-09-27 09:45:29 +02:00
|
|
|
|
Apple grant an openssl linking exception (and an exception for
|
|
|
|
|
linking on Apple owned operating systems).
|
2012-09-05 00:58:37 +02:00
|
|
|
|
|
2012-08-01 12:50:21 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Aug 1 11:32:13 CEST 2012 - jsmeix@suse.de
|
|
|
|
|
|
|
|
|
|
- Save /etc/cups/cupsd.conf and /etc/cups/cupsd.conf.default
|
|
|
|
|
from becoming hardlinked via the fdupes run in cups.spec
|
|
|
|
|
(see the 'Wed Aug 26 21:43:03 CEST 2009' entry below)
|
|
|
|
|
by making their content different and at the same time
|
|
|
|
|
fix the misleading comment (openSUSE Bugzilla bnc#773971).
|
|
|
|
|
- Minor clean-up in cups.spec (the "Remove unpackaged files"
|
|
|
|
|
via "rm -rf <some_man-pages>") is no longer needed because
|
|
|
|
|
those man pages are no longer installed.
|
|
|
|
|
|
2012-05-23 14:12:05 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed May 16 14:32:36 CEST 2012 - jsmeix@suse.de
|
|
|
|
|
|
|
|
|
|
- Upgraded to CUPS 1.5.3 (mainly a bugfix release) that fixes
|
|
|
|
|
a number of PostScript, SSL, authenticated printing,
|
|
|
|
|
and networking issues.
|
|
|
|
|
Excerpt:
|
|
|
|
|
* The scheduler could crash if a PPD file contained
|
|
|
|
|
an invalid paper size (STR #4049).
|
|
|
|
|
* Missing localizations caused empty output (STR #4033).
|
|
|
|
|
* Changed how timeouts are implemented in the LPD backend
|
|
|
|
|
(STR #4013).
|
|
|
|
|
* The default InputSlot setting was never used (STR #3957).
|
|
|
|
|
* Fixed the IPP backend's handling of HTTP/1.0 compatibility
|
|
|
|
|
(STR #3988).
|
|
|
|
|
For a complete list see the CHANGES.txt file.
|
|
|
|
|
- revert_cups-ssl.m4_to_1.5.2.patch reverts cups-ssl.m4 to what
|
|
|
|
|
it was in CUPS 1.5.2 so that autoconf produces a syntactically
|
|
|
|
|
correct configure script otherwise "bash -n configure" fails
|
|
|
|
|
with "syntax error: unexpected end of file",
|
|
|
|
|
see http://www.cups.org/str.php?L4084
|
|
|
|
|
|
2012-04-12 11:02:43 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Apr 12 10:53:55 CEST 2012 - jsmeix@suse.de
|
|
|
|
|
|
|
|
|
|
- No longer require Ghostscript but only "Recommends: ghostscript"
|
|
|
|
|
because the Ghostscript device "cups" is needed by several CUPS
|
|
|
|
|
filters (in particular the "rasterto..." filters) but those
|
|
|
|
|
filters are not used on all systems (e.g. on a print server
|
|
|
|
|
with only "raw" queues) so that a weak Recommends fits better.
|
|
|
|
|
Furthermore this avoids a build dependency cycle between the
|
|
|
|
|
main-packages cups and ghostscript.
|
|
|
|
|
- No longer require /usr/bin/pdftops but only a "Recommends"
|
|
|
|
|
because the CUPS filter /usr/lib/cups/filter/pdftops
|
|
|
|
|
(which calls /usr/bin/pdftops) is not used on all systems
|
|
|
|
|
(e.g. on a print server with only "raw" queues) so that
|
|
|
|
|
a weak Recommends fits better.
|
|
|
|
|
|
2012-04-10 15:57:56 +02:00
|
|
|
|
-------------------------------------------------------------------
|
2012-04-10 16:31:33 +02:00
|
|
|
|
Tue Apr 10 16:25:24 CEST 2012 - jsmeix@suse.de
|
2012-04-10 15:57:56 +02:00
|
|
|
|
|
|
|
|
|
- In cups.spec only "Requires: ghostscript" but no longer require
|
|
|
|
|
ghostscript-fonts-std in cups.spec because in ghostscript.spec
|
|
|
|
|
there is already "Requires: ghostscript-fonts-std"
|
|
|
|
|
(related to openSUSE Bugzilla bnc#735824).
|
2012-04-10 16:31:33 +02:00
|
|
|
|
- In cups.spec remove the Obsoletes/Provides cups-SUSE-ppds-dat
|
|
|
|
|
because cups-SUSE-ppds-dat.rpm existed only up to SLE10
|
|
|
|
|
but it does no longer exist since 11.1/SLE11
|
|
|
|
|
and CUPS 1.5.x is not provided for SLE10.
|
|
|
|
|
- Use traditional bash scriptlets for post/postun with
|
|
|
|
|
an explicite "exit 0" line at the end to be fail safe and
|
|
|
|
|
therefore also "PreReq: /sbin/ldconfig" explicitly for the
|
|
|
|
|
cups-libs sub-package, see the "Shared_libraries" section in
|
|
|
|
|
http://en.opensuse.org/openSUSE:Packaging_scriptlet_snippets
|
2012-04-10 15:57:56 +02:00
|
|
|
|
|
2012-02-07 16:37:15 +01:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Feb 7 14:42:59 CET 2012 - jsmeix@suse.de
|
|
|
|
|
|
|
|
|
|
- Upgraded to CUPS 1.5.2 (mainly a bugfix release). This release
|
|
|
|
|
fixes a number of printing, encryption, and ipptool issues.
|
|
|
|
|
Excerpt:
|
|
|
|
|
* The scheduler incorrectly used free() on a POSIX ACL value,
|
|
|
|
|
which could cause a crash (STR #3970).
|
|
|
|
|
* Encryption was broken with OpenSSL (probably STR #3933
|
|
|
|
|
and bnc#739410 ).
|
|
|
|
|
* Badly formed GIF files could cause the image filters
|
|
|
|
|
to crash (STR #3914).
|
|
|
|
|
For a complete list see the CHANGES.txt file.
|
|
|
|
|
|
2012-01-10 11:02:58 +01:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Jan 10 04:58:44 UTC 2012 - crrodriguez@opensuse.org
|
|
|
|
|
|
2012-02-07 16:37:15 +01:00
|
|
|
|
- Use explicit buildrequires on the needed libraries.
|
2012-01-10 11:02:58 +01:00
|
|
|
|
otherwise build will fail after libtiff-devel deps cleanup
|
|
|
|
|
- Cleanup requires of -devel package, which only needs glibc-devel
|
2015-02-16 16:27:41 +01:00
|
|
|
|
- cups-config-libs.patch fixes cups-config script,
|
|
|
|
|
which with option --libs adds:
|
2015-06-09 11:10:04 +02:00
|
|
|
|
LIBS="-lgssapi_krb5 -lkrb5 -lk5crypto -lcom_err -lssl -lcrypto
|
2012-02-07 16:37:15 +01:00
|
|
|
|
-lz -lpthread -lm -lcrypt "
|
|
|
|
|
IMGLIBS="-ltiff -ljpeg -lpng"
|
2015-02-16 16:27:41 +01:00
|
|
|
|
This only makes sense when using static linking but we do not
|
|
|
|
|
ship static libraries and it will only bloat dependant packages.
|
2012-01-10 11:02:58 +01:00
|
|
|
|
|
2011-12-20 10:35:50 +01:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Sat Dec 17 18:19:14 UTC 2011 - crrodriguez@opensuse.org
|
|
|
|
|
|
2012-02-07 16:37:15 +01:00
|
|
|
|
- Update systemd patch, Bind to datagram socket as well in
|
|
|
|
|
systemd cups.socket unit file, to prevent that port being
|
|
|
|
|
stolen by another service (from RH).
|
|
|
|
|
- There is no need to use -fno-strict-aliasing
|
|
|
|
|
in cflags any longer.
|
2011-12-20 10:35:50 +01:00
|
|
|
|
|
2011-12-06 15:51:06 +01:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Sat Dec 3 20:09:32 UTC 2011 - crrodriguez@opensuse.org
|
|
|
|
|
|
2012-02-07 16:37:15 +01:00
|
|
|
|
- Update systemd patch to a newer version that uses
|
2011-12-06 15:51:06 +01:00
|
|
|
|
libsystemd-daemon instead of bundling sd-daemon wrappers.
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Sat Dec 3 19:11:36 UTC 2011 - crrodriguez@opensuse.org
|
|
|
|
|
|
2015-02-16 16:27:41 +01:00
|
|
|
|
- cups-0001-systemd-add-systemd-socket-activation-and-unit-files.patch
|
|
|
|
|
adds complete systemd support, the hardware stuff is handled in
|
2012-02-07 16:37:15 +01:00
|
|
|
|
builtin udev rules (see /lib/udev/rules.d/99-systemd.rules).
|
|
|
|
|
See also http://0pointer.de/blog/projects/socket-activation2.html
|
2011-12-06 15:51:06 +01:00
|
|
|
|
|
2011-10-06 11:36:19 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Oct 6 11:00:09 CEST 2011 - jsmeix@suse.de
|
|
|
|
|
|
|
|
|
|
- Upgraded to CUPS 1.5.0 (openSUSE Bugzilla bnc#722057)
|
|
|
|
|
Backward incompatible changes:
|
|
|
|
|
* The main header cups/cups.h no longer includes the PPD header
|
|
|
|
|
cups/ppd.h which may require code changes to applications.
|
|
|
|
|
* CUPS no longer supports the old ~/.cupsrc or ~/.lpoptions files
|
|
|
|
|
from CUPS 1.1.x. The ~/.cups/client.conf and ~/.cups/lpoptions
|
|
|
|
|
files that were introduced in CUPS 1.2 must now be used.
|
|
|
|
|
* The scheduler now requires that filters and backends
|
|
|
|
|
have group write permissions disabled (security).
|
|
|
|
|
* The HP-GL/2 filter is no longer included (STR #3322).
|
|
|
|
|
* The SCSI backend is no longer included (STR #3500).
|
|
|
|
|
Other changes:
|
|
|
|
|
* Updated the PostScript filter to support IncludeFeature
|
|
|
|
|
in more circumstances (STR #3417).
|
|
|
|
|
* The scheduler now sets the process group for child processes
|
|
|
|
|
and manages the group (STR #2829).
|
|
|
|
|
* The scheduler now more carefully creates and removes
|
|
|
|
|
configuration, cache, and state files (STR #3715).
|
|
|
|
|
* The lpadmin command now allows default option values
|
|
|
|
|
to be deleted (STR #2959).
|
|
|
|
|
* Restored support for GNU TLS and OpenSSL with threading
|
|
|
|
|
enabled (STR #3605, STR #3461).
|
|
|
|
|
Therefore cups-1.4.4-str3461-1.4.reverted.patch
|
|
|
|
|
is no longer needed (openSUSE Bugzilla bnc#617026).
|
|
|
|
|
* Increased the default RIPCache value to 128MB (STR #3535).
|
|
|
|
|
Therefore cups-1.4.4-set_default_RIPCache_128m.patch
|
|
|
|
|
is no longer needed (openSUSE Bugzilla bnc#628233).
|
|
|
|
|
* Updated PDF filter to support Ghostscript ps2write (STR #3766).
|
|
|
|
|
* Updated PDF filter to support Poppler option to preserve page
|
|
|
|
|
sizes in PDF files when the user has not selected a particular
|
|
|
|
|
media size (STR #3689).
|
|
|
|
|
* Added new PWG Raster filter for IPP Everywhere printer support.
|
|
|
|
|
* Added support for a new cupsFilter2 keyword in PPD files
|
|
|
|
|
to allow for the propagation of the actual MIME media type
|
|
|
|
|
produced by a filter.
|
|
|
|
|
* Name resolution errors no longer no longer cause
|
|
|
|
|
queues to stop (STR #3719, STR #3753). See also
|
|
|
|
|
https://bugzilla.novell.com/show_bug.cgi?id=337794#c16
|
|
|
|
|
* Added a new cups-exec helper program that applies security
|
|
|
|
|
profiles to filters, port monitors, backends, CGI programs,
|
|
|
|
|
and mini-daemons.
|
|
|
|
|
* The web interface can now be disabled using the WebInterface
|
|
|
|
|
directive in cupsd.conf (STR #2625).
|
|
|
|
|
* The ipptest tool is now a first-class user program (STR #3484).
|
|
|
|
|
For a complete list see the CHANGES.txt file.
|
|
|
|
|
- cups-1.4.4-str3461-1.4.reverted.patch (bnc#617026) and
|
|
|
|
|
cups-1.4.4-set_default_RIPCache_128m.patch (bnc#628233)
|
|
|
|
|
are no longer needed because the issues are fixed upstream.
|
|
|
|
|
cups-1.5-additional_policies.patch (fate#303515) replaces the
|
|
|
|
|
cups-1.4-additional_policies.patch which does no longer apply.
|
|
|
|
|
|
2011-10-04 12:16:05 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Sep 30 20:07:52 UTC 2011 - coolo@suse.com
|
|
|
|
|
|
|
|
|
|
- add libtool as buildrequire to make the spec file more reliable
|
|
|
|
|
|
2011-09-29 15:17:11 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Sep 29 15:10:07 CEST 2011 - jsmeix@suse.de
|
|
|
|
|
|
|
|
|
|
- Reverted the change from meissner below dated
|
|
|
|
|
"Fri Sep 23 09:54:39 CEST 2011" so that baselibs.conf again
|
|
|
|
|
contains only one line "cups-libs" as before because the
|
|
|
|
|
submitrequest 85423 Printing/cups -> openSUSE:Factory/cups
|
|
|
|
|
was declined by coolo with the following reason:
|
|
|
|
|
"cups-devel-32bit requires cups-32bit (default requires),
|
|
|
|
|
which does not exist".
|
|
|
|
|
|
2011-09-29 12:46:25 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Sep 29 11:51:21 CEST 2011 - jsmeix@suse.de
|
|
|
|
|
|
|
|
|
|
- Upgraded to CUPS 1.4.8
|
|
|
|
|
* network backends could crash if a printer returned a value
|
|
|
|
|
of 0 for the maximum capacity for a supply (STR #3875)
|
|
|
|
|
* For a complete list see the CHANGES.txt file.
|
|
|
|
|
- Upgraded to CUPS 1.4.7
|
|
|
|
|
* imageto* filters could crash with bad GIF files (STR #3867)
|
|
|
|
|
* CUPS did not work with some printers that incorrectly
|
|
|
|
|
implemented the HTTP/1.1 standard (STR #3778, STR #3791)
|
|
|
|
|
* Fixed crash in scheduler when the application/octet-stream
|
|
|
|
|
MIME type was not defined (STR #3690)
|
|
|
|
|
* The web interface no longer tries to use multi-part delivery
|
|
|
|
|
when adding printers (STR #3455) using Epiphany or IE
|
|
|
|
|
* "lp" and "lpr" failed with Kerberos enabled (STR #3768)
|
|
|
|
|
* Remote printer URIs with options did not work (STR #3717)
|
|
|
|
|
* The scheduler now only looks up interface hostnames
|
|
|
|
|
if HostNameLookups are enabled (STR #3737)
|
|
|
|
|
* The scheduler could crash if a browsed printer times out
|
|
|
|
|
while a job is printing (STR #3754)
|
|
|
|
|
* For a complete list see the CHANGES.txt file.
|
|
|
|
|
|
2011-09-29 11:35:35 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Sep 29 11:20:00 CEST 2011 - jsmeix@suse.de
|
|
|
|
|
|
|
|
|
|
- cups-1.4.4-set_default_RIPCache_128m.patch enlarges
|
|
|
|
|
the CUPS upstream default RIPCache from 8m to 128m
|
|
|
|
|
to avoid various kind of printout failures
|
|
|
|
|
(STR #3535, and Novell/openSUSE Bugzilla bnc#628233).
|
|
|
|
|
|
2011-09-27 11:14:03 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Sep 23 09:54:39 CEST 2011 - meissner@suse.de
|
|
|
|
|
|
2011-09-29 11:35:35 +02:00
|
|
|
|
- cups-devel baselibs package for Wine 32bit on 64bit building
|
|
|
|
|
(added "cups-devel requires cups-libs..." to baselibs.conf).
|
2011-09-27 11:14:03 +02:00
|
|
|
|
|
2011-09-22 14:09:36 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Sun Sep 18 00:09:02 UTC 2011 - jengelh@medozas.de
|
|
|
|
|
|
|
|
|
|
- Remove redundant tags/sections from specfile
|
2011-09-29 11:35:35 +02:00
|
|
|
|
(removed "norootforbuild" and the "clean" section).
|
2011-09-22 14:09:36 +02:00
|
|
|
|
|
2011-07-28 15:55:38 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Jul 25 12:08:35 CEST 2011 - meissner@suse.de
|
|
|
|
|
|
|
|
|
|
- "no" locale is "nb" (norwegian bokmal) these days
|
2011-09-29 11:35:35 +02:00
|
|
|
|
(move /usr/share/locale/no to /usr/share/locale/nb).
|
|
|
|
|
- "zh" is probably meant as "zh_CN", as "zh_TW" exists
|
|
|
|
|
(move /usr/share/locale/zh to /usr/share/locale/zh_CN).
|
2011-07-28 15:55:38 +02:00
|
|
|
|
|
2011-02-10 13:18:31 +01:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Feb 10 11:51:56 CET 2011 - jsmeix@suse.de
|
|
|
|
|
|
2011-04-21 15:15:09 +02:00
|
|
|
|
- Cleaned up the RPM Requires:
|
2011-02-10 13:18:31 +01:00
|
|
|
|
Removed the needless "Suggests: poppler-tools" because there
|
|
|
|
|
is "Requires: /usr/bin/pdftops" which should be sufficient.
|
|
|
|
|
Replaced the RPM Requires for foomatic-filters by Recommends
|
|
|
|
|
because foomatic-rip is only needed by CUPS in a few cases
|
|
|
|
|
and printer driver packages which need foomatic-rip require
|
|
|
|
|
foomatic-filters on their own.
|
2015-06-09 11:10:04 +02:00
|
|
|
|
|
2011-01-14 14:58:54 +01:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Jan 14 14:25:39 CET 2011 - jsmeix@suse.de
|
|
|
|
|
|
|
|
|
|
- Upgraded to CUPS 1.4.6
|
|
|
|
|
CUPS 1.4.6 fixes in particular a regression:
|
|
|
|
|
* A change was made in CUPS 1.4.5's pstops filter
|
|
|
|
|
that it did not support landscape printing
|
|
|
|
|
of PostScript files (STR #3722)
|
|
|
|
|
* For a complete list see the CHANGES.txt file.
|
|
|
|
|
|
2010-12-09 14:57:30 +01:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Dec 9 13:26:06 CET 2010 - jsmeix@suse.de
|
|
|
|
|
|
2011-09-29 11:35:35 +02:00
|
|
|
|
- Fixed coolo's quick and ditry unconditioned
|
2010-12-09 14:57:30 +01:00
|
|
|
|
"PreReq: sysvinit(syslog)" stuff from below because build fails
|
|
|
|
|
everywhere except openSUSE:Factory (i.e. openSUSE 11.4)
|
|
|
|
|
because sysvinit(syslog) is nowhere else provided.
|
|
|
|
|
Now the PreReq is only if suse_version > 1130.
|
|
|
|
|
|
2010-12-09 13:20:45 +01:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Dec 7 21:18:59 UTC 2010 - coolo@novell.com
|
|
|
|
|
|
|
|
|
|
- prereq init script syslog
|
|
|
|
|
|
2010-11-12 09:51:26 +01:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Nov 12 08:47:49 CET 2010 - jsmeix@suse.de
|
|
|
|
|
|
|
|
|
|
- Upgraded to CUPS 1.4.5
|
|
|
|
|
CUPS 1.4.5 fixes several scheduler and printing bugs
|
|
|
|
|
as well as a reported security bug, in particular:
|
|
|
|
|
* Fixed a IPP parsing memory corruption bug
|
|
|
|
|
(CVE-2010-2941, STR #3648, Novell/Suse Bugzilla bnc#649256)
|
|
|
|
|
* Fixed a PPD loader bug that could crash the cupsd (STR #3680)
|
|
|
|
|
* The scheduler restarts jobs while shutting down (STR #3679)
|
|
|
|
|
* Did not initialize Kerberos in all cases (STR #3662)
|
|
|
|
|
* The socket backend could go into an infinite loop
|
|
|
|
|
with certain printers (STR #3622)
|
|
|
|
|
* Moving a job via the web interface failed without
|
|
|
|
|
asking for authentication (STR #3559)
|
|
|
|
|
* The web interface did not allow a user to change
|
|
|
|
|
the driver (STR #3537, STR #3601)
|
|
|
|
|
* For a complete list see the CHANGES.txt file.
|
|
|
|
|
|
2010-07-15 15:27:42 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Jul 15 15:03:20 CEST 2010 - jsmeix@suse.de
|
|
|
|
|
|
|
|
|
|
- Fixed /etc/init.d/cups (cups.init source file) so that stopping
|
|
|
|
|
the cupsd waits up to 10 seconds until the cupsd had actually
|
|
|
|
|
finished (if not SIGKILL would be sent to it) to make sure
|
|
|
|
|
that "rccups restart" and "rccups stop ; rccups start" work
|
|
|
|
|
correctly (see Novell/Suse Bugzilla bnc#622058).
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Jun 25 11:28:41 CEST 2010 - jsmeix@suse.de
|
|
|
|
|
|
|
|
|
|
- cups-1.4.4-str3461-1.4.reverted.patch reverts changes
|
|
|
|
|
by CUPS STR #3461 as band-aid workaround for now to avoid
|
|
|
|
|
that Mozilla.org applications crash when they try to print
|
|
|
|
|
(STR #3461, STR #3605, and Novell/Suse Bugzilla bnc#617026).
|
|
|
|
|
|
2010-06-22 10:30:11 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Jun 18 09:11:02 CEST 2010 - jsmeix@suse.de
|
|
|
|
|
|
|
|
|
|
- Upgraded to CUPS 1.4.4
|
|
|
|
|
CUPS 1.4.4 fixes several security, scheduler, printing,
|
|
|
|
|
and conformance issues, in particular:
|
|
|
|
|
* The web interface now includes additional CSRF protection
|
|
|
|
|
(CVE-2010-0540, STR #3498, STR #3593, and
|
|
|
|
|
Novell/Suse Bugzilla bnc#601830)
|
|
|
|
|
* The texttops filter did not check the results of allocations
|
|
|
|
|
(CVE-2010-0542, STR #3516, Novell/Suse Bugzilla bnc#601352)
|
|
|
|
|
* The web admin interface could disclose the contents of memory
|
|
|
|
|
(CVE-2010-1748, STR #3577, Novell/Suse Bugzilla bnc#604271)
|
|
|
|
|
* The fix for CVE-2009-3553 (STR #3200) was incomplete
|
|
|
|
|
for systems that use kqueue or epoll (STR #3490)
|
|
|
|
|
* CUPS could overwrite files as root in directories owned or
|
|
|
|
|
writable by non-root users (STR #3510)
|
|
|
|
|
* The OpenSSL interfaces have been made thread-safe and
|
|
|
|
|
the GNU TLS interface is explicitly forbidden
|
|
|
|
|
when threading is enabled (STR #3461)
|
|
|
|
|
* The scheduler could crash on restart if classes
|
|
|
|
|
were defined (STR #3524)
|
|
|
|
|
* The socket backend no longer waits for back-channel data
|
|
|
|
|
on platforms other than Mac OS X (STR #3495)
|
|
|
|
|
* For a complete list see the CHANGES.txt file.
|
|
|
|
|
|
2010-06-02 18:10:52 +02:00
|
|
|
|
-------------------------------------------------------------------
|
2010-06-18 05:32:34 +02:00
|
|
|
|
Mon Jun 14 14:47:29 CEST 2010 - vuntz@opensuse.org
|
|
|
|
|
|
|
|
|
|
- Update cups-1.3.9-desktop_file.patch: add the Settings category
|
|
|
|
|
(required since we use HardwareSettigns) and add NotShowIn=GNOME:
|
|
|
|
|
in GNOME, the configuration tool we want to use is
|
|
|
|
|
system-config-printer.
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
2010-06-02 18:10:52 +02:00
|
|
|
|
Wed Jun 2 15:16:02 CEST 2010 - jsmeix@suse.de
|
|
|
|
|
|
|
|
|
|
- Explicitly set configure option '--enable-debug' because
|
|
|
|
|
otherwise the cups-debuginfo RPM would be empty.
|
|
|
|
|
- Removed no longer recognized configure option '--enable-pie'
|
|
|
|
|
(it compiles and links with '-pie -fPIE -fPIC' by default).
|
|
|
|
|
- Disabled .SILENT in Makedefs.in so that make is verbose as usual.
|
|
|
|
|
|
2010-05-25 10:36:50 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon May 10 20:12:43 UTC 2010 - guido+opensuse.org@berhoerster.name
|
|
|
|
|
|
|
|
|
|
- In cups.spec removed '-r' from the suse_update_desktop_file call
|
|
|
|
|
to not replace valid (and previously patched via
|
|
|
|
|
cups-1.3.9-desktop_file.patch) categories of the desktop file
|
|
|
|
|
so that it shows up in the right place (this is particularly
|
|
|
|
|
an issue with the LXDE/XFCE menu).
|
|
|
|
|
|
2010-05-07 15:35:59 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu May 6 12:39:41 CEST 2010 - jsmeix@suse.de
|
|
|
|
|
|
|
|
|
|
- cups-1.4.3-default-webcontent-path.patch changes the default path
|
|
|
|
|
whereto the web content is installed from /usr/share/doc/...
|
|
|
|
|
to /usr/share/cups/webcontent because the files of the CUPS
|
|
|
|
|
web content are no documentation (see CUPS STR #3578 and
|
|
|
|
|
Novell/Suse Bugzilla bnc#546023 starting at comment#6).
|
|
|
|
|
- In cups.spec replaced usage of the RPM macro 'name' by the
|
|
|
|
|
explicite value 'cups' (except for the BuildRoot) so that
|
|
|
|
|
CUPS could be built as well with a different package name
|
|
|
|
|
(e.g. when someone likes to provide a CUPS SVN revision
|
|
|
|
|
as 'cupsSVN' or a specifically adapted CUPS as 'cups4me').
|
|
|
|
|
|
2010-04-28 22:21:38 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Apr 27 09:40:34 CEST 2010 - jsmeix@suse.de
|
|
|
|
|
|
|
|
|
|
- cups-krb5-config wrapper script for krb5-config is no longer
|
|
|
|
|
needed because since April 2008 krb5-config works correctly
|
|
|
|
|
(see Novell/Suse Bugzilla bnc#378270 and compare STR #3556).
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Apr 20 15:53:26 CEST 2010 - jsmeix@suse.de
|
|
|
|
|
|
|
|
|
|
- In cups.xinetd replaced '@LIB@' by '/usr/lib' and removed
|
|
|
|
|
the perl substitute calls regarding '@LIB@' in cups.spec because
|
|
|
|
|
since the upstream compliant CUPS 1.4 it is '/usr/lib/cups/'
|
|
|
|
|
on all platforms (see Novell/Suse Bugzilla bnc#575544).
|
|
|
|
|
|
2010-03-31 19:57:49 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Mar 31 12:52:02 CEST 2010 - jsmeix@suse.de
|
|
|
|
|
|
|
|
|
|
- Upgraded to CUPS 1.4.3:
|
|
|
|
|
* The scheduler could try responding on a closed client
|
|
|
|
|
connection, leading to a crash
|
|
|
|
|
(CVE-2009-3553, STR #3200, and bnc#554861).
|
|
|
|
|
* The lppasswd program allowed the localization files
|
|
|
|
|
to be overridden when running in setuid mode
|
|
|
|
|
(CVE-2010-0393, STR #3482, and bnc#574336).
|
|
|
|
|
* The scheduler would crash when an active printer was deleted.
|
|
|
|
|
* The DBUS notifier did not build (STR #3447).
|
|
|
|
|
* The scheduler did not reset the SIGPIPE handler
|
|
|
|
|
of child processes (STR #3399).
|
|
|
|
|
* For a complete list see the CHANGES.txt file.
|
|
|
|
|
- cups-1.3.9-CVE-2009-3553.patch has become
|
|
|
|
|
obsolete because it is fixed in the source.
|
|
|
|
|
|
2010-03-18 23:08:54 +01:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Jan 27 14:43:37 CET 2010 - jsmeix@suse.de
|
|
|
|
|
|
|
|
|
|
- CUPS 1.3 -> 1.4 version upgrade and major cleanup:
|
|
|
|
|
For the CUPS upstream changes see the CHANGES.txt file.
|
|
|
|
|
Such a major version upgrade is the perfect chance
|
|
|
|
|
to drop almost all our own patches to enforce a
|
|
|
|
|
reset to almost 100% compliance with upstream.
|
|
|
|
|
Here our openSUSE CUPS versions and their number of patches
|
|
|
|
|
(i.e. the "Patch" entries in the cups.spec files):
|
|
|
|
|
CUPS version 1.2.12 in openSUSE 10.3: 37
|
|
|
|
|
CUPS version 1.3.7 in openSUSE 11.0: 29
|
|
|
|
|
CUPS version 1.3.9 in openSUSE 11.1: 26
|
|
|
|
|
CUPS version 1.3.11 in openSUSE 11.2: 17
|
|
|
|
|
Of course this includes patches with backported bug fixes
|
|
|
|
|
via our maintenance but nevertheless there were really
|
|
|
|
|
too much openSUSE specific patches.
|
|
|
|
|
Therefore I would like to provide CUPS 1.4 "as is" to the
|
|
|
|
|
furthest possible extent (there are still 6 patches left).
|
|
|
|
|
Then let's see if we get bug reports because of this.
|
|
|
|
|
I did such a reset to 100% compliance with upstream
|
|
|
|
|
already in the past for sane-backends and guess what:
|
|
|
|
|
I got no single bug report at all because of this.
|
|
|
|
|
I guess what they do at upstream is actually not so bad ;-)
|
|
|
|
|
- Added the explicite path to '--with-cachedir=/var/cache/cups'
|
|
|
|
|
in cups.spec to avoid that the fallback value 'yes' results
|
|
|
|
|
the cache directory '/etc/cups/yes/'.
|
|
|
|
|
- cups-1.3.11-CVE-2009-2820-regression-fix.patch and
|
|
|
|
|
cups-1.3.11-CVE-2009-2820.patch have become
|
|
|
|
|
obsolete because it is fixed in the source.
|
|
|
|
|
- cups-1.4-full_path_to_configure_with-pdftops.patch has become
|
|
|
|
|
obsolete because it is fixed in the source.
|
|
|
|
|
|
2009-12-02 18:52:03 +01:00
|
|
|
|
-------------------------------------------------------------------
|
2010-03-16 12:49:41 +01:00
|
|
|
|
Tue Dec 15 22:22:18 CET 2009 - jengelh@medozas.de
|
|
|
|
|
|
|
|
|
|
- add baselibs.conf as a source
|
|
|
|
|
- enable parallel building
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Dec 15 13:58:13 CET 2009 - jsmeix@suse.de
|
|
|
|
|
|
|
|
|
|
- Fixed the URL and MD5 sum comments for Source0 in cups.spec.
|
|
|
|
|
- cups-1.3.9-CVE-2009-3553.patch fixes a use-after-free bug
|
|
|
|
|
in the scheduler which leads to remote denial of service,
|
|
|
|
|
(CVE-2009-3553, CUPS STR #3200,
|
|
|
|
|
and Novell/Suse Bugzilla bnc#554861)
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Nov 11 11:56:12 CET 2009 - jsmeix@suse.de
|
2009-12-02 18:52:03 +01:00
|
|
|
|
|
|
|
|
|
- cups-1.3.11-CVE-2009-2820-regression-fix.patch
|
|
|
|
|
fixes a regression which was introduced by
|
|
|
|
|
the previous cups-1.3.11-CVE-2009-2820.patch
|
|
|
|
|
which lets adding a class via CUPS Web Interface fail
|
|
|
|
|
with an 'Unknown operation "{op}"' error message
|
|
|
|
|
(CUPS STR #3401 and
|
|
|
|
|
Novell/Suse Bugzilla bnc#548317 starting at comment #24).
|
|
|
|
|
- cups-1.3.11-CVE-2009-2820.patch fixes CUPS Web Interface
|
|
|
|
|
Cross-Site Scripting (XSS) and CRLF injection in HTTP headers
|
|
|
|
|
(CVE-2009-2820 and CUPS STR #3367 and
|
|
|
|
|
Novell/Suse Bugzilla bnc#548317).
|
|
|
|
|
|
2010-03-16 12:49:41 +01:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Nov 3 19:09:12 UTC 2009 - coolo@novell.com
|
|
|
|
|
|
|
|
|
|
- updated patches to apply with fuzz=0
|
|
|
|
|
|
2009-09-21 20:58:48 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Aug 26 21:43:03 CEST 2009 - meissner@suse.de
|
|
|
|
|
|
|
|
|
|
- Fixed as-needed issues when compiling additional tools
|
|
|
|
|
by using the right ordering of source and linked library
|
|
|
|
|
in 'gcc -opoll_ppd_base ... SOURCE1 -lcups'
|
|
|
|
|
and 'gcc -olphelp ... SOURCE2 -lcups' which
|
|
|
|
|
obsoletes the 'export SUSE_ASNEEDED=0' workaround,
|
|
|
|
|
see the 'Fri Jul 10 12:34:54 CEST 2009' entry below.
|
|
|
|
|
- Run fdupes.
|
|
|
|
|
|
2009-07-31 19:04:46 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Jul 31 15:08:41 CEST 2009 - jsmeix@suse.de
|
|
|
|
|
|
|
|
|
|
- full_path_to_configure_with-pdftops.patch
|
|
|
|
|
adds support to specify a full path in
|
|
|
|
|
'configure --with-pdftops=/usr/bin/pdftops'
|
|
|
|
|
to avoid 'BuildRequires: xpdf-tools' which would
|
|
|
|
|
bloat the build system but would be only needed to
|
|
|
|
|
satisfy 'AC_PATH_PROG(CUPS_PDFTOPS, pdftops)'
|
|
|
|
|
in cups-pdf.m4 if only 'configure --with-pdftops=pdftops'
|
|
|
|
|
was possible (Novell/Suse Bugzilla bnc#526847).
|
|
|
|
|
|
2009-07-29 17:20:31 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Jul 28 10:08:12 CEST 2009 - jsmeix@suse.de
|
|
|
|
|
|
|
|
|
|
- Upgraded to CUPS 1.3.11:
|
|
|
|
|
* The scheduler and cupsfilter utility would crash with
|
|
|
|
|
certain MIME .types rules (CUPS STR #3159).
|
|
|
|
|
* cups-1.3.10-fix-DNS-rebinding-protection.patch
|
|
|
|
|
(Novell/Suse Bugzilla bnc#516511 and CUPS STR #3238)
|
|
|
|
|
is obsolete since CUPS 1.3.11 because it is fixed
|
|
|
|
|
in the source (it is fixed via CUPS STR #3164).
|
|
|
|
|
* For a complete list see the CHANGES.txt file.
|
|
|
|
|
|
2009-07-10 16:09:27 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Jul 10 12:34:54 CEST 2009 - jsmeix@suse.de
|
|
|
|
|
|
|
|
|
|
- Set 'export SUSE_ASNEEDED=0' in cups.spec because build fails
|
|
|
|
|
with --as-needed so that this is for now simply disabled.
|
|
|
|
|
|
2009-07-08 20:00:22 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Jun 26 12:50:22 CEST 2009 - jsmeix@suse.de
|
|
|
|
|
|
|
|
|
|
- cups-1.3.10-fix-DNS-rebinding-protection.patch fixes
|
|
|
|
|
a regression of the CUPS 1.3.10 DNS rebinding protection which
|
|
|
|
|
lets e.g. "lpoptions -h localhost -p <queue> -l" fail with
|
|
|
|
|
"lpoptions: Unable to get PPD file for <queue>: Bad Request"
|
|
|
|
|
and in /var/log/cups/error_log there is the warning
|
|
|
|
|
W ... Request from "localhost" using invalid Host: field "::1"
|
|
|
|
|
but "::1" is the IPv6 loopback IP address for "localhost"
|
|
|
|
|
(Novell/Suse Bugzilla bnc#489624 comment#19 and bnc#516511).
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Jun 24 14:02:29 CEST 2009 - jsmeix@suse.de
|
|
|
|
|
|
|
|
|
|
- Upgraded to CUPS 1.3.10:
|
|
|
|
|
* Use a wrapper program filter/pdftops.c which only calls
|
|
|
|
|
/usr/bin/pdftops (via configure --with-pdftops=/usr/bin/pdftops)
|
2009-07-29 17:20:31 +02:00
|
|
|
|
instead of the CUPS fork of the Xpdf source code which was in
|
2009-07-08 20:00:22 +02:00
|
|
|
|
the pdftops directory (CUPS STR #3129). Because of this
|
|
|
|
|
cups-1.4svn-pdftops_as_filter.patch and
|
|
|
|
|
cups-1.4svn-pdftops_dont_fail_on_cancel.patch are obsolete
|
|
|
|
|
since CUPS 1.3.10 (the latter was fixed via CUPS STR #2808).
|
|
|
|
|
* The scheduler now protects against DNS rebinding attacks
|
|
|
|
|
(CUPS STR #3118 and Novell/Suse Bugzilla bnc#489624).
|
|
|
|
|
* cups-1.3.9-cupstestppd.patch is obsolete since CUPS 1.3.10
|
|
|
|
|
because it is fixed in the source (CUPS STR #2979).
|
|
|
|
|
* cups-1.3.9-max_subscription.patch is obsolete
|
|
|
|
|
since CUPS 1.3.10 because it is fixed in the source
|
|
|
|
|
(no CUPS STR but mentioned in CHANGES.txt "The scheduler
|
|
|
|
|
would crash if you exceeded the MaxSubscriptions limit").
|
|
|
|
|
* cups-1.3.9-filter_png_overflow2.patch is obsolete
|
|
|
|
|
since CUPS 1.3.10 because it is fixed in the source
|
|
|
|
|
(CUPS STR #2974 and Novell/Suse Bugzilla bnc#448631).
|
|
|
|
|
* cups-1.3.9-hpgltops2.patch is obsolete since CUPS 1.3.10
|
|
|
|
|
because it is fixed in the source (CUPS STR #2966 which is the
|
|
|
|
|
successor of CUPS STR #2911 and Novell/Suse Bugzilla bnc#430543).
|
|
|
|
|
* cups-1.3.9-cupsImageReadTiff.patch is obsolete
|
|
|
|
|
since CUPS 1.3.10 because it is fixed in the source
|
|
|
|
|
(CUPS STR #3031 and Novell/Suse Bugzilla bnc#485895).
|
|
|
|
|
* For a complete list see the CHANGES.txt file.
|
|
|
|
|
- cups-1.1.21rc2-preauth_security.patch and
|
|
|
|
|
cups-1.1.21rc2-usermode.patch and
|
|
|
|
|
cups-1.1.21-umlaut_printer.patch and
|
|
|
|
|
cups-1.1.23-testpage.patch are finally removed
|
|
|
|
|
since CUPS 1.3.10 because they were made for CUPS 1.1 and
|
|
|
|
|
were no longer applied since CUPS 1.2 in Suse Linux 10.3.
|
2009-07-29 17:20:31 +02:00
|
|
|
|
In particular cups-1.1.21rc2-usermode.patch can no longer
|
2009-07-08 20:00:22 +02:00
|
|
|
|
apply since CUPS 1.2 because RunAsUser in cupsd.conf is
|
|
|
|
|
no longer supported since CUPS 1.2, for more info see e.g. the
|
|
|
|
|
"RunAsUser removed; reassurance wanted" mails on cups@easysw.com.
|
|
|
|
|
Furthermore we neither got any Suse Linux/openSUSE user request
|
|
|
|
|
nor any SLE11 beta-tester/customer request for them.
|
|
|
|
|
|
2009-06-12 17:24:31 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Jun 8 15:09:10 CEST 2009 - crrodriguez@suse.de
|
|
|
|
|
|
2009-07-08 20:00:22 +02:00
|
|
|
|
- Replaced "--enable-static" by "--disable-static" in configure
|
|
|
|
|
so that the static libraries /usr/lib[64]/libcups.a and
|
|
|
|
|
/usr/lib[64]/libcupsimage.a are no longer built and included
|
|
|
|
|
in the cups-devel package to enforce detection of other software
|
|
|
|
|
which might be built with static CUPS libraries so that those
|
|
|
|
|
other software could be fixed to use the dynamic libraries
|
|
|
|
|
(see also Novell/Suse Bugzilla bnc#509945).
|
2009-06-12 17:24:31 +02:00
|
|
|
|
|
2009-06-05 22:47:17 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Jun 3 14:20:36 CEST 2009 - jsmeix@suse.de
|
|
|
|
|
|
|
|
|
|
- Set BROADCAST="ipp" in cups.SuSEfirewall2 source file (which
|
|
|
|
|
gets installed as /etc/sysconfig/SuSEfirewall2.d/services/cups)
|
|
|
|
|
so that adding "cups" to allowed services in the firewall
|
|
|
|
|
also allows CUPS Browsing information via UDP broadcasts
|
|
|
|
|
(Novell/Suse Bugzilla bnc#498429).
|
|
|
|
|
|
2009-04-23 21:15:07 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Mar 26 12:59:36 CET 2009 - jsmeix@suse.de
|
|
|
|
|
|
|
|
|
|
- cups-1.3.9-cupsImageReadTiff.patch fixes an integer overflow
|
|
|
|
|
in the "_cupsImageReadTIFF()" function CVE-2009-0163
|
|
|
|
|
(CUPS STR #3031 and Novell/Suse Bugzilla bnc#485895).
|
|
|
|
|
|
2009-01-22 13:06:54 +01:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Jan 21 14:17:25 CET 2009 - kssingvo@suse.de
|
|
|
|
|
|
2009-07-08 20:00:22 +02:00
|
|
|
|
- added directory %{libdir}/cups/driver to %files of cups
|
|
|
|
|
(bnc#465794)
|
2009-01-22 13:06:54 +01:00
|
|
|
|
|
2009-01-14 17:48:52 +01:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Jan 14 10:32:13 CET 2009 - olh@suse.de
|
|
|
|
|
|
|
|
|
|
- obsolete old cups-libs-XXbit and cups-devel-XXbit correctly
|
|
|
|
|
|
2008-12-15 12:24:13 +01:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Dec 10 12:34:56 CET 2008 - olh@suse.de
|
|
|
|
|
|
2009-07-08 20:00:22 +02:00
|
|
|
|
- use Obsoletes: -XXbit only for ppc64 to help solver during
|
|
|
|
|
distupgrade (bnc#437293)
|
2008-12-15 12:24:13 +01:00
|
|
|
|
|
2008-11-28 16:23:12 +01:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Nov 28 16:09:12 CET 2008 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- fixed permission of snmp.conf (bnc#449570)
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Nov 25 16:50:12 CET 2008 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- fix for png size validation CVE-2008-??? (bnc#448631)
|
|
|
|
|
- correction for hpgl pen selection fix CVE-2008-3641 (bnc#430543)
|
|
|
|
|
|
2008-11-20 15:19:57 +01:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Nov 20 15:05:36 CET 2008 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- fixed rss subscription issue (bnc#446975)
|
|
|
|
|
|
2008-11-07 15:06:02 +01:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Nov 4 13:54:37 CET 2008 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- missed to fix a further PPD file: stcolor2.ppd
|
|
|
|
|
|
2008-11-03 11:59:49 +01:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Oct 30 16:44:01 CET 2008 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- Obsoletes: cups-SUSE-ppds-dat (bnc#438763)
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Oct 30 12:34:56 CET 2008 - olh@suse.de
|
|
|
|
|
|
|
|
|
|
- obsolete old -XXbit packages (bnc#437293)
|
|
|
|
|
|
2008-10-23 22:28:12 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Oct 23 15:17:38 CEST 2008 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- fixed issues in PPD files: failing through internal tests
|
|
|
|
|
|
2008-10-13 16:23:04 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Oct 13 11:04:21 CEST 2008 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- update to 1.3.9, which is mainly a bugfix version. For a complete
|
|
|
|
|
list see included CHANGES.txt file, but important changes were
|
|
|
|
|
already included via patches before.
|
|
|
|
|
Deleted patches:
|
|
|
|
|
cups-1.3.8-custom_ppd_fix.patch (CUPS STR #2889)
|
|
|
|
|
cups-1.3.8-ssl_firefox.patch (CUPS STR #2892)
|
|
|
|
|
cups-1.3.8-cupsfilter_path.patch (CUPS STR #2908)
|
|
|
|
|
cups-1.3.8-pjl_ready_message.patch (CUPS STR #2909)
|
|
|
|
|
cups-1.3.8-listener_compare.patch (CUPS STR #2910)
|
|
|
|
|
cups-1.3.8-manyjob_finish.patch (CUPS STR #2913)
|
|
|
|
|
cups-1.3.8-resolver_reinit.patch (CUPS STR #2920)
|
|
|
|
|
cups-1.3.8-startstop_msg.patch (CUPS STR #2927)
|
|
|
|
|
cups-1.3.8-noclobber_symlink.patch (CUPS STR #2937)
|
|
|
|
|
cups-1.3.8-more_debuginfo.patch (CUPS STR #2943)
|
|
|
|
|
cups-1.3.8-hostlookup.patch (CUPS STR #2946)
|
|
|
|
|
cups-1.3.8-ipp_stop_after_pause.patch
|
|
|
|
|
cups-1.3.8-lose_printers_on_allowed_users.patch
|
|
|
|
|
Updated patches:
|
|
|
|
|
cups-1.2.5-desktop_file.patch
|
|
|
|
|
|
2008-10-06 16:43:23 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Oct 2 14:11:00 CEST 2008 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- bugfixes:
|
|
|
|
|
* printer stops after IPP pause
|
|
|
|
|
* pritners got lost when users are set in Set Allowed Users Dialog
|
|
|
|
|
|
2008-09-26 14:47:07 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Sep 25 12:33:59 CEST 2008 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- added und integrated latest patches from upstream bugzilla:
|
|
|
|
|
cups-1.3.8-custom_ppd_fix.patch (CUPS STR #2889)
|
|
|
|
|
cups-1.3.8-ssl_firefox.patch (CUPS STR #2892)
|
|
|
|
|
cups-1.3.8-cupsfilter_path.patch (CUPS STR #2908)
|
|
|
|
|
cups-1.3.8-pjl_ready_message.patch (CUPS STR #2909)
|
|
|
|
|
cups-1.3.8-listener_compare.patch (CUPS STR #2910)
|
|
|
|
|
cups-1.3.8-manyjob_finish.patch (CUPS STR #2913)
|
|
|
|
|
cups-1.3.8-resolver_reinit.patch (CUPS STR #2920)
|
|
|
|
|
cups-1.3.8-startstop_msg.patch (CUPS STR #2927)
|
|
|
|
|
cups-1.3.8-noclobber_symlink.patch (CUPS STR #2937)
|
|
|
|
|
cups-1.3.8-more_debuginfo.patch (CUPS STR #2943)
|
|
|
|
|
cups-1.3.8-hostlookup.patch (CUPS STR #2946)
|
|
|
|
|
|
2008-09-12 23:57:39 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Sep 11 11:50:47 CEST 2008 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- removed hplip in init script: hplip is no more (bnc#390663)
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Sep 9 13:56:14 CEST 2008 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- beautified $BUILD_DISTRIBUTION_NAME setting
|
|
|
|
|
|
2008-08-24 10:51:03 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Sat Aug 23 15:57:04 CEST 2008 - aj@suse.de
|
|
|
|
|
|
|
|
|
|
- Remove -p from fillups call.
|
|
|
|
|
|
2008-07-24 23:35:12 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Jul 23 11:14:05 CEST 2008 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- update to version 1.3.8:
|
|
|
|
|
* bugfix version, which includes CVE-2008-1722
|
|
|
|
|
* also includes some performance changes
|
|
|
|
|
* refer to included CHANGES.txt file for full information
|
|
|
|
|
- removed obsolete patches
|
|
|
|
|
|
2008-07-14 18:17:01 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Jul 14 17:30:57 CEST 2008 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- removed deprecated use of %run_ldconfig
|
2009-07-08 20:00:22 +02:00
|
|
|
|
- added avahi-compat-mDNSResponder-devel to BuildRequieres
|
|
|
|
|
(bnc#398700)
|
2008-07-14 18:17:01 +02:00
|
|
|
|
- fixed typo in Policy "easy"
|
|
|
|
|
|
2008-07-11 21:07:48 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Jul 10 17:08:55 CEST 2008 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- added two additional policies to cupsd.conf (fate#303515)
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Jul 9 13:19:34 CEST 2008 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- fixed abuild failure: ownership of lppasswd
|
|
|
|
|
|
2008-07-08 23:50:10 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Jul 1 15:59:34 CEST 2008 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- fix directory/setgid permissions for lppasswd use (bnc#404142)
|
|
|
|
|
|
2008-05-26 19:00:02 +02:00
|
|
|
|
-------------------------------------------------------------------
|
2008-06-05 17:19:37 +02:00
|
|
|
|
Wed Jun 4 11:35:27 CEST 2008 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- crash on startup when BrowseAddress has no value (bnc#396969)
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
2008-05-26 19:00:02 +02:00
|
|
|
|
Mon May 19 21:35:24 CEST 2008 - kssingvo@suse.de
|
|
|
|
|
|
2015-06-09 11:10:04 +02:00
|
|
|
|
- added pdftops_any for 11.0 to Requires: (bugzilla#378434)
|
2008-05-26 19:00:02 +02:00
|
|
|
|
|
2008-05-16 22:35:30 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu May 15 11:53:11 CEST 2008 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- renamed use of CUPS_PDFTOPS to HAVE_PDFTOPS in pdftops.c, to
|
|
|
|
|
avoid execute of gs (bnc#390435)
|
|
|
|
|
- removed earlykdm from init script, due to new less CPU consuming
|
|
|
|
|
start of daemon now (bnc#388007)
|
|
|
|
|
|
2008-05-07 22:02:05 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed May 7 13:39:21 CEST 2008 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- merged both pdftops patches to one
|
2008-05-16 22:35:30 +02:00
|
|
|
|
- removed "recommended" remover (bnc#387267)
|
2008-05-07 22:02:05 +02:00
|
|
|
|
|
2008-04-25 16:01:41 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Apr 22 20:24:19 CEST 2008 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- new version of pdftops filter from svn extracted
|
2015-06-09 11:10:04 +02:00
|
|
|
|
- changed the perror() calls in pdftops.c for cups-1.3.x
|
|
|
|
|
compatibility
|
|
|
|
|
- fixed the ghostscript call via new variable
|
|
|
|
|
(unnecessary -> removed)
|
2008-04-25 16:01:41 +02:00
|
|
|
|
- grabbed and applied the wait() fix for childs from cups STR
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Apr 16 12:06:57 CEST 2008 - kssingvo@suse.de
|
|
|
|
|
|
2015-06-09 11:10:04 +02:00
|
|
|
|
- fix for integer overflow in png filter CVE-2008-1722
|
|
|
|
|
(bugzilla#378335)
|
2008-04-25 16:01:41 +02:00
|
|
|
|
- not affected: CVE-2008-1693 (bugzilla#377872)
|
2015-06-09 11:10:04 +02:00
|
|
|
|
- added /usr/bin/pdftops to Requires:, and poppler-tools
|
|
|
|
|
to Suggests:
|
2008-04-25 16:01:41 +02:00
|
|
|
|
|
2008-04-11 12:03:51 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Apr 11 11:06:33 CEST 2008 - ro@suse.de
|
|
|
|
|
|
|
|
|
|
- explicitly specify pdftops binary for configure to avoid
|
2015-06-09 11:10:04 +02:00
|
|
|
|
adding buildrequires just for a binary path
|
2008-04-11 12:03:51 +02:00
|
|
|
|
|
2008-04-10 21:16:17 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Apr 10 20:38:26 CEST 2008 - coolo@suse.de
|
|
|
|
|
|
|
|
|
|
- take out poppler for now to break the cycle, Klaus will
|
|
|
|
|
fix correctly later
|
|
|
|
|
|
2008-04-10 17:43:17 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Apr 10 15:17:39 CEST 2008 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- changes for PDF.ppd
|
|
|
|
|
|
2008-04-10 13:11:44 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Apr 10 12:54:45 CEST 2008 - ro@suse.de
|
|
|
|
|
|
|
|
|
|
- added baselibs.conf file to build xxbit packages
|
|
|
|
|
for multilib support
|
|
|
|
|
|
2008-04-09 21:07:39 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Apr 9 19:38:27 CEST 2008 - kssingvo@suse.de
|
|
|
|
|
|
2015-06-09 11:10:04 +02:00
|
|
|
|
- pdftops uses now system command e.g. xpdf-tools
|
|
|
|
|
(as in cups-1.4svn)
|
2008-04-09 21:07:39 +02:00
|
|
|
|
- due to requests: client.conf is back in /etc/cups
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Apr 9 12:30:55 CEST 2008 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- fix for buildsystem: added wrapper script for krb5-config as the
|
2015-06-09 11:10:04 +02:00
|
|
|
|
original output shows $CFLAGS $LIBDIR of cups.spec
|
|
|
|
|
and rpath flags (bugzilla#378270)
|
2008-04-09 21:07:39 +02:00
|
|
|
|
|
2008-04-08 22:37:35 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Apr 8 20:47:47 CEST 2008 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- added missing directory /var/cache/cups to %files
|
|
|
|
|
- added pstopdf filter (from cups-mailto project at sourceforge.net)
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Apr 8 10:11:36 CEST 2008 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- enabled krb5 support on request (bugzilla#377645)
|
|
|
|
|
- enabled further configure options: gcc's relro, gssapi
|
|
|
|
|
- and for run of cupsd: java, php, python (needs further activation)
|
|
|
|
|
|
2008-04-06 04:44:41 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Apr 2 10:29:42 CEST 2008 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- update to version 1.3.7:
|
|
|
|
|
bugfix version only, includes CVE-2008-0047 and CVE-2008-1373.
|
|
|
|
|
Refer to included CHANGES.txt file for full information
|
|
|
|
|
- worked on INFO in init file
|
|
|
|
|
- removed references to version SUSE 8.01 in specfile
|
|
|
|
|
|
2008-03-21 01:37:51 +01:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Mar 6 10:56:10 CET 2008 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- fixed issue in cgi-bin search CVE-2008-0047 (bugzilla#367225)
|
|
|
|
|
|
2008-02-29 22:34:42 +01:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Feb 29 13:37:18 CET 2008 - kssingvo@suse.de
|
|
|
|
|
|
2015-06-09 11:10:04 +02:00
|
|
|
|
- update to version 1.3.6:
|
2008-02-29 22:34:42 +01:00
|
|
|
|
* Documentation updates
|
|
|
|
|
* Fixed a problem with the web interface "Use Kerberos
|
|
|
|
|
Authentication" check box
|
|
|
|
|
* The scheduler unconditionally overwrote the printer-state-
|
|
|
|
|
message with "process-name failed" when a filter or backend
|
2015-06-09 11:10:04 +02:00
|
|
|
|
failed, preventing a useful error message from being shown
|
|
|
|
|
to the user.
|
2008-02-29 22:34:42 +01:00
|
|
|
|
* Policies on CUPS-Move-Job didn't work as expected
|
|
|
|
|
* The configure script only supported D-BUS on Linux
|
|
|
|
|
* The scheduler did not support </LimitExcept>
|
2015-06-09 11:10:04 +02:00
|
|
|
|
* The scheduler did not reset the job-hold-until attribute after
|
|
|
|
|
a job's hold time was reached.
|
2008-02-29 22:34:42 +01:00
|
|
|
|
* The scheduler did not support printer supply attributes
|
2015-06-09 11:10:04 +02:00
|
|
|
|
* The Kerberos credentials provided by some Windows KDCs were
|
|
|
|
|
still too large - now use a dynamic buffer to support
|
|
|
|
|
credentials up to 64k in size
|
|
|
|
|
* Printing a test page from the web interface incorrectly
|
|
|
|
|
defaulted to the "guest" user
|
|
|
|
|
* The cupsEncodeOptions2() function did not parse multiple-
|
|
|
|
|
value attribute values properly
|
|
|
|
|
* The scheduler incorrectly sent printer-stopped events for
|
|
|
|
|
status updates from the print filters
|
2008-02-29 22:34:42 +01:00
|
|
|
|
* The IPP backend could crash when handling printer errors
|
|
|
|
|
* Multi-file jobs did not print to remote CUPS servers
|
|
|
|
|
* The scheduler did not provide the Apple language ID to job
|
|
|
|
|
filters.
|
|
|
|
|
* Kerberos authentication did not work with the web interface
|
2015-06-09 11:10:04 +02:00
|
|
|
|
* The requesing-user-name-allowed and -denied functionality
|
|
|
|
|
did not work for Kerberos-authenticated usernames
|
2008-02-29 22:34:42 +01:00
|
|
|
|
* CUPS didn't compile on HP-UX 11i
|
|
|
|
|
* cupsEncodeOptions2() did not handle option values like "What's
|
|
|
|
|
up, doc?" properly.
|
|
|
|
|
* Added lots of memory allocation checks (Fortify)
|
|
|
|
|
* The scheduler would crash if it was unable to add a job file
|
|
|
|
|
(Fortify)
|
|
|
|
|
* ppdOpen*() did not check all memory allocations (Coverity)
|
|
|
|
|
* ippReadIO() did not check all memory allocations (Coverity)
|
|
|
|
|
* The PostScript filter did not detect read errors (Coverity)
|
|
|
|
|
* The scheduler did not check for a missing job-sheets-completed
|
|
|
|
|
attribute when sending an event notification (Coverity)
|
|
|
|
|
* "Set Printer Options" might not work with raw queues (Coverity)
|
2015-06-09 11:10:04 +02:00
|
|
|
|
* cupsRasterInterpretPPD() could crash on certain PostScript
|
|
|
|
|
errors (Coverity)
|
2008-02-29 22:34:42 +01:00
|
|
|
|
* The USB backend did not check for back-channel support properly
|
|
|
|
|
on all systems (Coverity)
|
|
|
|
|
* Fixed memory leaks in the GIF and PNM image loading code
|
|
|
|
|
(Coverity)
|
|
|
|
|
* Removed some dead code in the CUPS API and scheduler (Coverity)
|
|
|
|
|
* Fixed two overflow bugs in the HP-GL/2 filter (Coverity)
|
|
|
|
|
* Fixed another ASN1 string parsing bug
|
|
|
|
|
* The RSS notifier directory was not installed with the correct
|
|
|
|
|
permissions.
|
|
|
|
|
* The standard CUPS backends could use 100% CPU while waiting for
|
|
|
|
|
print data
|
|
|
|
|
* Filename-based MIME rules did not work
|
|
|
|
|
* The cups-polld program did not exit if the scheduler crashed
|
2015-06-09 11:10:04 +02:00
|
|
|
|
* The scheduler would crash if you tried to set the port-monitor
|
|
|
|
|
on a raw queue
|
2008-02-29 22:34:42 +01:00
|
|
|
|
* The scheduler could crash if a polled remote printer was
|
|
|
|
|
converted to a class
|
|
|
|
|
* The web interface and cupsctl did not correctly reflect the
|
|
|
|
|
"allow printing from the Internet" state
|
|
|
|
|
* The scheduler incorrectly treated MIME types as case- sensitive
|
|
|
|
|
* The Java support classes did not send UTF-8 strings to the
|
|
|
|
|
scheduler
|
|
|
|
|
* The CGI code did not handle interrupted POST requests properly
|
|
|
|
|
* The PostScript filter incorrectly handled number-up when the
|
|
|
|
|
number of pages was evenly divisible by the number-up value.
|
|
|
|
|
* The PDF filter incorrectly filtered pages when page-ranges and
|
|
|
|
|
number-up were both specified
|
|
|
|
|
* The IPP backend did not handle printing of pictwps files to a
|
|
|
|
|
non-Mac CUPS server properly.
|
|
|
|
|
* The scheduler did not detect network interface changes on
|
|
|
|
|
operating systems other than Mac OS X
|
|
|
|
|
* The scheduler now logs the UNIX error message when it is unable
|
|
|
|
|
to create a request file such as a print job.
|
|
|
|
|
* Added support for --enable-pie on Mac OS X.
|
|
|
|
|
- adapted access_conf.patch to 1.3.6
|
|
|
|
|
|
2008-01-17 22:30:43 +01:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Jan 15 19:41:54 CET 2008 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- changed permissions in %files according to cups (bugzilla#342772)
|
|
|
|
|
|
2008-01-12 02:48:23 +01:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Jan 7 19:39:28 CET 2008 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- update to version 1.3.5:
|
|
|
|
|
* The SNMP backend did not check for negative string lengths
|
|
|
|
|
* The scheduler incorrectly removed auth-info attributes,
|
|
|
|
|
potentially leading to a loss of all options for a job.
|
|
|
|
|
* The scheduler stopped sending CUPS browse packets on a restart
|
|
|
|
|
when using fixed addresses
|
|
|
|
|
* Fixed PDF filter security issues (CVE-2007-4352 CVE-2007-5392
|
|
|
|
|
CVE-2007-5393)
|
|
|
|
|
* Changing settings would always change the DefaultAuthType and
|
|
|
|
|
Allow lines
|
|
|
|
|
* The scheduler would crash when submitting an undefined format
|
|
|
|
|
file from Samba with LogLevel debug2
|
|
|
|
|
* The scheduler did not use poll() when epoll() was not supported
|
|
|
|
|
by the running kernel
|
|
|
|
|
* Fixed a compile problem with Heimdal Kerberos
|
|
|
|
|
* The USB backend now retries connections to a printer
|
|
|
|
|
indefinitely rather than stopping the queue.
|
|
|
|
|
* Printers with untranslated JCL options were not exported to
|
|
|
|
|
Samba correctly
|
|
|
|
|
* The USB backend did not work with some Minolta USB printers
|
|
|
|
|
* The strcasecmp() emulation code did not compile
|
|
|
|
|
* The scheduler would crash if a job was sent to an empty class
|
|
|
|
|
* The lpc command did not work in non-UTF-8 locales
|
|
|
|
|
* Subscriptions for printer-stopped events also received other
|
|
|
|
|
state changes
|
|
|
|
|
* cupstestppd incorrectly reported translation errors for the
|
|
|
|
|
"en" locale.
|
|
|
|
|
* ppdOpen() did not handle custom options properly when the
|
|
|
|
|
Custom attribute appeared before the OpenUI for that option.
|
|
|
|
|
* The scheduler could crash when deleting a printer or listing
|
|
|
|
|
old jobs.
|
|
|
|
|
* The Mac OS X USB backend did not allow for requeuing of jobs
|
|
|
|
|
submitted to a class.
|
|
|
|
|
* lpmove didn't accept a job ID by itself.
|
|
|
|
|
* The scheduler incorrectly removed job history information for
|
|
|
|
|
remote print jobs.
|
|
|
|
|
* The scheduler incorrectly sent the
|
|
|
|
|
"com.apple.printerListChanged" message for printer state
|
|
|
|
|
changes.
|
|
|
|
|
* The PostScript filter drew the page borders (when enabled)
|
|
|
|
|
outside the imageable area.
|
|
|
|
|
* The LPD and IPP backends did not default to the correct port
|
|
|
|
|
numbers when using alternate scheme names.
|
|
|
|
|
* The scheduler incorrectly deleted hardwired remote printers on
|
|
|
|
|
system sleep.
|
|
|
|
|
* The scheduler would abort if a bad browse protocol name was
|
|
|
|
|
listed in the cupsd.conf file.
|
|
|
|
|
* The online cupsd.conf help file incorrectly showed "dns-sd"
|
|
|
|
|
instead of "dnssd" for Bonjour sharing.
|
|
|
|
|
* The scheduler could crash changing the port-monitor value.
|
|
|
|
|
* The scheduler generated CoreFoundation errors when run as a
|
|
|
|
|
background process.
|
|
|
|
|
* When printing with number-up > 1, it was possible to get an
|
|
|
|
|
extra blank page.
|
|
|
|
|
- removed CVE patches, which are already applied upstream
|
|
|
|
|
|
2007-12-19 18:49:01 +01:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Dec 19 18:42:19 CET 2007 - crivera@suse.de
|
|
|
|
|
|
2015-06-09 11:10:04 +02:00
|
|
|
|
- Add dbus-1-devel to the BuildRequires.
|
2007-12-19 18:49:01 +01:00
|
|
|
|
|
2007-12-18 18:29:38 +01:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Dec 17 21:10:37 CET 2007 - crivera@suse.de
|
|
|
|
|
|
|
|
|
|
- Add the --enable-dbus flag to the configure line to
|
|
|
|
|
send DBUS signals out for queue change events. This helps
|
2015-06-09 11:10:04 +02:00
|
|
|
|
fix 345163.
|
2007-12-18 18:29:38 +01:00
|
|
|
|
|
2007-11-13 21:45:43 +01:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Nov 7 12:05:41 CET 2007 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- upgrade to version 1.3.4:
|
|
|
|
|
* Documentation updates
|
|
|
|
|
* CUPS now maps the "nb" locale to "no" on all platforms
|
|
|
|
|
* CUPS did not work with a Windows 2003 R2 KDC
|
|
|
|
|
* ippReadIO() could read past the end of a buffer
|
|
|
|
|
* The scheduler would crash on shutdown if it was unable to
|
|
|
|
|
create a Kerberos context.
|
|
|
|
|
* Multiple AuthTypes in cupsd.conf did not work
|
|
|
|
|
* The snmp.conf file referenced the wrong man page
|
|
|
|
|
* The cupsaddsmb program didn't handle domain sockets properly
|
|
|
|
|
* The scheduler now validates device URIs when adding printers.
|
|
|
|
|
* Updated httpSeparateURI() to support hostnames with the
|
|
|
|
|
backslash character.
|
|
|
|
|
* Updated the Japanese localization
|
|
|
|
|
* The parallel backend now gets the current IEEE-1284 device ID
|
|
|
|
|
string on Linux
|
|
|
|
|
* The IPP backend now checks the job status at variable
|
|
|
|
|
intervals (from 1 to 10 seconds) instead of every 10 seconds
|
|
|
|
|
for faster remote printing
|
|
|
|
|
* "lpr -p" and "lpr -l" did not work
|
|
|
|
|
* Compilation failed when a previous version of CUPS was
|
|
|
|
|
installed and was included in the SSL include path
|
|
|
|
|
* The scheduler did not reject requests with charsets other
|
|
|
|
|
than US-ASCII or UTF-8, and the CUPS API incorrectly passed
|
|
|
|
|
the locale charset to the scheduler instead of UTF-8
|
|
|
|
|
* cups-deviced did not filter out duplicate devices.
|
|
|
|
|
* The AppleTalk backend incorrectly added a scheme listing when
|
|
|
|
|
AppleTalk was disabled or no printers were found.
|
|
|
|
|
* The PostScript filter generated N^2 copies when the printer
|
|
|
|
|
supported collated copies and user requested reverse-order
|
|
|
|
|
output.
|
|
|
|
|
* The scheduler did not reprint all of the files in a job that
|
|
|
|
|
was held.
|
|
|
|
|
* The scheduler did not update the printcap file after removing
|
|
|
|
|
stale remote queues.
|
|
|
|
|
* The cupsd.conf man page incorrectly referenced "AuthType
|
|
|
|
|
Kerberos" instead of "AuthType Negotiate".
|
2015-06-09 11:10:04 +02:00
|
|
|
|
- fixes for xpdf CVE-2007-4352, CVE-2007-5393, CVE-2007-5392
|
|
|
|
|
(bugzilla#335637)
|
2007-11-13 21:45:43 +01:00
|
|
|
|
|
2007-11-03 16:14:52 +01:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Oct 23 12:31:31 CEST 2007 - kssingvo@suse.de
|
|
|
|
|
|
2015-06-09 11:10:04 +02:00
|
|
|
|
- fix for IPP boundaries swamp-14294, CVE-2007-4351
|
|
|
|
|
(bugzilla#335635)
|
2007-11-03 16:14:52 +01:00
|
|
|
|
|
2007-10-16 02:39:15 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Oct 15 19:40:33 CEST 2007 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- upgrade to version 1.3.3. Main features to 1.2.x:
|
|
|
|
|
* Networking
|
|
|
|
|
* Kerberos: CUPS now supports Kerberos authentication
|
|
|
|
|
* Mac OS X Authorization Services: CUPS now supports the
|
2015-06-09 11:10:04 +02:00
|
|
|
|
Authorization Services framework, providing role-based
|
|
|
|
|
access control in addition to the tradition UNIX model
|
|
|
|
|
* Peer Credentials: CUPS now supports authentication using
|
|
|
|
|
peer credentials provided over UNiX domain sockets
|
2007-10-16 02:39:15 +02:00
|
|
|
|
* SNMP Support: SNMP lookups are no longer performed by
|
|
|
|
|
default, and IPP is no longer used for discovered printers
|
|
|
|
|
* LPD Support; The LPD backend now supports a faster streaming
|
|
|
|
|
mode that does not require a temporary file
|
|
|
|
|
* Browsing
|
|
|
|
|
* CUPS Browsing: The default configuration now shows shared
|
|
|
|
|
printers from any address (not just @LOCAL)
|
|
|
|
|
* DNS-SD (Bonjour/Zeroconf) Support: CUPS now supports printer
|
|
|
|
|
sharing via DNS service discovery
|
|
|
|
|
* LDAP w/SSL: CUPS now supports encrypted LDAP sessions
|
|
|
|
|
* Web Interface
|
|
|
|
|
* Internet Printer Sharing: You can now share printers over the
|
|
|
|
|
Internet via the basic server settings
|
|
|
|
|
* Improved On-Line Help: Searching the on-line help now shows
|
|
|
|
|
results for all text, not just headings and links
|
|
|
|
|
* Printer Setup: The available printer list is now only show
|
|
|
|
|
when requested and the Add This Printer button now allows you
|
|
|
|
|
to change the default name, location, and description
|
|
|
|
|
* Printer Configuration: Raw printers and classes can now be
|
|
|
|
|
configured using the Set Printer Options button
|
|
|
|
|
* IPP Support
|
|
|
|
|
* Job Printer Attributes: CUPS now provides
|
|
|
|
|
job-printer-state-message and job-printer-state-reasons
|
|
|
|
|
attributes containing copies of the corresponding printer
|
|
|
|
|
attributes to provide important history information with each
|
|
|
|
|
job
|
|
|
|
|
* PPD Operations and Attributes: The new CUPS_GET_PPD operation
|
|
|
|
|
allows you to retrieve PPD files from the scheduler; also,
|
|
|
|
|
CUPS_GET_PPDS now reports more information and supports more
|
|
|
|
|
value filters
|
|
|
|
|
* Printer Defaults: The document-forma-default,
|
|
|
|
|
notify-events-default, and notify-lease-duration-default
|
|
|
|
|
attributes can be set for each printer and class
|
|
|
|
|
* PWG Printer Alert Support: CUPS now supports the
|
|
|
|
|
printer-alert and printer-alert-description attributes
|
|
|
|
|
* Server-Side Options: Server-side default options can now be
|
|
|
|
|
retrieved using the "printer-defaults" group keyword
|
|
|
|
|
* Scheduler
|
|
|
|
|
* Client Support: The scheduler now uses poll(), epoll(), or
|
|
|
|
|
/dev/kqueue on platforms that provide them to support large
|
|
|
|
|
numbers of clients
|
|
|
|
|
* "Default" Authentication: You can now specify an AuthType of
|
|
|
|
|
Default in locations and policies, which maps to the
|
|
|
|
|
DefaultAuthType value
|
|
|
|
|
* Larger Numbers of Clients: The scheduler now uses poll(),
|
|
|
|
|
epoll(), or /dev/kqueue instead of select() when possible
|
|
|
|
|
* New cupsctl Command: The new cupsctl command allows you to
|
|
|
|
|
perform basic server configuration from the command-line
|
|
|
|
|
* Printer Drivers
|
|
|
|
|
* cupstestppd Improvements: The test utility now provides more
|
|
|
|
|
extensive tests and options
|
|
|
|
|
* Label Printer Driver: Added support for the Intellibar label
|
|
|
|
|
printers
|
|
|
|
|
* Localized Printer Drivers: The CUPS sample drivers are now
|
|
|
|
|
localized in several languages
|
|
|
|
|
* PJL Support: New cupsPJLCharset attribute controls character
|
|
|
|
|
set for PJL strings
|
|
|
|
|
* Pre-Filter Support: Drivers can now register format-specific
|
|
|
|
|
filters to pre-screen print jobs
|
|
|
|
|
* Side-Channel API; This new API provides out-of-band control
|
|
|
|
|
of devices
|
|
|
|
|
* CUPS API
|
|
|
|
|
* Administration API: New cupsAdminGetServerSettings() and
|
|
|
|
|
cupsAdminSetServerSettings() functions
|
2015-06-09 11:10:04 +02:00
|
|
|
|
* Array API: New cupsArrayGetIndex(), cupsArrayGetInsert(),
|
|
|
|
|
and cupsArrayNew2() functions
|
2007-10-16 02:39:15 +02:00
|
|
|
|
* Destination API: New cupsRemoveDest() and
|
|
|
|
|
cupsSetDefaultDest() functions
|
|
|
|
|
* HTTP API: The http_t structure is now completely private
|
|
|
|
|
* PPD API: New ppdLocalizeIPPReason()function and greatly
|
|
|
|
|
improved ppdConflicts() performance
|
2015-06-09 11:10:04 +02:00
|
|
|
|
- added new files, adapted patches, and removed already
|
|
|
|
|
included ones
|
2007-10-16 02:39:15 +02:00
|
|
|
|
|
2007-09-19 19:06:40 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Sep 18 13:28:30 CEST 2007 - kssingvo@suse.de
|
|
|
|
|
|
2015-06-09 11:10:04 +02:00
|
|
|
|
- fix for missing newline before EOF in compressed files
|
|
|
|
|
(bugzilla#309823)
|
2007-09-19 19:06:40 +02:00
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Sep 17 19:32:08 CEST 2007 - kssingvo@suse.de
|
|
|
|
|
|
2015-06-09 11:10:04 +02:00
|
|
|
|
- fix for exitcode on uiconstraints in cupstestppd
|
|
|
|
|
(bugzilla#309822)
|
2007-09-19 19:06:40 +02:00
|
|
|
|
|
2007-09-13 18:40:37 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Sep 10 15:16:15 CEST 2007 - kssingvo@suse.de
|
|
|
|
|
|
2015-06-09 11:10:04 +02:00
|
|
|
|
- patch: "None" needs to be valid value for cupstestppd
|
|
|
|
|
(bugzilla#309219)
|
2007-09-13 18:40:37 +02:00
|
|
|
|
|
2007-08-03 14:09:00 +02:00
|
|
|
|
-------------------------------------------------------------------
|
2007-08-09 18:27:19 +02:00
|
|
|
|
Mon Aug 6 17:46:56 CEST 2007 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- fix for xpdf bugzilla#291690, CVE-2007-3387, swamp-11865
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
2007-08-03 14:09:00 +02:00
|
|
|
|
Mon Jul 30 15:41:27 CEST 2007 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- upgrade to cups-1.2.12:
|
2015-06-09 11:10:04 +02:00
|
|
|
|
* The PHP cups_print_file() function crashed if the options
|
|
|
|
|
array contained non-string option values
|
2007-08-03 14:09:00 +02:00
|
|
|
|
* The image/tiff file matching rule incorrectly identified some
|
|
|
|
|
text files as TIFF files
|
|
|
|
|
* The filter(7) man page incorrectly documented the "PAGE: total
|
|
|
|
|
#-pages" message
|
|
|
|
|
* PCL text files were mis-identified as HP-GL/2 and caused the
|
|
|
|
|
HP-GL/2 filter to hang
|
|
|
|
|
* When printing to a queue with user ACLs, the scheduler
|
2015-06-09 11:10:04 +02:00
|
|
|
|
incorrectly returned a quota error instead of a "not allowed
|
|
|
|
|
to print" error
|
2007-08-03 14:09:00 +02:00
|
|
|
|
* cupsaddsmb could get in a loop if no printer drivers were
|
|
|
|
|
installed
|
|
|
|
|
* cupsRasterReadHeader() did not byte-swap the header properly
|
|
|
|
|
when compiled with certain versions of GCC.
|
|
|
|
|
* The IPP backend did not send the document-format attribute for
|
|
|
|
|
filtered jobs
|
|
|
|
|
* Some PPD files could cause a crash in ppdOpen2
|
|
|
|
|
* The web admin interface incorrectly handled the "share
|
|
|
|
|
printers" and "show remote printers" settings
|
|
|
|
|
* The scheduler's log messages about AuthClass and AuthGroupName
|
|
|
|
|
advised using a replacement directive but had the wrong syntax
|
|
|
|
|
* Updated the PostScript/PJL and HP-GL/2 MIME rules to look in
|
|
|
|
|
the first 4k of the file, not just the first 1k
|
|
|
|
|
* Updated the Italian localization
|
|
|
|
|
- updated the mime and the psrewrite patch
|
|
|
|
|
|
2007-06-25 17:42:38 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Jun 25 10:19:33 CEST 2007 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- added quosnmp script to %doc
|
|
|
|
|
|
2007-06-22 00:18:32 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Jun 20 18:35:47 CEST 2007 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- removed rccupsrenice: cups-1.2.x does no longer traversing of
|
|
|
|
|
filesystem during startup. reason no longer present.
|
|
|
|
|
|
2007-05-25 00:40:10 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed May 23 20:02:24 CEST 2007 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- fixed as many rpmlint errors as possible
|
|
|
|
|
|
2007-05-11 10:35:56 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu May 10 14:07:56 CEST 2007 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- Upgrade to cups-1.2.11:
|
|
|
|
|
* "make distclean" didn't remove all generated files
|
|
|
|
|
* Fixed a bug in the advertisement of classes
|
|
|
|
|
* The IPP backend now stays running until the job is actually
|
|
|
|
|
printed by the remote server; previously it would stop
|
|
|
|
|
monitoring the job if it was held or temporarily stopped
|
|
|
|
|
* PDF files were not always printed using the correct orientation
|
|
|
|
|
* The scheduler could crash if you specified a bad file: URI for
|
|
|
|
|
a printer
|
|
|
|
|
* The Renew-Subscription operation now returns the
|
|
|
|
|
notify-lease-duration value that was used
|
|
|
|
|
* The IPP backend sent job options to IPP printers, however some
|
|
|
|
|
printers tried to override the options embedded in the PS/PCL
|
|
|
|
|
stream with those job options
|
|
|
|
|
* ppdLocalize() now also tries a country-specific localization
|
|
|
|
|
for when localizing to a generic locale name.
|
|
|
|
|
* The cupstestppd program now allows for partial localizations to
|
|
|
|
|
reduce the size of universal PPD files.
|
|
|
|
|
* Chinese PPD files were incorrectly tagged with the "cn" locale
|
|
|
|
|
(should have been "zh")
|
|
|
|
|
* The backends now manage the printer-state-reasons attribute
|
|
|
|
|
more accurately
|
|
|
|
|
* Java, PHP, Perl, and Python scripts did not work properly
|
|
|
|
|
* The scheduler would take forever to start if the maximum number
|
|
|
|
|
of file descriptors was set to "unlimited"
|
|
|
|
|
* The page-ranges option was incorrectly applied to the banner
|
|
|
|
|
pages
|
|
|
|
|
* Fixed some GCC compile warnings
|
|
|
|
|
* The DBUS notification code was broken for older versions of
|
|
|
|
|
DBUS
|
|
|
|
|
* The IPv6 code did not compile on HP-UX 11.23
|
|
|
|
|
* PPD constraints did not work properly with custom options.
|
|
|
|
|
* Regular PPD options with the name "CustomFoo" did not work.
|
|
|
|
|
* The USB backend did not work on NetBSD
|
|
|
|
|
* The printer-state-reasons attribute was incorrectly cleared
|
|
|
|
|
after a job completed
|
|
|
|
|
* The scheduler did not set the printer operation policy on
|
|
|
|
|
startup, only on soft reload
|
|
|
|
|
* The AP_FIRSTPAGE_InputSlot option did not clear any ManualFeed
|
|
|
|
|
setting that was made, which caused problems with some PPD
|
|
|
|
|
files
|
|
|
|
|
* cupsDoFileRequest() and cupsDoRequest() did not abort when
|
|
|
|
|
getting an error in the response
|
|
|
|
|
* The scheduler did not schedule jobs properly to remote or
|
|
|
|
|
nested classes
|
|
|
|
|
* Updated the mime.types and mime.convs headers to warn that the
|
|
|
|
|
files are overwritten when CUPS is installed. Local changes
|
|
|
|
|
should go in local.types or local.convs, respectively
|
|
|
|
|
* The scheduler could get in an infinite loop if a printer in an
|
|
|
|
|
implicit class disappeared
|
|
|
|
|
* The pstops filter did not handle %%EndFeature comments properly
|
|
|
|
|
* Fixed a problem with the Polish web page printer icons
|
|
|
|
|
* ppdLocalize() now also localizes the cupsICCProfile attributes.
|
|
|
|
|
* The scheduler still had a reference to the incorrect
|
|
|
|
|
"notify-recipient" attribute
|
|
|
|
|
* The "make check" and "make test" subscription tests did not set
|
|
|
|
|
the locale
|
|
|
|
|
* The "make check" and "make test" subscription tests incorrectly
|
|
|
|
|
used the notify-recipient attribute instead of
|
|
|
|
|
notify-recipient-uri
|
|
|
|
|
* cupsRasterInterpretPPD() incorrectly limited the
|
|
|
|
|
cupsBorderlessScalingFactor when specified in the job options.
|
|
|
|
|
- adapted cupstestppd patch
|
|
|
|
|
|
2007-04-26 19:00:52 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Apr 25 19:11:21 CEST 2007 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- added SuSEfirewall2 rules (bugzilla#247746)
|
|
|
|
|
|
2007-04-06 00:36:07 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Apr 2 20:29:16 CEST 2007 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- Upgrade to cups-1.2.10:
|
|
|
|
|
* ppdLocalize() now supports localizing for Japanese using the
|
|
|
|
|
"jp" locale name used by the ppdmerge program from the CUPS
|
|
|
|
|
DDK 1.1.0
|
|
|
|
|
* _cupsAdminSetServerSettings() did not support changing of
|
|
|
|
|
top-level directives as designed.
|
|
|
|
|
* The init script path check was broken.
|
|
|
|
|
* CUPS incorrectly used the attribute "notify-recipient" instead
|
|
|
|
|
of "notify-recicpient-uri" in several places
|
|
|
|
|
* Fixed a configure script bug on MirBSD
|
|
|
|
|
* The pdftops filter did not limit the amount of recursion of
|
|
|
|
|
page sets
|
|
|
|
|
* Custom page sizes with fractional point sizes did not work
|
|
|
|
|
* The lpoptions command would crash when adding or removing
|
|
|
|
|
options on a system with no printers
|
|
|
|
|
* The scheduler did not use the default job-sheets (banners) for
|
|
|
|
|
implicit classes
|
|
|
|
|
* The scheduler could crash when listing complete jobs that had
|
|
|
|
|
been unloaded from memory
|
|
|
|
|
* The French localization was doubled up
|
|
|
|
|
* Build system fixes for several platforms
|
|
|
|
|
* The scheduler's openssl certificate generation code was broken
|
|
|
|
|
on some platforms
|
|
|
|
|
* The scheduler's log rotation check for devices was broken
|
|
|
|
|
* The LPD mini-daemon did not handle the document-format option
|
|
|
|
|
correctly
|
|
|
|
|
* The pdftops filter ignored the "match" size option in the
|
|
|
|
|
pdftops.conf file
|
|
|
|
|
* cupstestppd now validates UTF-8 text strings in globalized PPD
|
|
|
|
|
files
|
|
|
|
|
* The outputorder=reverse option did not work with all printers
|
|
|
|
|
* Classes containing other classes did not always work
|
|
|
|
|
* Printer location and description information was lost if the
|
|
|
|
|
corresponding string contained the "#" character
|
|
|
|
|
* cupsRemoveOption() did not work properly
|
|
|
|
|
* The USB backend did not work with some USB to parallel cables
|
|
|
|
|
on Mac OS X.
|
|
|
|
|
* The test page did not print the rulers properly on large media
|
|
|
|
|
sizes
|
|
|
|
|
* The text filter could crash when pretty printing certain types
|
|
|
|
|
of files
|
|
|
|
|
- removed already included security patch xpdf_CVE_2007_0104
|
|
|
|
|
|
2007-02-23 12:29:03 +01:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Feb 20 10:55:46 CET 2007 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- Upgrade to cups-1.2.8:
|
|
|
|
|
* Documentation fixes
|
|
|
|
|
* The HTTP upgrade redirection used by the scheduler did not work
|
|
|
|
|
with Internet Explorer
|
|
|
|
|
* Members of a class with Unicode names did not appear correctly
|
|
|
|
|
in the web interface
|
|
|
|
|
* Changing the "Save debugging information" setting in the web
|
|
|
|
|
interface no longer affects the other server settings
|
|
|
|
|
* The scheduler did not choose SSL certificates correctly on Mac
|
|
|
|
|
OS X
|
|
|
|
|
* The scheduler could get in an infinite loop when printing to a
|
|
|
|
|
remote class
|
|
|
|
|
* The jobs web page did not have separating space after the
|
|
|
|
|
number of pages column
|
|
|
|
|
* Added French localization
|
|
|
|
|
* Updated Spanish localization
|
|
|
|
|
* Updated Japanese localization
|
|
|
|
|
* cupsBorderlessScalingFacter was limited to a range of 0.9 to
|
|
|
|
|
1.1, but some printers need larger values
|
|
|
|
|
* Landscape printing of PDF files did not always work
|
|
|
|
|
* Fixed slow USB printing on Minolta printers
|
|
|
|
|
* The ZPL label printer driver could produce stretched output
|
|
|
|
|
* The IPP backend now clears the printer-state-message when there
|
|
|
|
|
are no outstanding errors or warnings
|
|
|
|
|
* The CUPS Java scripting support did not work with recent
|
|
|
|
|
versions of Java due to the use of Sun's private Base64 class
|
|
|
|
|
* The scheduler did not pass HTTP GET form variables to custom
|
|
|
|
|
CGI programs
|
|
|
|
|
* The lpoptions command now displays the reason why a PPD file
|
|
|
|
|
cannot be found
|
|
|
|
|
* The scheduler did not accept "none" as a browse protocol name
|
|
|
|
|
* The scheduler still loaded the remote printer cache, even when
|
|
|
|
|
browsing was disabled
|
|
|
|
|
* The SNMP backend now shows OfficeJet printers with the "HP"
|
|
|
|
|
manufacturer prefix
|
|
|
|
|
* Web interface HTML cleanup
|
|
|
|
|
* The parallel backend consumed 100% CPU on FreeBSD due to an
|
|
|
|
|
apparently common parallel port driver bug
|
|
|
|
|
* ippReadIO() incorrectly returned IPP_IDLE when the initial IPP
|
|
|
|
|
message header could not be read
|
|
|
|
|
* cupsRasterInterpretPPD() did not support custom options
|
|
|
|
|
* Collated output produced by the PostScript filter could lose
|
|
|
|
|
some options
|
|
|
|
|
* job-hold-until with time values for the next day would be held
|
|
|
|
|
for 60 days
|
|
|
|
|
* Some types of Sun raster files did not print correctly
|
|
|
|
|
* Raw PBM files did not print correctly
|
|
|
|
|
* The SNMP backend no longer uses IPP with HP printers, as some
|
|
|
|
|
recent firmware versions appear to not work
|
|
|
|
|
* cupsMarkOptions() did not handle the multiple-document-handling
|
|
|
|
|
option
|
|
|
|
|
* lpstat did not show the local job ID of active printers
|
|
|
|
|
* The backends incorrectly used STATUS: media-tray-empty-error
|
|
|
|
|
messages for out-of-paper conditions
|
|
|
|
|
* cupsGetPPD2() returned the wrong error when the PPD file did
|
|
|
|
|
not exist
|
|
|
|
|
* cupsDoAuthentication() did not translate the password prompt
|
|
|
|
|
* httpGetLength2() did not handle error messages without content
|
|
|
|
|
correctly
|
|
|
|
|
* Added support for 32/64-bit libraries on HP-UX Itanium systems
|
|
|
|
|
* Fixed a configure script problem with the 32/64-bit library
|
|
|
|
|
support
|
|
|
|
|
* The PostScript filter did not properly output document setup
|
|
|
|
|
commands for reversed output
|
|
|
|
|
* The scheduler did not parse IPv6 netmasks properly
|
|
|
|
|
- removed backported, unnecessary patches
|
|
|
|
|
|
2007-02-15 18:03:34 +01:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Feb 13 19:16:38 CET 2007 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- fixed tcp_wrapper warnings (bugzilla#230730)
|
|
|
|
|
- fixed ps interpretation (bugzilla#242042)
|
|
|
|
|
- backported fixes from various issues, only in svn avail atm
|
|
|
|
|
|
2007-01-23 01:13:49 +01:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Jan 22 19:32:26 CET 2007 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- enabled LDAP on request (bugzilla#223007), no build cycle present
|
|
|
|
|
|
2007-01-16 17:12:51 +01:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Jan 16 11:31:02 CET 2007 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- fix for xpdf bugzilla#233113, CVE-2007-0104, swamp-7887
|
|
|
|
|
|
2007-01-16 00:08:16 +01:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Jan 10 11:32:34 CET 2007 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- added Required-Start: to rccupsrenice (bugzilla#231675)
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Jan 5 15:41:34 CET 2007 - sbrabec@suse.cz
|
|
|
|
|
|
|
|
|
|
- Fixed devel dependencies.
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Dec 12 11:40:20 CET 2006 - kssingvo@suse.de
|
|
|
|
|
|
2015-06-09 11:10:04 +02:00
|
|
|
|
- removed broken locale patch: PS generation fails
|
|
|
|
|
(bugzilla#227205)
|
2007-01-16 00:08:16 +01:00
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Nov 16 16:26:30 CET 2006 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- Upgrade to 1.2.7 (another bugfix version):
|
|
|
|
|
* Documentation updates
|
2015-06-09 11:10:04 +02:00
|
|
|
|
* The PostScript filter now rotates the bounding box values
|
|
|
|
|
as needed
|
|
|
|
|
* The scheduler no longer loads the remote printer cache when
|
|
|
|
|
browsing is disabled
|
|
|
|
|
* The scheduler no longer writes a new launchd configuration file
|
|
|
|
|
if it doesn't have to
|
|
|
|
|
* The scheduler now picks up on changes to IPv6
|
|
|
|
|
and DNS configuration
|
2007-01-16 00:08:16 +01:00
|
|
|
|
* The lpstat program could still hang
|
|
|
|
|
* Fixed an inefficiency in the SNMP IPP detection code
|
|
|
|
|
* The SSL negotiation code did not implement short timeouts
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Nov 14 17:11:34 CET 2006 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- fixed non conform PPD values in PSLEVEL*.PPD (bugzilla#219779)
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Nov 9 15:32:28 CET 2006 - kssingvo@suse.de
|
|
|
|
|
|
2015-06-09 11:10:04 +02:00
|
|
|
|
- fixed perm problem of /etc/cups regarding lppasswd
|
|
|
|
|
(bugzilla#218745)
|
2007-01-16 00:08:16 +01:00
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Nov 7 14:44:54 CET 2006 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- Upgrade to 1.2.6 (bugfix version):
|
2015-06-09 11:10:04 +02:00
|
|
|
|
* "lpc status" did not show the number of queued jobs for
|
|
|
|
|
disabled queues
|
2007-01-16 00:08:16 +01:00
|
|
|
|
* The lpstat program could hang
|
2015-06-09 11:10:04 +02:00
|
|
|
|
* The serial backend did not support the new USB serial filenames
|
|
|
|
|
on Linux
|
2007-01-16 00:08:16 +01:00
|
|
|
|
* The parallel backend did not support bidirectional I/O properly
|
2015-06-09 11:10:04 +02:00
|
|
|
|
* The network backends now log the numeric address that is being
|
|
|
|
|
used
|
2007-01-16 00:08:16 +01:00
|
|
|
|
* Fixed a compile error when using libpaper
|
2015-06-09 11:10:04 +02:00
|
|
|
|
* Fixed a compile error when compiling on Solaris with threading
|
|
|
|
|
enabled
|
|
|
|
|
* Missing printer-state-changed event for printer-state-message
|
|
|
|
|
updates
|
2007-01-16 00:08:16 +01:00
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Nov 6 15:35:37 CET 2006 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- coolo's patch seems not to work, now using desktop-launch
|
|
|
|
|
(bugzilla#207915)
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Nov 6 14:54:04 CET 2006 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- fixed cups.desktop file (bugzilla#207915)
|
|
|
|
|
- suse_update_desktop_file produces strange results in my xterm.
|
|
|
|
|
redirecting output to /dev/null
|
|
|
|
|
- removed duplicate entry in %files: %{_libdir}/cups/monitor/*
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Oct 23 10:13:18 CEST 2006 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- Upgrade to 1.2.5:
|
|
|
|
|
* Documentation updates
|
|
|
|
|
* The SNMP backend no longer uses IPP for Epson printers
|
|
|
|
|
* Updated the configure script for Tru64 UNIX 5.1
|
|
|
|
|
* Tru64 5.1B's getaddrinfo() and getnameinfo() functions leak file
|
|
|
|
|
descriptors
|
|
|
|
|
* cupsAddDest() didn't add the parent destination's options and
|
|
|
|
|
attributes.
|
|
|
|
|
* ppdConflicts() did not handle custom option constraints.
|
|
|
|
|
* Raw printing of gzip'd files did not work
|
|
|
|
|
* The scheduler no longer preserves default option choices when
|
|
|
|
|
the new PPD no longer provides the old default choice
|
|
|
|
|
* The Linux SCSI backend is now only built if the SCSI development
|
|
|
|
|
headers are installed.
|
|
|
|
|
* USB printing to Minolta printers did not work
|
|
|
|
|
* Windows clients could not monitor the queue status
|
|
|
|
|
* The scheduler didn't log the operation name in the access_log
|
|
|
|
|
file for Create*Job and Print-Job requests.
|
|
|
|
|
* The PostScript filter now separates collated copies with any
|
|
|
|
|
required JCL commands so that JCL*based finishing options act on
|
|
|
|
|
the individual copies and not all of the copies as a single
|
|
|
|
|
document.
|
|
|
|
|
* The PostScript filter now disables duplex printing when printing
|
|
|
|
|
a 1*page document.
|
|
|
|
|
* cups-lpd didn't pass the correct job-originating-host-name value
|
|
|
|
|
* Fixed some speling errors in the German message catalog
|
|
|
|
|
* cupstestppd did not catch PPD files with bad UIConstraints
|
|
|
|
|
values
|
|
|
|
|
* The USB backend did not work with the current udev- created
|
|
|
|
|
printers if the first printer was disconnected
|
|
|
|
|
* Mirrored and rotated printing did not work with some documents
|
|
|
|
|
* 2-sided printing with banners did not work properly on some
|
|
|
|
|
printers
|
|
|
|
|
* Updated the raw type rule to handle PJL within the first 4k of a
|
|
|
|
|
print job
|
|
|
|
|
* Added an Estonian translation
|
|
|
|
|
* Clarified the documentation for the cupsd.conf @LOCAL and
|
|
|
|
|
@IF(name) allow/deny functionality
|
|
|
|
|
* The PostScript filters did not escape the Title and For comments
|
|
|
|
|
in the print job header
|
|
|
|
|
* The scheduler would use 100% CPU if browsing was disabled and
|
|
|
|
|
the cupsd.conf file contained BrowsePoll lines
|
|
|
|
|
* The cupsDirRead() function did not work properly on
|
|
|
|
|
non*POSIX-compliant systems
|
|
|
|
|
* The cupsFile functions didn't handle read/write errors properly
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Sep 22 12:19:14 CEST 2006 - kssingvo@suse.de
|
|
|
|
|
|
2015-06-09 11:10:04 +02:00
|
|
|
|
- CUPS 1.2.4 fixes a number of web interface, scheduler,
|
|
|
|
|
and CUPS API issues.
|
2007-01-16 00:08:16 +01:00
|
|
|
|
Changes include:
|
|
|
|
|
- The --with-printcap configure option did not work
|
2015-06-09 11:10:04 +02:00
|
|
|
|
- The character set reported by cupsLangGet() did not always
|
|
|
|
|
reflect the default character set of a given locale
|
2007-01-16 00:08:16 +01:00
|
|
|
|
- Older Lexmark and Tektronix printers did not work with IPP
|
|
|
|
|
- Failsafe printing did not work
|
|
|
|
|
- Some web interface redirects did not work
|
2015-06-09 11:10:04 +02:00
|
|
|
|
- The web interface change settings button could introduce
|
|
|
|
|
a "Port 0" line in cupsd.conf if there was no loopback
|
|
|
|
|
connection available
|
2007-01-16 00:08:16 +01:00
|
|
|
|
- The web interface change settings and edit configuration file
|
|
|
|
|
buttons would truncate the cupsd.conf file
|
|
|
|
|
- The German web interface used the wrong printer icon images
|
2015-06-09 11:10:04 +02:00
|
|
|
|
- The "All Documents" link in the on-line help was missing a
|
|
|
|
|
trailing slash
|
|
|
|
|
- The Polish web interface translation used the wrong URLs for
|
|
|
|
|
the job history
|
2007-01-16 00:08:16 +01:00
|
|
|
|
- The "reprint job" button did not work
|
2015-06-09 11:10:04 +02:00
|
|
|
|
- The scheduler did not always report printer or job events
|
|
|
|
|
properly
|
|
|
|
|
- The scheduler always stopped the queue on error, regardless
|
|
|
|
|
of the exit code, if the error policy was set to "stop-printer"
|
|
|
|
|
- ppdEmitJCL() included UTF-8 characters in the JCL job name,
|
|
|
|
|
which caused problems on some printers
|
2007-01-16 00:08:16 +01:00
|
|
|
|
- Fixed a buffering problem that cause high CPU usage
|
2015-06-09 11:10:04 +02:00
|
|
|
|
- The command-line applications did not convert command-line
|
|
|
|
|
strings to UTF-8 as needed
|
|
|
|
|
- cupsDirRead() incorrectly aborted when reading a symbolic link
|
|
|
|
|
that pointed to a file/directory that did not exist
|
2007-01-16 00:08:16 +01:00
|
|
|
|
- The cupsInterpretRasterPPD() function did not handle custom page
|
|
|
|
|
sizes properly.
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Sep 14 14:07:57 CEST 2006 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- Upgrade to 1.2.3:
|
|
|
|
|
* The scheduler did not send job-state or job-config-changed events
|
|
|
|
|
when a job was held, released, or changed
|
|
|
|
|
* The scheduler now aborts if the configuration file and directory
|
|
|
|
|
checks fail
|
|
|
|
|
* Fixed a problem with ippPort() not using the port number that was
|
|
|
|
|
set via the client.conf file or CUPS_SERVER environment variable
|
|
|
|
|
* HTTP headers were not buffered
|
|
|
|
|
* Some IPP printers (HP) did not like UTF-8 job names
|
|
|
|
|
* The CUPS desktop icon is now localized for Polish
|
|
|
|
|
* Printer options were not always honored when printing
|
|
|
|
|
* The openssl command would lock up the scheduler when generating
|
|
|
|
|
an encryption certificate on some platforms due to a lack of
|
|
|
|
|
entropy for the random number generator
|
|
|
|
|
* The web admin page did not recognize that "Listen 631" enabled
|
|
|
|
|
remote access
|
|
|
|
|
* The web admin page did not check whether changes were made to the
|
|
|
|
|
Basic Server Settings check boxes
|
|
|
|
|
* The IPP backend could generate N*N copies in certain edge cases.
|
|
|
|
|
* The scheduler did not restore remote printers properly when
|
|
|
|
|
BrowseShortNames was enabled
|
|
|
|
|
* Polling did not handle changes to the network environment on Mac
|
|
|
|
|
OS X
|
|
|
|
|
* The "make test" subscription tests used invalid
|
|
|
|
|
notify-recipient-uri values
|
|
|
|
|
* Printers could be left in an undefined state on system sleep
|
|
|
|
|
* The Berkeley and System V commands did not always use the
|
|
|
|
|
expected character set
|
|
|
|
|
* Remote printing fixes
|
|
|
|
|
* The cupstestppd utility did not validate translation strings for
|
|
|
|
|
custom options properly.
|
|
|
|
|
* Multi-language PPD files were not properly localized in the web
|
|
|
|
|
interface
|
|
|
|
|
* The admin page's simple settings options did not check for local
|
|
|
|
|
domain socket or IPv6 addresses and did not use "localhost" as
|
|
|
|
|
the listen address.
|
|
|
|
|
* An empty BrowseProtocols, BrowseLocalProtocols, or
|
|
|
|
|
BrowseRemoteProtocols line would crash the scheduler instead of
|
|
|
|
|
disabling the corresponding browsing options.
|
|
|
|
|
* The scheduler now logs IPP operation status as debug messages
|
|
|
|
|
instead of info or error.
|
|
|
|
|
* cupsFileRewind() didn't clear the end-of-file state.
|
|
|
|
|
* cupstestppd didn't report the actual misspelling of the
|
|
|
|
|
1284DeviceID attribute
|
|
|
|
|
* BrowseRelay didn't work on Debian
|
|
|
|
|
* configure --without-languages didn't work
|
|
|
|
|
* Manually added remote printers did not work
|
|
|
|
|
* The <cups/backend.h> header was not installed.
|
|
|
|
|
* Updated the build files for Autoconf 2.60
|
|
|
|
|
* The scheduler incorrectly terminated the polling processes after
|
|
|
|
|
receiving a partial log line.
|
|
|
|
|
* The cups-lpd mini-daemon reported "No printer-state attribute
|
|
|
|
|
found" errors when reporting the queue status
|
|
|
|
|
* SNMP backend improvements
|
|
|
|
|
* The scheduler erroneously reported an error with the CGI pipe
|
|
|
|
|
* Fixed HP-UX compile problems
|
|
|
|
|
* cupstestppd crashed with some PPD files
|
|
|
|
|
* The <cups/dir.h> and <cups/file.h> header files did not work with
|
|
|
|
|
C++.
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Jul 25 19:21:19 CEST 2006 - kssingvo@suse.de
|
|
|
|
|
|
2015-06-09 11:10:04 +02:00
|
|
|
|
- upgrade to version 1.2.2, which fixes several build, platform,
|
|
|
|
|
notification, and printing bugs. Changes include:
|
|
|
|
|
* Documentation updates
|
|
|
|
|
* CUPS didn't know about alternate character set names for
|
|
|
|
|
Asian text
|
|
|
|
|
* The lpoptions -o and -r options did not work unless you
|
|
|
|
|
specified a printer.
|
|
|
|
|
* The lpoptions command incorrectly allowed users to set
|
|
|
|
|
printer attributes like printer-type
|
|
|
|
|
* httpWait() did not flush the write buffer, causing
|
|
|
|
|
"bad request" errors when communicating with CUPS 1.1.x
|
|
|
|
|
servers
|
|
|
|
|
* Polling did not sanitize the printer description, location,
|
|
|
|
|
or make and model strings like broadcasts did.
|
|
|
|
|
* Polled printers did not show the server's default job-sheets
|
|
|
|
|
option value.
|
|
|
|
|
* The Samba password prompt was not properly localized
|
|
|
|
|
* Added a German translation
|
|
|
|
|
* The scheduler now creates self-signed SSL certficates
|
|
|
|
|
automatically when using OpenSSL and CDSA for encryption,
|
|
|
|
|
just as for GNU TLS.
|
|
|
|
|
* The SNMP backend sporatically reported some printers
|
|
|
|
|
as "unknown"
|
|
|
|
|
* The scheduler now forces BrowseTimeout to be at least twice
|
|
|
|
|
the BrowseInterval value and non-zero to avoid common
|
|
|
|
|
configuration errors.
|
|
|
|
|
* The scheduler incorrectly returned printer URIs of the form
|
|
|
|
|
"ipp://server/printers/classname" for classes
|
|
|
|
|
* Updated Japanese localization
|
|
|
|
|
* The scheduler's SSL certificate/key directory was not created
|
|
|
|
|
on installation
|
|
|
|
|
* Added a mailto.conf man page and help page
|
|
|
|
|
* The parallel and USB backends no longer wait for the printer
|
|
|
|
|
to go on-line - this caused problems with certain printers
|
|
|
|
|
that don't follow with the IEEE-1284 standard
|
|
|
|
|
* The scheduler could crash on a reload when implicit classes
|
|
|
|
|
were present
|
|
|
|
|
* The IPP backend incorrectly used the CUPS_ENCRYPTION
|
|
|
|
|
environment variable to determine the default encryption
|
|
|
|
|
mode when printing
|
|
|
|
|
* USB printing did not work on Solaris
|
|
|
|
|
* The scheduler sorted job priorities in the wrong order
|
|
|
|
|
* The scheduler did not automatically restart notifiers
|
|
|
|
|
that exited or crashed
|
|
|
|
|
* IPv6 support did not work on NetBSD
|
|
|
|
|
* The EPM packaging file did not work
|
|
|
|
|
* The scheduler used up the CPU if BrowseRemoteProtocols
|
|
|
|
|
was empty
|
|
|
|
|
* Custom page sizes did not work
|
|
|
|
|
* The SNMP backend could crash on some systems when SNMP
|
|
|
|
|
logging was enabled
|
|
|
|
|
* Browsing could produce some funny printer names when
|
|
|
|
|
ServerName was set to an IP address
|
|
|
|
|
* Fixed the log message for BrowseRelay
|
|
|
|
|
* Fixes to allow CUPS to compile on MirBSD
|
|
|
|
|
* The scheduler incorrectly set the FINAL_CONTENT_TYPE
|
|
|
|
|
environment variable
|
|
|
|
|
* The pdftops filter incorrectly embedded a "produced by"
|
|
|
|
|
comment, causing PDF printing not to work on some
|
|
|
|
|
operating systems
|
|
|
|
|
* Sending raw jobs from a client system could cause the
|
|
|
|
|
client's scheduler to eventually crash
|
|
|
|
|
* The scheduler now checks that the notifier exists prior
|
|
|
|
|
to accepting a new subscription request.
|
|
|
|
|
* The scheduler now reports the supported notify-recipient
|
|
|
|
|
schemes based on the contents of the ServerBin/notifier
|
|
|
|
|
directory.
|
|
|
|
|
* Event notifications did not include the
|
|
|
|
|
notify-sequence-number or other required attributes
|
|
|
|
|
* Allow/Deny addresses of the form "11.22.33.*" did not work
|
|
|
|
|
on Linux
|
|
|
|
|
* cupsGetPPD() did not work if the scheduler was only
|
|
|
|
|
listening on a domain socket
|
|
|
|
|
* The scheduler could crash advertising a class
|
|
|
|
|
* The scheduler could crash if the default printer was deleted
|
|
|
|
|
* Added a new default CUPS raster format (v3) which does not
|
|
|
|
|
compress the raster stream in order to provide the same
|
|
|
|
|
cupsRasterReadPixels() and cupsRasterWritePixels()
|
|
|
|
|
performance as CUPS 1.1.x.
|
|
|
|
|
* The cupsaddsmb man page listed the wrong files for
|
|
|
|
|
the CUPS driver.
|
|
|
|
|
* Some configure --with options did not work
|
|
|
|
|
* "Allow @IF(name)" didn't work if "name" wasn't the first
|
|
|
|
|
network interface
|
|
|
|
|
* The lpstat command did not use the correct character set
|
|
|
|
|
when reporting the date and time
|
|
|
|
|
* The cupsaddsmb command and web interface did not update
|
|
|
|
|
the Windows PPD files properly, resulting in corrupt PPD
|
|
|
|
|
files for the Windows client to use
|
|
|
|
|
* The cupsd.conf man page didn't describe the Listen domain
|
|
|
|
|
socket syntax
|
|
|
|
|
* The scheduler no longer tries to support more than
|
|
|
|
|
FD_SETSIZE file descriptors.
|
2007-01-16 00:08:16 +01:00
|
|
|
|
* CDSA (encryption) support fixes for MacOS X.
|
2015-06-09 11:10:04 +02:00
|
|
|
|
* The lppasswd program needs to be setuid to root to create
|
|
|
|
|
and update the /etc/cups/passwd.md5 file
|
|
|
|
|
* 32/64-bit library installation was broken
|
|
|
|
|
* The USB backend now reports a "no such device" error
|
|
|
|
|
when using the old filename-based USB URIs instead of
|
|
|
|
|
the "success" error.
|
|
|
|
|
* Increased the HTTP and IPP read timeouts to 10 seconds,
|
|
|
|
|
as 1 second was too short on congested networks
|
|
|
|
|
* The SNMP backend now uses the device description over the
|
|
|
|
|
printer-make-and-model attribute when the attribute
|
|
|
|
|
contains a generic name
|
|
|
|
|
* Fixed another file descriptor leak when printing raw files
|
|
|
|
|
* Raw queues were not shared via LDAP
|
|
|
|
|
* The pstops filter didn't always embed PageSetup commands
|
|
|
|
|
from the PPD file
|
|
|
|
|
* "make install" didn't work if you disabled all of the
|
|
|
|
|
localizations.
|
2007-01-16 00:08:16 +01:00
|
|
|
|
* The scheduler didn't always choose the least costly filter.
|
2015-06-09 11:10:04 +02:00
|
|
|
|
* Fixed parsing of IPv6 addresses in Allow, Deny, BrowseAllow,
|
|
|
|
|
BrowseDeny, and BrowseRelay directives
|
|
|
|
|
* Printers that were shared via LDAP did not get added to
|
|
|
|
|
the LDAP server properly
|
|
|
|
|
* LDAP browsing would crash the scheduler if a required value
|
|
|
|
|
was missing
|
|
|
|
|
* Special cases for the "localhost" hostname did not work,
|
|
|
|
|
causing printing to not work when the /etc/hosts file
|
|
|
|
|
did not contain a localhost entry
|
|
|
|
|
* Updated the Spanish translation
|
|
|
|
|
* Reverse-order page output was broken when N-up or landscape
|
|
|
|
|
orientations were used
|
|
|
|
|
* The parallel, serial, socket, and USB backends needed print
|
|
|
|
|
data before they would report back-channel data, causing
|
|
|
|
|
problems with several new drivers
|
|
|
|
|
- fixed randomly crash when testing many PPD files
|
|
|
|
|
(bugzilla#193354)
|
2007-01-16 00:08:16 +01:00
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Jul 13 14:44:10 CEST 2006 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- moved 3.0 from BETA to STABLE
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Jun 29 17:25:50 CEST 2006 - nadvornik@suse.cz
|
|
|
|
|
|
|
|
|
|
- do not use deprecated libpng function png_read_destroy
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Jun 28 11:41:34 CEST 2006 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- reinjected lost --datadir into configure
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Jun 22 14:20:30 CEST 2006 - kssingvo@suse.de
|
|
|
|
|
|
2015-06-09 11:10:04 +02:00
|
|
|
|
- upgrade to version 1.2.1: a major release after long (>1y)
|
|
|
|
|
development with new functions, many enhancements, bugfixes
|
|
|
|
|
and new bugs
|
2007-01-16 00:08:16 +01:00
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon May 22 20:49:14 CEST 2006 - kssingvo@suse.de
|
|
|
|
|
|
2015-06-09 11:10:04 +02:00
|
|
|
|
- removed Required-Start: in rccupsrenice; real fix for
|
|
|
|
|
(bugzilla#172708)
|
2007-01-16 00:08:16 +01:00
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon May 22 12:43:13 CEST 2006 - lmuelle@suse.de
|
|
|
|
|
|
|
|
|
|
- Only activate cupsrenice on initial install; [#172708].
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Apr 25 11:48:29 CEST 2006 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- fixed pswrite.patch (bugzilla#169068)
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Apr 11 17:09:39 CEST 2006 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- fixed the usb naming for special HP printers (bugzilla#163833)
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Jan 25 21:35:16 CET 2006 - mls@suse.de
|
|
|
|
|
|
|
|
|
|
- converted neededforbuild to BuildRequires
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Sat Jan 14 17:50:52 CET 2006 - lmuelle@suse.de
|
|
|
|
|
|
2015-06-09 11:10:04 +02:00
|
|
|
|
- Move cups-config to the libs sub package. Then we do not bother
|
|
|
|
|
anyone as cups-libs is required by cups-devel and cups; [#142004].
|
2007-01-16 00:08:16 +01:00
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Jan 13 10:48:29 CET 2006 - meissner@suse.de
|
|
|
|
|
|
|
|
|
|
- Use -fstack-protector.
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Jan 11 19:03:06 CET 2006 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- moved cups-config into main package (bugzilla#142004)
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Jan 10 15:21:33 CET 2006 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- fixed %files for /etc/cups/printcap (bugzilla#140308)
|
|
|
|
|
- fixed various xpdf security issues (bugzilla#137156)
|
|
|
|
|
CVE-2005-3624, CVE-2005-3625, CVE-2005-3626, CVE-2005-3627,
|
|
|
|
|
CVE-2005-3628, CVE-2005-3193
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Dec 6 21:00:55 CET 2005 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- fixed xpdf overflow CVE-2005-3193 (bugzilla#137156)
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Nov 23 14:51:48 CET 2005 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- fixed the info of last printer in printcap file (bugzilla#132152)
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Nov 23 12:24:43 CET 2005 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- added global lpoptions file (bugzilla#118982)
|
|
|
|
|
- fixed $ppid test in rccupsrenice (bugzilla#119822)
|
|
|
|
|
- fixed short description in rccupsrenice (bugzilla#121873)
|
|
|
|
|
- changed filtering of mozilla-ps (bugzilla#130623)
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Sep 12 15:14:03 CEST 2005 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- fixed segfault in cupstestppd (bugzilla#116468)
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Sep 8 11:47:28 CEST 2005 - kssingvo@suse.de
|
|
|
|
|
|
2015-06-09 11:10:04 +02:00
|
|
|
|
- fixed rccupsrenice: can handle mutliple pids in $ppid now
|
|
|
|
|
(bugzilla#115863)
|
2007-01-16 00:08:16 +01:00
|
|
|
|
- fixed rccupsrenice: link points to correct script
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Sep 5 10:21:41 CEST 2005 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- fixed rccupsrenice: requires changed to cupsd (bugzilla#115261)
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Sep 2 16:03:06 CEST 2005 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- fixed length of stftime array in lpstat (bugzilla#105732)
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Sep 1 10:43:15 CEST 2005 - kssingvo@suse.de
|
|
|
|
|
|
2015-06-09 11:10:04 +02:00
|
|
|
|
- rccupsrenice checks if cupsd is running before processing
|
|
|
|
|
(bugzilla#114650)
|
2007-01-16 00:08:16 +01:00
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Aug 23 11:10:52 CEST 2005 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- coolo wants a speedup of system boot:
|
|
|
|
|
rccups: cupsd gets now a lower ionice value if booting in level 5
|
|
|
|
|
and rccupsrenice (new introduced) brings those io values back,
|
|
|
|
|
later when system is up and running
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Jul 26 13:34:13 CEST 2005 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- removed backends pipe and novell; now in cups-backends
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Jul 11 17:52:34 CEST 2005 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- further changes for PIE
|
|
|
|
|
- renamed latest patches to my naming schema
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Jun 30 18:37:37 CEST 2005 - uli@suse.de
|
|
|
|
|
|
|
|
|
|
- build with -fPI[CE] (not -fpi[ce]) to avoid GOT overflows in
|
|
|
|
|
certain packages (e.g. scribus) on s390*
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Jun 20 17:20:31 CEST 2005 - ro@suse.de
|
|
|
|
|
|
2015-06-09 11:10:04 +02:00
|
|
|
|
- build as PIE
|
2007-01-16 00:08:16 +01:00
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Jun 15 18:11:53 CEST 2005 - mfabian@suse.de
|
|
|
|
|
|
|
|
|
|
- Bugzilla #41006 "Charset detection in CUPS":
|
|
|
|
|
add missing includes and fix charset and language detection.
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Jun 13 16:43:59 CEST 2005 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- removed permissions file from package (bugzilla#66305)
|
|
|
|
|
- changed permission of xinetd.d file
|
|
|
|
|
- fixed SUSE version in testpage (bugzilla#78075)
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Apr 7 17:13:54 CEST 2005 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- gcc4.0 compilation fixes (thx to mls)
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Mar 10 16:05:43 CET 2005 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- fixed problem in lppasswd file generation (bugzilla#64370)
|
|
|
|
|
- fixed problem in library with authorization
|
|
|
|
|
- cupstestppd checks now PageSize more properly
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Mar 1 16:49:53 CET 2005 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- fixed lpstat segfault issue (bugzilla#66328)
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Feb 21 19:33:16 CET 2005 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- added "hplip" to rccups (bugzilla#65378)
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Feb 15 15:42:14 CET 2005 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- introduced norootforbuild
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Jan 21 14:40:50 CET 2005 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- update to version 1.1.23 and adaption of patches
|
|
|
|
|
- added xpdf buffer overflow fix; CAN-2005-0064 (bugzilla#49840)
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Sat Jan 15 21:09:14 CET 2005 - schwab@suse.de
|
|
|
|
|
|
|
|
|
|
- Use <owner>:<group> in permissions file.
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Sun Dec 19 14:08:43 CET 2004 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- added additional xpdf buffer overflow patches (missing in this
|
|
|
|
|
version)
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Dec 15 17:00:23 CET 2004 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- updated novell backend (bugzilla#41773)
|
|
|
|
|
- updated pipe backend (bugzilla#33659)
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Nov 17 14:44:27 CET 2004 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- updated to cups-1.1.22
|
|
|
|
|
- adapted spec file, patches, etc.
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Nov 8 17:13:35 CET 2004 - kukuk@suse.de
|
|
|
|
|
|
|
|
|
|
- Include common-* PAM config files in cups configuration
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Sep 24 14:04:06 CEST 2004 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- added creation of group ntadmin in %pre (bugzilla#45719)
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Sep 20 16:15:08 CEST 2004 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- cupstestppd fails on some doubtful Sharp PPDs (bugzilla#45648)
|
|
|
|
|
- removed ed from neededforbuild list
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Sep 15 16:46:52 CEST 2004 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- fix for umlaut names when download of queue ppds (bugzilla#44975)
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Sep 14 14:16:29 CEST 2004 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- cups-1.1.21 is now released
|
2015-06-09 11:10:04 +02:00
|
|
|
|
- cupsomatic removed (will be replaced by
|
|
|
|
|
foomatic-rip/foomatic-filters)
|
2007-01-16 00:08:16 +01:00
|
|
|
|
- more useable messages in preauth patch
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Sep 2 18:13:40 CEST 2004 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- ignores now short living childs in ppds.dat generation case
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Sep 1 11:58:57 CEST 2004 - kssingvo@suse.de
|
|
|
|
|
|
2015-06-09 11:10:04 +02:00
|
|
|
|
- fixed security problem in cupsomatic, CAN-2004-0801
|
|
|
|
|
(bugzilla#44233)
|
2007-01-16 00:08:16 +01:00
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Aug 31 15:58:54 CEST 2004 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- first try for cups-1.1.21rc2
|
|
|
|
|
- renumbered patches
|
|
|
|
|
- adapted old SuSE patches to this version
|
|
|
|
|
- removed /var/adm/notify -- ancient and no longer needed
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Aug 12 13:54:08 CEST 2004 - kssingvo@suse.de
|
|
|
|
|
|
2015-06-09 11:10:04 +02:00
|
|
|
|
- added test for /.buildenv to make users happy (bugzilla#43503)
|
2007-01-16 00:08:16 +01:00
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Apr 21 19:59:10 CEST 2004 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- removed needless "rm -rf $RPM_BUILD_ROOT" in %install
|
|
|
|
|
- added -fno-strict-aliasing compile option (*sic*)
|
|
|
|
|
- added missing mime handling of pswrite (bugzilla#33862)
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Apr 13 15:18:46 CEST 2004 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- removed x-devel-packages from neededforbuild
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Apr 6 18:11:08 CEST 2004 - kssingvo@suse.de
|
|
|
|
|
|
2015-06-09 11:10:04 +02:00
|
|
|
|
- fixed segfault in library (bugzilla#38381) - tested and
|
|
|
|
|
works fine
|
2007-01-16 00:08:16 +01:00
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Mar 22 18:18:56 CET 2004 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- fixed image links in web interface (bugzilla#36403)
|
|
|
|
|
- fixed cupstestppd (bugzilla#36688)
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Mar 17 16:56:23 CET 2004 - kssingvo@suse.de
|
|
|
|
|
|
2015-06-09 11:10:04 +02:00
|
|
|
|
- cupstestppd failed if PPD file has default for non-existance
|
|
|
|
|
names (STR#476)
|
|
|
|
|
- patch for CPU excess if CGI is sending faster than client
|
|
|
|
|
receiving (STR#595)
|
2007-01-16 00:08:16 +01:00
|
|
|
|
- faster scan of ppd files (bugzilla#33222)
|
|
|
|
|
- patch for broken HTTP authentication cache (STR#517)
|
|
|
|
|
- redirect administration tasks to primary server (STR#491)
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Mar 17 14:15:56 CET 2004 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- added pswrite filter script to produce PostScript1 output
|
2015-06-09 11:10:04 +02:00
|
|
|
|
- beautified filter ogonki
|
|
|
|
|
"mktemp -q /tmp/dvitops.XXXXXX" -> ogonki.XXXXXX
|
2007-01-16 00:08:16 +01:00
|
|
|
|
- removed cups-1.1.19-no_dvi.patch, fixed cups-mime.patch instead
|
|
|
|
|
- added PS1 and PS2 PPD files (bugzilla#34938)
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Mar 16 20:35:44 CET 2004 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- backport of signed char usage for weird platforms (STR#518)
|
2015-06-09 11:10:04 +02:00
|
|
|
|
- cups-lpd mini-daemon rejects jobs if queue behing is
|
|
|
|
|
rejecting (STR#515)
|
2007-01-16 00:08:16 +01:00
|
|
|
|
- fix for too fast CGI data delivery (STR#484)
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Mar 8 17:51:46 CET 2004 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- backport of fixes in CVS repository for scheduler and library,
|
|
|
|
|
with many fixes, like crash on remote reject, close client on
|
2015-06-09 11:10:04 +02:00
|
|
|
|
errors, propper http flushing, etc. -- first print tests
|
|
|
|
|
work fine.
|
2007-01-16 00:08:16 +01:00
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Mar 8 17:13:30 CET 2004 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- many backports of fixes in CVS repository
|
|
|
|
|
- upgrade of pdftops to version 2.03
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Feb 23 19:22:59 CET 2004 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- memory overwrite fixed in rastertoepson
|
|
|
|
|
- fixed md5sum revealing problem (bugzilla#32862)
|
|
|
|
|
- fixed naming of some usb printers
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Feb 11 17:08:25 CET 2004 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- activated incidentally removed usermode patch (bugzilla#34438)
|
|
|
|
|
- added "printbill" to rccups
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Jan 16 13:12:55 CET 2004 - kukuk@suse.de
|
|
|
|
|
|
|
|
|
|
- Add pam-devel to neededforbuild
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Nov 26 13:42:17 CET 2003 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- fixed permission of directory interfaces (bugzilla#33337)
|
2015-06-09 11:10:04 +02:00
|
|
|
|
- added new option "-p" to generate ppds.dat only and exit
|
|
|
|
|
(bugzilla#33222)
|
2007-01-16 00:08:16 +01:00
|
|
|
|
- added openslp support
|
|
|
|
|
- upgraded to 1.1.20 (final)
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Oct 1 13:33:17 CEST 2003 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- changed LC_MESSAGES -> LC_CTYPE (= fixed bugzilla#26006)
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Sep 25 12:54:29 CEST 2003 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- update to 1.1.20rc2
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Sep 17 17:09:29 CEST 2003 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- authentication method for /admin changed (bugzilla#31158)
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Sep 15 16:23:00 CEST 2003 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- fixed PPDs defaults: Letter -> A4 (bugzilla#30662)
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Sep 11 17:42:26 CEST 2003 - kukuk@suse.de
|
|
|
|
|
|
|
|
|
|
- Set sticky bit for /var/spool/cups/tmp
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Sep 11 13:30:41 CEST 2003 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- changed rcfile, as suggested in bugzilla#28444
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Sep 9 13:36:00 CEST 2003 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- fixed typo in configuration for preauth security patch
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Sep 8 18:02:40 CEST 2003 - kssingvo@suse.de
|
|
|
|
|
|
2015-06-09 11:10:04 +02:00
|
|
|
|
- fix for the SLP browsing patch (missing/wrong initialize
|
|
|
|
|
of variables)
|
2007-01-16 00:08:16 +01:00
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Sep 3 16:59:12 CEST 2003 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- fix for boolean options in filters (CUPS STR#249)
|
|
|
|
|
- fix for check of written bytes in 4 backends (CUPS STR#253)
|
|
|
|
|
- fix for segfault when browsing and SLP is set on (CUPS STR#259)
|
|
|
|
|
- fix for restart problem of processed jobs (CUPS STR#226)
|
|
|
|
|
- fix for LPD port number in URI (CUPS STR#249)
|
|
|
|
|
- fix for Landscape PDF offset rotation position (CUPS STR#243)
|
2015-06-09 11:10:04 +02:00
|
|
|
|
- generated /etc/cups/printcap and link /etc/printcap due
|
|
|
|
|
to UserMode (bugzilla#29671)
|
2007-01-16 00:08:16 +01:00
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Sep 2 18:00:22 CEST 2003 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- fixed %_libdir problem in xinetd.d/cups-lpd (bugzilla#29877)
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Sep 1 15:04:49 CEST 2003 - kssingvo@suse.de
|
|
|
|
|
|
2015-06-09 11:10:04 +02:00
|
|
|
|
- last fix of bugzilla#29418 didn't work in reality. on specfile
|
|
|
|
|
again.
|
2007-01-16 00:08:16 +01:00
|
|
|
|
- "-y" for fillup_and_insserv
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Sep 1 13:34:47 CEST 2003 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- DOCDIR removed to fix bugzilla#29418
|
2015-06-09 11:10:04 +02:00
|
|
|
|
- specfile: daemon has now security patches -> start it on boot
|
|
|
|
|
per default
|
2007-01-16 00:08:16 +01:00
|
|
|
|
- specfile: restart of daemon on package update
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Aug 29 10:38:25 CEST 2003 - kukuk@suse.de
|
|
|
|
|
|
|
|
|
|
- Set explicit correct permissions of /etc/cups contents, else
|
|
|
|
|
cups will do it.
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Aug 26 15:22:28 CEST 2003 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- changed attributes for files (bugzilla#28736)
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Aug 25 19:10:40 CEST 2003 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- fix for locale destroying (bugzilla#29218)
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Aug 25 16:53:29 CEST 2003 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- made restrictrions in cupsd.conf to take preauthorization effect
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Aug 21 16:36:04 CEST 2003 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- cupsd runs now as lp:lp (as suggested in bugzilla#28444)
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Aug 21 15:58:33 CEST 2003 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- added preauthorization patch from okir - seems to work - thx
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Aug 21 10:16:53 CEST 2003 - kssingvo@suse.de
|
|
|
|
|
|
2015-06-09 11:10:04 +02:00
|
|
|
|
- fixed USB backend to report manufacturer and model, if
|
|
|
|
|
description string is missing (cups STR#174)
|
2007-01-16 00:08:16 +01:00
|
|
|
|
- fixed problem with some embedded Type1C fonts (cups STR#177)
|
2015-06-09 11:10:04 +02:00
|
|
|
|
- fixed problem when reading files and using the POSIX locale
|
|
|
|
|
(cups STR#159)
|
2007-01-16 00:08:16 +01:00
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Aug 20 18:53:37 CEST 2003 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- added official patch for cupstestppd problem (bugzilla#27950)
|
|
|
|
|
- fixed problem with "keepalive on" (bugzilla#28154)
|
|
|
|
|
- fixed encode options to honor "yes" and "on" as values too
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Aug 18 11:05:14 CEST 2003 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- fixed metadata in sysconfig file (bugzilla#28861)
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Aug 13 13:48:32 CEST 2003 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- fixed cupstestppd (bugzilla#27950)
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Jul 31 11:10:50 CEST 2003 - coolo@suse.de
|
|
|
|
|
|
|
|
|
|
- don't strip explicitly, but let the brp scripts handle it
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Jul 29 13:41:27 CEST 2003 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- fixed ogonkify (bugzilla#28307)
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Jul 10 14:03:57 CEST 2003 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- fixed 64bit problem in printers.cgi (bugzilla#24786)
|
2015-06-09 11:10:04 +02:00
|
|
|
|
- removed dvi printing support due to missing packages
|
|
|
|
|
(bugzilla#27032)
|
2007-01-16 00:08:16 +01:00
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Jul 4 13:49:48 CEST 2003 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- splitted out foomatic-filters package, which is cups independed
|
|
|
|
|
(except Coolo's faulty checking)
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Jun 23 17:30:04 CEST 2003 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- fixed mandir problem under non-i386 architecture
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Jun 23 14:17:57 CEST 2003 - lmuelle@suse.de
|
|
|
|
|
|
2015-06-09 11:10:04 +02:00
|
|
|
|
- remove smb backand from file list and init script; it's now part
|
|
|
|
|
of the samba-client package
|
2007-01-16 00:08:16 +01:00
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Jun 17 21:28:54 CEST 2003 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- added ptal to Should-Start in rccups (bugzilla#27159)
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Jun 12 11:51:32 CEST 2003 - kukuk@suse.de
|
|
|
|
|
|
|
|
|
|
- Add missing directories to filelist
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Jun 2 15:33:02 CEST 2003 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- 1.1.19 is released -> updated
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri May 30 15:38:09 CEST 2003 - ro@suse.de
|
|
|
|
|
|
|
|
|
|
- remove unpackaged files from buildroot
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Apr 29 10:00:36 CEST 2003 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- updated to 1.1.19rc3
|
|
|
|
|
- removed unnecessary patches
|
|
|
|
|
- removed README.SuSE (bugzilla#26479)
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Apr 9 12:09:56 CEST 2003 - kssingvo@suse.de
|
|
|
|
|
|
2015-06-09 11:10:04 +02:00
|
|
|
|
- added patch for cgi-interface: hostname is now mapped
|
|
|
|
|
to localhost
|
2007-01-16 00:08:16 +01:00
|
|
|
|
- updated PrintAnalyzer script
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Mar 12 18:06:38 CET 2003 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- fixed "endless attempts to print" problem (bugzilla#25152)
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Mar 12 13:44:25 CET 2003 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- installs now correct pam file (bugzilla#23277)
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Mar 10 16:18:21 CET 2003 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- fixed location of foomatic-rip filters -> /usr/bin
|
|
|
|
|
- added link for foomatic-rip
|
|
|
|
|
- updated foomatic-rip (to latest, fixed version)
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Mar 6 13:18:04 CET 2003 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- fixed typo for manpage installation of foomatic-rip
|
2015-06-09 11:10:04 +02:00
|
|
|
|
- fixed file list of cups and cups-client (foomatic-rip is part
|
|
|
|
|
of cups and therefore the corresponding package should contain
|
|
|
|
|
the manpage too)
|
2007-01-16 00:08:16 +01:00
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Mar 3 10:32:34 CET 2003 - kssingvo@suse.de
|
|
|
|
|
|
2015-06-09 11:10:04 +02:00
|
|
|
|
- updated cupsomatic to linuxprinting.org (hopefully fixed
|
|
|
|
|
accounting problem)
|
2007-01-16 00:08:16 +01:00
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Feb 27 11:14:51 CET 2003 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- fix for add printer with KDE util (from CVS head)
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Feb 26 17:20:33 CET 2003 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- fixed again filelist :)
|
|
|
|
|
- fixed documenation path (buzgzilla#24083)
|
|
|
|
|
- fixed PPD file parsing (from CVS head)
|
|
|
|
|
- tested daemon
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Feb 26 16:54:55 CET 2003 - ro@suse.de
|
|
|
|
|
|
2015-06-09 11:10:04 +02:00
|
|
|
|
- fix filelist (file listed twice)
|
2007-01-16 00:08:16 +01:00
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Feb 26 14:34:38 CET 2003 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- updated foomatic-gswrapper
|
|
|
|
|
- added new foomatic-rip: filter, config file and manpage
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Feb 24 12:28:12 CET 2003 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- updated backends novell and pipe
|
|
|
|
|
- renamed sysconfig metadata: sysconfig.cups -> cups.sysconfig
|
|
|
|
|
- renamed permissions file: permissions.cups -> cups.permissions
|
|
|
|
|
- fixed problem in lpoptions (no more loops! :)
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Feb 20 12:37:07 CET 2003 - mmj@suse.de
|
|
|
|
|
|
|
|
|
|
- Add sysconfig metadata [#22629]
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Feb 7 12:15:53 CET 2003 - kukuk@suse.de
|
|
|
|
|
|
|
|
|
|
- Use pam_unix2.so instead of pam_unix.so
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Jan 28 17:45:38 CET 2003 - kssingvo@suse.de
|
|
|
|
|
|
2015-06-09 11:10:04 +02:00
|
|
|
|
- fixed "Error message when starting cups daemon" problem
|
|
|
|
|
(bugzilla#22472)
|
2007-01-16 00:08:16 +01:00
|
|
|
|
- removed unnecessary DocumentRoot setting cupsd.conf
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Jan 28 14:57:11 CET 2003 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- changed replacement of distribution in testprint.ps
|
2015-06-09 11:10:04 +02:00
|
|
|
|
- rccups: moved hotplug from required start to should-start
|
|
|
|
|
(bugzilla#23054)
|
2007-01-16 00:08:16 +01:00
|
|
|
|
- added /usr/bin/cupstestppd (bugzilla#23143)
|
|
|
|
|
- created xinetd.d file for cups-lpd
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Jan 23 17:55:27 CET 2003 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- added usb patch (for epson printers)
|
|
|
|
|
- added herrno patch in IPP protocol
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Jan 17 14:09:05 CET 2003 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- added two backends (pipe + novell), written by jsrain@suse.cz
|
|
|
|
|
- welcome back foomatic filter (makes more sense to have it here)
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Dec 20 13:09:43 CET 2002 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- updated to 1.1.18, adapted testpage.diff for new version
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Dec 16 11:02:35 CET 2002 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- fixed test for link problem in rccups
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Dec 10 17:11:45 CET 2002 - kssingvo@suse.de
|
|
|
|
|
|
2015-06-09 11:10:04 +02:00
|
|
|
|
- removed foomatic filter. with next suse release will be
|
|
|
|
|
in pkg cups-drivers
|
2007-01-16 00:08:16 +01:00
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Dec 4 10:55:34 CET 2002 - kssingvo@suse.de
|
|
|
|
|
|
2015-06-09 11:10:04 +02:00
|
|
|
|
- updated to version 1.1.17, removed lib64 patch (now already
|
|
|
|
|
in source tree)
|
2007-01-16 00:08:16 +01:00
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Nov 7 17:08:49 CET 2002 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- updated %files for all cups subpackages.
|
|
|
|
|
(Now new cups files are included too :-)
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Nov 7 14:56:27 CET 2002 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- removed debuging option in spec file.
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Nov 7 11:00:45 CET 2002 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- updated to version 1.1.16, removed or adapted SuSE patches
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Sep 10 12:38:47 CEST 2002 - ro@suse.de
|
|
|
|
|
|
|
|
|
|
- added prereq for groupadd (#19300)
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Sep 5 22:25:25 CEST 2002 - ro@suse.de
|
|
|
|
|
|
2015-06-09 11:10:04 +02:00
|
|
|
|
- fix postinstall
|
2007-01-16 00:08:16 +01:00
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Sep 5 16:12:02 CEST 2002 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- changed %post: removed "insserv" to make yast2 and security happy
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Sep 2 18:13:43 CEST 2002 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- changed cupsd.conf for 127.0.0.2 access (bugzilla#18764)
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Sep 2 17:55:42 CEST 2002 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- added directory /usr/share/cups/drivers for cupsaddsmb/samba
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Aug 27 17:34:29 CEST 2002 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- fixed foomatic and foomatic-gswrapper (bugzilla#18425)
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Aug 21 16:36:29 CEST 2002 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- gave %files sections a %deffattr and gave special files and dirs
|
|
|
|
|
a required %attr permissions of lp.sys (bugzilla#18126)
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Aug 20 13:02:41 CEST 2002 - uli@suse.de
|
|
|
|
|
|
|
|
|
|
- fixed hardcoded path CUPS_SERVERBIN (fixes ghostscript on lib64
|
|
|
|
|
archs)
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Aug 20 11:13:05 CEST 2002 - mmj@suse.de
|
|
|
|
|
|
|
|
|
|
- Correct PreReq
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Aug 12 17:11:16 CEST 2002 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- cups-devel now requires exact matching version of cups-libs
|
|
|
|
|
- added /var/log/cups to cups-libs (bugzilla#17617)
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Sat Jul 27 18:26:55 CEST 2002 - adrian@suse.de
|
|
|
|
|
|
|
|
|
|
- add %run_ldconfig
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Jul 22 15:47:18 CEST 2002 - kssingvo@suse.de
|
|
|
|
|
|
2015-06-09 11:10:04 +02:00
|
|
|
|
- fix for author patch: crashed on reload signal
|
|
|
|
|
(tested for stability)
|
2007-01-16 00:08:16 +01:00
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Jul 19 16:29:48 CEST 2002 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- using now fillup to generate sysconfig file
|
|
|
|
|
- replaced delayed exit patch by CUPS authors one
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Jul 18 16:02:20 CEST 2002 - kssingvo@suse.de
|
|
|
|
|
|
2015-06-09 11:10:04 +02:00
|
|
|
|
- again rccups: rc.config only parsed, if present
|
|
|
|
|
(for backward compatibility)
|
2007-01-16 00:08:16 +01:00
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Jul 18 10:14:15 CEST 2002 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- updated rccups to satisfy new SuSE requirements
|
|
|
|
|
- added delayed exit of cupsd patch (for processing many PPD files)
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Jul 10 21:22:30 CEST 2002 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- adapted the pam file for SuSE (according to Thorstens proposal)
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Jul 9 21:11:53 CEST 2002 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- upgraded to version 1.1.15 and adapted all the old patches
|
|
|
|
|
- moved %{_sysconfdir}/cups to libs (as suggested by jsmeix)
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Jul 2 16:57:33 CEST 2002 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- added symbolic link /usr/bin/lpc (bugzilla #16652)
|
2015-06-09 11:10:04 +02:00
|
|
|
|
- changed umask in rccups (bugzilla #16567)
|
2007-01-16 00:08:16 +01:00
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Jun 13 20:00:27 MEST 2002 - draht@suse.de
|
|
|
|
|
|
|
|
|
|
- Running cupsd if no printer is configured makes no sense.
|
|
|
|
|
Do not activate cupsd after installation in %post.
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Jun 4 18:49:05 CEST 2002 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- fixed g++/cups-config problems in other cups subpackages
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Jun 4 16:00:21 CEST 2002 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- added 'cups-config' to devel
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed May 8 18:06:35 CEST 2002 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- fixed linker problem (rpath) under x86_64
|
|
|
|
|
- therefore old x86_64 fix is no longer necessary: removed.
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Apr 22 16:20:21 CEST 2002 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- added %ifarch x86_64 to avoid linking problems in specfile.
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Apr 18 17:30:40 CEST 2002 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- updated to 1.1.14
|
|
|
|
|
- removed unnecessary patches
|
|
|
|
|
- adapted testpage.ps patch to new file
|
|
|
|
|
- fixed permission problem with lppasswd
|
|
|
|
|
- fixed %files section (now includes all %dirs too)
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Apr 10 11:18:40 CEST 2002 - ro@suse.de
|
|
|
|
|
|
2015-06-09 11:10:04 +02:00
|
|
|
|
- don't call autoreconf, we can't use autoheader and automake here
|
2007-01-16 00:08:16 +01:00
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Feb 26 11:29:00 CET 2002 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- fixed too restrictive IPP security fix
|
|
|
|
|
- fixed documentation path (#13889)
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Feb 25 20:20:43 CET 2002 - kssingvo@suse.de
|
|
|
|
|
|
2015-06-09 11:10:04 +02:00
|
|
|
|
- reorganized online documentation. old structure might confuse
|
|
|
|
|
people (#13849)
|
2007-01-16 00:08:16 +01:00
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Feb 20 15:33:13 CET 2002 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- completed the IPP security fix again (hopefully the last time)
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Feb 18 17:27:56 CET 2002 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- completed the IPP security fix
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Feb 12 10:58:49 CET 2002 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- updated perl scripts cupsomatic, and foomatic-gswrapper
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Feb 12 10:52:12 CET 2002 - kssingvo@suse.de
|
|
|
|
|
|
2015-06-09 11:10:04 +02:00
|
|
|
|
- made patch cups-cs-utf8.dif again. got build problems with
|
|
|
|
|
last version.
|
2007-01-16 00:08:16 +01:00
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Feb 11 17:49:40 CET 2002 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- Added iso-8859-2 patch for czech utf-8 locale.
|
|
|
|
|
Thanks to Petr Blahos <pblahos@suse.cz>.
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Feb 11 17:31:46 CET 2002 - kssingvo@suse.de
|
|
|
|
|
|
|
|
|
|
- added IPP security fix
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Feb 1 18:36:44 MET 2002 - draht@suse.de
|
|
|
|
|
|
|
|
|
|
- log tcp-wrappers based connection refusals to cups' own logfiles
|
|
|
|
|
instead of syslog.
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Feb 1 00:26:11 CET 2002 - ro@suse.de
|
|
|
|
|
|
|
|
|
|
- changed neededforbuild <libpng> to <libpng-devel-packages>
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Jan 29 20:28:51 MET 2002 - draht@suse.de
|
|
|
|
|
|
|
|
|
|
- added support for tcp-wrappers (cups-1.1.12-libwrap-addition.dif)
|
|
|
|
|
token for /etc/hosts.{allow,deny} is "cupsd".
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Jan 21 15:40:50 CET 2002 - schwab@suse.de
|
|
|
|
|
|
|
|
|
|
- Fix gcc version check.
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Jan 8 14:02:01 CET 2002 - pblahos@suse.cz
|
|
|
|
|
|
2015-06-09 11:10:04 +02:00
|
|
|
|
- cups-client does not provide print_daemon anymore. print_daemon
|
|
|
|
|
is required by aps but cups-client does not satisfy aps
|
2007-01-16 00:08:16 +01:00
|
|
|
|
regarding this.
|
|
|
|
|
- START_CUPS variable removed
|
|
|
|
|
- up to 1.1.12
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Sun Nov 11 00:59:05 CET 2001 - bjacke@suse.de
|
|
|
|
|
|
|
|
|
|
- fixes specfile
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Sat Nov 10 19:16:26 CET 2001 - bjacke@suse.de
|
|
|
|
|
|
|
|
|
|
- add standard postscript PPD
|
|
|
|
|
- set DefaultPage{Size,Region} to A4 in ppd files
|
|
|
|
|
- now reqiures ghostscript_any
|
|
|
|
|
- add /etc/permissions.d/cups-client (#4094)
|
|
|
|
|
- personalize test page
|
|
|
|
|
- move old font directory if existing and send mail
|
|
|
|
|
- up to 1.1.11
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Oct 22 00:14:34 CEST 2001 - ro@suse.de
|
|
|
|
|
|
|
|
|
|
- remove ghostscript-fonts-std from neededforbuild, this is only
|
|
|
|
|
a runtime requirement
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Sep 4 19:02:36 CEST 2001 - bjacke@suse.de
|
|
|
|
|
|
|
|
|
|
- work around cups' broken tmp file handling (#10142)
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Sun Sep 2 19:50:26 CEST 2001 - bjacke@suse.de
|
|
|
|
|
|
|
|
|
|
- move client.conf to libs package
|
|
|
|
|
- activate cat8 man pages
|
|
|
|
|
- add README.SuSE
|
|
|
|
|
- update lphelp
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Aug 30 23:55:33 CEST 2001 - bjacke@suse.de
|
|
|
|
|
|
|
|
|
|
- split into cups-client and cups(-server) package
|
|
|
|
|
- add %ghosty smb printer backend support
|
|
|
|
|
- re-add ogonky for non-latin1 charsets (#9864)
|
|
|
|
|
- add printanalyzer script in doc
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Aug 27 09:48:10 CEST 2001 - utuerk@suse.de
|
|
|
|
|
|
|
|
|
|
- removed cups.conf (now provided by susehelp)
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Aug 27 07:46:07 CEST 2001 - kukuk@suse.de
|
|
|
|
|
|
|
|
|
|
- Remove -j parameter from spec file
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Sat Aug 25 19:33:57 CEST 2001 - bjacke@suse.de
|
|
|
|
|
|
|
|
|
|
- update to 1.1.10-1 (many fixes)
|
|
|
|
|
- fix output for dvi's (bug #9862)
|
|
|
|
|
- new poll_ppd_base
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Sun Aug 19 23:36:28 CEST 2001 - bjacke@suse.de
|
|
|
|
|
|
|
|
|
|
- split out cups-libs from cups
|
|
|
|
|
- add ssl directory
|
|
|
|
|
- make correct links for cups libraries
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Aug 16 17:05:19 CEST 2001 - bjacke@suse.de
|
|
|
|
|
|
2015-06-09 11:10:04 +02:00
|
|
|
|
- use ghostscript fonts which are the same as the cups fonts
|
|
|
|
|
and adjust dependecy for ghostscript-fonts-std
|
2007-01-16 00:08:16 +01:00
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Sun Aug 12 18:42:27 CEST 2001 - bjacke@suse.de
|
|
|
|
|
|
|
|
|
|
- enable SSL
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Aug 10 15:14:38 CEST 2001 - bjacke@suse.de
|
|
|
|
|
|
|
|
|
|
- correct init script
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Jul 20 12:53:46 CEST 2001 - max@suse.de
|
|
|
|
|
|
|
|
|
|
- new version 1.1.9 .
|
|
|
|
|
- updated init script to new skeleton (Bug #8981).
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Jun 18 14:33:50 CEST 2001 - max@suse.de
|
|
|
|
|
|
|
|
|
|
- added support for PS files created by Netscape.
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Sun Apr 15 21:14:03 CEST 2001 - schwab@suse.de
|
|
|
|
|
|
|
|
|
|
- Fix missing declarations.
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Apr 12 18:06:07 CEST 2001 - max@suse.de
|
|
|
|
|
|
|
|
|
|
- moved foomatic-gswrapper and cupsomatic
|
|
|
|
|
from cups-drivers to cups
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Apr 12 11:43:40 CEST 2001 - max@suse.de
|
|
|
|
|
|
|
|
|
|
- patched cupsd to use /dev/urandom instead of /dev/random.
|
|
|
|
|
This fixes bug #6703
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Apr 11 16:18:20 CEST 2001 - max@suse.de
|
|
|
|
|
|
|
|
|
|
- spec file overhaul
|
|
|
|
|
- using RPM_BUILD_ROOT now
|
|
|
|
|
- removed /etc/printcap from file list
|
|
|
|
|
- removed dependency to cups-drivers
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Apr 10 16:00:42 CEST 2001 - kendy@suse.cz
|
|
|
|
|
|
|
|
|
|
- Wake up Epson Stylus USB printers before sending the print job.
|
|
|
|
|
- Added czech translations (czech.dif).
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Apr 2 15:41:58 CEST 2001 - utuerk@suse.de
|
|
|
|
|
|
|
|
|
|
- added cups.conf for susehelp
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Mar 23 16:42:05 CET 2001 - kendy@suse.cz
|
|
|
|
|
|
|
|
|
|
- USB printers can be now addressed using URI
|
|
|
|
|
usb:<device_without_number>?vendor=<xxxx>&prod_id=<yyyy>
|
2015-06-09 11:10:04 +02:00
|
|
|
|
where <xxxx> and <yyyy> are USB identification numbers. (e.g.
|
|
|
|
|
usb:/dev/usb/lp?vendor=04a9&prod_id=1052 for Canon BJC-6100)
|
2007-01-16 00:08:16 +01:00
|
|
|
|
- fixed pplication/dvi -> application/dvi in conf/mime.convs
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Feb 26 14:31:15 CET 2001 - mhafner@suse.de
|
|
|
|
|
|
2015-06-09 11:10:04 +02:00
|
|
|
|
- update to 1.1.6-3 (fixing several security issues)
|
2007-01-16 00:08:16 +01:00
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Jan 30 09:27:36 CET 2001 - mhafner@suse.de
|
|
|
|
|
|
2015-06-09 11:10:04 +02:00
|
|
|
|
- update to 1.1.6 (fixes possible DoS attack)
|
2007-01-16 00:08:16 +01:00
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Jan 8 13:54:58 MET 2001 - bjacke@suse.de
|
|
|
|
|
|
|
|
|
|
- added missing reqiures for cups-drivers
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Dec 22 11:56:46 MET 2000 - mhafner@suse.de
|
|
|
|
|
|
2015-06-09 11:10:04 +02:00
|
|
|
|
- update to version 1.1.5
|
2007-01-16 00:08:16 +01:00
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Dec 4 15:51:50 MET 2000 - mhafner@suse.de
|
|
|
|
|
|
2015-06-09 11:10:04 +02:00
|
|
|
|
- cups configuration changed - Browsing now Off by default
|
|
|
|
|
|
2007-01-16 00:08:16 +01:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Nov 30 10:29:44 MET 2000 - mhafner@suse.de
|
|
|
|
|
|
2015-06-09 11:10:04 +02:00
|
|
|
|
- added DVI filter
|
2007-01-16 00:08:16 +01:00
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Nov 29 18:56:40 CET 2000 - ro@suse.de
|
|
|
|
|
|
2015-06-09 11:10:04 +02:00
|
|
|
|
- fixed spec
|
2007-01-16 00:08:16 +01:00
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Nov 28 18:21:53 CET 2000 - ro@suse.de
|
2015-06-09 11:10:04 +02:00
|
|
|
|
|
|
|
|
|
- fixed startscript
|
2007-01-16 00:08:16 +01:00
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Nov 24 13:29:07 MET 2000 - mhafner@suse.de
|
|
|
|
|
|
|
|
|
|
- added rc.config fillup and SuSEconfig script to automatically
|
|
|
|
|
set browse address if demanded
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Nov 22 12:40:01 MET 2000 - mhafner@suse.de
|
|
|
|
|
|
|
|
|
|
- split into system and development package
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Oct 6 13:58:49 CEST 2000 - mhafner@suse.de
|
|
|
|
|
|
|
|
|
|
- documentation root changed
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Oct 6 08:58:06 CEST 2000 - mhafner@suse.de
|
|
|
|
|
|
|
|
|
|
- update to version 1.1.4
|
|
|
|
|
- small changes in spec file
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Sep 25 10:06:38 CEST 2000 - mhafner@suse.de
|
|
|
|
|
|
|
|
|
|
- make post-script succeed unconditionally
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Sep 19 08:25:32 CEST 2000 - mhafner@suse.de
|
|
|
|
|
|
|
|
|
|
- update to version 1.1.3
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Sep 14 11:54:23 CEST 2000 - mhafner@suse.de
|
|
|
|
|
|
|
|
|
|
- restart daemon if already started
|
|
|
|
|
- added two little tools (poll_ppd_base, lphelp)
|
|
|
|
|
- added a few compatibility links
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Sep 14 11:06:33 CEST 2000 - mhafner@suse.de
|
|
|
|
|
|
|
|
|
|
- turned automatic generation of printcap on
|
|
|
|
|
- turned implicit classes off since they are buggy
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Sep 13 16:20:40 CEST 2000 - mhafner@suse.de
|
|
|
|
|
|
2015-06-09 11:10:04 +02:00
|
|
|
|
- fixed directory structure
|
2007-01-16 00:08:16 +01:00
|
|
|
|
- added links to lpd and rclpd
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Sep 1 09:16:39 CEST 2000 - adrian@suse.de
|
|
|
|
|
|
|
|
|
|
- added Conflicts line
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Aug 28 15:10:28 CEST 2000 - adrian@suse.de
|
|
|
|
|
|
|
|
|
|
- initial package
|
|
|
|
|
|