Accepting request 506209 from Printing

Automatic submission by obs-autosubmit

OBS-URL: https://build.opensuse.org/request/show/506209
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/cups?expand=0&rev=140

cups-2.1.3-source.tar.bz2

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:36a70d43584aea2617da914b9331e23341c3501a8254c4d2eae9c11ec01fd4d3
-size 8832400

cups-2.2.3-source.tar.gz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:66701fe15838f2c892052c913bde1ba106bbee2e0a953c955a62ecacce76885f
+size 9497368

cups.changes

@@ -1,3 +1,162 @@
+-------------------------------------------------------------------
+Thu Jun  8 15:52:34 CEST 2017 - jsmeix@suse.de
+
+- In /usr/lib/tmpfiles.d/cups.conf use
+  group 'root' for /run/cups/certs (boo#1042916).
+
+-------------------------------------------------------------------
+Fri Jun  2 10:32:33 CEST 2017 - jsmeix@suse.de
+
+- Major backward incompatible change since CUPS 2.2.0:
+  There is no longer the directory /etc/cups/interfaces because
+  since CUPS 2.2.0 so called "System V style Interface Scripts"
+  are no longer supported for security reasons (see below the
+  entry about the changes included in CUPS 2.2.0).
+- Disabled cups-2.1.0-cups-systemd-socket.patch
+  because it does no longer apply which needs to be examined
+  and decided by someone who knows about systemd internals.
+- Disabled
+  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
+  0002-Save-work-on-Avahi-code.patch
+  0003-Avahi-fixes-for-cupsEnumDests.patch
+  because they do no longer apply which needs to be examined
+  and decided by someone who knows about Avahi internals.
+- Version upgrade to 2.2.3:
+  CUPS 2.2.3 is a general bug fix release.
+  See https://github.com/apple/cups/releases
+  Changes include:
+  * The IPP backend could get into an infinite loop for certain
+    errors, causing a hung queue (rdar://problem/28008717)
+  * The scheduler could pause responding to client requests in
+    order to save state changes to disk (rdar://problem/28690656)
+  * Added support for PPD finishing keywords
+    (Issue #4960, Issue #4961, Issue #4962)
+  * The IPP backend did not send a media-col attribute for just
+    the source or type (Issue #4963)
+  * IPP Everywhere print queues did not always support all print
+    qualities supported by the printer (Issue #4953)
+  * IPP Everywhere print queues did not always support all media
+    types supported by the printer (Issue #4953)
+  * The IPP Everywhere PPD generator did not return useful error
+    messages (Issue #4954)
+  * The IPP Everywhere finishings support did not work correctly
+    with common UI or command-line options (Issue #4976)
+  * Fixed an error handling issue for the network backends
+    (Issue #4979)
+  * The "reprint job" option was not available for some canceled
+    jobs (Issue #4915)
+  * Updated the job listing in the web interface (Issue #4978)
+  A detailed list of changes can be found in the CHANGES.txt file.
+- Version upgrade to 2.2.2:
+  CUPS 2.2.2 is a general bug fix release.
+  See https://github.com/apple/cups/releases
+  Changes include:
+  * Fixed some issues with IPP Everywhere printer support
+    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
+     Issue #4923, Issue #4932, Issue #4933, Issue #4938)
+  * The rastertopwg filter could crash with certain input
+    (Issue #4942)
+  * The scheduler did not detect when an encrypted connection
+    was closed by the client on Linux (Issue #4901)
+  * The cups-lpd program did not catch all legacy usage
+    of ISO-8859-1 (Issue #4899)
+  * The scheduler no longer creates log files on startup
+    (<rdar://problem/28332470>)
+  * The ippContainsString function now uses case-insensitive
+    comparisons for mimeMediaType, name, and text values in
+    conformance with RFC 2911.
+  * The network backends now log the addresses that were found
+    for a printer (<rdar://problem/29268474>)
+  * Let's Encrypt certificates did not work when the hostname
+    contained uppercase letters (Issue #4919)
+  * Fixed reporting of printed pages in the web interface
+    (Issue #4924)
+  * Updated systemd config files (Issue #4935)
+  A detailed list of changes can be found in the CHANGES.txt file.
+- Version upgrade to 2.2.1:
+  CUPS 2.2.1 is a general bug fix release.
+  See https://github.com/apple/cups/releases
+  Changes include:
+  * Added "CreateSelfSignedCerts" directive for cups-files.conf
+    to control whether the scheduler automatically creates
+    its own self-signed X.509 certificates for TLS connections
+    (Issue #4876)
+  * http*Connect did not handle partial failures (Issue #4870)
+  * cupsHashData did not use the correct hashing algorithm
+    (<rdar://problem/28209220>)
+  * Updated man pages (PR #4885)
+  A detailed list of changes can be found in the CHANGES.txt file.
+- Version upgrade to 2.2.0:
+  CUPS 2.2.0 adds support for local IPP Everywhere print queues
+  and includes several performance and security improvements.
+  See https://github.com/apple/cups/releases
+  Changes include:
+  * Normalized the TLS certificate validation code and added
+    additional error messages to aid troubleshooting.
+  * http*Connect did not work on Linux when cupsd was not running
+    (Issue #4870)
+  * The --no-remote-any option of cupsctl had no effect
+    (Issue #4866)
+  * http*Connect did not return early when all addresses failed
+    (Issue #4870)
+  * The IPP backend did not validate TLS credentials properly.
+  * The printer-state-message attribute was not cleared after a
+    print job with no errors (Issue #4851)
+  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
+    operations did not always return an error for failed
+    adds (Issue #4854)
+  * PPD files with names longer than 127 bytes did not work
+    (Issue #4860)
+  * CUPS now supports Let's Encrypt certificates on Linux.
+  * All CUPS commands now support POSIX options (Issue #4813)
+  * The scheduler now restarts faster (Issue #4760)
+  * Improved performance of web interface with large numbers
+    of jobs (Issue #3819)
+  * Encrypted printing can now be limited to only trusted
+    printers and servers (<rdar://problem/25711658>)
+  * The scheduler now advertises PWG Raster attributes for
+    IPP Everywhere clients (Issue #4428)
+  * The scheduler now logs informational messages for jobs
+    at LogLevel "info" (Issue #4815)
+  * The scheduler now uses the getgrouplist function
+    when available (Issue #4611)
+  * The IPP backend no longer enables compression by default
+    except for certain raster formats that generally benefit
+    from it (<rdar://problem/25166952>)
+  * The scheduler did not handle out-of-disk situations
+    gracefully (Issue #4742)
+  * The LPD mini-daemon now detects invalid UTF-8 sequences
+    in job, document, and user names (Issue #4748)
+  * The IPP backend now continues on to the next job
+    when the remote server/printer puts the job on hold
+    (<rdar://problem/24858548>)
+  * The scheduler did not cancel multi-document jobs immediately
+    (<rdar://problem/24854834>)
+  * The scheduler did not return non-shared printers to local
+    clients unless they connected to the domain socket
+    (<rdar://problem/24566996>)
+  * The scheduler now reads the spool directory if one or more
+    job cache entries point to deleted jobs
+    (<rdar://problem/24048846>)
+  * Added support for disc media sizes (<rdar://problem/20219536>)
+  * The httpAddrConnect and httpConnect* APIs now try connecting
+    to multiple addresses in parallel (<rdar://problem/20643153>)
+  * Interface scripts are no longer supported for security reasons
+    (<rdar://problem/23135640>)
+  A detailed list of changes can be found in the CHANGES.txt file.
+- Version upgrade to 2.1.4:
+  CUPS 2.1.4 is a general bug fix release.
+  See https://github.com/apple/cups/releases
+  Changes include:
+  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
+  * Fixed printing of multiple files to raw queues (Issue #4782)
+  * The scheduler did not implement the Hold-New-Jobs opertion
+    correctly (Issue #4767)
+  * The cups-lpd mini-daemon incorrectly included the document-name
+    attribute when creating a job.  It should only be included when
+    sending a job (Issue #4790)
+  A detailed list of changes can be found in the CHANGES.txt file.
+
 -------------------------------------------------------------------
 Sat May 20 08:24:11 UTC 2017 - dimstar@opensuse.org
 

cups.spec

@@ -19,14 +19,18 @@
 # _tmpfilesdir is not defined in systemd macros up to openSUSE 13.2
 %{!?_tmpfilesdir: %global _tmpfilesdir %{_libexecdir}/tmpfiles.d }
 Name:           cups
-Version:        2.1.3
+Version:        2.2.3
 Release:        0
 Summary:        The Common UNIX Printing System
 License:        GPL-2.0 and LGPL-2.1
 Group:          Hardware/Printing
 Url:            http://www.cups.org/
-Source0:        http://www.cups.org/software/%{version}/cups-%{version}-source.tar.bz2
+# To download it use e.g.
-Source1:        http://www.cups.org/software/%{version}/cups-%{version}-source.tar.bz2.sig
+# wget --no-check-certificate -O cups-2.2.3-source.tar.gz https://github.com/apple/cups/releases/download/v2.2.3/cups-2.2.3-source.tar.gz
+Source0:        https://github.com/apple/cups/releases/download/v2.2.3/cups-2.2.3-source.tar.gz
+# To download it use e.g.
+# wget --no-check-certificate -O cups-2.2.3-source.tar.gz.sig https://github.com/apple/cups/releases/download/v2.2.3/cups-2.2.3-source.tar.gz.sig
+Source1:        https://github.com/apple/cups/releases/download/v2.2.3/cups-2.2.3-source.tar.gz.sig
 Source2:        cups.keyring
 Source102:      Postscript.ppd.gz
 Source105:      Postscript-level1.ppd.gz
@@ -143,9 +147,9 @@ browsing". This is now handled by cups-browsed service.
 
 %package libs
 Summary:        Libraries for CUPS
-# Prerequire /sbin/ldconfig which is used in the traditional bash scriptlets for post/postun:
 License:        GPL-2.0 and LGPL-2.1
 Group:          Hardware/Printing
+# Prerequire /sbin/ldconfig which is used in the traditional bash scriptlets for post/postun:
 Requires(pre):  /sbin/ldconfig
 %if 0%{?suse_version} >= 1330
 Requires(pre):	group(lp)
@@ -167,6 +171,8 @@ browsing". This is now handled by cups-browsed service.
 
 %package client
 Summary:        CUPS Client Programs
+License:        GPL-2.0
+Group:          Hardware/Printing
 # Require the exact matching version-release of the cups-libs sub-package because
 # non-matching CUPS libraries may let CUPS software crash (e.g. segfault)
 # because all CUPS software is built from the one same CUPS source tar ball
@@ -176,8 +182,6 @@ Summary:        CUPS Client Programs
 # on the same package repository where the cups package is because
 # all are built simulaneously from the same cups source package
 # and all required packages are provided on the same repository:
-License:        GPL-2.0
-Group:          Hardware/Printing
 Requires:       cups-libs = %{version}-%{release}
 # Conflicts with other print spoolers which provide same binaries like /usr/bin/lp and so on:
 Conflicts:      lprng
@@ -200,13 +204,13 @@ browsing". This is now handled by cups-browsed service.
 
 %package devel
 Summary:        Development Environment for CUPS
+License:        GPL-2.0
+Group:          Development/Libraries/C and C++
 # Do not require the exact matching version-release of cups-libs
 # but only a cups-libs package with matching version because
 # for building third-party software which uses only the CUPS public API
 # there are no CUPS-internal dependencies via CUPS private API calls
 # (the latter would require the exact matching cups-libs version-release):
-License:        GPL-2.0
-Group:          Development/Libraries/C and C++
 Requires:       cups-libs = %{version}
 Requires:       glibc-devel
 
@@ -265,30 +269,30 @@ browsing". This is now handled by cups-browsed service.
 # web content is installed from /usr/share/doc/cups to /usr/share/cups/webcontent
 # because the files of the CUPS web content are no documentation, see CUPS STR #3578
 # and http://bugzilla.novell.com/show_bug.cgi?id=546023#c6 and subsequent comments:
-%patch11 -b default-webcontent-path.prig
+%patch11 -b default-webcontent-path.orig
 # Patch12 cups-2.1.0-cups-systemd-socket.patch Use systemd socket activation properly:
-%patch12 -b cups-systemd-socket.orig
+#patch12 -b cups-systemd-socket.orig
 # Patch13 0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch React properly to avahi's ALL_FOR_NOW signal to reduce unneeded delay
-%patch13 -p1
+#patch13 -p1
 # Patch14 0002-Save-work-on-Avahi-code.patch React properly to avahi's ALL_FOR_NOW signal to reduce unneeded delay
-%patch14 -p1
+#patch14 -p1
 # Patch15 0003-Avahi-fixes-for-cupsEnumDests.patch React properly to avahi's ALL_FOR_NOW signal to reduce unneeded delay
-%patch15 -p1
+#patch15 -p1
 # Patch100...Patch999 is for private patches from SUSE which are not intended for upstream:
 # Patch100 cups-pam.diff adds conf/pam.suse regarding support for PAM for SUSE:
-%patch100
+%patch100 -b cups-pam.orig
 # Patch101 cups-2.0.3-additional_policies.patch adds the 'allowallforanybody' policy to cupsd.conf
 # see https://fate.novell.com/303515 and https://bugzilla.suse.com/show_bug.cgi?id=936309
-%patch101
+%patch101 -b additional_policies.orig
 # Patch103 cups-1.4-do_not_strip_recommended_from_PPDs.patch
 # reverts the change which was added by Michael Sweet in Jan 2007
 # which strips the word "recommended" from NickName in PPDs because
 # at least yast2-printer in SUSE needs it, compare the
 # 'Why not "recommend" PPDs in the NickName?' and the subsequent
 # 'RFC: New Driver Rating/Information Attributes' mail thread on cups@easysw.com:
-%patch103
+%patch103 -b do_not_strip_recommended_from_PPDs.orig
 # Patch104 cups-config-libs.patch fixes option --libs in cups-config script:
-%patch104
+%patch104 -b cups-config-libs.orig
 
 %build
 # Remove ".SILENT" rule for verbose build output
@@ -421,11 +425,20 @@ sed -i -e "s,org.cups.cupsd,cups,g" %{buildroot}%{_unitdir}/cups.service
 ln -s service %{buildroot}%{_sbindir}/rccups
 ln -s service %{buildroot}%{_sbindir}/rccups-lpd
 # Install /usr/lib/tmpfiles.d/cups.conf
+# According to
+# https://developers.redhat.com/blog/2016/09/20/managing-temporary-files-with-systemd-tmpfiles-on-rhel7/
+#   d /var/spool/cups/tmp - - - 30d
+# results that each file older than 30 days on /var/spool/cups/tmp will be deleted where a file
+# will be considered unused only if atime, mtime and ctime are all older than the specified time.
+# We use group 'root' for /run/cups/certs (instead of 'sys')
+#   d /run/cups/certs 0511 lp root -
+# because of https://bugzilla.opensuse.org/show_bug.cgi?id=1042916
 mkdir -p %{buildroot}%{_tmpfilesdir}
 cat > %{buildroot}%{_tmpfilesdir}/cups.conf <<EOF
 # See tmpfiles.d(5) for details
+# Type(d=directory) Path Mode UID GID Age(until delete when cleaning)
 d /run/cups 0755 root lp -
-d /run/cups/certs 0511 lp sys -
+d /run/cups/certs 0511 lp root -
 d %{_localstatedir}/spool/cups/tmp - - - 30d
 EOF
 # Never run fdupes carelessly over the whole buildroot directory
@@ -513,7 +526,6 @@ exit 0
 %config %{_sysconfdir}/cups/cupsd.conf.default
 %config %{_sysconfdir}/cups/cups-files.conf.default
 %config %{_sysconfdir}/cups/snmp.conf.default
-%dir %attr(755,root,lp) %{_sysconfdir}/cups/interfaces
 %dir %attr(755,root,lp) %{_sysconfdir}/cups/ppd
 %dir %attr(700,root,lp) %{_sysconfdir}/cups/ssl
 %{_unitdir}/cups.service