From 0524afe7d93879a8be0ca414105a4d8f93cb0b1078fa1b6450fc3a82b51a2ea9 Mon Sep 17 00:00:00 2001 From: Johannes Meixner Date: Tue, 23 Jul 2013 14:03:37 +0000 Subject: [PATCH] Accepting request 184100 from home:jsmeix:branches:Printing HPLIP version upgrade to 3.13.7 OBS-URL: https://build.opensuse.org/request/show/184100 OBS-URL: https://build.opensuse.org/package/show/Printing/hplip?expand=0&rev=75 --- hplip-3.13.6.tar.gz | 3 --- hplip-3.13.6.tar.gz.asc | 7 ------- hplip-3.13.7.tar.gz | 3 +++ hplip-3.13.7.tar.gz.asc | 7 +++++++ hplip-3.9.8-CVE-2010-4267.patch | 11 ----------- hplip.changes | 12 ++++++++++++ hplip.spec | 15 ++++++--------- 7 files changed, 28 insertions(+), 30 deletions(-) delete mode 100644 hplip-3.13.6.tar.gz delete mode 100644 hplip-3.13.6.tar.gz.asc create mode 100644 hplip-3.13.7.tar.gz create mode 100644 hplip-3.13.7.tar.gz.asc delete mode 100644 hplip-3.9.8-CVE-2010-4267.patch diff --git a/hplip-3.13.6.tar.gz b/hplip-3.13.6.tar.gz deleted file mode 100644 index 19149c4..0000000 --- a/hplip-3.13.6.tar.gz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:86f4fd0accf25ce6d89aa415b3a987e7db410bf529e68b4138f90b1e9055f6c7 -size 20785825 diff --git a/hplip-3.13.6.tar.gz.asc b/hplip-3.13.6.tar.gz.asc deleted file mode 100644 index e5c978f..0000000 --- a/hplip-3.13.6.tar.gz.asc +++ /dev/null @@ -1,7 +0,0 @@ ------BEGIN PGP SIGNATURE----- -Version: GnuPG v1.4.11 (GNU/Linux) - -iEYEABECAAYFAlHD+qQACgkQc9dwzaWQR7nGagCdGytHhhD+LN7raSm2UKSi2VHB -LzIAoOTCb4tS9AU2i5HbVqxgtKgN3yy7 -=XJ4P ------END PGP SIGNATURE----- diff --git a/hplip-3.13.7.tar.gz b/hplip-3.13.7.tar.gz new file mode 100644 index 0000000..149e3e1 --- /dev/null +++ b/hplip-3.13.7.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:710b99786783d75f0d260e36a795e730d54e54a494d0a35276a4b1c497905b11 +size 20810611 diff --git a/hplip-3.13.7.tar.gz.asc b/hplip-3.13.7.tar.gz.asc new file mode 100644 index 0000000..b56188e --- /dev/null +++ b/hplip-3.13.7.tar.gz.asc @@ -0,0 +1,7 @@ +-----BEGIN PGP SIGNATURE----- +Version: GnuPG v1.4.11 (GNU/Linux) + +iEYEABECAAYFAlHuE0EACgkQc9dwzaWQR7neygCgo2j0anBNKNiQglnGv5WGzTiI +rCcAn2KeK702O+ETMfwahui+RETxaQ4I +=jeMZ +-----END PGP SIGNATURE----- diff --git a/hplip-3.9.8-CVE-2010-4267.patch b/hplip-3.9.8-CVE-2010-4267.patch deleted file mode 100644 index 17101ec..0000000 --- a/hplip-3.9.8-CVE-2010-4267.patch +++ /dev/null @@ -1,11 +0,0 @@ ---- io/hpmud/pml.c.orig 2009-08-04 23:37:25.000000000 +0200 -+++ io/hpmud/pml.c 2010-12-17 13:09:28.000000000 +0100 -@@ -504,6 +504,8 @@ enum HPMUD_RESULT hpmud_get_pml(HPMUD_DE - p += 2; /* eat type and length */ - } - -+ if (dLen > buf_size) -+ dLen = buf_size; - memcpy(buf, p, dLen); - *bytes_read = dLen; - *type = dt; diff --git a/hplip.changes b/hplip.changes index 89aac6c..29997db 100644 --- a/hplip.changes +++ b/hplip.changes @@ -1,3 +1,15 @@ +------------------------------------------------------------------- +Tue Jul 23 14:28:37 CEST 2013 - jsmeix@suse.de + +- Version upgrade to 3.13.7: + A few more supported printers and all-in-one devices. + Some bug fixes. + For details see + http://hplipopensource.com/hplip-web/release_notes.html +- hplip-3.9.8-CVE-2010-4267.patch is no longer needed because + it is fixed in the upstream sources in HPLIP version 3.13.7 + (see the entry dated "Thu Jan 13 16:29:01 CET 2011" below). + ------------------------------------------------------------------- Tue Jul 9 16:18:35 CEST 2013 - jsmeix@suse.de diff --git a/hplip.spec b/hplip.spec index 44c956f..93ce69d 100644 --- a/hplip.spec +++ b/hplip.spec @@ -59,15 +59,15 @@ Group: Hardware/Printing # where 'a' or 'b' do not mean 'alpha' or 'beta' but 'second' or 'third' release in the month # (usually bugfix releases have the suffix like 3.12.10a = first bugfix release for 3.12.10). # Official releases have a 3 digit number and release candidates have a 4 digit number: x.y.m.rc -Version: 3.13.6 +Version: 3.13.7 Release: 0 Url: http://hplipopensource.com # Source0...Source9 is for sources from HP: -# URL for Source0: http://prdownloads.sourceforge.net/hplip/hplip-3.13.6.tar.gz -# URL to verify Source0: http://prdownloads.sourceforge.net/hplip/hplip-3.13.6.tar.gz.asc +# URL for Source0: http://prdownloads.sourceforge.net/hplip/hplip-3.13.7.tar.gz +# URL to verify Source0: http://prdownloads.sourceforge.net/hplip/hplip-3.13.7.tar.gz.asc # How to verify Source0 see: http://hplipopensource.com/node/327 # For example: /usr/bin/gpg --keyserver pgp.mit.edu --recv-keys 0xA59047B9 -# /usr/bin/gpg --verify hplip-3.13.6.tar.gz.asc hplip-3.13.6.tar.gz +# /usr/bin/gpg --verify hplip-3.13.7.tar.gz.asc hplip-3.13.7.tar.gz # must result: Good signature from "HPLIP (HP Linux Imaging and Printing) " Source0: http://prdownloads.sourceforge.net/hplip/hplip-%{version}.tar.gz Source1: http://prdownloads.sourceforge.net/hplip/hplip-%{version}.tar.gz.asc @@ -77,8 +77,8 @@ Source2: hplip.keyring # Patch10 fixes "... is used uninitialized ..." warnings: Patch10: fix-uninitialized-variables.diff # Patch11 fix_gcc44_glib.diff is obsolete since version 3.9.6b because it is fixed in the source. -# Patch12 hplip-3.9.8-CVE-2010-4267.patch fixes a remote buffer overflow in hpmud/pml.c: -Patch12: hplip-3.9.8-CVE-2010-4267.patch +# Patch12 hplip-3.9.8-CVE-2010-4267.patch fixeed a remote buffer overflow in hpmud/pml.c which +# is no longer needed because it is fixed in the upstream sources in HPLIP version 3.13.7 # Source100... is for special Suse sources: # Source100 is the primary source for the suse_update_desktop_file stuff. # It is found automatically in $RPM_SOURCE_DIR by 'suse_update_desktop_file -i hplip': @@ -333,9 +333,6 @@ with the scan drivers in HPLIP for standard HP all-in-one printers. # Patch10 fix-uninitialized-variables.diff # fixes "... is used uninitialized ..." warnings: %patch10 -# Patch12 hplip-3.9.8-CVE-2010-4267.patch -# fixes a remote buffer overflow in hpmud/pml.c: -%patch12 # Patch101 change-udev-rules.diff # changes the udev rules file 56-hpmud.rules %patch101