[ubuntu/intrepid] cups 1.3.9-1 (Accepted)

Fri Oct 10 10:25:09 BST 2008

cups (1.3.9-1) experimental; urgency=low

  * New upstream security/bug fix release:
    - The HP-GL/2 filter did not range check pen numbers. [CVE-2008-3641]
    - The SGI image file reader did not range check 16-bit run lengths.
      [CVE-2008-3639]
    - The text filter did not range check cpi, lpi, or column values.
      [CVE-2008-3640]
    - Fix incompatibility with Firefox 3.0 when using SSL.
    - Update the French admin.tmpl, to have the missing "Find new printer"
      button and the "Subscriptions" section. Thanks to Yves-Alexis Perez!
      (Closes: #475270)
    - Lots of other bug fixes, see http://www.cups.org/articles.php?L575.
  * Drop patches accepted upstream:
    - cupsfilter-path-typo.dpatch
    - pjl-display-ready-message.dpatch
    - dont-chown-symlinked-ssl.dpatch
  * Add hpgl-regression.dpatch: Revert the SP_select_pen() enumeration change
    introduced in STR #2911, because it changes the color mapping (e. g. "SP1"
    would now select a white pen instead of a black one, and "SP0" would not
    be valid at all any more). Also fix a remaining off-by-one loop. (STR
    #2966)

cups (1.3.8-13) experimental; urgency=low

  [ Till Kamppeter ]
  * debian/local/filters/pdf-filters/pdftopdf/P2PCatalog.cxx,
    debian/local/filters/pdf-filters/pdftopdf/P2PCatalog.h,
    debian/local/filters/pdf-filters/pdftopdf/P2PDoc.cxx,
    debian/local/filters/pdf-filters/pdftopdf/P2PDoc.h,
    debian/local/filters/pdf-filters/pdftopdf/P2PPageTree.cxx,
    debian/local/filters/pdf-filters/pdftopdf/P2PPageTree.h,
    debian/local/filters/pdf-filters/pdftopdf/pdftopdf.cxx:
    When N-up printing and selection of only the even or odd pages
    (for manual duplex) was used together the pages were selected
    the wrong way (number-up=2 page-set=even with an 8-page document gave
    2+4, 6+8 and should give 3+4, 7+8). This is fixed now. The behavior
    of pdftopdf is now exactly the same as of pstops.

  [ Martin Pitt ]
  * debian/local/apparmor-profile: Allow locking on /var/cache/cups/**.
    (Mentioned in LP #270046)

Date: Fri, 10 Oct 2008 11:07:17 +0200
Changed-By: Martin Pitt <martin.pitt at ubuntu.com>
Maintainer: Debian CUPS Maintainers <pkg-cups-devel at lists.alioth.debian.org>
Origin: debian/unstable
https://launchpad.net/ubuntu/intrepid/+source/cups/1.3.9-1
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Origin: debian/unstable
Format: 1.8
Date: Fri, 10 Oct 2008 11:07:17 +0200
Source: cups
Binary: libcups2 libcupsimage2 cups cups-client libcups2-dev libcupsimage2-dev cups-bsd cups-common cups-dbg cupsys cupsys-client cupsys-common cupsys-bsd cupsys-dbg libcupsys2 libcupsys2-dev
Architecture: source
Version: 1.3.9-1
Distribution: intrepid
Urgency: low
Maintainer: Debian CUPS Maintainers <pkg-cups-devel at lists.alioth.debian.org>
Changed-By: Martin Pitt <martin.pitt at ubuntu.com>
Description: 
 cups       - Common UNIX Printing System(tm) - server
 cups-bsd   - Common UNIX Printing System(tm) - BSD commands
 cups-client - Common UNIX Printing System(tm) - client programs (SysV)
 cups-common - Common UNIX Printing System(tm) - common files
 cups-dbg   - Common UNIX Printing System(tm) - debugging symbols
 cupsys     - Common UNIX Printing System (transitional package)
 cupsys-bsd - Common UNIX Printing System (transitional package)
 cupsys-client - Common UNIX Printing System (transitional package)
 cupsys-common - Common UNIX Printing System (transitional package)
 cupsys-dbg - Common UNIX Printing System (transitional package)
 libcups2   - Common UNIX Printing System(tm) - libs
 libcups2-dev - Common UNIX Printing System(tm) - development files
 libcupsimage2 - Common UNIX Printing System(tm) - image libs
 libcupsimage2-dev - Common UNIX Printing System(tm) - image development files
 libcupsys2 - Common UNIX Printing System (transitional package)
 libcupsys2-dev - Common UNIX Printing System (transitional package)
Closes: 475270
Changes: 
 cups (1.3.9-1) experimental; urgency=low
 .
   * New upstream security/bug fix release:
     - The HP-GL/2 filter did not range check pen numbers. [CVE-2008-3641]
     - The SGI image file reader did not range check 16-bit run lengths.
       [CVE-2008-3639]
     - The text filter did not range check cpi, lpi, or column values.
       [CVE-2008-3640]
     - Fix incompatibility with Firefox 3.0 when using SSL.
     - Update the French admin.tmpl, to have the missing "Find new printer"
       button and the "Subscriptions" section. Thanks to Yves-Alexis Perez!
       (Closes: #475270)
     - Lots of other bug fixes, see http://www.cups.org/articles.php?L575.
   * Drop patches accepted upstream:
     - cupsfilter-path-typo.dpatch
     - pjl-display-ready-message.dpatch
     - dont-chown-symlinked-ssl.dpatch
   * Add hpgl-regression.dpatch: Revert the SP_select_pen() enumeration change
     introduced in STR #2911, because it changes the color mapping (e. g. "SP1"
     would now select a white pen instead of a black one, and "SP0" would not
     be valid at all any more). Also fix a remaining off-by-one loop. (STR
     #2966)
 .
 cups (1.3.8-13) experimental; urgency=low
 .
   [ Till Kamppeter ]
   * debian/local/filters/pdf-filters/pdftopdf/P2PCatalog.cxx,
     debian/local/filters/pdf-filters/pdftopdf/P2PCatalog.h,
     debian/local/filters/pdf-filters/pdftopdf/P2PDoc.cxx,
     debian/local/filters/pdf-filters/pdftopdf/P2PDoc.h,
     debian/local/filters/pdf-filters/pdftopdf/P2PPageTree.cxx,
     debian/local/filters/pdf-filters/pdftopdf/P2PPageTree.h,
     debian/local/filters/pdf-filters/pdftopdf/pdftopdf.cxx:
     When N-up printing and selection of only the even or odd pages
     (for manual duplex) was used together the pages were selected
     the wrong way (number-up=2 page-set=even with an 8-page document gave
     2+4, 6+8 and should give 3+4, 7+8). This is fixed now. The behavior
     of pdftopdf is now exactly the same as of pstops.
 .
   [ Martin Pitt ]
   * debian/local/apparmor-profile: Allow locking on /var/cache/cups/**.
     (Mentioned in LP #270046)
Checksums-Sha1: 
 a97b5b73b8b441ba4f67a95ae72071217b02627c 1908 cups_1.3.9-1.dsc
 933a2b17af66de1cccc97466cc04398c68c0202a 4809771 cups_1.3.9.orig.tar.gz
 68fc6edbc7ef39c16b190c38925ce42f7c241113 322166 cups_1.3.9-1.diff.gz
Checksums-Sha256: 
 3d5c8c494aff86823b385ce522c03115297187f4e46832961b4534463a1260d4 1908 cups_1.3.9-1.dsc
 d74d1da78ed7aef8e780b7c5bdd80cc9e0817605f1428c2e909017dde30efc48 4809771 cups_1.3.9.orig.tar.gz
 6d0f0dbe01f3ff2a0e4b9b298ab8cfe57328330ded63a6e5b694b6b3861a2a02 322166 cups_1.3.9-1.diff.gz
Files: 
 7115e7ab8c2914815df7c320f8838b26 1908 net optional cups_1.3.9-1.dsc
 e6f2d90491ed050e5ff2104b617b88ea 4809771 net optional cups_1.3.9.orig.tar.gz
 2ca6e51afa72ff224f3dbc6f002d3fb2 322166 net optional cups_1.3.9-1.diff.gz

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)

iEYEARECAAYFAkjvHn4ACgkQDecnbV4Fd/IPWACdFsbaWHp3F/EFHmLMcrDjEzTS
rBYAniL12s5HNd/0fvQXiQANJ9wM4DwJ
=vfCH
-----END PGP SIGNATURE-----