![[BACK]](/icons/back.gif){kind=icon}
Up to [cvs.NetBSD.org] / pkgsrc / print / cups-base
Request diff between arbitrary revisions
Keyword substitution: kv
Default branch: MAIN
*cups*: update to 2.4.12 The last planned release of CUPS 2.4.x series (the next will be 2.5.x series) contains several enhancements among set of bug fixes, such following cryptographic policies when using GnuTLS crypto provider and possibility to opt-out from this behavior, logging job debugging history if print queue backends fails, or raising alerts for certificate issues in IPPS backend.
*cups*: update to 2.4.11 Changes in CUPS v2.4.11 (2024-09-30) ------------------------------------ - Updated the maximum file descriptor limit for `cupsd` to 64k-1 (Issue #989) - Fixed `lpoptions -d` with a discovered but not added printer (Issue #833) - Fixed incorrect error message for HTTP/IPP errors (Issue #893) - Fixed JobPrivateAccess and SubscriptionPrivateAccess support for "all" (Issue #990) - Fixed issues with cupsGetDestMediaByXxx (Issue #993) - Fixed adding and modifying of printers via the web interface (Issue #998) - Fixed HTTP PeerCred authentication for domain users (Issue #1001) - Fixed checkbox support (Issue #1008) - Fixed printer state notifications (Issue #1013) - Fixed IPP Everywhere printer setup (Issue #1033)
icups-base: add lots of security fixes for the PPD issue From upstream. Bump PKGREVISION.
*cups*: update to 2.4.10 Changes in CUPS v2.4.10 (2024-06-18) ----------------------------- - Fixed error handling when reading a mixed `1setOf` attribute. - Fixed scheduler start if there is only domain socket to listen on (Issue #985)
*cups*: update to 2.4.9 Changes in CUPS v2.4.9 (2024-06-11) ----------------------------------- - Fixed domain socket handling (CVE-2024-35235) - Fixed creating of `cupsUrfSupported` PPD keyword (Issue #952) - Fixed searching for destinations in web ui (Issue #954) - Fixed TLS negotiation using OpenSSL with servers that require the TLS SNI extension. - Really raised `cups_enum_dests()` timeout for listing available IPP printers (Issue #751)... - Fixed `Host` header regression (Issue #967) - Fixed DNS-SD lookups of local services with Avahi (Issue #970) - Fixed listing jobs in destinations in web ui. (Apple issue #6204) - Fixed showing search query in web ui help page. (Issue #977)
cups: update to 2.4.8 Changes in CUPS v2.4.8 (2024-04-26) ----------------------------------- - Added warning if the device has to be asked for 'all,media-col-database' separately (Issue #829) - Added new value for 'lpstat' option '-W' - successfull - for getting successfully printed jobs (Issue #830) - Added support for PAM modules password-auth and system-auth (Issue #892) - Updated IPP Everywhere printer creation error reporting (Issue #347) - Updated and documented the MIME typing buffering limit (Issue #925) - Raised `cups_enum_dests()` timeout for listing available IPP printers (Issue #751) - Now report an error for temporary printer defaults with lpadmin (Issue #237) - Fixed mapping of PPD InputSlot, MediaType, and OutputBin values (Issue #238) - Fixed "document-unprintable-error" handling (Issue #391) - Fixed the web interface not showing an error for a non-existent printer (Issue #423) - Fixed printing of jobs with job name longer than 255 chars on older printers (Issue #644) - Really backported fix for Issue #742 - Fixed `cupsCopyDestInfo` device connection detection (Issue #586) - Fixed "Upgrade" header handling when there is no TLS support (Issue #775) - Fixed memory leak when unloading a job (Issue #813) - Fixed memory leak when creating color profiles (Issue #815) - Fixed a punch finishing bug in the IPP Everywhere support (Issue #821) - Fixed crash in `scan_ps()` if incoming argument is NULL (Issue #831) - Fixed setting job state reasons for successful jobs (Issue #832) - Fixed infinite loop in IPP backend if hostname is IP address with Kerberos (Issue #838) - Added additional check on socket if `revents` from `poll()` returns POLLHUP together with POLLIN or POLLOUT in `httpAddrConnect2()` (Issue #839) - Fixed crash in `ppdEmitString()` if `size` is NULL (Issue #850) - Fixed reporting `media-source-supported` when sharing printer which has numbers as strings instead of keywords as `InputSlot` values (Issue #859) - Fixed IPP backend to support the "print-scaling" option with IPP printers (Issue #862) - Fixed potential race condition for the creation of temporary queues (Issue #871) - Fixed `httpGets` timeout handling (Issue #879) - Fixed checking for required attributes during PPD generation (Issue #890) - Fixed encoding of IPv6 addresses in HTTP requests (Issue #903) - Fixed sending response headers to client (Issue #927) - Fixed CGI program initialization and validation of form checkbox and text fields. Changes in CUPS v2.4.7 (2023-09-20) ----------------------------------- - CVE-2023-4504 - Fixed Heap-based buffer overflow when reading Postscript in PPD files - Added OpenSSL support for cupsHashData (Issue #762) - Fixed delays in lpd backend (Issue #741) - Fixed extensive logging in scheduler (Issue #604) - Fixed hanging of `lpstat` on IBM AIX (Issue #773) - Fixed hanging of `lpstat` on Solaris (Issue #156) - Fixed printing to stderr if we can't open cups-files.conf (Issue #777) - Fixed purging job files via `cancel -x` (Issue #742) - Fixed RFC 1179 port reserving behavior in LPD backend (Issue #743) - Fixed a bug in the PPD command interpretation code (Issue #768) - Fixed Oki 407 freeze when printing larger jobs (Issue #877)
libcups: restore installing libcupsimagebase Bump PKGREVISION.
*cups*: update to 2.4.6
CUPS 2.4.6 is released to ship the fix for the latest CVE -
CVE-2023-34241 - and two other bug fixes.
Detailed list:
Fix linking error on old MacOS (Issue #715)
Fix printing multiple files on specific printers (Issue #643)
Fix use-after-free when logging warnings in case of failures
in cupsdAcceptClient() (fixes CVE-2023-34241)
CUPS 2.4.5 is a hotfix release for a bug which corrupted locally
saved certificates, which broke secured printing via TLS after the
first print job.
We're sorry for the inconvenience and enjoy the hotfix!
libcups: don't strip libraries on macOS. Fixes error seen in bulk build. Still installs stripped (by default, anyway) on NetBSD.
cups*: update to 2.4.4 Changes in CUPS v2.4.4 - 2023-06-06 ----------------------------------- - Fix segfault in `cupsGetNamedDest()` when trying to get default printer, but the default printer is not set (Issue #719) Changes in CUPS v2.4.3 (2023-06-01) ----------------------------------- - Added a title with device uri for found network printers (Issues #402, #393) - Added new media sizes defined by IANA (Issues #501) - Added quirk for GoDEX label printers (Issue #440) - Fixed `--enable-libtool-unsupported` (Issue #394) - Fixed configuration on RISC-V machines (Issue #404) - Fixed the `device_uri` invalid pointer for driverless printers with `.local` hostname (Issue #419) - Fixed an OpenSSL crash bug (Issue #409) - Fixed a potential SNMP OID value overflow issue (Issue #431) - Fixed an OpenSSL certificate loading issue (Issue #465) - Fixed Brazilian Portuguese translations (Issue #288) - Fixed `cupsd` default keychain location when building with OpenSSL (Issue #529) - Fixed default color settings for CMYK printers as well (Issue #500) - Fixed duplicate PPD2IPP media-type names (Issue #688) - Fixed possible heap buffer overflow in `_cups_strlcpy()` (fixes CVE-2023-32324) - Fixed InputSlot heuristic for photo sizes smaller than 5x7" if there is no media-source in the request (Issue #569) - Fixed invalid memory access during generating IPP Everywhere queue (Issue #466) - Fixed lprm if no destination is provided (Issue #457) - Fixed memory leaks in `create_local_bg_thread()` (Issue #466) - Fixed media size tolerance in `ippeveprinter` (Issue #487) - Fixed passing command name without path into `ippeveprinter` (Issue #629) - Fixed saving strings file path in `printers.conf` (Issue #710) - Fixed TLS certificate generation bugs (Issue #652) - `ippDeleteValues` would not delete the last value (Issue #556) - Ignore some of IPP defaults if the application sends its PPD alternative (Issue #484) - Make `Letter` the default size in `ippevepcl` (Issue #543) - Now accessing Admin page in Web UI requires authentication (Issue #518) - Now look for default printer on network if needed (Issue #452) - Now we poll `media-col-database` separately if we fail at first (Issue #599) - Now report fax attributes and values as needed (Issue #459) - Now localize HTTP responses using the Content-Language value (Issue #426) - Raised file size limit for importing PPD via Web UI (Issue #433) - Raised maximum listen backlog size to INT MAX (Issue #626) - Update print-color-mode if the printer is modified via ColorModel PPD option (Issue #451) - Use localhost when printing via printer application (Issue #353) - Write defaults into /etc/cups/lpoptions if we're root (Issue #456)
Pullup ticket #6761 - requested by bsiegert
print/cups-base: security fix
Revisions pulled up:
- print/cups-base/Makefile 1.57
- print/cups-base/distinfo 1.33
- print/cups-base/patches/patch-cups_string.c 1.1
-------------------------------------------------------------------
Module Name: pkgsrc
Committed By: wiz
Date: Thu Jun 1 11:39:33 UTC 2023
Modified Files:
pkgsrc/print/cups-base: Makefile distinfo
Added Files:
pkgsrc/print/cups-base/patches: patch-cups_string.c
Log Message:
cups-base: fix security problem.
Bump PKGREVISION.
To generate a diff of this commit:
cvs rdiff -u -r1.56 -r1.57 pkgsrc/print/cups-base/Makefile
cvs rdiff -u -r1.32 -r1.33 pkgsrc/print/cups-base/distinfo
cvs rdiff -u -r0 -r1.1 pkgsrc/print/cups-base/patches/patch-cups_string.c
cups-base: fix security problem. Bump PKGREVISION.
*cups*: update to 2.4.2 Changes in CUPS v2.4.2 (26th May 2022) -------------------------------------- - Fixed certificate strings comparison for Local authorization (CVE-2022-26691) - The `cupsFileOpen` function no longer opens files for append in read-write mode (Issue #291) - The cupsd daemon removed processing temporary queue (Issue #364) - Fixed delay in IPP backend if GNUTLS is used and endpoint doesn't confirm closing the connection (Issue #365) - Fixed conditional jump based on uninitialized value in cups/ppd.c (Issue #329) - Fixed CSS related issues in CUPS Web UI (Issue #344) - Fixed copyright in CUPS Web UI trailer template (Issue #346) - mDNS hostname in device uri is not resolved when installaling a permanent IPP Everywhere queue (Issues #340, #343) - The `lpstat` command now reports when the scheduler is not running (Issue #352) - Updated the man pages concerning the `-h` option (Issue #357) - Re-added LibreSSL/OpenSSL support (Issue #362) - Updated the Solaris smf service file (Issue #368) - Fixed a regression in lpoptions option support (Issue #370) - The scheduler now regenerates the PPD cache information after changing the "cupsd.conf" file (Issue #371) - Updated the scheduler to set "auth-info-required" to "username,password" if a backend reports it needs authentication info but doesn't set a method for authentication (Issue #373) - Updated the configure script to look for the OpenSSL library the old way if pkg-config is not available (Issue #375) - Fixed the prototype for the `httpWriteResponse` function (Issue #380) - Brought back minimal AIX support (Issue #389) - `cupsGetResponse` did not always set the last error. - Fixed a number of old references to the Apple CUPS web page. - Restored the default/generic printer icon file for the web interface. - Removed old stylesheet classes that are no longer used by the web interface.
{cups,cups-base,libcups}: update to 2.4.1
Changes in CUPS v2.4.1 (27th January 2022)
------------------------------------------
- The default color mode now is now configurable and defaults to the printer's
reported default mode
- Configuration script now checks linking for -Wl,-pie flags
- Fixed memory leaks - in testi18n, in `cups_enum_dests()`,
in `_cupsEncodeOption()` and `http_tls_upgrade()`
- Fixed missing bracket in de/index.html
- Fixed typos in configuration scripts
- Removed remaining legacy code for `RIP_MAX_CACHE` environment variable
- Removed deprecated directives from cupsctl and cups-files.conf
- Removed `purge-jobs` legacy code from CGI scripts and templates
Changes in CUPS v2.4.0 (29th November 2021)
-------------------------------------------
- Added configure option --with-idle-exit-timeout
- Added --with-systemd-timeoutstartsec configure option
- DigestOptions now are applied for MD5 Digest authentication defined
by RFC 2069 as well
- Fixed compilation on Solaris
- Fixed and improved German translations
Changes in CUPS v2.4rc1 (12th November 2021)
--------------------------------------------
- Added warning and debug messages when loading printers
if the queue is raw or with driver
- Compilation now uses -fstack-protector-strong if available
Changes in CUPS v2.4b1 (27th October 2021)
------------------------------------------
- Added support for CUPS running in a Snapcraft snap.
- Added basic OAuth 2.0 client support
- Added support for AirPrint and Mopria clients
- Added configure support for specifying systemd dependencies in the CUPS
service file
- Added a JSON output mode for `ipptool`.
- The `ipptool` command now correctly reports an error when a test file cannot
be found.
- CUPS library now uses thread safe `getpwnam_r` and `getpwuid_r` functions
- Fixed Kerberos authentication for the web interface
- The ZPL sample driver now supports more "standard" label sizes
- Fixed reporting of printer instances when enumerating and when no options are
set for the main instance
- Reverted USB read limit enforcement change from CUPS 2.2.12
- The IPP backend did not return the correct status code when a job was canceled
at the printer/server
- The `testlang` unit test program now loops over all of the available locales
by default
- The `cupsfilter` command now shows error messages when options are used
incorrectly
- The PPD functions now treat boolean values as case-insensitive
- Temporary queue names no longer end with an underscore
- The USB backend now runs as root
- Added pkg-config file for libcups
- Fixed a PPD memory leak caused by emulator definitions
- Fixed a `DISPLAY` bug in `ipptool`
- The scheduler now includes the `[Job N]` prefix for job log messages, even
when using syslog logging
- Added support for locales using the GB18030 character set
- `httpReconnect2` did not reset the socket file descriptor when the TLS
negotiation failed
- `httpUpdate` did not reset the socket file descriptor when the TLS
negotiation failed
- The IPP backend now retries Validate-Job requests
- Now show better error messages when a driver interface program fails to
provide a PPD file
- Added dark mode support to the CUPS web interface
- Added a workaround for Solaris in `httpAddrConnect2`
- Fixed an interaction between `--remote-admin` and `--remote-any` for the
`cupsctl` command
- Now use a 60 second timeout for reading USB backchannel data
- The USB backend now tries harder to find a serial number
- Fixed `@IF(name)` handling in `cupsd.conf`
- Fixed documentation and added examples for CUPS' limited CGI support
- Fixed the `lpc` command prompt
- Now always pass "localhost" in the `Host:` header when talking over a domain
socket or the loopback interface
- Fixed a job history update issue in the scheduler
- Fixed `job-pages-per-set` value for duplex print jobs.
- Fixed an edge case in `ippReadIO` to make sure that only complete attributes
and values are retained on an error
- Hardened `ippReadIO` to prevent invalid IPP messages from being propagated
- The scheduler now supports the "everywhere" model directly
- Fixed some IPP Everywhere option mapping problems
- Fixed support for "job-hold-until" with the Restart-Job operation
- Fixed the default color/grayscale presets for IPP Everywhere PPDs
- Fixed support for the 'offline-report' state for all USB backends
- Documentation fixes
- Localization updates
- USB quirk updates
- Web interface updates
- The `ippeveprinter` tool now automatically uses an available port.
- Fixed several Windows TLS and hashing issues.
- Deprecated cups-config
- Deprecated Kerberos (`AuthType Negotiate`) authentication
- Removed support for the (long deprecated and unused) `FontPath`,
`ListenBackLog`, `LPDConfigFile`, `KeepAliveTimeout`, `RIPCache`, and
`SMBConfigFile` directives in `cupsd.conf` and `cups-files.conf`.
- Stubbed out deprecated `httpMD5` functions.
- Add test for undefined page ranges during printing.
print: Replace RMD160 checksums with BLAKE2s checksums All checksums have been double-checked against existing RMD160 and SHA512 hashes
print: Remove SHA1 hashes for distfiles
cups-base: fix building on Darwin
cups: update to 2.3.3op2.
CUPS 2.3.3op2 is the latest OpenPrinting CUPS security and bug fix
release. Changes include:
Security: Fixed a buffer (read) overflow in the ippReadIO function
(CVE-2020-10001)
Clarified the documentation for the "Listen" directive (Issue #53)
Fixed duplicate ColorModel entries for AirPrint printers (Issue 59)
Fixed directory/permission defaults for Debian kfreebsd-based systems
(Issue #60, Issue #61)
Fixed crash bug in ppdOpen (Issue #64, Issue #78)
Fixed regression in snprintf emulation function (Issue #67)
The scheduler's systemd service file now waits for the nslcd service to start
(Issue #69)
The libusb-based USB backend now uses a simpler read timer implementation to
avoid a regression in a previous change (Issue #72)
The PPD caching code now only tracks the APPrinterIconPath value on macOS
(Issue #73)
Fixed segfault in help.cgi when searching in man pages (Issue #81)
Root certificates were incorrectly stored in "~/.cups/ssl".
print/cups-base: avoid duplicate definitions of clock_gettime with Darwin SDK building against a newer SDK while setting an earlier -macosx-version-min value can create a conflicting function definition. This tweak avoids that conflict while allowing an older compat definition to exist.
Update cups to v2.3.3op1 Change to the OpenPrinting fork of apple/cups, e.g., that fork already contains - dnssd patch patch-config-scripts_cups-dnssd.m4 - freebsd patch patch-cups_getifaddrs-internal.h - libtool patch patch-af https://github.com/apple/cups/issues/4947 was fixed in both. Changes in CUPS v2.3.3op1 ------------------------- - The automated test suite can now be activated using `make test` for consistency with other projects and CI environments - the old `make check` continues to work as well, and the previous test server behavior can be accessed by running `make testserver`. - ippeveprinter now supports multiple icons and strings files. - ippeveprinter now uses the system's FQDN with Avahi. - ippeveprinter now supports Get-Printer-Attributes on "/". - ippeveprinter now uses a deterministic "printer-uuid" value. - ippeveprinter now uses system sounds on macOS for Identify-Printer. - Updated ippfind to look for files in "~/Desktop" on Windows. - Updated ippfind to honor `SKIP-XXX` directives with `PAUSE`. - Updated IPP Everywhere support to work around printers that only advertise color raster support but really also support grayscale (Issue #1) - ipptool now supports DNS-SD URIs like `ipps://My%20Printer._ipps._tcp.local` (Issue #5) - The scheduler now allows root backends to have world read permissions but not world execute permissions (Issue #21) - Failures to bind IPv6 listener sockets no longer cause errors if IPv6 is disabled on the host (Issue #25) - The SNMP backend now supports the HP and Ricoh vendor MIBs (Issue #28) - The scheduler no longer includes a timestamp in files it writes (Issue #29) - The systemd service names are now "cups.service" and "cups-lpd.service" (Issue #30, Issue #31) - The scheduler no longer adds the local hostname to the ServerAlias list (Issue #32) - Added `LogFileGroup` directive in "cups-files.conf" to control the group owner of log files (Issue #34) - Added `--with-max-log-size` configure option (Issue #35) - Added `--enable-sync-on-close` configure option (Issue #37) - Added `--with-error-policy` configure option (Issue #38) - IPP Everywhere PPDs could have an "unknown" default InputSlot (Issue #44) - The `httpAddrListen` function now uses a listen backlog of 128. - Added USB quirks (Apple issue #5789, #5823, #5831) - Fixed IPP Everywhere v1.1 conformance issues in ippeveprinter. - Fixed DNS-SD name collision support in ippeveprinter. - Fixed compiler and code analyzer warnings. - Fixed TLS support on Windows. - Fixed ippfind sub-type searches with Avahi. - Fixed the default hostname used by ippeveprinter on macOS. - Fixed resolution of local IPP-USB printers with Avahi. - Fixed coverity issues (Issue #2) - Fixed `httpAddrConnect` issues (Issue #3) - Fixed web interface device URI issue (Issue #4) - Fixed lp/lpr "printer/class not found" error reporting (Issue #6) - Fixed xinetd support for LPD clients (Issue #7) - Fixed libtool build issue (Issue #11) - Fixed a memory leak in the scheduler (Issue #12) - Fixed a potential integer overflow in the PPD hashing code (Issue #13) - Fixed output-bin and print-quality handling issues (Issue #18) - Fixed PPD options getting mapped to odd IPP values like "tray---4" (Issue #23) - Fixed remote access to the cupsd.conf and log files (Issue #24) - Fixed the automated test suite when running in certain build/CI environments (Issue #25) - Fixed a logging regression caused by a previous change for Apple issue #5604 (Issue #25) - Fixed fax phone number handling with GNOME (Issue #40) - Fixed potential rounding error in rastertopwg filter (Issue #41) - Fixed the "uri-security-supported" value from the scheduler (Issue #42) - Fixed IPP backend crash bug with "printer-alert" values (Issue #43) - Removed old Solaris inetconv(1m) reference in cups-lpd man page (Issue #46) - Fixed default options that incorrectly use the "custom" prefix (Issue #48) - Fixed a memory leak when resolving DNS-SD URIs (Issue #49) - Fixed systemd status reporting by adopting the notify interface (Issue #51) - Fixed crash in rastertopwg (Apple issue #5773) - Fixed cupsManualCopies values in IPP Everywhere PPDs (Apple issue #5807)
cups-base: Remove another kDNSServiceErr_Timeout.
cups-base: reference pull request
cups-base: build ippfind in the (on by default) dnssd case, not just avahi. missing pieces - thanks wiz!
libcups: fix build failure on FreeBSD pkgsrc changes: --------------- * Add conditional inclusion for FreeBSD. * Apply some changes to appease pkglint. * Bump revision.
Fix bugs in the non-blocking connect handling so that the print dialog in GTK can work even if the CUPS daemon is not running. Bump revision.
cups: Update to 2.3.3 Changes: 2.3.3 ----- - CVE-2020-3898: The `ppdOpen` function did not handle invalid UI constraint. `ppdcSource::get_resolution` function did not handle invalid resolution strings. - CVE-2019-8842: The `ippReadIO` function may under-read an extension field. - Fixed WARNING_OPTIONS support for GCC 9.x 2.3.2 ----- - Localization updates.
Remove part of airprint scheduler printers patch as per https://github.com/apple/cups/issues/5641 OK Till Kamppeter
cups{,-base}: Update to 2.3.1
Changes:
2.3.1
-----
- Documentation updates (Issue #5661, #5674, #5682)
- CVE-2019-2228: The `ippSetValuetag` function did not validate the default
language value.
- Fixed a crash bug in the web interface (Issue #5621)
- The PPD cache code now looks up page sizes using their dimensions
(Issue #5633)
- PPD files containing "custom" option keywords did not work (Issue #5639)
- Added a workaround for the scheduler's systemd support (Issue #5640)
- On Windows, TLS certificates generated on February 29 would likely fail
(Issue #5643)
- Added a DigestOptions directive for the `client.conf` file to control whether
MD5-based Digest authentication is allowed (Issue #5647)
- Fixed a bug in the handling of printer resource files (Issue #5652)
- The libusb-based USB backend now reports an error when the distribution
permissions are wrong (Issue #5658)
- Added paint can labels to Dymo driver (Issue #5662)
- The `ippeveprinter` program now supports authentication (Issue #5665)
- The `ippeveprinter` program now advertises DNS-SD services on the correct
interfaces, and provides a way to turn them off (Issue #5666)
- The `--with-dbusdir` option was ignored by the configure script (Issue #5671)
- Sandboxed applications were not able to get the default printer (Issue #5676)
- Log file access controls were not preserved by `cupsctl` (Issue #5677)
- Default printers set with `lpoptions` did not work in all cases (Issue #5681,
Issue #5683, Issue #5684)
- Fixed an error in the jobs web interface template (Issue #5694)
- Fixed an off-by-one error in `ippEnumString` (Issue #5695)
- Fixed some new compiler warnings (Issue #5700)
- Fixed a few issues with the Apple Raster support (rdar://55301114)
- The IPP backend did not detect all cases where a job should be retried using
a raster format (rdar://56021091)
- Fixed spelling of "fold-accordion".
- Fixed the default common name for TLS certificates used by `ippeveprinter`.
- Fixed the option names used for IPP Everywhere finishing options.
- Added support for the second roll of the DYMO Twin/DUO label printers.
cups{,-base}: Update to 2.3.0
Changes:
2.3.0
-----
- CVE-2019-8696 and CVE-2019-8675: Fixed SNMP buffer overflows
(rdar://51685251)
- Added a GPL2/LGPL2 exception to the new CUPS license terms.
- Documentation updates (Issue #5604)
- Localization updates (Issue #5637)
- Fixed a bug in the scheduler job cleanup code (Issue #5588)
- Fixed builds when there is no TLS library (Issue #5590)
- Eliminated some new GCC compiler warnings (Issue #5591)
- Removed dead code from the scheduler (Issue #5593)
- "make" failed with GZIP options (Issue #5595)
- Fixed potential excess logging from the scheduler when removing job files
(Issue #5597)
- Fixed a NULL pointer dereference bug in `httpGetSubField2` (Issue #5598)
- Added FIPS-140 workarounds for GNU TLS (Issue #5601, Issue #5622)
- The scheduler no longer provides a default value for the description
(Issue #5603)
- The scheduler now logs jobs held for authentication using the error level so
it is clear what happened (Issue #5604)
- The `lpadmin` command did not always update the PPD file for changes to the
`cupsIPPSupplies` and `cupsSNMPSupplies` keywords (Issue #5610)
- The scheduler now uses both the group's membership list as well as the
various OS-specific membership functions to determine whether a user belongs
to a named group (Issue #5613)
- Added USB quirks rule for HP LaserJet 1015 (Issue #5617)
- Fixed some PPD parser issues (Issue #5623, Issue #5624)
- The IPP parser no longer allows invalid member attributes in collections
(Issue #5630)
- The configure script now treats the "wheel" group as a potential system
group (Issue #5638)
- Fixed a USB printing issue on macOS (rdar://31433931)
- Fixed IPP buffer overflow (rdar://50035411)
- Fixed memory disclosure issue in the scheduler (rdar://51373853)
- Fixed DoS issues in the scheduler (rdar://51373929)
- Fixed an issue with unsupported "sides" values in the IPP backend
(rdar://51775322)
- The scheduler would restart continuously when idle and printers were not
shared (rdar://52561199)
- Fixed an issue with `EXPECT !name WITH-VALUE ...` tests.
- Fixed a command ordering issue in the Zebra ZPL driver.
- Fixed a memory leak in `ppdOpen`.
cups{,-base}: Update to 2.2.12
pkgsrc changes:
- Remove patches/patch-5613 (already present)
Changes:
2.2.12
------
- CVE-2019-8696 and CVE-2019-8675: Fixed SNMP buffer overflows (rdar://51685251)
- The `cupsctl` command now prevents setting "cups-files.conf" directives
(Issue #5530)
- Updated the systemd service file for cupsd (Issue #5551)
- The `cupsCheckDestSupported` function did not check octetString values
correctly (Issue #5557)
- The scheduler did not encode octetString values like "job-password" correctly
for the print filters (Issue #5558)
- Restored minimal support for the `Emulators` keyword in PPD files to allow
old Samsung printer drivers to continue to work (Issue #5562)
- Timed out job submission now yields an error (Issue #5570)
- The footer in the web interface covered some content on small displays
(Issue #5574)
- The libusb-based USB backend now enforces read limits, improving print speed
in many cases (Issue #5583)
- Fixed some compatibility issues with old releases of CUPS (Issue #5587)
- Fixed a bug in the scheduler job cleanup code (Issue #5588)
- "make" failed with GZIP options (Issue #5595)
- Added FIPS-140 workarounds for GNU TLS (Issue #5601, Issue #5622)
- The scheduler no longer provides a default value for the description
(Issue #5603)
- The `lpadmin` command did not always update the PPD file for changes to the
`cupsIPPSupplies` and `cupsSNMPSupplies` keywords (Issue #5610)
- The scheduler now uses both the group's membership list as well as the
various OS-specific membership functions to determine whether a user belongs
to a named group (Issue #5613)
- Added USB quirks rule for HP LaserJet 1015 (Issue #5617)
- Fixed some PPD parser issues (Issue #5623, Issue #5624)
- The IPP parser no longer allows invalid member attributes in collections
(Issue #5630)
- Fixed IPP buffer overflow (rdar://50035411)
- Fixed memory disclosure issue in the scheduler (rdar://51373853)
- Fixed DoS issues in the scheduler (rdar://51373929)
- The scheduler would restart continuously when idle and printers were not
shared (rdar://52561199)
- Fixed a command ordering issue in the Zebra ZPL driver.
- Fixed a memory leak in `ppdOpen`.
The scheduler now uses both the group's membership list as well as the various OS-specific membership functions to determine whether a user belongs to a named group (Issue #5613) From upstream https://github.com/apple/cups/commit/3c27d2a6ddf50a4cb02c0b7a464eaf7b6f1ea601
cups: update to 2.2.11 Changes in CUPS v2.2.11 ----------------------- - Running ppdmerge with the same input and output filenames did not work as advertised (Issue #5455) - Fixed a potential memory leak when reading at the end of a file (Issue #5473) - Fixed potential unaligned accesses in the string pool (Issue #5474) - Fixed a potential memory leak when loading a PPD file (Issue #5475) - Added a USB quirks rule for the Lexmark E120n (Issue #5478) - Updated the USB quirks rule for Zebra label printers (Issue #5395) - Fixed a compile error on Linux (Issue #5483) - The lpadmin command, web interface, and scheduler all queried an IPP Everywhere printer differently, resulting in different PPDs for the same printer (Issue #5484) - Fixed an issue with the self-signed certificates generated by GNU TLS (Issue #5506) - The `ippValidateAttribute` function did not catch all instances of invalid UTF-8 strings (Issue #5509) - Non-Kerberized printing to Windows via IPP was broken (Issue #5515) - The scheduler no longer stops a printer if an error occurs when a job is canceled or aborted (Issue #5517) - Added a USB quirks rule for the DYMO 450 Turbo (Issue #5521) - Added a USB quirks rule for Xerox printers (Issue #5523) - The scheduler's self-signed certificate did not include all of the alternate names for the server when using GNU TLS (Issue #5525) - Fixed compiler warnings with newer versions of GCC (Issue #5532, Issue #5533) - Fixed some PPD caching and IPP Everywhere PPD accounting/password bugs (Issue #5535) - Fixed `PreserveJobHistory` bug with time values (Issue #5538) - Media size matching now uses a tolerance of 0.5mm (rdar://33822024) - The lpadmin command would hang with a bad PPD file (rdar://41495016) - Fixed a potential crash bug in cups-driverd (rdar://46625579) - Fixed a performance regression with large PPDs (rdar://47040759) - The scheduler did not always idle exit as quickly as it could.
cups{,-base}: Update print/cups{,-base} to 2.2.10
Changes
2.2.10
------
- CVE-2018-4700: Linux session cookies used a predictable random number seed.
- The `lpoptions` command now works with IPP Everywhere printers that have not
yet been added as local queues (Issue #5045)
- Added USB quirk rules (Issue #5395, Issue #5443)
- The generated PPD files for IPP Everywhere printers did not contain the
cupsManualCopies keyword (Issue #5433)
- Kerberos credentials might be truncated (Issue #5435)
- The handling of `MaxJobTime 0` did not match the documentation (Issue #5438)
- Incorporated the page accounting changes from CUPS 2.3 (Issue #5439)
- Fixed a bug adding a queue with the `-E` option (Issue #5440)
- Fixed a crash bug when mapping PPD duplex options to IPP attributes
(rdar://46183976)
cups{,-base}: Update print/cups{,-base} to 2.2.9
pkgsrc changes:
- Remove patches/patch-cups_ipp.c, no more needed (applied)
- Remove patches/patch-ppdc_Makefile, libcupsppdc.la is no more installed
(also libcupscgi.la, libcupsmime.la are no longer installed, unfortunately no
rationale seems present in the changelog about that)
Changes:
2.2.9
-----
- Localization changes (Issue #5348, Issue #5362, Issue #5408)
- Documentation updates (Issue #5369)
- The lpadmin command would create a non-working printer in some error cases
(Issue #5305)
- The scheduler would crash if an empty `AccessLog` directive was specified
(Issue #5309)
- Fixed a regression in the changes to ippValidateAttribute (Issue #5322,
Issue #5330)
- Fixed a crash bug in the Epson dot matrix driver (Issue #5323)
- Automatic debug logging of job errors did not work with systemd (Issue #5337)
- The web interface did not list the IPP Everywhere "driver" (Issue #5338)
- The IPP Everywhere "driver" now properly supports face-up printers
(Issue #5345)
- Fixed some typos in the label printer drivers (Issue #5350)
- Multi-file jobs could get stuck if the backend failed (Issue #5359,
Issue #5413)
- The IPP Everywhere "driver" no longer does local filtering when printing to
a shared CUPS printer (Issue #5361)
- The lpadmin command now correctly reports IPP errors when configuring an
IPP Everywhere printer (Issue #5370)
- Fixed some memory leaks discovered by Coverity (Issue #5375)
- The PPD compiler incorrectly terminated JCL options (Issue #5379)
- The cupstestppd utility did not generate errors for missing/mismatched
CloseUI/JCLCloseUI keywords (Issue #5381)
- The scheduler now reports the actual location of the log file (Issue #5398)
- Added a USB quirk rule (Issue #5420)
- The scheduler was being backgrounded on macOS, causing applications to spin
(rdar://40436080)
- The scheduler did not validate that required initial request attributes were
in the operation group (rdar://41098178)
- Authentication in the web interface did not work on macOS (rdar://41444473)
- Fixed an issue with HTTP Digest authentication (rdar://41709086)
- The scheduler could crash when job history was purged (rdar://42198057)
- Dropped non-working RSS subscriptions UI from web interface templates.
- Fixed a memory leak for some IPP (extension) syntaxes.
cups-base: remove duplicated comment in patch. From Edgar Fuß.
Add patches from debian to support basic airprint. Some details about airprint are in https://wiki.debian.org/AirPrint Proposed on tech-pkg@ on Jul 20 Bump PKGREVISION
clock_gettime definition for macOS <= Sierra.
Apply patch from upstream fixing a regression in ippValidateAttribute(). The bug is that some attributes are ignored/rejected, causing e.g. usernames to be changed to anonymous in print queues and page log. Bump PKGREVISION
cups: updated to 2.2.8 CUPS 2.2.8 is a bug fix release that addresses issues in the scheduler, ipptool utility, CUPS library, and USB printer support. A detailed list of changes can be found in the change log included in the download.
cups{,-base}: Update print/cups{,-base} to 2.2.7
pkgsrc changes:
- Get rid of extra `/' in patches/patch-config-scripts_cups-opsys.m4
(NFCI, pointed out by mkpatches).
- Add to patches/patch-scheduler_auth.c a backport of issue #5283 to fix build
without PAM. This will be not needed in cups-2.2.8.
Changes:
CUPS v2.2.7
-----------
- NOTICE: Raw print queues are now deprecated (Issue #5269)
- Fixed an Avahi crash bug in the scheduler (Issue #5268)
- The IPP Everywhere PPD generator did not include the `cupsJobPassword`
keyword, when supported (Issue #5265)
- Systemd did not restart cupsd when configuration changes were made that
required a restart (Issue #5263)
- The Lexmark Optra E310 printer needs the "no-reattach" USB quirk rule
(Issue #5259)
- The scheduler could crash while adding an IPP Everywhere printer (Issue #5258)
- Label printers supported by the rastertolabel driver don't support SNMP, so
don't delay printing to test it (Issue #5256)
- Fixed a compile issue when PAM is not available (Issue #5253)
- Documentation fixes (Issue #5252)
- Star Micronics printers need the "unidir" USB quirk rule (Issue #5251)
- The scheduler now supports using temporary print queues for older IPP/1.1
print queues like those shared by CUPS 1.3 and earlier (Issue #5241)
- Fixed printing to some IPP Everywhere printers (Issue #5238)
- Kerberized printing to another CUPS server did not work correctly
(Issue #5233)
- The `cupsRasterWritePixels` function did not correctly swap bytes for some
formats (Issue #5225)
- Added a USB quirk rule for Canon MP280 series printers (Issue #5221)
- The `ppdInstallableConflict` tested too many constraints (Issue #5213)
- More fixes for printing to old CUPS servers (Issue #5211)
- The `cupsCopyDest` function now correctly copies the `is_default` value
(Issue #5208)
- The scheduler did not work with older versions of uClibc (Issue #5188)
- The scheduler now substitutes default values for invalid job attributes when
running in "relaxed conformance" mode (Issue #5186)
- Fixed PAM module detection and added support for the common PAM definitions
(Issue #5185)
- Fixed a journald support bug in the scheduler (Issue #5181)
- The cups-driverd program incorrectly stopped scanning PPDs as soon as a loop
was seen (Issue #5170)
- Fixed group validation on OpenBSD (Issue #5166)
- Fixed the `ippserver` sample code when threading is disabled or unavailable
(Issue #5154)
- The `cupsEnumDests` function did not include options from the lpoptions files
(Issue #5144)
- The `SSLOptions` directive now supports `MinTLS` and `MaxTLS` options to
control the minimum and maximum TLS versions that will be allowed,
respectively (Issue #5119)
- The scheduler did not write out dirty configuration and state files if there
were open client connections (Issue #5118)
- The `lpadmin` command now provides a better error message when an unsupported
System V interface script is used (Issue #5111)
- The `lp` and `lpr` commands now provide better error messages when the default
printer cannot be found (Issue #5096)
- No longer support backslash, question mark, or quotes in printer names
(Issue #4966)
- The CUPS library now supports the latest HTTP Digest authentication
specification including support for SHA-256 (Issue #4862)
- The `lpstat` command now reports when new jobs are being held (Issue #4761)
- The `lpoptions` command incorrectly saved default options (Issue #4717)
- The `ppdLocalizeIPPReason` function incorrectly returned a localized version
of "none" (rdar://36566269)
- TLS connections now properly timeout (rdar://34938533)
- The IPP backend did not properly detect failed PDF prints (rdar://34055474)
- Temporary files are now placed in the correct directory for sandboxed
applications on macOS (rdar://problem/37789645)
cups-base: Let pkgsrc handle SSP, remove GCC hacks.
Fix building on newer macOS.
cups{,-base}: Update print/cups{,-base} to 2.2.6
pkgsrc changes:
- s/ghostscript/cups-filters/ in MESSAGE (most missing parts needed to use
non-PS printers are provided by print/cups-filters)
- Define GITHUB_PROJECT to just `cups' (not `cups-base', as PKGBASE).
This fixes fetching of the distfile from the MASTER_SITES.
Changes:
CUPS v2.2.6
-----------
- DBUS notifications could crash the scheduler (Issue #5143)
- Added USB quirks rules for Canon MP540 and Samsung ML-2160 (Issue #5148)
- Fixed TLS cipher suite selection with GNU TLS (Issue #5145, Issue #5150)
- Localization updates (Issue #5152)
Rename print/cups to print/cups-base to depend on cups-filters This change: - renames print/cups to print/cups-base, - lets print/cups-filters depend on print/cups-base instead of cups, - adds a package print/cups depending on print/cups-base and print/cups-filters. This makes sure installing print/cups always installs print/cups-filters, as it is necessary for being able to print outside of Mac OS X since CUPS 1.6.0. You're welcome. I do not think superseding is necessary, since print/cups will also install print/cups-base, which really is the same as before. In practice it is like a new dependency. I do not want to risk a bad "cvs import" either, sorry. Bumps PKGREVISION for print/cups and print/cups-filters, since they have new dependencies now. This is also necessary for everything else currently depending on print/cups; I will try to commit this right after this one. Tested on NetBSD/amd64, as reviewed on tech-pkg@. No breakage observed, apologies if anything goes wrong.