Change log : cups package : Ubuntu

2.4.6-0ubuntu3

Published in mantic-release on 2023-09-28

Deleted in mantic-proposed (Reason: Moved to mantic)

cups (2.4.6-0ubuntu3) mantic; urgency=medium

  * Let pkg-config data file cups.pc get installed into
    /usr/lib/<ARCH>/pkgconfig/
  * Include pkg-config data file cups.pc in libcups2-dev

 -- Till Kamppeter <email address hidden>  Tue, 26 Sep 2023 14:56:43 +0200

Available diffs

diff from 2.4.6-0ubuntu2 to 2.4.6-0ubuntu3 (652 bytes)

2.4.6-0ubuntu2

Superseded in mantic-release on 2023-09-28

Deleted in mantic-proposed on 2023-09-29 (Reason: Moved to mantic)

cups (2.4.6-0ubuntu2) mantic; urgency=medium

  * SECURITY UPDATE: Postscript parsing heap overflow
    - debian/patches/CVE-2023-4504.patch: properly check for end of buffer
      in cups/raster-interpret.c.
    - CVE-2023-4504

 -- Marc Deslauriers <email address hidden>  Wed, 20 Sep 2023 12:42:21 -0400

Available diffs

diff from 2.4.6-0ubuntu1 to 2.4.6-0ubuntu2 (1.0 KiB)

2.3.1-9ubuntu1.6

Published in focal-updates on 2023-09-20

Published in focal-security on 2023-09-20

cups (2.3.1-9ubuntu1.6) focal-security; urgency=medium

  * SECURITY UPDATE: Postscript parsing heap overflow
    - debian/patches/CVE-2023-4504.patch: properly check for end of buffer
      in cups/raster-interpret.c.
    - CVE-2023-4504

 -- Marc Deslauriers <email address hidden>  Fri, 15 Sep 2023 07:20:26 -0400

Available diffs

diff from 2.3.1-9ubuntu1.5 (in ~ubuntu-security-proposed/ubuntu/ppa) to 2.3.1-9ubuntu1.6 (1016 bytes)
diff from 2.3.1-9ubuntu1.4 to 2.3.1-9ubuntu1.6 (1.5 KiB)

2.4.2-3ubuntu2.5

Published in lunar-updates on 2023-09-20

Published in lunar-security on 2023-09-20

cups (2.4.2-3ubuntu2.5) lunar-security; urgency=medium

  * SECURITY UPDATE: Postscript parsing heap overflow
    - debian/patches/CVE-2023-4504.patch: properly check for end of buffer
      in cups/raster-interpret.c.
    - CVE-2023-4504

 -- Marc Deslauriers <email address hidden>  Fri, 15 Sep 2023 07:16:41 -0400

Available diffs

2.4.1op1-1ubuntu4.7

Published in jammy-updates on 2023-09-20

Published in jammy-security on 2023-09-20

cups (2.4.1op1-1ubuntu4.7) jammy-security; urgency=medium

  * SECURITY UPDATE: Postscript parsing heap overflow
    - debian/patches/CVE-2023-4504.patch: properly check for end of buffer
      in cups/raster-interpret.c.
    - CVE-2023-4504

 -- Marc Deslauriers <email address hidden>  Fri, 15 Sep 2023 07:19:58 -0400

Available diffs

2.3.1-9ubuntu1.5

Superseded in focal-updates on 2023-09-20

Superseded in focal-security on 2023-09-20

cups (2.3.1-9ubuntu1.5) focal-security; urgency=medium

  * SECURITY UPDATE: recently printed documents authentication issue
    - debian/patches/CVE-2023-32360.patch: require authentication for
      CUPS-Get-Document in conf/cupsd.conf.in.
    - CVE-2023-32360

 -- Marc Deslauriers <email address hidden>  Mon, 11 Sep 2023 12:30:19 -0400

Available diffs

diff from 2.3.1-9ubuntu1.4 (in ~ubuntu-security/ubuntu/ppa) to 2.3.1-9ubuntu1.5 (979 bytes)
diff from 2.3.1-9ubuntu1.1 to 2.3.1-9ubuntu1.5 (4.4 KiB)

2.4.2-3ubuntu2.4

Superseded in lunar-updates on 2023-09-20

Superseded in lunar-security on 2023-09-20

cups (2.4.2-3ubuntu2.4) lunar-security; urgency=medium

  * SECURITY UPDATE: recently printed documents authentication issue
    - debian/patches/CVE-2023-32360.patch: require authentication for
      CUPS-Get-Document in conf/cupsd.conf.in.
    - CVE-2023-32360

 -- Marc Deslauriers <email address hidden>  Mon, 11 Sep 2023 12:27:52 -0400

Available diffs

2.4.1op1-1ubuntu4.6

Superseded in jammy-updates on 2023-09-20

Superseded in jammy-security on 2023-09-20

cups (2.4.1op1-1ubuntu4.6) jammy-security; urgency=medium

  * SECURITY UPDATE: recently printed documents authentication issue
    - debian/patches/CVE-2023-32360.patch: require authentication for
      CUPS-Get-Document in conf/cupsd.conf.in.
    - CVE-2023-32360

 -- Marc Deslauriers <email address hidden>  Mon, 11 Sep 2023 12:29:43 -0400

Available diffs

2.4.6-0ubuntu1

Superseded in mantic-release on 2023-09-24

Deleted in mantic-proposed on 2023-09-25 (Reason: Moved to mantic)

cups (2.4.6-0ubuntu1) mantic; urgency=medium

  * Update to new upstream version 2.4.6.
    - Fix printing multiple files on specific printers (Upstream issue #643)

 -- Till Kamppeter <email address hidden>  Wed, 16 Aug 2023 21:53:43 +0200

Available diffs

diff from 2.4.5-0ubuntu2 to 2.4.6-0ubuntu1 (4.5 KiB)

2.4.2-3ubuntu2.3

Deleted in lunar-proposed on 2023-09-14 (Reason: moved to -updates)

cups (2.4.2-3ubuntu2.3) lunar; urgency=medium

  * Fixes to assure color printing on color printers by default or on request
    (LP: #1971242)
    - check-colormodel-also-for-cmyk.patch: Take into account that on some
      printers the ColorModel option's choice for color printing is CMYK and
      not RGB.
    - dont-override-color-settings-from-print-dialog.patch: Prioritize
      the ColorModel PPD file option over the print-color-mode IPP
      attribute.

 -- Till Kamppeter <email address hidden>  Fri, 21 Jul 2023 17:45:00 +0200

Available diffs

diff from 2.4.2-3ubuntu2 to 2.4.2-3ubuntu2.3 (2.9 KiB)

2.4.1op1-1ubuntu4.5

Deleted in jammy-proposed on 2023-09-14 (Reason: moved to -updates)

cups (2.4.1op1-1ubuntu4.5) jammy; urgency=medium

  * Fixes to assure color printing on color printers by default or on request
    (LP: #1971242)
    - check-colormodel-also-for-cmyk.patch: Take into account that on some
      printers the ColorModel option's choice for color printing is CMYK and
      not RGB.
    - dont-override-color-settings-from-print-dialog.patch: Prioritize
      the ColorModel PPD file option over the print-color-mode IPP
      attribute.

 -- Till Kamppeter <email address hidden>  Sat, 24 Jun 2023 17:20:00 +0200

Available diffs

diff from 2.4.1op1-1ubuntu4.3 to 2.4.1op1-1ubuntu4.5 (1.5 KiB)

2.4.5-0ubuntu2

Superseded in mantic-release on 2023-08-26

Deleted in mantic-proposed on 2023-08-27 (Reason: Moved to mantic)

cups (2.4.5-0ubuntu2) mantic; urgency=medium

  * SECURITY UPDATE: use-after-free in cupsdAcceptClient()
    - debian/patches/CVE-2023-34241.patch: log result of httpGetHostname
      BEFORE closing the connection in scheduler/client.c.
    - CVE-2023-34241

 -- Marc Deslauriers <email address hidden>  Thu, 22 Jun 2023 12:06:19 -0400

Available diffs

diff from 2.4.5-0ubuntu1 to 2.4.5-0ubuntu2 (1.2 KiB)

2.4.1op1-1ubuntu4.4

Superseded in jammy-updates on 2023-09-12

Superseded in jammy-security on 2023-09-12

cups (2.4.1op1-1ubuntu4.4) jammy-security; urgency=medium

  * SECURITY UPDATE: use-after-free in cupsdAcceptClient()
    - debian/patches/CVE-2023-34241.patch: log result of httpGetHostname
      BEFORE closing the connection in scheduler/client.c.
    - CVE-2023-34241
  * This package does _not_ contain the changes from 2.4.1op1-1ubuntu4.3 in
    jammy-proposed.

 -- Marc Deslauriers <email address hidden>  Tue, 13 Jun 2023 08:17:22 -0400

Available diffs

diff from 2.4.1op1-1ubuntu4.2 to 2.4.1op1-1ubuntu4.4 (1.3 KiB)
diff from 2.4.1op1-1ubuntu4.3 to 2.4.1op1-1ubuntu4.4 (461 bytes)

2.4.5-0ubuntu1

Superseded in mantic-release on 2023-06-26

Deleted in mantic-proposed on 2023-06-28 (Reason: Moved to mantic)

cups (2.4.5-0ubuntu1) mantic; urgency=medium

  * Update to new upstream version 2.4.5.
    - Fixes color printing on printers with "CMYK" choice instead of "RGB"
      in "ColorModel" option of their PPD (Upstream issues #451 and #500,
      LP: 1971242).
  * Merge from Debian unstable. Remaining changes:
    - Added "--enable-snapped-clients" to the "./configure" options to use
      the correct Snap mediation mode for an unsnapped cupsd, like provided
      by this package.
    - In the AppArmor profile allow CUPS to access (/var)/run/snapd.socket
      to allow cupsd to determine which interfaces a snapped client
      is plugging.
    - Build-depend on libapparmor-dev, libsnapd-glib-dev, needed for
      Snap mediation.
    - Added fully automatic generation of PPD option setting presets to
      be applied depending on the settings of the job IPP attributes
      "print-color-mode", "print-quality", and "print-content-optimize".
      This allows easy control of any printer with only standard IPP
      attributes, as for example from a phone (functionality overtaken
      from cups-filters, mot (yet) upstream in CUPS).
    - In debian/rules updated ./configure arguments from --enable-gnutls to
      --with-tls=gnutls. Now libcups has support for all hash types again,
      especially can provide sha2-256 to PAPPL.
    - When polling capabilities of a driverless printer via
      get-printer-attributes IPP request, do a separate poll of the
      media-col-database attribute in case it did not get obtained by the
      first polls.
    - In libcupsimage2 recommend libcupsfilters2 instead of libcupsfilters1.
  * Manually refreshed patch 9100-ppd-cache-add-auto-presets.patch.
  * Removed patches included upstream:
    - 9110-create-local-printer-localhost-fix.patch
    - CVE-2022-26691-2.patch
    - snapd-glib-2.patch
    - poll-media-col-database-separately.patch
    - CVE-2023-32324.patch

 -- Till Kamppeter <email address hidden>  Wed, 14 Jun 2023 15:38:00 +0200

Available diffs

diff from 2.4.2-3ubuntu3 to 2.4.5-0ubuntu1 (186.2 KiB)

2.4.1op1-1ubuntu4.3

Deleted in jammy-proposed on 2023-06-23 (Reason: moved to -updates)

cups (2.4.1op1-1ubuntu4.3) jammy; urgency=medium

  * Fixes to assure color printing on color printers by default or on request
    (LP: #1971242)
    - check-colormodel-also-for-cmyk.patch: Take into account that on some
      printers the ColorModel option's choice for color printing is CMYK and
      not RGB.
    - dont-override-color-settings-from-print-dialog.patch: Prioritize
      the ColorModel PPD file option over the print-color-mode IPP
      attribute.

 -- Till Kamppeter <email address hidden>  Wed, 14 Jun 2023 14:36:00 +0200

Available diffs

diff from 2.4.1op1-1ubuntu4 to 2.4.1op1-1ubuntu4.3 (3.3 KiB)

2.3.1-9ubuntu1.4

Superseded in focal-updates on 2023-09-12

Superseded in focal-security on 2023-09-12

cups (2.3.1-9ubuntu1.4) focal-security; urgency=medium

  * SECURITY UPDATE: use-after-free in cupsdAcceptClient()
    - debian/patches/CVE-2023-34241.patch: log result of httpGetHostname
      BEFORE closing the connection in scheduler/client.c.
    - CVE-2023-34241

 -- Marc Deslauriers <email address hidden>  Tue, 13 Jun 2023 08:17:47 -0400

Available diffs

diff from 2.3.1-9ubuntu1.3 to 2.3.1-9ubuntu1.4 (1.2 KiB)

2.4.2-1ubuntu2.2

Published in kinetic-updates on 2023-06-22

Published in kinetic-security on 2023-06-22

cups (2.4.2-1ubuntu2.2) kinetic-security; urgency=medium

  * SECURITY UPDATE: use-after-free in cupsdAcceptClient()
    - debian/patches/CVE-2023-34241.patch: log result of httpGetHostname
      BEFORE closing the connection in scheduler/client.c.
    - CVE-2023-34241

 -- Marc Deslauriers <email address hidden>  Tue, 13 Jun 2023 08:16:59 -0400

Available diffs

diff from 2.4.2-1ubuntu2.1 to 2.4.2-1ubuntu2.2 (1.2 KiB)

2.4.2-3ubuntu2.2

Superseded in lunar-updates on 2023-09-12

Superseded in lunar-security on 2023-09-12

cups (2.4.2-3ubuntu2.2) lunar-security; urgency=medium

  * SECURITY UPDATE: use-after-free in cupsdAcceptClient()
    - debian/patches/CVE-2023-34241.patch: log result of httpGetHostname
      BEFORE closing the connection in scheduler/client.c.
    - CVE-2023-34241

 -- Marc Deslauriers <email address hidden>  Tue, 13 Jun 2023 08:15:36 -0400

Available diffs

diff from 2.4.2-3ubuntu2.1 to 2.4.2-3ubuntu2.2 (1.2 KiB)

2.4.2-3ubuntu3

Superseded in mantic-release on 2023-06-19

Deleted in mantic-proposed on 2023-06-20 (Reason: Moved to mantic)

cups (2.4.2-3ubuntu3) mantic; urgency=medium

  * SECURITY UPDATE: DoS via buffer overflow in format_log_line
    - debian/patches/CVE-2023-32324.patch: check _cups_strlcpy size in
      cups/string.c.
    - CVE-2023-32324

 -- Marc Deslauriers <email address hidden>  Thu, 25 May 2023 08:37:20 -0400

Available diffs

diff from 2.4.2-3ubuntu2 to 2.4.2-3ubuntu3 (977 bytes)

2.2.7-1ubuntu2.10

Published in bionic-updates on 2023-06-01

Published in bionic-security on 2023-06-01

cups (2.2.7-1ubuntu2.10) bionic-security; urgency=medium

  * SECURITY UPDATE: DoS via buffer overflow in format_log_line
    - debian/patches/CVE-2023-32324.patch: check _cups_strlcpy size in
      cups/string.c.
    - CVE-2023-32324

 -- Marc Deslauriers <email address hidden>  Thu, 25 May 2023 08:44:11 -0400

Available diffs

diff from 2.2.7-1ubuntu2.9 to 2.2.7-1ubuntu2.10 (824 bytes)

2.3.1-9ubuntu1.3

Superseded in focal-updates on 2023-06-22

Superseded in focal-security on 2023-06-22

cups (2.3.1-9ubuntu1.3) focal-security; urgency=medium

  * SECURITY UPDATE: DoS via buffer overflow in format_log_line
    - debian/patches/CVE-2023-32324.patch: check _cups_strlcpy size in
      cups/string.c.
    - CVE-2023-32324

 -- Marc Deslauriers <email address hidden>  Thu, 25 May 2023 08:43:14 -0400

Available diffs

diff from 2.3.1-9ubuntu1.2 to 2.3.1-9ubuntu1.3 (925 bytes)

2.4.1op1-1ubuntu4.2

Superseded in jammy-updates on 2023-06-22

Superseded in jammy-security on 2023-06-22

cups (2.4.1op1-1ubuntu4.2) jammy-security; urgency=medium

  * SECURITY UPDATE: DoS via buffer overflow in format_log_line
    - debian/patches/CVE-2023-32324.patch: check _cups_strlcpy size in
      cups/string.c.
    - CVE-2023-32324

 -- Marc Deslauriers <email address hidden>  Thu, 25 May 2023 08:42:49 -0400

Available diffs

diff from 2.4.1op1-1ubuntu4.1 to 2.4.1op1-1ubuntu4.2 (966 bytes)

2.4.2-3ubuntu2.1

Superseded in lunar-updates on 2023-06-22

Superseded in lunar-security on 2023-06-22

cups (2.4.2-3ubuntu2.1) lunar-security; urgency=medium

  * SECURITY UPDATE: DoS via buffer overflow in format_log_line
    - debian/patches/CVE-2023-32324.patch: check _cups_strlcpy size in
      cups/string.c.
    - CVE-2023-32324

 -- Marc Deslauriers <email address hidden>  Thu, 25 May 2023 08:37:20 -0400

Available diffs

diff from 2.4.2-3ubuntu2 (in Ubuntu) to 2.4.2-3ubuntu2.1 (983 bytes)

2.4.2-1ubuntu2.1

Superseded in kinetic-updates on 2023-06-22

Superseded in kinetic-security on 2023-06-22

cups (2.4.2-1ubuntu2.1) kinetic-security; urgency=medium

  * SECURITY UPDATE: DoS via buffer overflow in format_log_line
    - debian/patches/CVE-2023-32324.patch: check _cups_strlcpy size in
      cups/string.c.
    - CVE-2023-32324

 -- Marc Deslauriers <email address hidden>  Thu, 25 May 2023 08:42:29 -0400

Available diffs

diff from 2.4.2-1ubuntu2 (in Ubuntu) to 2.4.2-1ubuntu2.1 (957 bytes)

2.4.2-3ubuntu2

Superseded in mantic-release on 2023-06-05

Published in lunar-release on 2023-04-01

Deleted in lunar-proposed (Reason: Moved to lunar)

cups (2.4.2-3ubuntu2) lunar; urgency=low

  * In libcupsimage2 recommend libcupsfilters2 instead of libcupsfilters1.

 -- Till Kamppeter <email address hidden>  Mon, 27 Mar 2023 23:12:00 +0200

Available diffs

diff from 2.4.2-1ubuntu4 to 2.4.2-3ubuntu2 (430.2 KiB)
diff from 2.4.2-3ubuntu1 to 2.4.2-3ubuntu2 (474 bytes)

2.4.2-3ubuntu1

Superseded in lunar-proposed on 2023-03-27

cups (2.4.2-3ubuntu1) lunar; urgency=low

  * Merge from Debian unstable. Remaining changes:
    - Added "--enable-snapped-clients" to the "./configure" options to use
      the correct Snap mediation mode for an unsnapped cupsd, like provided
      by this package.
    - In the AppArmor profile allow CUPS to access (/var)/run/snapd.socket
      to allow cupsd to determine which interfaces a snapped client
      is plugging.
    - Build-depend on libapparmor-dev, libsnapd-glib-dev, needed for
      Snap mediation.
    - Added fully automatic generation of PPD option setting presets to
      be applied depending on the settings of the job IPP attributes
      "print-color-mode", "print-quality", and "print-content-optimize".
      This allows easy control of any printer with only standard IPP
      attributes, as for example from a phone (functionality overtaken
      from cups-filters, mot (yet) upstream in CUPS).
    - Fixed printing on temporary CUPS queues for local services, like
      IPP-over-USB or Printer Applications. Especially when printing from
      the GTK print dialog printing on such queues did not work (Upstream
      pull request #353, LP: #1965112).
    - Comment in CVE-2022-26691 patch fixed.
    - In debian/rules updated ./configure arguments from --enable-gnutls to
      --with-tls=gnutls. Now libcups has support for all hash types again,
      especially can provide sha2-256 to PAPPL.
    - When polling capabilities of a driverless printer via
      get-printer-attributes IPP request, do a separate poll of the
      media-col-database attribute in case it did not get obtained by the
      first polls.
    - Patch to build with snapd-glib-2
  * Refreshed patches 9100-ppd-cache-add-auto-presets.patch and
    9110-create-local-printer-localhost-fix.patch with quilt.

 -- Till Kamppeter <email address hidden>  Sun, 26 Mar 2023 21:01:00 +0200

Available diffs

diff from 2.4.2-1ubuntu4 to 2.4.2-3ubuntu1 (430.1 KiB)

2.4.2-1ubuntu4

Superseded in lunar-release on 2023-04-01

Deleted in lunar-proposed on 2023-04-03 (Reason: Moved to lunar)

cups (2.4.2-1ubuntu4) lunar; urgency=medium

  * In debian/rules updated ./configure arguments from --enable-gnutls to
    --with-tls=gnutls. Now libcups has support for all hash types again,
    especially can provide sha2-256 to PAPPL.

 -- Till Kamppeter <email address hidden>  Wed,  8 Feb 2023 00:07:31 +0100

Available diffs

diff from 2.4.2-1ubuntu2 to 2.4.2-1ubuntu4 (1.4 KiB)

2.4.2-1ubuntu2

Superseded in lunar-release on 2023-03-08

Published in kinetic-release on 2022-08-27

Deleted in kinetic-proposed (Reason: Moved to kinetic)

cups (2.4.2-1ubuntu2) kinetic; urgency=medium

  * Add patch to build with snapd-glib-2

 -- Jeremy Bicha <email address hidden>  Thu, 25 Aug 2022 21:54:33 -0400

Available diffs

diff from 2.4.2-1ubuntu1 to 2.4.2-1ubuntu2 (1.1 KiB)

2.4.2-1ubuntu1

Superseded in kinetic-release on 2022-08-27

Deleted in kinetic-proposed on 2022-08-28 (Reason: Moved to kinetic)

cups (2.4.2-1ubuntu1) kinetic; urgency=low

  * Merge from Debian unstable. Remaining changes:
    - Added "--enable-snapped-clients" to the "./configure" options to use
      the correct Snap mediation mode for an unsnapped cupsd, like provided
      by this package.
    - In the AppArmor profile allow CUPS to access (/var)/run/snapd.socket
      to allow cupsd to determine which interfaces a snapped client
      is plugging.
    - Build-depend on libapparmor-dev, libsnapd-glib-dev, needed for
      Snap mediation.
    - Added fully automatic generation of PPD option setting presets to
      be applied depending on the settings of the job IPP attributes
      "print-color-mode", "print-quality", and "print-content-optimize".
      This allows easy control of any printer with only standard IPP
      attributes, as for example from a phone (functionality overtaken
      from cups-filters, mot (yet) upstream in CUPS).
    - Fixed printing on temporary CUPS queues for local services, like
      IPP-over-USB or Printer Applications. Especially when printing from
      the GTK print dialog printing on such queues did not work (Upstream
      pull request #353, LP: #1965112).
    - Comment in CVE-2022-26691 patch fixed.

 -- Till Kamppeter <email address hidden>  Mon, 06 Jun 2022 20:20:31 +0200

Available diffs

diff from 2.4.1op1-1ubuntu5 to 2.4.2-1ubuntu1 (52.4 KiB)

2.4.1op1-1ubuntu5

Superseded in kinetic-release on 2022-06-07

Deleted in kinetic-proposed on 2022-06-08 (Reason: Moved to kinetic)

cups (2.4.1op1-1ubuntu5) kinetic; urgency=medium

  * SECURITY UPDATE: Local authorization cert bypass
    - debian/patches/CVE-2022-26691-1.patch: fix string comparison in
      scheduler/cert.c.
    - debian/patches/CVE-2022-26691-2.patch: fix the comment in
      scheduler/cert.c.
    - CVE-2022-26691

 -- Marc Deslauriers <email address hidden>  Fri, 27 May 2022 07:53:01 -0400

Available diffs

diff from 2.4.1op1-1ubuntu4 to 2.4.1op1-1ubuntu5 (1.7 KiB)

2.2.7-1ubuntu2.9

Superseded in bionic-updates on 2023-06-01

Superseded in bionic-security on 2023-06-01

cups (2.2.7-1ubuntu2.9) bionic-security; urgency=medium

  * SECURITY UPDATE: buffer overflow in ippReadIO
    - debian/patches/CVE-2019-8842.patch: fix check in cups/ipp.c.
    - CVE-2019-8842
  * SECURITY UPDATE: buffer overflow in ippReadIO
    - debian/patches/CVE-2020-10001.patch: fix bounds checks in cups/ipp.c.
    - CVE-2020-10001
  * SECURITY UPDATE: Local authorization cert bypass
    - debian/patches/CVE-2022-26691-1.patch: fix string comparison in
      scheduler/cert.c.
    - debian/patches/CVE-2022-26691-2.patch: fix the comment in
      scheduler/cert.c.
    - CVE-2022-26691

 -- Marc Deslauriers <email address hidden>  Fri, 27 May 2022 11:03:33 -0400

Available diffs

2.3.1-9ubuntu1.2

Superseded in focal-updates on 2023-06-01

Superseded in focal-security on 2023-06-01

cups (2.3.1-9ubuntu1.2) focal-security; urgency=medium

  * SECURITY UPDATE: buffer overflow in ippReadIO
    - debian/patches/CVE-2019-8842.patch: fix check in cups/ipp.c.
    - CVE-2019-8842
  * SECURITY UPDATE: buffer overflow in ippReadIO
    - debian/patches/CVE-2020-10001.patch: fix bounds checks in cups/ipp.c.
    - CVE-2020-10001
  * SECURITY UPDATE: Local authorization cert bypass
    - debian/patches/CVE-2022-26691-1.patch: fix string comparison in
      scheduler/cert.c.
    - debian/patches/CVE-2022-26691-2.patch: fix the comment in
      scheduler/cert.c.
    - CVE-2022-26691

 -- Marc Deslauriers <email address hidden>  Fri, 27 May 2022 10:51:54 -0400

Available diffs

2.3.3op2-7ubuntu2.1

Obsolete in impish-updates on 2022-07-23

Obsolete in impish-security on 2022-07-23

cups (2.3.3op2-7ubuntu2.1) impish-security; urgency=medium

  * SECURITY UPDATE: Local authorization cert bypass
    - debian/patches/CVE-2022-26691-1.patch: fix string comparison in
      scheduler/cert.c.
    - debian/patches/CVE-2022-26691-2.patch: fix the comment in
      scheduler/cert.c.
    - CVE-2022-26691

 -- Marc Deslauriers <email address hidden>  Fri, 27 May 2022 09:03:52 -0400

Available diffs

diff from 2.3.3op2-7ubuntu2 (in Ubuntu) to 2.3.3op2-7ubuntu2.1 (1.7 KiB)

2.4.1op1-1ubuntu4.1

Superseded in jammy-updates on 2023-06-01

Superseded in jammy-security on 2023-06-01

cups (2.4.1op1-1ubuntu4.1) jammy-security; urgency=medium

  * SECURITY UPDATE: Local authorization cert bypass
    - debian/patches/CVE-2022-26691-1.patch: fix string comparison in
      scheduler/cert.c.
    - debian/patches/CVE-2022-26691-2.patch: fix the comment in
      scheduler/cert.c.
    - CVE-2022-26691

 -- Marc Deslauriers <email address hidden>  Fri, 27 May 2022 07:53:01 -0400

Available diffs

diff from 2.4.1op1-1ubuntu4 (in Ubuntu) to 2.4.1op1-1ubuntu4.1 (1.7 KiB)

2.4.1op1-1ubuntu4

Superseded in kinetic-release on 2022-06-05

Published in jammy-release on 2022-03-29

Deleted in jammy-proposed (Reason: Moved to jammy)

cups (2.4.1op1-1ubuntu4) jammy; urgency=low

  * Fixed PPD file auto-generation when a print queue is created with
    a DNS-SD-service-name-based URI and "-m everywhere" backporting the
    fix from upstream (Upstream issue #340, #343).

 -- Till Kamppeter <email address hidden>  Sat, 19 Mar 2022 00:07:00 +0100

Available diffs

diff from 2.4.1op1-1ubuntu3 to 2.4.1op1-1ubuntu4 (1.1 KiB)

2.4.1op1-1ubuntu3

Superseded in jammy-release on 2022-03-29

Deleted in jammy-proposed on 2022-03-30 (Reason: Moved to jammy)

cups (2.4.1op1-1ubuntu3) jammy; urgency=low

  * Fixed crasher in the patch for temporary queues for local services
    in the previous release. Updated the patch and the upstream pull
    request (LP: #1965112, Upstream pull request #353).

 -- Till Kamppeter <email address hidden>  Wed, 16 Mar 2022 18:24:08 +0100

Available diffs

diff from 2.4.1op1-1ubuntu2 to 2.4.1op1-1ubuntu3 (1.3 KiB)

2.4.1op1-1ubuntu2

Superseded in jammy-release on 2022-03-17

Deleted in jammy-proposed on 2022-03-19 (Reason: Moved to jammy)

cups (2.4.1op1-1ubuntu2) jammy; urgency=low

  * Fixed printing on temporary CUPS queues for local services, like
    IPP-over-USB or Printer Applications. Especially when printing from
    the GTK print dialog printing on such queues did not work (Upstream
    pull request #353).

 -- Till Kamppeter <email address hidden>  Mon, 14 Mar 2022 09:13:08 +0100

Available diffs

diff from 2.4.1op1-1ubuntu1 to 2.4.1op1-1ubuntu2 (1.4 KiB)

2.4.1op1-1ubuntu1

Superseded in jammy-release on 2022-03-15

Deleted in jammy-proposed on 2022-03-17 (Reason: Moved to jammy)

cups (2.4.1op1-1ubuntu1) jammy; urgency=low

  * Merge from Debian unstable. Remaining changes:
    - Added "--enable-snapped-clients" to the "./configure" options to use
      the correct Snap mediation mode for an unsnapped cupsd, like provided
      by this package.
    - Build CUPS with "SystemGroup lpadmin root" in cups-files.conf by
      default, as CUPS always worked this way but the new patch for
      supporting the "cups-control" interface of Snaps does not allow
      implicit permission to everything for root any more.
    - In the AppArmor profile allow CUPS to access (/var)/run/snapd.socket
      to allow cupsd to determine which interfaces a snapped client
      is plugging.
    - Build-depend on libapparmor-dev, libsnapd-glib-dev, needed for
      Snap mediation.
    - Added fully automatic generation of PPD option setting presets to
      be applied depending on the settings of the job IPP attributes
      "print-color-mode", "print-quality", and "print-content-optimize".
      This allows easy control of any printer with only standard IPP
      attributes, as for example from a phone (functionality overtaken
      from cups-filters, mot (yet) upstream in CUPS).
  * Updated 9100-ppd-cache-add-auto-presets.patch

 -- Till Kamppeter <email address hidden>  Tue, 22 Feb 2022 12:28:08 +0100

Available diffs

diff from 2.3.3op2-7ubuntu2 to 2.4.1op1-1ubuntu1 (618.8 KiB)

2.3.3op2-7ubuntu2

Superseded in jammy-release on 2022-02-24

Obsolete in impish-release on 2022-07-23

Deleted in impish-proposed (Reason: Moved to impish)

cups (2.3.3op2-7ubuntu2) impish; urgency=low

  * Updated patch for auto-generation of PPD presets to patch proposed
    upstream (Upstream pull request #236) due to added PPD options taken into
    account.

 -- Till Kamppeter <email address hidden>  Fri, 10 Sep 2021 19:20:00 +0200

Available diffs

diff from 2.3.3op2-5ubuntu1 to 2.3.3op2-7ubuntu2 (9.6 KiB)
diff from 2.3.3op2-7ubuntu1 to 2.3.3op2-7ubuntu2 (1.4 KiB)

2.3.3op2-7ubuntu1

Superseded in impish-proposed on 2021-09-10

cups (2.3.3op2-7ubuntu1) impish; urgency=low

  * Merge from Debian unstable. Remaining changes:
    - Added extra checking when administrative requests (create queue,
      remove someone else's job, ...) reach cupsd. If the client is a Snap,
      it has to plug the cups-control interface to be allowed to do the
      task. Added libapparmor-dev and libsnapd-glib-dev to the build
      dependencies. Also added needed permissions to AppArmor profile.
    - Build CUPS with "SystemGroup lpadmin root" in cups-files.conf by
      default, as CUPS always worked this way but the new patch for
      supporting the "cups-control" interface of Snaps does not allow
      implicit permission to everything for root any more.
    - Added "--enable-snapped-clients"
      to the "./configure" options to use the correct checking mode for an
      unsnapped cupsd, like provided by this package.
    - Added fully automatic generation of PPD option setting presets to
      be applied depending on the settings of the job IPP attributes
      "print-color-mode", "print-quality", and "print-content-optimize".
      This allows easy control of any printer with only standard IPP
      attributes, as for example from a phone (functionality overtaken
      from cups-filters, mot (yet) upstream in CUPS).
  * Updated patch for auto-generation of PPD presets to patch proposed
    upstream (Upstream pull request #236).

 -- Till Kamppeter <email address hidden>  Mon, 06 Sep 2021 21:26:41 +0200

Available diffs

diff from 2.3.3op2-5ubuntu1 to 2.3.3op2-7ubuntu1 (9.5 KiB)

2.3.3op2-5ubuntu1

Superseded in impish-release on 2021-09-12

Deleted in impish-proposed on 2021-09-13 (Reason: Moved to impish)

cups (2.3.3op2-5ubuntu1) impish; urgency=low

  * Merge from Debian unstable. Remaining changes:
    - Added extra checking when administrative requests (create queue,
      remove someone else's job, ...) reach cupsd. If the client is a Snap,
      it has to plug the cups-control interface to be allowed to do the
      task. Added libapparmor-dev and libsnapd-glib-dev to the build
      dependencies. Also added needed permissions to AppArmor profile.
    - Build CUPS with "SystemGroup lpadmin root" in cups-files.conf by
      default, as CUPS always worked this way but the new patch for
      supporting the "cups-control" interface of Snaps does not allow
      implicit permission to everything for root any more.
    - Added "--enable-snapped-clients"
      to the "./configure" options to use the correct checking mode for an
      unsnapped cupsd, like provided by this package.
  * Added fully automatic generation of PPD option setting presets to
    be applied depending on the settings of the job IPP attributes
    "print-color-mode", "print-quality", and "print-content-optimize".
    This allows easy control of any printer with only standard IPP
    attributes, as for example from a phone (functionality overtaken
    from cups-filters, mot (yet) upstream in CUPS).

 -- Till Kamppeter <email address hidden>  Tue, 17 Aug 2021 23:47:41 +0200

Available diffs

diff from 2.3.3op2-3ubuntu3 to 2.3.3op2-5ubuntu1 (61.6 KiB)

2.3.3op2-3ubuntu3

Superseded in impish-release on 2021-09-04

Obsolete in hirsute-release on 2022-07-23

Deleted in hirsute-proposed on 2022-07-24 (Reason: Moved to hirsute)

cups (2.3.3op2-3ubuntu3) hirsute; urgency=low

  * Updated AppArmor profile entries for CUPS accessing snapd to
    check whether a client is a Snap and which interfaces it plugs to.

 -- Till Kamppeter <email address hidden>  Fri, 19 Mar 2021 18:26:41 +0100

Available diffs

diff from 2.3.3op2-3ubuntu1 to 2.3.3op2-3ubuntu3 (13.3 KiB)
diff from 2.3.3op2-3ubuntu2 to 2.3.3op2-3ubuntu3 (660 bytes)

2.3.3op2-3ubuntu2

Superseded in hirsute-proposed on 2021-03-19

cups (2.3.3op2-3ubuntu2) hirsute; urgency=low

  * Replaced patch for extra checking of admin requests from snapped
    clients by the current upstream code. Added "--enable-snapped-clients"
    to the "./configure" options to use the correct checking mode for an
    unsnapped cupsd, like provided by this package.

 -- Till Kamppeter <email address hidden>  Fri, 19 Mar 2021 16:32:41 +0100

Available diffs

diff from 2.3.3op2-3ubuntu1 to 2.3.3op2-3ubuntu2 (13.0 KiB)

2.3.3op2-3ubuntu1

Superseded in hirsute-release on 2021-03-20

Deleted in hirsute-proposed on 2021-03-21 (Reason: moved to Release)

cups (2.3.3op2-3ubuntu1) hirsute; urgency=low

  * Merge from Debian unstable. Remaining changes:
    - Added extra checking when administrative requests (create queue,
      remove someone else's job, ...) reach cupsd. If the client is a Snap,
      it has to plug the cups-control interface to be allowed to do the
      task. Added libapparmor-dev and libsnapd-glib-dev to the build
      dependencies. Also added needed permissions to AppArmor profile.
    - Build CUPS with "SystemGroup lpadmin root" in cups-files.conf by
      default, as CUPS always worked this way but the new patch for
      supporting the "cups-control" interface of Snaps does not allow
      implicit permission to everything for root any more.
  * Clean up "Build-Depends:" to be in sync with Debian (delta overlooked
    for near a decade when cups-filters was introduced in 2012), removing
    the unneeded entries: ghostscript, libavahi-compat-libdnssd-dev,
    libfontconfig1-dev, libfreetype6-dev, libijs-dev, libjpeg-dev,
    libldap2-dev, libpng-dev, libtiff-dev, poppler-utils, sharutils
  * Removed the changes on the machine-generated "configure" file in the
    patch for checking snapped clients, the changes easily mis-match on
    updates and we run "autoconf" in debian/rules anyway.

Available diffs

diff from 2.3.3op1-5ubuntu1 to 2.3.3op2-3ubuntu1 (123.0 KiB)

2.3.3op1-5ubuntu1

Superseded in hirsute-release on 2021-02-22

Deleted in hirsute-proposed on 2021-02-23 (Reason: moved to Release)

cups (2.3.3op1-5ubuntu1) hirsute; urgency=low

  * Merge from Debian unstable. Remaining changes:
    - Added extra checking when administrative requests (create queue,
      remove someone else's job, ...) reach cupsd. If the client is a Snap,
      it has to plug the cups-control interface to be allowed to do the
      task. Added libapparmor-dev and libsnapd-glib-dev to the build
      dependencies. Also added needed permissions to AppArmor profile.
    - Build CUPS with "SystemGroup lpadmin root" in cups-files.conf by
      default, as CUPS always worked this way but the new patch for
      supporting the "cups-control" interface of Snaps does not allow
      implicit permission to everything for root any more.
  * In the AppArmor profile allow cupsd to write to /run/systemd/notify
    to notify that it is up and running (systemd service type "notify").

Available diffs

diff from 2.3.3-3ubuntu1 to 2.3.3op1-5ubuntu1 (227.3 KiB)
diff from 2.3.3op1-3ubuntu1 to 2.3.3op1-5ubuntu1 (11.7 KiB)

2.3.3op1-3ubuntu1

Superseded in hirsute-proposed on 2021-01-08

cups (2.3.3op1-3ubuntu1) hirsute; urgency=low

  * Merge from Debian unstable. Remaining changes:
    - Added extra checking when administrative requests (create queue,
      remove someone else's job, ...) rach cupsd. If the client is a Snap,
      it has to plug the cups-control interface to be allowed to do the
      task. Added libapparmor-dev and libsnapd-glib-dev to the build
      dependencies. Also added needed permissions to AppArmor profile.
    - Build CUPS with "SystemGroup lpadmin root" in cups-files.conf by
      default, as CUPS always worked this way but the new patch for
      supporting the "cups-control" interface of Snaps does not allow
      implicit permission to everything for root any more.

Available diffs

diff from 2.3.3-3ubuntu1 to 2.3.3op1-3ubuntu1 (226.1 KiB)

2.3.3-3ubuntu1

Superseded in hirsute-release on 2021-01-11

Obsolete in groovy-release on 2021-12-22

Deleted in groovy-proposed on 2022-07-23 (Reason: moved to Release)

cups (2.3.3-3ubuntu1) groovy; urgency=medium

  * Merged with Debian unstable. Remaining changes:
    - Added extra checking when administrative requests (create queue,
      remove someone else's job, ...) rach cupsd. If the client is a Snap,
      it has to plug the cups-control interface to be allowed to do the
      task. Added libapparmor-dev and libsnapd-glib-dev to the build
      dependencies. Also added needed permissions to AppArmor profile.
  * Build CUPS with "SystemGroup lpadmin root" in cups-files.conf by
    defualt, as CUPS always worked this way but the new patch for
    supporting the "cups-control" interface of Snaps does not allow
    implicit permission to everything for root any more.

 -- Till Kamppeter <email address hidden>  Fri,  4 Sep 2020 19:00:00 +0200

Available diffs

diff from 2.3.3-2ubuntu5 to 2.3.3-3ubuntu1 (6.7 KiB)

2.3.3-2ubuntu5

Superseded in groovy-release on 2020-09-07

Deleted in groovy-proposed on 2020-09-08 (Reason: moved to Release)

cups (2.3.3-2ubuntu5) groovy; urgency=medium

  * In all autopkgtests modify set "LogLevel debug2" in cupsd.conf and
    "SystemGroup lpadmin root" in cups-files.conf and restart cupsd,
    the former change to more easily find out what failed and the latter
    as the default configuration did not allow root to create queues,
    making all tests fail.

 -- Till Kamppeter <email address hidden>  Thu, 27 Aug 2020 23:18:00 +0200

Available diffs

diff from 2.3.3-2 (in Debian) to 2.3.3-2ubuntu5 (9.9 KiB)
diff from 2.3.3-2ubuntu4 to 2.3.3-2ubuntu5 (954 bytes)

2.3.3-2ubuntu4

Superseded in groovy-proposed on 2020-08-27

cups (2.3.3-2ubuntu4) groovy; urgency=medium

  * Let the rastertopwg filter check rounding errors when calculating the
    page geometry.

 -- Till Kamppeter <email address hidden>  Wed, 27 Aug 2020 10:22:00 +0200

Available diffs

diff from 2.3.3-2ubuntu3 to 2.3.3-2ubuntu4 (1.4 KiB)

2.3.3-2ubuntu3

Superseded in groovy-proposed on 2020-08-27

cups (2.3.3-2ubuntu3) groovy; urgency=medium

  * Do not choke if the GTK dialog sends "None" as phone number or pre-dial
    prefix.

 -- Till Kamppeter <email address hidden>  Wed, 26 Aug 2020 22:33:00 +0200

Available diffs

diff from 2.3.3-2ubuntu2 to 2.3.3-2ubuntu3 (1.1 KiB)

Ubuntucups package

Change log for cups package in Ubuntu

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Ubuntu
cups package