Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

2.2.9 lpadmin -E regression for raw printers ? #5440

Closed
OdyX opened this issue Nov 18, 2018 · 5 comments
Closed

2.2.9 lpadmin -E regression for raw printers ? #5440

OdyX opened this issue Nov 18, 2018 · 5 comments
Assignees

Comments

@OdyX
Copy link
Contributor

OdyX commented Nov 18, 2018

After uploading 2.2.9 to Debian unstable, the CI runner (which run a test on an installed CUPS instance) started to fail: https://ci.debian.net/packages/c/cups/testing/amd64/

Specifically: https://ci.debian.net/data/autopkgtest/testing/amd64/c/cups/1329969/log.gz

The following command is launched:

lpadmin -p test-printer0 -E -m raw -v file:///dev/null

It spits "incorrect request" and the printer is not created, but reading from the logs didn't allow me to understand why.

This only started to fail in 2.2.9; and running lpadmin without the -E then cupsenable seems to work.

What has changed?

@michaelrsweet
Copy link
Collaborator

This could be a regression caused by the fix for Issue #5305.

@michaelrsweet michaelrsweet self-assigned this Nov 18, 2018
@michaelrsweet michaelrsweet added the investigating Investigating the issue label Nov 18, 2018
@OdyX
Copy link
Contributor Author

OdyX commented Nov 19, 2018

Indeed. Reverting both a83658f and 2b4e4ed fixes this. No good idea how to go forward with this though.

@michaelrsweet
Copy link
Collaborator

I'll need to trace things through to make sure we are still creating the queue properly. Raw support has been deprecated, of course, but it is still supposed to work...

@michaelrsweet michaelrsweet added this to the CUPS 2.2.x Updates milestone Nov 26, 2018
@michaelrsweet michaelrsweet added priority-low and removed investigating Investigating the issue labels Nov 26, 2018
@michaelrsweet
Copy link
Collaborator

(and I've been able to reproduce locally, at least, so we'll see where this goes...)

michaelrsweet added a commit that referenced this issue Dec 5, 2018
michaelrsweet added a commit that referenced this issue Dec 5, 2018
@michaelrsweet
Copy link
Collaborator

[master c29d06f] Fix -E option (Issue #5440)

[branch-2.2 d3cfe06] Fix -E option (Issue #5440)

balabit-sync pushed a commit to balabit-deps/balabit-os-8-cups that referenced this issue Nov 14, 2022
cups (2.3.1-9ubuntu1.1) focal-security; urgency=medium

  * SECURITY UPDATE: heap-based buffer overflow
    - debian/patches/CVE-2020-3898.patch: properly handle invalid
      resolution names in cups/ppd.c, ppdc/ppdc-source.cxx.
    - CVE-2020-3898

cups (2.3.1-9ubuntu1) focal; urgency=medium

  * Revert all the CI test changes
  * Add the bug fixes (not CI test changes of 2.3.1-10:
    - Add Requires=cups.socket to cups.service, to make sure they start in
      the right order
    - Add patch proposal from RedHat to fix leakage of ppd (Issue: #5738)

cups (2.3.1-9) unstable; urgency=medium

  * CI Tests: Ensure the job files are non-empty; should detect more
    regressions

cups (2.3.1-8) unstable; urgency=medium

  * Add patch to fix cupsctl when loading cupsd.conf (Issue: #5744)

cups (2.3.1-7) unstable; urgency=medium

  * Add patch to fix conversion of PPD InputSlot choice names; this should fix
    printers ignoring the paper tray selection (Issue: #5740, Closes: #949315)
  * lintian-brush:
    - Set upstream metadata fields: Bug-Database, Repository, Repository-Browse
    - Rewrap some d/changelog entries

cups (2.3.1-6) unstable; urgency=medium

  * Patch test suite to also ignore 'Job held' lines in error_log line
    counting

cups (2.3.1-5) unstable; urgency=medium

  * Move towards driverless-centered installation:
    - Drop all printer-driver-* and hplip recommends/suggests
  * Cleanup all versions from pre- Debian stable
  * Bump S-V to 4.5.0 without changes needed

cups (2.3.1-4) unstable; urgency=medium

  * Cleanup patch queue for cups' bts URLs and patch names
  * Update README.Debian to remove leftover SystemdIdleExit references

cups (2.3.1-2) unstable; urgency=medium

  * Drop pwg-raster-attributes.patch
  * Amend 2.3.1-1 changelog entry to add missing Ubuntu package drop and CVE
    bug closure

cups (2.3.1-1) unstable; urgency=medium

  [ Didier Raboud ]
  * New 2.3.1 upstream release:
    - CVE-2019-2228: The `ippSetValuetag` function did not validate the
      default language value (Closes: #946782)

  [ Steve Langasek ]
  * On Ubuntu i386, drop cups and cups-core-drivers (Closes: #947185)

  [ Helge Kreutzmann ]
  * Update German man page (2207t)

cups (2.3.0-7) unstable; urgency=medium

  * Packaging cleanup:
    - Set upstream metadata fields: Repository
    - Rely on pre-initialized dpkg-architecture variables
    - Fix day-of-week for changelog entries 1.0.1-1
    - Bump Standards-Version to 4.4.1 without changes needed
    - Replace dh-exec usage with manual renaming in debian/rules

cups (2.3.0-6) unstable; urgency=medium

  [ Didier Raboud ]
  * Tests-drivers: Cleanup output

  [ intrigeri ]
  * AppArmor: support cups-pdf "Out" directory pointing to almost anywhere
    below $HOME (Closes: #940578)

cups (2.3.0-5) unstable; urgency=medium

  * Let the test-drivers script stop waiting when a filter is allegedly
    failed, and give context

cups (2.3.0-4) unstable; urgency=medium

  [ Helge Kreutzmann ]
  * Update German man page (2197t)

cups (2.3.0-3) unstable; urgency=low

  * Fix autopkgtests for real; refactor lpadmin stderr filtering

cups (2.3.0-2) unstable; urgency=low

  [ Helge Kreutzmann ]
  * Update German man page (2100t58f39u)

  [ Didier Raboud ]
  * Fix autopkgtest by filtering away known stderr messages

cups (2.3.0-1) unstable; urgency=low

  * New 2.3.0 upstream release, to unstable
    - CVE-2019-8696 and CVE-2019-8675: Fixed SNMP buffer overflows
    - Fixed IPP buffer overflow
    - Fixed memory disclosure and DoS issues in the scheduler
    - CUPS is now provided under the Apache License, Version 2.0, with a
      GPL2/LGPL2 exception
  * Rewrite debian/copyright with the above license change, install the
    NOTICE file
  * Refresh manpage translations
  * Refresh upstream metadata
  * Bump S-V to 4.4 without changes needed

cups (2.3~rc1-2) experimental; urgency=medium

  * Merge 2.2.12-1 from unstable
  * Add missing colon in closes line.
  * Set upstream metadata fields: Contact, Name.
  * Bump debhelper from old 11 to 12.

cups (2.3~rc1-1) experimental; urgency=medium

  * New 2.3~rc1 upstream release:
    - Refresh patch queue
    - Refresh manpage translation files
    - Remove /usr/sbin/accept and /usr/sbin/reject symlinks

cups (2.3~b8-4) experimental; urgency=medium

  * Reset the LogDebugHistory setting to upstream default (LP: #1831021)

cups (2.3~b8-3) experimental; urgency=medium

  * Migrate to dgit-maint-debrebase workflow

cups (2.3~b8-2) experimental; urgency=medium

  * Backport upstream patch:
    - Block cups-files.conf directives (Issue #5530, Closes: #923115)

cups (2.3~b8-1) experimental; urgency=medium

  * New 2.3~b8 upstream release
    - Add patch to fix tests' failure

  * Redo manpage po4a translation infrastructure and installation
  * Merge 2.2.10-6 from unstable

cups (2.3~b7-1) experimental; urgency=medium

  * New 2.3~b7 upstream release
    - Drop two patches now included upstream

cups (2.3~b6-2) experimental; urgency=medium

  * Merge 2.2.10-3
  * Add patch to allow building with -Werror=maybe-uninitialized
  * Drop now-superflous --dbgsym-migration dh_strip argument

cups (2.3~b6-1) experimental; urgency=medium

  * New 2.3~b6 upstream pre-release
    - CVE-2018-4700: Linux session cookies used a predictable random number
      seed (Closes: #915909)
    - The `cupsaddsmb` program has been removed (Issue #5449)
    - The `cupstestdsc` program has been removed (Issue #5450)
    - Rebase patches

  * Merge 2.2.10-1
  * Manpage translations update
  * Add patch to fix FTBFS due to wrong `usage(int)` usage
  * Update libcups2 symbols: +12 cupsRaster*
  * Cope with cupsaddsmb and cupstestdsc removals:
    - Remove from cups-client installed files
    - Remove from manpage translation infrastructure
    - Remove from libcups2's README.Debian

cups (2.3~b5-2) experimental; urgency=medium

  * Merge 2.2.8-5, rebase patches

cups (2.3~b5-1) experimental; urgency=medium

  * New 2.3~b5 upstream release
  * Merge 2.2.8-2

cups (2.3~b4-3) experimental; urgency=medium

  * Merge 2.2.7-4, rebase patches

cups (2.3~b4-2) experimental; urgency=medium

  * Merge 2.2.7-2
  * Name source lintian override file correctly

cups (2.3~b4-1) experimental; urgency=medium

  * New 2.3~b4 upstream pre-release
    - NOTICE: Printer drivers are now deprecated (Issue #5270)

  * Add cupsEncodeOption@Base 2.3~b4 symbol in libcups2
  * Refresh manpage translations

cups (2.3~b3-1) experimental; urgency=medium

  * New 2.3~b3 upstream pre-release
   - The `lp` and `lpr` commands now provide better error messages when the
     default printer cannot be found (Issue #5096, Closes: #870463)
   - CUPS is now provided under the Apache License, Version 2.0

  * 2.3~b3 updates:
    - Update manpage translation files
    - Add 2 libcups2 symbols introduced in 2.3~b1
    - Backport patch from upstream to fix filter's installation (Issue #5247)

  * CUPS license change:
    - Add NEWS file to libcups2-dev
    - Rewrite debian/copyright

  * Add cups-daemon lintian override for WantedBy=printer.target systemd
    service file
  * Bump debhelper compat to 11

cups (2.2.12-2) unstable; urgency=medium

  [ Helge Kreutzmann ]
  * Update German man page (2193t)

cups (2.2.12-1) unstable; urgency=medium

  * New 2.2.12 upstream release
    - CVE-2019-8696 and CVE-2019-8675: Fixed SNMP buffer overflows
      (Closes: #934957)

  * Remove 11 backported patches
  * Fix CVE-2018-4{7,8}00 typo retrospectively in d/changelog
    (Closes: #933985)
  * Refresh debian/gitlab-ci.yml
  * Refresh manpage translations

cups (2.2.10-6) unstable; urgency=medium

  * Backport patch from upstream's 2.2 "stable" branch:
    - Fix an issue with `PreserveJobHistory` and time values (Issue #5538)
      (Closes: #921741)

cups (2.2.10-5) unstable; urgency=medium

  [ Helge Kreutzmann ]
  * Correct error in german manpage translation

  [ Didier Raboud ]
  * Backport patches from upstream's 2.2 "stable" branch:
    - Add USB quirks rule for Xerox printers (Issue #5523)
    - Add a USB quirks rule for the DYMO 450 Turbo (Issue #5521)

cups (2.2.10-4) unstable; urgency=low

  * Backport patches from upstream's 2.2 "stable" branch:
    - Protect against continuing to read from a file at EOF (Issue #5473)
    - Use the same requested-attributes values for all IPP Everywhere setup
      requests (Issue #5484)
    - Add a USB quirk rule for the Lexmark E120n (Issue #5478)
    - Updated the USB quirks rule for Zebra label printers (Issue #5395)
    - Fix compile error on Linux (Issue #5483)
    - Stop parsing the Emulators keywords in PPD files (Issue #5475)
    - Fix potential unaligned accesses in the string pool (Issue #5474)

cups (2.2.10-3) unstable; urgency=medium

  * reprotest errors; cleanup patches:
    - Remove culprit patches refused for upstream integration:
     - patch to implement PRINTER_LIST printer filtering (see #3092)
     - patch to read embedded options from postcript (see #4344)
     - patch to cope with newline in device IDs (see #4345)
    - Update no-conffile-timestamp.patch for syntax bug

cups (2.2.10-2) unstable; urgency=medium

  [ Helge Kreutzmann ]
  * Update German man page (2192t)

cups (2.2.10-1) unstable; urgency=medium

  * New 2.2.10 upstream release
    - CVE-2018-4700: Linux session cookies used a predictable random number
      seed (Closes: #915909)
  * Manpage translations refresh
  * Drop superfluous dpkg-dev B-D

cups (2.2.9-4) unstable; urgency=medium

  * Cherry-pick from upstream:
    - Fix handling of MaxJobTime 0
      (Issue #5438, LP: #1804576, Closes: #915724)

cups (2.2.9-3) unstable; urgency=medium

  * debian/control cleanup:
    - Refresh thanks to `cme fix dpkg-control`
    - Drop xpp suggest
    - Bump S-V to 4.2.1 without changes needed

  * Replace revert with upstream patch to fix `lpadmin -E` regression
    (Issue #5440)

cups (2.2.9-2) unstable; urgency=medium

  * Revert 2.2.9 lpadmin fixes to circumvent 2.2.9 regression revealed
    by autopkgtest, see https://github.com/apple/cups/issues/5440

cups (2.2.9-1) unstable; urgency=medium

  * New 2.2.9 upstream release
    - Remove libcups{cgi1,mime1,ppdc1} packages as they are not built
      anymore upstream

cups (2.2.8-5) unstable; urgency=high

  * CVE-2018-6553: Fix AppArmor cupsd sandbox bypass due to use of hard links
    (Closes: #903605)
  * All these were fixed in 2.2.8:
    - CVE-2018-4180 Local Privilege Escalation to Root in dnssd Backend
      (CUPS_SERVERBIN)
    - CVE-2018-4181 Limited Local File Reads as Root via cupsd.conf Include
      Directive
    - CVE-2018-4182 cups-exec Sandbox Bypass Due to Insecure Error Handling
    - CVE-2018-4183 cups-exec Sandbox Bypass Due to Profile Misconfiguration

cups (2.2.8-4) unstable; urgency=medium

  * Backport upstream patches:
    - Fix A4 crash in Epson 24-pin driver (Closes: #901860)

cups (2.2.8-3) unstable; urgency=medium

  * Renumber first 2.2.8 upload as 2.2.8-1; skip -2.
  * Drop the "Generalize the input validation of some kinds of attributes."
    revert in favour of "Fix regressions in ippValidateAttribute" from upstream

cups (2.2.8-1) unstable; urgency=medium

  * New upstream 2.2.8 release
    - The scheduler allowed environment variables to be specified in the
      `cupsd.conf` file

  [ Didier Raboud ]
  * Revert "Generalize the input validation of some kinds of attributes."
    Fixes FTBFS on 2.2.8, see https://github.com/apple/cups/issues/5322
  * Manpage refresh after 2.2.8

  [ Helge Kreutzmann ]
  * Update German man page (2193t)

cups (2.2.7-5) unstable; urgency=medium

  [ Jean-Paul Guillonneau ]
  * Update French man page (2185t2f) (Closes: #897406)

  [ Didier Raboud ]
  * Manpage refresh after 2.2.7

cups (2.2.7-4) unstable; urgency=medium

  [ Helge Kreutzmann ]
  * Update German man page (2187t)

  [ Didier Raboud ]
  * Backport an upstream fix:
    - Allow cupsd daemon to exit on idle (Closes: #898745)

cups (2.2.7-3) unstable; urgency=medium

  * Backport an upstream fix:
    - Fix another CUPS-Create-Local-Printer crash (Issue #5290)

cups (2.2.7-2) unstable; urgency=medium

  * Autopkgtest: blacklist the now-deprecated 'raw' queues (Closes: #894643)

cups (2.2.7-1) unstable; urgency=medium

  * New 2.2.7 upstream release
    - NOTICE: Raw print queues are now deprecated (Issue #5269)
    - Fixed an Avahi crash bug in the scheduler (Issue #5268, LP: #1725749)
    - Systemd did not restart cupsd when configuration changes were made that
      required a restart (Issue #5263. Closes: #861470)
    - The scheduler could crash while adding an IPP Everywhere printer (Issue
      #5258, LP: #1750514)
    - The `lp` and `lpr` commands now provide better error messages when the
      default printer cannot be found (Issue #5096, Closes: #870463)
   * Add cupsHashString@Base 2.2.7 symbol
   * Add lintian override for cups.service WantedBy=printer.target

cups (2.2.6-5) unstable; urgency=medium

  * Bump S-V to 4.1.3 without changes needed
  * Update Vcs-* fields for the move to salsa.d.o

cups (2.2.6-4) unstable; urgency=medium

  * Fix CI: indexv[3,4] Braille drivers cannot print PDF

cups (2.2.6-3) unstable; urgency=medium

  [ Helge Kreutzmann ]
  * Update German man page translations

  [ Didier Raboud ]
  * Bump S-V to 4.1.2 without changes needed
  * Remove trailing whitespace in d/control and d/changelog
  * Drop duplicate priority field for cups-bsd

cups (2.2.6-2) unstable; urgency=medium

  * Backport upstream patch from the 2.3 branch:
    - The `lp` and `lpr` commands now provide better error messages when the
      default printer cannot be found (Issue #5096, Closes: #870463)
  * On the repository: reduce the diff to the upstream tarball to zero to
    allow uploads with dgit.

cups (2.2.6-1) unstable; urgency=medium

  * New 2.2.6 upstream release
    - DBUS notifications could crash the scheduler (Issue #5143)
    - Added USB quirks rules for Canon MP540 and Samsung ML-2160 (Issue #5148)
    - Localization updates (Issue #5152)

  * Update manpage translations
  * Fix DEB_HOST_ARCH_OS dpkg-architecture variable setting
  * Move source local-options to options

cups (2.2.5-2) unstable; urgency=medium

  [ Helge Kreutzmann ]
    * Update German man page translations

cups (2.2.5-1) unstable; urgency=medium

  * New 2.2.5 upstream release
    - The scheduler now creates a PID file when not running on demand with a
      modern service launcher (Issue #5080)
    - The CUPS library did not reuse domain sockets
      (Issue #5098, Closes: #868316)

  [ Didier Raboud ]
  * Patches rework:
    - Drop Debian-specific pidfile patch
    - Drop the 8 patches which were backported from upstream:
      - The `cupsGetDests` function incorrectly returned an empty list of
        printers if there was no default printer (Issue #5046)
      - Workaround for wrong resolution in PPD Generator for driverless
        printing setup
      - Fix an Avahi-related crash bug in the scheduler (Issues #5085 & #5086)
      - The CUPS library did not reuse domain sockets (Issue #5098)
      - Fix the interactions between the "print-quality" and "cupsPrintQuality"
        options (Issue #5090)
      - Fix mapping and defaulting of print-quality/cupsPrintQuality
        (Issue #5090)
      - Fix for resolution list sorting in the PPD generator which caused
        segfaults when generating PPDs for driverless printing.
      - The scheduler (incorrectly) woke up once per second to remove stale
        temporary queues (Issue #5100)

  * Stop symlinking the ssl-cert snakeoil certificates, CUPS will generate them
    on-demand (with a different name)
  * Drop superfluous autotools-dev B-D
  * Let cups-bsd suggest one compatible inet server: inetutils-inetd
    (Closes: #676472)
  * Refresh manpage translations
  * Make cups-bsd priority optional, as 'extra' is deprecated

  [ intrigeri ]
  * AppArmor: allow dac_read_search, now needed on top of dac_override
    (Closes: #872817)

cups (2.2.4-9) unstable; urgency=medium

  [ Helmut Grohne ]
  * Fix FTCBS; fix manpage-translations.patch (Closes: #878326)

cups (2.2.4-8) unstable; urgency=medium

  [ Didier Raboud ]
  * Drop superfluous dh-systemd Build-Depend
  * Drop --with autotools_dev and autotools-dev B-D, as these are in the
    default dh sequence in compat 10

  [ Till Kamppeter ]
  * test-drivers script of autopkgtest for breakage with cups-filters 1.17.6
    and later: skip gen-brf.ppd and gen-ubrl.ppd as these are test/debug PPD
    for Braille embossers which do not accept PDF as input format

cups (2.2.4-7) unstable; urgency=medium

  [ Till Kamppeter ]
  * Backport upstream fixes:
    - Fix the interactions between the "print-quality" and "cupsPrintQuality"
      options (Issue #5090)
    - Fix mapping and defaulting of print-quality/cupsPrintQuality (Issue #5090)
    - Fix for resolution list sorting in the PPD generator which caused
      segfaults when generating PPDs for driverless printing
    - The scheduler (incorrectly) woke up once per second to remove stale
      temporary queues (Issue #5100)

cups (2.2.4-6) unstable; urgency=medium

  [ intrigeri ]
  * AppArmor: allow dac_read_search, now needed on top of dac_override
    (Closes: #872817)

cups (2.2.4-5) unstable; urgency=medium

  * Backport one upstream patch, thanks to Christoph Pleger
    - The CUPS library did not reuse domain sockets
      (Issue #5098, Closes: #868316)

cups (2.2.4-4) unstable; urgency=low

  * Backport two upstream patches, thanks to Till Kamppeter
    - The IPP Everywhere PPD generator now sorts the supported resolutions
      before choosing them for draft, normal, and best quality modes
      (Issue #5091)
    - Fix an Avahi-related crash bug in the scheduler
      (Issues #5085 & #5086)

cups (2.2.4-3) unstable; urgency=medium

  [ Helge Kreutzmann ]
  * Update German man page translations

cups (2.2.4-2) unstable; urgency=low

  * Cleanup patch suite to come closer to upstream:
    - Remove IPP backend from CUPS 1.4
    - Remove cupsd upstart support
    - Remove a test weakening for mips
    - Remove libcupsppdc dynamic linking for mipsen
  * Don't install the ipp14 backend
  * Drop all postinst code managing versions before the current oldoldstable
    (wheezy, 1.5.3-5)
  * Drop all postinst code managing versions before the current oldstable
    (jessie, 1.7.5-11)
  * Drop the Ubuntu-specific upstart patches and files
  * Drop Launchpad PNG_PKG_MANGLE workaround
  * Drop two unused lintian overrides
  * Allow parallel builds
  * Backport upstream patch:
    - The `cupsGetDests` function incorrectly returned an empty list of
      printers if there was no default printer (Issue #5046, Closes: #867818)

  [ Vangelis Skarmoutsos ]
  * Add Greek translation for debconf templates (Closes: #867339)

cups (2.2.4-1) unstable; urgency=medium

  * New 2.2.4 upstream release

  * Cope with upstream documentation format change to markdown
  * Migrate to debhelper compat 10
  * Add two new libcups2 symbols
  * Lintian overrides updates:
    - Update cups' override for the non-standard-executable-perm usb
      backend
    - Add source override for the libcups{,image}2-dev circular
      dependency
  * Make libcupsimage2-dev Multi-Arch: same
  * Bump Standards-Version to 4.0.0
    - Make sure to update config.{sub,guess} at build time

cups (2.2.3-2) unstable; urgency=low

  * Migrate 2.2.3 to unstable

cups (2.2.3-1) experimental; urgency=medium

  * New 2.2.3 upstream release
  * Cherry-pick upstream fix for regression in job file preservation

cups (2.2.2-2) experimental; urgency=medium

  * Use /run instead of /var/run everywhere meaningful
    (Closes: #858341)
    * /run/cups:
      - in debian/rules; pass --with-rundir=/run/cups
      - update cups.init
    * /run/cups/cupsd.pid:
      - update cups.init
      - update pidfile.patch
    * /run/cups/printcap:
      - in debian/rules; update --with-printcap
      - update cups-daemon postinst
    * /run/cups/cups.sock:
      - update cups postinst and postrm for the lpadmin calls
      - update the autopkgtest for the lpadmin call
      - update the libcups2 example script
      - update the upstart script
    * /run/cups/certs:
      - update cups.init
      - update the upstart script
    Thanks-To: Russell Coker <russell@coker.com.au>

   [ Jamie Strandboge ]
   * Update debian/local/apparmor-profile (Closes: #858571)
      - allow cupsd and cups-pdf to communicate via Unix sockets (LP: #1675503)
      - adjust cups-pdf log location
      - allow cups-pdf to read /etc/cups/ppd/*.ppd
      - silence noisy denials for cupsd occasionally trying to send signals to
        unconfined
      - allow capability wake_alarm (seen in LP: 1641985)

cups (2.2.2-1) experimental; urgency=medium

  * New 2.2.2 upstream release
  * Refresh manpage translations
  * dpkg-source: update extend-diff-ignore to cope with the difference between
    upstream's VCS and tarball

cups (2.2.1-56-ga2f30a72f-1) experimental; urgency=medium

  * New 2.2.1+ upstream snapshot
    - Updated systemd config files (Issue #4935)

  [ Didier Raboud ]
  * Merge 2.2.1-5 from unstable

  [ Till Kamppeter ]
  * Updated debian/control: CUPS does not support PPD-less printing any
    more, we do driverless printing instead

cups (2.2.1-46-g10887d272-2) experimental; urgency=medium

  * Merge 2.2.1-4 from unstable.

cups (2.2.1-46-g10887d272-1) experimental; urgency=medium

  * New 2.2.1+ upstream snapshot
    - Fix assymetric resolutions in IPP Everywhere and Apple Raster
      (Closes: #848164)

cups (2.2.1-41-g49c592936-1) experimental; urgency=medium

  * New 2.2.1+ upstream snapshot

cups (2.2.1-8) unstable; urgency=medium

  [ JP Guillonneau ]
  * French manpages translation update (Closes: #852662)

cups (2.2.1-6) unstable; urgency=medium

  * Cherry-pick three more upstream fixes:
    - Add a USB quirk rule for the Kyocera Ecosys P6026cdn (Issue #4900)
    - Fix rastertopwg line offset bug (Issue #4942)
    - Fix Russian localization bug (Issue #4946)

cups (2.2.1-5) unstable; urgency=medium

  * Cherry-pick and adapt upstream's systemd configuration update to ensure
    clean shutdown of CUPS (LP: #1642966)

cups (2.2.1-4) unstable; urgency=medium

  [ Didier Raboud ]
  * Cleanup the cups debconf questions from 'parallel' leftovers
    (Closes: #848718)

  [ intrigeri ]
  * AppArmor profile: support merged-/usr (Closes: #846868)

cups (2.2.1-3) unstable; urgency=low

  [ Helge Kreutzmann ]
  * Update German man page

cups (2.2.1-2) unstable; urgency=medium

  [ Helge Kreutzmann ]
  * Several fixes to german manpages due to proofreading on
    debian-l10n-german

cups (2.2.1-1) unstable; urgency=medium

  * New 2.2.1 upstream release
    - Updated man pages (PR #4885, Closes: #838854)

  [ Helge Kreutzmann ]
  * Update German man page

  [ Didier Raboud ]
  * Demote libcupsfilters{1,-dev} dependencies to recommends (Closes: #711697)
  * Remove lsb Depends from cups, bump cups-daemon's to 3.2-14~

  [ Helmut Grohne ]
  * Fix FTCBFS (Closes: #837936)
    - Build mantohtml with the build architecture compiler
    - Do not execute genstrings during build

cups (2.2.0-2) unstable; urgency=medium

  * Backport upstream patch to handle partial failures when connecting
    (Closes: #838434)

cups (2.2.0-1) unstable; urgency=medium

  * New 2.2.0 upstream release
    - http*Connect did not work on Linux when cupsd was not running
      (Issue #4870)

  [ Helge Kreutzmann ]
  * Several fixes due to proofreading on debian-l10n-german

  [ Didier Raboud ]
  * Update the manpage-po4a README

cups (2.2~rc1-5) experimental; urgency=medium

  * In tests, use variable test-environment directory CUPS_TESTBASE, thanks to
    Santiago Vila for the hint.
  * Patches:
    - Drop now-unneeded 'tests-use-cupsfilters.patch' patch
    - Refresh some patch titles
    - Rename Ubuntu-specific patches' directory to debian/patches-ubuntu to
      avoid wrong deletions when using git-dpm update-patches
  * Remove now-unneeded cups-filters from Build-Depends

cups (2.2~rc1-4) experimental; urgency=medium

  * Revert unintentional Ubuntu patches removal; refresh them

cups (2.2~rc1-3) experimental; urgency=medium

  [ Jeremy Bicha ]
  * Add libcups2-dev dependency on libcupsimage2-dev, as ppd.h includes raster.h
    (Closes: #833889)

cups (2.2~rc1-2) experimental; urgency=medium

  * Add patch to ignore the 'Unable to write uncompressed print data: Broken
    pipe' error on kfreebsd
  * Initialize git-dpm; reword most patch descriptions from the original
    commits

cups (2.2~rc1-1) experimental; urgency=medium

  * New 2.2~rc1 upstream release
  * Refresh patches

cups (2.2~b2-1) experimental; urgency=low

  * New 2.2b2 upstream release

  * Patches:
    - Refresh all
    - Drop the wrong fix for #2763
    - Udate patch to use the ipv4's 127.0.0.1 instead of localhost to also
      patch the ipp:// shared printer URL, that fixes the tests
    - Add patch to revert the addition of pdftourf usage in the test-suite
  * Refresh manpage translations
  * Rewrite debian/watch following the new upstream schema

cups (2.1.4-4) unstable; urgency=medium

  * Patch a final lpstat call to really make the build reproducible when built
    in italian

cups (2.1.4-3) unstable; urgency=low

  * Change the default ErrorPolicy from 'stop-printer' to 'retry-job'
    - Update documentation, manpage and manpage translations
    - Add a cups-daemon NEWS entry
    (Closes: #631025)
  * Patch another lpstat call to also make the build reproducible when built in
    italian

cups (2.1.4-2) unstable; urgency=medium

  [ Helge Kreutzmann ]
  * Update German man page (2118t3f1u)

  [ Didier Raboud ]
  * Add patch to force LC_ALL=C on lpstat when grepping its output for
    Description; should fix the FTBFS on forced-languages reproducible builds
    environments

cups (2.1.4-1) unstable; urgency=medium

  * New 2.1.4 upstream release

  * Update debian/watch to check for new releases on GitHub
  * Remove 3 patches backported from upstream, refresh some
  * Refresh manpage translations

cups (2.1.3-6) unstable; urgency=medium

  [ Till Kamppeter ]
  * De-activate CUPS web interface when the files for it are not installed.
    This allows for auto-shutdown on mobile device installations.
  * Make CUPS with the Upstart support patch (Ubuntu-only) also build on
    ubuntuBSD (LP: #1582002)

  [ Helge Kreutzmann ]
  * Update German translation

  [ Didier Raboud ]
  * Backport upstream-included patch to fix malformed device-id for printers
    found by dnssd, thanks to Laurent Bigonville.
  * Bump S-V to 3.9.8 without changes needed
  * Drop duplicate 'using' word in libcups2's README.Debian

cups (2.1.3-5) unstable; urgency=medium

  * Automatically generate debug package, B-D against debhelper >= 9.20160114
  * Convert homepage and Vcs-Browser to https urls
  * Drop the patch to allow auto-shutdown on idle with active web interface,
    this induces a regression for web-interface users (Closes: #816490)

cups (2.1.3-4) unstable; urgency=medium

  [ Till Kamppeter ]
  * Quirk rule to make Lexmark C540n work (STR #4778)
  * Quirk rule to make Xerox WorkCentre 3220 work (LP: #1406203, STR #4789)

cups (2.1.3-3) unstable; urgency=medium

  * Install missing cups-snmp.8 manpage (Closes: #816316)

cups (2.1.3-2) unstable; urgency=medium

  * Drop unused libslp-dev Build-Dependency (Closes: #815359)
  * Bump Standards-Version to 3.9.7 without changes needed

cups (2.1.3-1) unstable; urgency=medium

  * New 2.1.3 upstream release:
    - /admin resource files (like config files of CUPS) were not served when
      the web interface was disabled, breaking utilities like "cupsctl"
      (CUPS STR #4755)

cups (2.1.2-2) unstable; urgency=medium

  [ Till Kamppeter ]
  * Add patch to avoid letting pending subscriptions prevent CUPS from
    auto-shutdown when idle (CUPS STR#4754)
  * Add patch to allow auto-shutdown when idle if the web interface is not
    turned off in the CUPS configuration, the web interface is too important
    (CUPS STR #4755)

  [ Didier Raboud ]
  * Remove libpng12-dev Build-Depends alternative to libpng-dev
    (Closes: #810183)

cups (2.1.2-1) unstable; urgency=low

  * New 2.1.2 upstream release

  * Drop patches included upstream:
    - usb-backend-fix-infinite-loop-when-usblp-module-attached.patch
    - usb-backend-delayed-closing-for-old-laserjets.patch
    - fix-ppd-file-load-for-ipp-printers.patch
    Refresh 2 other patches
  * Update Apple Inc. Copyright years in debian/copyright

cups (2.1.0-7) unstable; urgency=medium

  [ Till Kamppeter ]
  * Removed deprecated no-op "--upstart-only" option from dh_installinit call
    in debian/rules (LP: #1519228)
  * Moved empty directories /etc/cups/ppd and /etc/cups/interfaces to the
    cups-core-drivers binary package
  * Moved mime.convs from cups-server-common to cups-core-drivers to get it
    onto mobile devices with level-2 printing stack (support for IPP printers
    with common PDLs auto-set-up by cups-browsed)

cups (2.1.0-6) unstable; urgency=medium

  [ Till Kamppeter ]
  * Move /usr/lib/cups/daemom/cups-exec from the "cups" binary package to the
    "cups-daemon" binary package as it is already needed for basic job
    execution and therefore already in the level-1 (minimum) printing stack
    (LP: #1509423)

cups (2.1.0-5) unstable; urgency=medium

  [ Till Kamppeter ]
  * Add upstream patch to fix cupsGetPPD* with IPP print queues
    (CUPS STR #4725)

cups (2.1.0-4) unstable; urgency=medium

  [ Till Kamppeter ]
  * Corrected info header (author and Debian bug closure) of
    usb-backend-fix-infinite-loop-when-usblp-module-attached.patch
  * USB-backend: Added new quirk rules for delayed closing of the backend for
    several older HP LaserJet printers (CUPS STR #4549)

  [ Didier Raboud ]
  * Add maintscript stanzas to properly remove the oopstops.{convs,types}
    conffiles in /etc/cups that are not shipped since 1.3.10-3
    (Closes: #799025)

cups (2.1.0-3) unstable; urgency=medium

  [ Helge Kreutzmann ]
  * Update German man page (2114t4f1u)

  [ Till Kamppeter ]
  * The libusb-based USB backend sometimes did not unload the kernel usblp
    module if it was preventing the backend from accessing the printer causing
    an infinite loop taking 100% CPU (CUPS STR #4707)

cups (2.1.0-2) unstable; urgency=low

  * Upload to unstable

  [ Helge Kreutzmann ]
  * Update German man page (2105t4f1u)

  [ Jean-Paul Guillonneau ]
  * Update french manual pages translations, for 2.0.3-6 (Closes: #798257)

  [ Didier Raboud ]
  * Refresh the manpage translations for 2.1.0
  * Given upstream's new enforcement of ConfigFilePerm on /etc/cups/ppd/ files,
    make sure this is enforced on upgrade

cups (2.1.0-1) experimental; urgency=medium

  * New 2.1.0 upstream release

  [ Till Kamppeter ]
  * Removed scheduler-create-ppd-correct-permissions.patch, included upstream
  * Refreshed patches with quilt for the new 2.1.0 source code

  [ Didier Raboud ]
  * Refresh manpage translations

cups (2.1~rc1-4) experimental; urgency=medium

  [ Till Kamppeter ]
  * Add patch from upstream to fix scheduler and make sure that the permissions
    and ownerships of PPDs in /etc/cups/ppd/ are always the same
    (STR #4703, Closes: #784271)

cups (2.1~rc1-3) experimental; urgency=medium

  * Remove leftover test changelog entry
  * Update the GetJobs patch in tests for the mips FTBFS

cups (2.1~rc1-2) experimental; urgency=medium

  * Add patch to use the IPv4 127.0.0.1 address instead the 'localhost'
    name in tests, this could fix the reproducible builds

cups (2.1~rc1-1) experimental; urgency=low

  * New 2.1~rc1 upstream version

  [ Helge Kreutzmann ]
  * Update German man page (2000t39f71u)

  [ Didier Raboud ]
  * Merge upstream version 2.0.4
    - Fixed processing of server overrides without port numbers
      (STR #4675, Closes: #711327, #791876)
  * Drop patches included upstream:
    - str4538-fix-redirection-from-cgi-scripts.patc
    - str4646-fix-the-activejobs-loop-in-cupsdcheckjobs.patch
    - cupsd-logs-manpage-in-section-5.patch
    - libsystemd.patch
    - str4679-fix-local-domainsocket-access-checking.patch
    Refresh other patches

cups (2.1~b1-4) experimental; urgency=medium

  * Merge 2.0.3-10 from unstable

cups (2.1~b1-3) experimental; urgency=medium

  * Merge 2.0.3-8 from unstable

cups (2.1~b1-2) experimental; urgency=low

  [ Michael Biebl ]
  * Transition from libsystemd-daemon to libsystemd:
    - Update Build-Depends
    - Patch the configuration system
    (Closes: #779770)

cups (2.1~b1-1) experimental; urgency=low

  * New 2.1~b1 release
   - No longer install banner files since third-party banner filters now
     supply their own (STR #4518)
   - The scheduler no longer listens on the loopback interface unless the
     web interface or printer sharing are enabled
   - Added a PPD generator for IPP Everywhere printers (STR #4258)
   - Now install "default" versions of more configuration files
   - Added SSLOptions values to allow Diffie-Hellman key exchange and
     disable TLS/1.0 support.
   - The scheduler now supports advanced ASL and journald logging when
     "syslog" output is configured (STR #4474)
   - The scheduler now supports logging to stderr when running in the
     foreground (STR #4505)

  * Drop two patches included upstream
  * Refresh all patches
  * Refresh manpage translations
  * Install the cups-files.conf and snmp.conf default files in usr/share/cups

cups (2.0.3-10) unstable; urgency=medium

  * Backport upstream patches:
    - Fix redirections from CGI scripts (STR: #4538)
    - Fix the active jobs loop (STR: #4646)

cups (2.0.3-9) unstable; urgency=medium

  [ Helge Kreutzmann ]
  * Update German man page (1606t320f184u)

  [ Didier Raboud ]
  * Add patch to relax socket access checking to only check read-and-write, not
    execution (Closes: #792730)
  * Add maintscript stanzas to properly remove the mime.convs and mime.types
    conffiles in /etc/cups that are not shipped in this path since
    1.4.0~svn8773-1~ (Closes: #792731, LP: #1475683)

cups (2.0.3-8) unstable; urgency=medium

  * Mark the libsystemd as reported (and fixed) upstream
  * Translate and install the cupsd-helper.8 manpage (Closes: #792484)
  * Update the manpage translation infrastructure: install multiple missing
    new manpages
  * Add patch to move cupsd-logs manpage to section 5

cups (2.0.3-7) unstable; urgency=medium

  [ Michael Biebl ]
  * Transition from libsystemd-daemon to libsystemd:
    - Update Build-Depends
    - Patch the configuration system
    (Closes: #779770)

cups (2.0.3-6) unstable; urgency=low

  * Fix the 'which' calls, causing uninstallation error of cups-bsd

cups (2.0.3-5) unstable; urgency=low

  * Amend the previous changelog to reflect its upload to unstable
  * Add patch to make some attributes optional in the IPP-1.1 3.2.6 GetJobs
    test, that was causing a FTBFS on mips

cups (2.0.3-4) unstable; urgency=medium

  * Upload to unstable

  [ Helge Kreutzmann ]
  * Update German man page (1366t464f280u)

  [ Didier Raboud ]
  * Replace full paths in maintainer scripts '[ -x ]' by 'which' calls
  * Refresh debian/copyright thanks to cme
  * Remove the superfluous XS-Testsuite header in debian/control

cups (2.0.3-3) experimental; urgency=medium

  [ Till Kamppeter ]
  * Created new binary package cups-ipp-utils for the IPP utilities ippfind,
    ipptool, and ippserver.

  [ Didier Raboud ]
  * Install the cups-ipp-utils translated manpages in the correct package
  * Translate the ippserver.1 manpage too, refresh the manpage translation
    files
  * Add debian/gbp.conf to ease dch and import-orig
  * Update README.source with the latest branch names

cups (2.0.3-2) experimental; urgency=medium

  [ Till Kamppeter ]
  * Fixed IPP Everywhere PPD generator patch. It passes the tests now.

  [ Helge Kreutzmann ]
  * Update German man page (870t789f404u)

  [ Didier Raboud ]
  * Set QUILT_PATCHES in the two README files that need it (Closes: #788481)

cups (2.0.3-1) experimental; urgency=medium

  * New 2.0.3 upstream release
    - Security: Fixed CERT VU #810572 exploiting the dynamic linker (STR #4609)
      - CVE-2015-1158 Improper Update of Reference Count
      - CVE-2015-1159 Cross-Site Scripting
    - Security: The scheduler could hang with malformed gzip data (STR #4602)

  [ Didier Raboud ]
  * Remove the upstream fix for the FTBS on mips through reordering of IPP-1.1
    tests, included in 2.0.3
  * Refresh patches
  * Disable the IPP Everywhere PPD generator patch, as it breaks the test-suite

  [ Till Kamppeter ]
  * Fixed PPD generator (for IPP printers) to write floating-point numbers in
    a locale-neutral way (always with decimal point, CUPS STR #4579).
  * Make fix for floating point number output in the PPD generator also apply
    to the PageRegion option (CUPS STR #4579).
  * Let the PPD generator not create a ColorModel option without choices
    (CUPS STR #4638).
  * Fix values of the pwg-raster-document-types-supported attribute of
    ippserver, the IPP printer emulator.

cups (2.0.2-3) experimental; urgency=medium

  [ Till Kamppeter ]
  * Re-introduced the patch for IdleExitTimeout under upstart, but
    Ubuntu-only.
  * Added PPD generator to support IPP Everywhere printers (Use "lpadmin -p pr
    -E -v ipp://... -m everywhere" or equivalent operation in the CUPS web
    interface).
  * Exclude driver "everywhere" from auto package tests as it only works with
    IPP URIs.
  * Refreshed patches with quilt.

  [ Didier Raboud ]
  * Merge Ubuntu's AppArmor profile diff in Debian's (Closes: #779901)
  * Import upstream fix for the FTBS on mips through reordering the IPP-1.1
    tests to avoid a timing issue

cups (2.0.2-2) experimental; urgency=low

  [ Till Kamppeter ]
  * Removed patches for USB quirk rules which got included upstream
  * Updated Ubuntu-specific patch for the AppArmor profile

  [ Didier Raboud ]
  * Drop the patch for IdleExitTimeout under upstart, as it breaks non-linux
    builds

cups (2.0.2-1) experimental; urgency=low

  * New 2.0.2 upstream version
    - Add 2.0.2 symbols
    - Drop 5 upstream patches that were from the upstream 2.0 branch
    - Drop systemd patches as systemd support got included upstream
    - Drop the patch avoiding the linking against libgrypt, as it got included
      upstream
    - Add patch and dh-exec magic to rename the upstream systemd units away
      from org.cups.cupsd.*
    - Drop all references to lppasswd, as it got dropped by upstream in 2.0b1
    - Refresh all patches for 2.0.2
    - Rebase the manpage translation infrastructure for 2.0.2
    - Refresh all test-related patches
    - Update debian/copyright with the updates made in 2.0.0
    - Update configure arguments

  [ Till Kamppeter ]
  * Merged in more Ubuntu-specific AppArmor profile changes:
     - Fix peer on signal rule to use /usr/sbin/cupsd//third_party
       (LP: #1376611)
     - Temporarily use attach_disconnected to work around LP: 1373070.
     - Allow all signals to /usr/sbin/cupsd//third_party
     - Allow unix to /usr/sbin/cupsd//third_party (LP: #1382042)
     - Added "flags=(attach_disconnected)" to third_party profile
       (LP: #1413313)
  * Fix -h option not honoured when CUPS_SERVER variable is defined
    (LP: #1352809)

cups (1.7.5-10) unstable; urgency=medium

  * Change ppd-updaters trigger to use interest-noawait instead of interest to
    avoid trigger cycles (Closes: #772871, #771765)

cups (1.7.5-9) unstable; urgency=medium

  * Drop color-management patch; it got refused by upstream and is not
    available in non-english translations (Closes: #763517, #768163)
  * Drop the upstream patch to limit Get-Jobs replies to 500, as this triggers
    a FTBS on mips

cups (1.7.5-8) unstable; urgency=medium

  * Add a USB quirk fix for Brother HL-1250 (Closes: #712512)
  * Backport upstream patch to fix random crash in TLS handling. The patch also
    enables coredumps.(Closes: #760475, #760476)

cups (1.7.5-7) unstable; urgency=medium

  * Revert to not socket-activating CUPS (Closes: #747073)
    - Drop patch to let CUPS write the systemd.socket configuration files
    - Replace preinst generation of the same configuration file, delete them on
      upgrade
    - Drop the symlink enforcing the automatic configuration
    - Update NEWS and README.Debian to reflect that change
    - Create two cups socket configuration examples, document their existence
      in README.Debian
    - Update the systemd socket activation patch to include
      PassCredentials=true in the socket configuration, following upstream's
      feedback
    - Disable automatic idle exit timeout under systemd, as this will get
      activated without socket activation

cups (1.7.5-6) unstable; urgency=medium

  * Backport several upstream patches:
    - Update the patch restoring the access to cupsd.conf with Upstream's
      latest
    - Fix the icon display in web interface during server restart (STR: #4475)
    - Enforce correct newest-to-oldest order in the completed jobs returned by
      the scheduler (STR: #4396)
    - Limit Get-Jobs replies to 500 jobs (STR: #2913)
    - Do not let cupsGetPPD* return a symlink if it was not readable by the
      user (STR: #4500). This should help with #764253.
  * Dropped the FINAL_CONTENT_TYPE revert, stick back to upstream, following
    RedHat's analysis
  * Add tests' patch to ignore the 'Address family not supported' that breaks
    the errorlines counting on buildds without a working IPv6 stack

cups (1.7.5-5) unstable; urgency=medium

  [ Didier Raboud ]
  * In debian/rules, add conditionals to enable build-indep build
  * Bump Standards-Version to 3.9.6 without changes needed
  * Remove Martin Pitt, Masayuki Hatta and Jeff Licquia from the Uploaders'
    field; with many thanks for their past work on CUPS.

  [ Ondřej Surý ]
  * Remove libjpeg8-dev from libcupsimage2-dev (Closes: #765919)

cups (1.7.5-4) unstable; urgency=medium

  [ intrigeri ]
  * In the apparmor profile, drop features yet unsupported in Debian
    (Closes: #763673)

  [ Didier Raboud ]
  * Add the Ubuntu-specific apparmor profile as Ubuntu-specific patch

cups (1.7.5-3) unstable; urgency=medium

  [ Didier Raboud ]
  * Add two USB quirk fixes for Canon MX310 and MX320 printers
    (LP: #1346868, #1369547)

  [ Jamie Strandboge ]
  * Update the apparmor-profile
    - move Ux to Cx -> third_party and provie a third_party child profile. In
      this manner, we can add some modest confinement (can't change MAC
      policy, change_profile or mount) but more importantly it allows us to
      specify peer=third_party to restrict where the strictly confined cups
      process can send signals (LP: #1370930)
    - allow r of /var/cache/samba/*.tdb (LP: #1371097)
    - allow r of /var/{cache,lib}/samba/printing/printers.tdb

cups (1.7.5-2) unstable; urgency=medium

  [ Helge Kreutzmann ]
  * Update German man page (1537t)

  [ Till Kamppeter ]
  * Updated color management extension patch to the newest version from Joseph
    Simon, especially to fix PPD updates via the web interface (LP: #1362321).

  [ Didier Raboud ]
  * Replace the RedHat patch restoring the access to cupsd.conf and logfiles
    with upstream's

cups (1.7.5-1) unstable; urgency=medium

  * New 1.7.5 upstream release
    - Drop upstream-originated patches, refresh all
    - Refresh manpage translations for new upstream release

cups (1.7.4-5) unstable; urgency=medium

  [ Till Kamppeter ]
  * Color management extensions: Added color management checkboxes to the
    Japanese version of the web interface, on request of Deng Pang from Ricoh.

  [ Didier Raboud ]
  * Add patch from RedHat to restore access to logfiles from the webinterface,
    regression from the fix for STR: #4455 (Closes: #757964)

cups (1.7.4-4) unstable; urgency=medium

  * Add patch to ignore the 'Failed to connect to system bus' error that
    sometimes breaks the errorlines counting on various architectures
  * Refresh cupsd-write-systemd-Port patch

cups (1.7.4-3) unstable; urgency=medium

  * In cups-daemon's postinst, remove leftover cups.patch symlink in
    multi-user.target.wants (Closes: #755932)
  * Correct default listening address used under systemd for new installations;
    also correct the discrepancy on upgrades (Closes: #755807)

cups (1.7.4-2) unstable; urgency=medium

  * Install systemd's cups.path in paths.target instead of multi-user.target
    (Closes: #755690)
  * Import two upstream patches:
    - Fix for unsufficient permission checking for files accesses from the
      webinterface (STR: #4455)
      CVE-2014-5029 Incomplete fix CVE-2014-3537
      CVE-2014-5030 Disallow symlinks for directory index files
      CVE-2014-5031 File/directory does not have world read permissions for
                    directory index files
    - Fix for CGI scripts (STR: #4454)

cups (1.7.4-1) unstable; urgency=medium

  * New 1.7.4 upstream release
    - Security: The web interface incorrectly served symlinked files and
      files that were not world-readable, potentially leading to a
      disclosure of information (STR #4450, CVE-2014-3537)
    - Added USB quirk rule for Lexmark E230 (STR #4448)
    - Fix broken links on the web homepage (STR #4453, Closes: #754243)
    - Refresh patches

  [ Helge Kreutzmann ]
  * Update German man page (1531t)

  [ Didier Raboud ]
  * Stop managing the rename of /etc/pam.d/cups in the cups binary package:
    /etc/pam.d/cups is not renamed anymore but is now just installed from a
    different package (cups-daemon). (Closes: #753439)
    Thanks to Raphaël Hertzog

cups (1.7.3-6) unstable; urgency=medium

  * Discard lpadmin stderr in the tests' utility, fixes autopkgtests.

cups (1.7.3-5) unstable; urgency=medium

  * Add a trap to test-drivers utility, move it to cups-client instead of cups
  * Run the tests using the installed test-drivers utility

cups (1.7.3-4) unstable; urgency=medium

  * In cups-config, run krb5-config at runtime to avoid architecture
    differences due to the output of krb5-config; add check at build-time to
    avoid this happening again (Closes: #751157)
  * Fix dpkg-architecture calls in cups-config
  * Make the test-drivers utility more generic, install it in the cups package
    to be able to use it in other packages' autopkgtests

cups (1.7.3-3) unstable; urgency=medium

  * Fix autopkgtests:
    - only use accessible files,
    - extend the tests to test-print all PDFs in the source test/ directory,
    - abstract the drivers testing script as a separate script.

cups (1.7.3-2) unstable; urgency=medium

  [ Till Kamppeter ]
  * Added IPP attributes required by IPP Everywhere for PWG Raster when PWG
    Raster as input format is supported. This is needed for shared printers
    correctly emulating an IPP Everywhere printer (CUPS STR #4428)

  [ Didier Raboud ]
  * Add SystemdIdleExit and IdleExitTimeout references in cupsd.conf manpage
  * Rename the cups pam configfile from cups-daemon to cups (Closes: #750602)
  * Rewrite the autopkgtests suite:
    - Drop isolation-container restriction
    - Test cups-core-drivers with no driver for now
    - Test cups with all available drivers

  [ Jean-Paul Guillonneau ]
  * Update the manpages' french translation (Closes: #744987)

cups (1.7.3-1) unstable; urgency=medium

  * New 1.7.3 upstream release
    - Refresh patches

  * Add one simple autopackagetest
  * In cups-daemon.preinst, only write ListenStream stanzas for 'Port' OR
    'Listen localhost', not both (Closes: #742668)
  * Explicitly install README.Debian to libcups2, add symlinks in various
    other packages (Closes: #750532)

cups (1.7.2-3) unstable; urgency=medium

  [ Till Kamppeter ]
  * Updated version numbers in Replaces:/Breaks: for cups-bsd to also work with
    updating CUPS under Ubuntu (LP: #1315766)

cups (1.7.2-2) unstable; urgency=low

  [ Helge Kreutzmann ]
  * Update German man page (1526t)

  [ Till Kamppeter ]
  * Removed Ubuntu difference in the dependency of cups-deamon on avahi-daemon:
    avahi-daemon is a Recommends for both now; remove "on started avahi-daemon"
    from the "start on ..." rule in /etc/init/cups.conf upstart script
    (LP: #1242185, #1178172)
  * Add two patches for Upstart socket-triggered activation:
    - allow starting cupsd socket-triggered through Upstart, for on-demand
      starting to save resources (especially on mobile devices)
    - let cupsd stop after 30 seconds idle time in when started by Upstart
      socket-activation (if timeout is not explicitly set to another time)
    (Closes: #742666, LP: #1276713)

cups (1.7.2-1) unstable; urgency=medium

  * New 1.7.2 upstream release
    - Security: The scheduler now blocks URLs containing embedded HTML
      (STR #4356)
  * Drop 10 patches that were backported from upstream or are now solved
    differently:
    - str4393-fix-memoryleak-in-rastertolabel
    - fix-cupsdgetprivateattrs-function-missing-null-check
    - fix-cupsenumdests-does-not-fill-in-is_default-field
    - cupsenumdests-does-not-set-cb
    - cupsd-support-avahi-daemon-restarting
    - prevent-dnssd-backend-exiting-too-early
    - fix-a-dbus-threading-issue-that-caused-the-scheduler-to-crash
    - ipptool-doco-updates
    - build-with-full-relro
    - fix-template.c-typo
  * Regenerate manpage-hyphen-minus patch to adapt to upstream changes
  * Refresh 9 patches with quilt to cope with upstream updates
    - airprint-support
    - color-management-extension
    - cupsd-idleexittimeout-systemd
    - cupsd-idleexittimeout
    - cupsd-write-systemd-Port
    - no-conffile-timestamp
    - pidfile
    - read-embedded-options-from-incoming-postscript-and-add-to-ipp-attrs
    - systemd-optional-socket-activation
  * Refresh manpage translation files

cups (1.7.1-13) unstable; urgency=medium

  * Fix hyphen-used-as-minus and a typo in the lppasswd manpage patch
  * Build against GnuTLS 3.x (Closes: #638416, #714492)
    - Add Build-Conflicts against libgmp-dev (<< 2:6) to avoid license
      incompatibilities
    - Build-Depend against libgnutls28-dev
    - Add patch to stop build-depending on libgcrypt as nothing is used from
      it (STR: #4399)
    - Refresh affected patches
  * In the postinst code fixing the lack of 'compress' stanza in the logrotate
    for some versions, don't assume that all uncompressed files are present;
    also clarify when the renaming should happen (Closes: #742668)

cups (1.7.1-12) unstable; urgency=medium

  [ Didier Raboud ]
  * Fix the implicit-declaration problem in the D-BUS threading patch
    by backporting an upstream update

  [ Alf Gaida ]
  * Create /etc/cups directory before attempting to create files in it
    (Closes: #743249)

cups (1.7.1-11) unstable; urgency=medium

  [ Didier Raboud ]
  * Add patch on cups-config to:
    - let it use dpkg-architecture at runtime to make it
      architecture-independent (Closes: #741519)
    - avoid /usr/lib/triplet appearing in --ldflags output
      (Closes: #727058)
    - strip unnecessary libs from --libs output (Closes: #730838); therefore
      also strip libgnutls-dev and libkrb5-dev from libcups2-dev's Depends
  * Drop now-unused rfc2911 patch in ipptoolfile manpage as it got replaced by
    upstream's; fix missing backslash escape in upstream fix that broke po4a
    translation, thanks to Helge Kreutzmann
  * Add upstream patch to fix memoryleak in rastertolabel
  * Move the cupsd-systemd-listen.conf file creation from postinst to preinst as
    it is a symlink's destination. Letting said symlink be dangling for a
    timespan can make systemd crash, see #742322

  [ Helge Kreutzmann ]
  * Update German man page (1525t)

cups (1.7.1-10) unstable; urgency=medium

  [ Till Kamppeter ]
  * Remove upstream patch to fix race condition in cupsDoIORequest, as this
    does not actually solve STR #4386 and also causes STR #4391, CUPS not being
    able to communicate with Brother printers anymore

cups (1.7.1-9) unstable; urgency=medium

  * Remove cupsd-systemd-listen.conf on purge (Closes: #741489)
  * In logrotate script, use 'compress' in addition to 'delaycompress',
  * thanks to Michael Biebl (Closes: #741896), re-order and compress the
    logs that weren't in postinst.

cups (1.7.1-8) unstable; urgency=medium

  [ Helge Kreutzmann ]
  * Update German man page (1522t1f)

  [ Didier Raboud ]
  * Make libcups2-dev Multi-Arch: same (Closes: #689084)
  * Replace the cupsd-support-avahi-daemon-restarting patch with the latest
    upstream iteration (STR: #4373)
  * Add patch to let CUPS write its own systemd sockets configuration when
    configured through the webinterface; document this new behaviour in
    cups-daemon.NEWS and README.Debian (Closes: #740382)
  * Stop making lppasswd setuid root as it is only needed in specific cases
    - Add patch to lppasswd manpage to document how dpkg-statoverride should be
      used
    - Update translations
  * Move the repository from pkg-cups to printing; update the VCS-* fields
    accordingly

  [ Ansgar Burchardt ]
  * systemd socket activation support: add cups.socket in Requires of
    cups.service to ensure that the service is stopped before the socket is
    attempted to be started. Also add Documentation references in cups.service

  [ Till Kamppeter ]
  * Fix crash bug in the cupsEnumDests() function (STR #4380).
  * Import upstream patch to fix race condition in cupsDoIORequest()
    (STR: #4386)
  * Import upstream patch to fix a missing NULL check for input parameters in
    cupsdGetPrivateAttrs() from scheduler/policy.c (STR: #4378)
  * Import upstream fix to let cupsEnumDests() fill in is_default field
    (STR: #4332)

  [ Michael Biebl ]
  * Fix the logrotate script to use delaycompress instead of stopping and
    restarting cups, which spits out warnings under systemd (Closes: #740380)

cups (1.7.1-7) unstable; urgency=low

  * systemd socket activation:
    - Drop ListenDatagram from cups.socket as that's now in use by
      cups-browsed
    - Drop the Debian-specific patch to make sure that the localhost web
      access works; Listen on 0.0.0.0 and [::] in the main patch instead
  * cups-bsd cleanup:
    - Demote update-inetd Dependency to a Suggests, add conditionals in
      the maintainer scripts (Closes: #590436)
    - Move the cupsd-lpd manpage to cups
    - Install the translated manpages
  * In postinst scripts, only chown and chmod when no dpkg-statoverrides
    are set (Closes: #587015)
  * Demote cups-client's smbclient Recommendation to a Suggests
    (Closes: #618545)
  * Drop two obsolete configuration options from dh_auto_configure
  * Drop boilerplate comments from all maintainer scripts

cups (1.7.1-6) unstable; urgency=low

  * Add systemd socket activation support (Closes: #732435):
    - Add Gentoo patch to enable runtime-detected systemd socket activation
    - Build-depend on libsystemd-daemon-dev on linux-any
    - Build-depend on and use dh-systemd
    - Install cups.service, cups.path and cups.socket files in cups-daemon
    - Add Ubuntu patch to implement IdleExitTimeout
    - Add patch to let cupsd exit-on-idle after 30-seconds when started
      by systemd, given that systemdIdleExit is not set to Off
    - Add ListenStream=127.0.0.1:631 to cups.socket to ensure that
      http://localhost:631 works in Debian
    - Explain the above configuration options in cups-daemon.NEWS and
      README.Debian

  * Drop /etc/default/cups in favour of its handling by cups-filters:
    LOAD_LP_MODULES' configuration is moved to
    /etc/modules-load.d/cups-filters.conf
  * Update and reoder patches included upstream:
    - Prevent dnssd backend from exiting too early (STR: #4365)
    - ipptool doco updates (STR #3259, STR #4346), replaces the custom
      ipptoolfile manpage fix
    - Let cupsd cope with avahi daemon server restarts (STR: #4373)
    - Fix a D-BUS threading issue that caused the scheduler to crash
      (STR #4347), replace Fedora's fix for the multiple-threads dbus
      usage; require dbus >= 1.0.2
  * Replace the upstream pgp keyring with an armored version in
    debian/upstream to cope with uscan's new default

cups (1.7.1-5) unstable; urgency=medium

  * In cups' initscript, stop trying to restart xprint.
    Thanks to Damyan Ivanov (Closes: #738801)
  * Import Fedora patch to prevent the dnssd backend from exiting too
    early

cups (1.7.1-4) unstable; urgency=medium

  [ Martin Pitt ]
  * debian/libcups2-dev.preinst: Move aside a /usr/include/cups/i18n.h
    directory during upgrades (from wheezy/precise); this directory got
    replaced with a file, and triggers a bug in overlayfs when dist-upgrading
    schroots/containers/similar. This is a hackish workaround and can be
    dropped again in jessie+1/trusty+1. (LP: #1272285)

  [ Didier Raboud ]
  * Fix LGPL-2 references in debian/copyright, hanks to Thorsten Alteholz
  * Move commandtops from cups to cups-core-drivers (Closes: #737306)

cups (1.7.1-3) unstable; urgency=low

  [ Till Kamppeter ]
  * Split binary package "cups" into "cups" and "cups-core-drivers". In
    low-footprint (mobile) environments we can restrict the printer
    support to only IPP printers with known common languages (PDF,
    PostScript, PWG Raster, PCL) to get rid of the heavy load of drivers
    and PPDs for thousands of printers. From CUPS we need only the
    "cups-daemon" and "cups-core-drivers" (plus library packages) then.
    "cups-core-drivers" currently only contains the gziptoany and pstops
    filters.

  [ Didier Raboud ]
  * Avoid specifying mode, user and (wrong) group in the logrotate
    'create' statement (LP: #1268011)
  * Install cups-daemon AppArmor, ufw profile and apport hooks on Debian
    too (Closes: #735313)
  * Replace custom AppArmor post{inst,rm} machinery with a dh_apparmor
    call
  * Add patch to move cupsd.conf.default from /etc/cups to
    /usr/share/cups as it's not a configuration file (Closes: #640124)
  * Reorder most patches to let those that upstream doesn't intend to
    fix stay on top of the pile; most also mark those reported upstream
    as such
  * Drop configure-default-browse-protocols patch, now useless
  * Drop update-rc.d arguments in Debian, as they are no longer
    supported

  [ Helge Kreutzmann ]
  * Update German man page (1518t)

cups (1.7.1-2) unstable; urgency=medium

  * Revert "Link against OpenSSL instead of GnuTLS", reopens #714492
  * Add tests' patch to ignore a kfreebsd-amd64 error that breaks the
    error lines counting

cups (1.7.1-1) unstable; urgency=medium

  * New 1.7.0 upstream release
   - Security: the lppasswd program incorrectly used settings from
     ~/.cups/client.conf (STR #4319)
   - Some gzip'd PPD files could not be used
   - Cleaned up some job logging in the scheduler
   - ATTR messages could cause string pool memory corruption in the
     scheduler
   - Printing to a raw queue could result in corrupt output due to
     opportunistic compression
   - The "make check" test suite did not work on Linux without the
     cups-filters package installed (That's not fully fixed yet)
   - The libusb-based USB backend incorrectly used write timeouts
   - Using "@IF(name)" in an Allow or Deny rule did not wor
     (STR #4328, Closes: #674520)
   - The D-BUS notifier did not remove its lockfile (STR #4314)

  [ Didier Raboud ]
  * Link against OpenSSL instead of GnuTLS; mark two GnuTLS-specific
    symbols in libcups2 as optional (Closes: #714492)
  * Refresh 13 patches for 1.7.1
  * Drop patches obsoleted by 1.7.1:
    - avoid-sign-extending-CRCs-for-gz-decompression
    - avoid_stale_lockfile_in_dbus_notifier
    - cups-dbus-utf8
    - fix-job-history-logging
    - fix-stringpool-corruption
    - prevent-USB-timeouts-causing-incorrect-print-output
  * Refresh the testsuite patches
  * Rewrite tests-use-cupsfilters patch to have the whole test-suite
    pass

  [ wookey ]
  * Honour DEB_BUILD_OPTIONS=nocheck (Closes: #734670)

cups (1.7.0-2) unstable; urgency=low

  [ Russell Coker ]
  * In the cups init script, run restorecon after creating a /var/run
    directory (Closes: #677580)

  [ Bastien ROUCARIÈS ]
  * Add patch to drop two dangling references in cups-lpd.man
    (Closes: #570157)

  [ Nicolas Boulenguez ]
  * Enhance cups' init-script(Closes: #718798)
    - Specify SCRIPTNAME instead of relying on N=${0##*/} bashism
    - Replace restart_xprint() implicit parameter (success) with an
      explicit first parameter for readability
    - Replace log_begin_msg() calls by log_daemon_msg() to use the
      vendor-specific formatting
    - Clarify exit statuses handling by making sure only the result of
      start-stop-daemon is returned
    - Don't call coldplug_usb_printers when the daemon fails to start
    - Use status_of_proc from lsb-base >= 3.2.14 instead of a
      hand-written implementation
    - Unimplemented actions must return 3

  [ Didier Raboud ]
  * Let uscan verify PGP signatures on signed upstream tarballs
  * Update manpage-hyphen-minus.patch to fix three missing fixes in
    ippfind.1
  * Add patch to fix expres{,s}ion typo
  * Fix two occurences of pointer-from-integer in the color-management
    extension patch
  * Update drop_unnecessary_dependencies patch to make sure
    libcupsimage2 is linked against pthread
  * Bump Standards-Version to 3.9.5 without changes needed

cups (1.7.0-1) unstable; urgency=low

  * New 1.7.0 upstream release

  [ Till Kamppeter ]
  * Refresh most patches with quilt
  * Removed usb-backend-do-not-crash-if-usb-disabled-in-bios and
    cupsd-no-crash-on-avahi-threaded-poll-shutdown patches as they got
    applied upstream
  * Removed drop-arch-specifics-from-doc patch as it is not needed
    anymore
  * Updated drop_unnecessary_dependencies, manpage-hyphen-minus,
    manpage-translations and ppd-poll-with-client-conf patches manually
    to apply to the new CUPS version
  * Added error counting exception from
    usb-backend-do-not-crash-if-usb-disabled-in-bios to
    tests-ignore-warnings
  * Install the newly added ippfind utility and its manpage in
    cups-client
  * Added pwg.h to libcups2-dev package
  * Call dh_auto_clean only if the file Makedefs is present, to avoid a
    FTBFS
  * Added color management extensions from Joe Simon's GSoC 2013
    project.
  * Patch cups-files.conf to activate CUPS daemon syncing of files when
    closing, so that config files (like printers.conf) do not
    mysteriously disappear (LP: #1157972)
  * In the AppArmor profile, allow execution of programs in
    /etc/cups/interfaces/, needed to make CUPS working with queues based
    on System V interface scripts, especially PPD-less queues
    auto-generated by cups-browsed from cups-filters 1.0.41 on.
  * Silenced AppArmor noise from udev.conf in syslog (LP: #1229766)

  [ Steve Langasek ]
  * Add cups-filters (>= 1.0.42) as alternative to foomatic-filters
    (which is deprecated) in package relationships

  [ Didier Raboud ]
  * Remove Roger Leigh from uploaders on his request with thanks for his
    past work!
  * Switch avahi LSB Should-Start dependency to be avahi-daemon; also
    bump package relationship to >= 0.6.31-3~ (Closes: #731608)
  * Refresh the manpage translation files
  * Move the USB backend quirk rules file to cups-server-common
  * Add 38 new 1.7.0 libcups2 symbols
  * Mark one C++ libcupsppdc1 symbol as optional as it isn't exported in
    1.7.0 anymore
  * Import Fedora patches:
    - to avoid sign-extending CRCs in gz decompression
    - to build with full read-only relocations
    - to fix job history logging (upstream patch)
    - to set the internal default for SyncOnClose to Yes, instead of
      only configuring it to Yes
    - to fix a stringpool corruption issue
    - to prevent USB timeouts causing incorrect print output
  * Import Fedora patch updates:
    - to dont-use-dbus-from-two-threads patch so it removes a call to
      avahi_threaded_poll_stop()
    - to avoid_stale_lockfile_in_dbus_notifier patch to call _exit when
      handling SIGTERM
  * Move manpage-translations patch at the very end of the patch series
    to have it include all our patches

cups (1.6.4-2) unstable; urgency=low

  * Import several patches from Fedora, thanks to Tim Waugh:
    - Avoid stale lockfile in dbus notifier
    - Stop accessing avahi through D-Bus using two threads
    - Fix jobs with multiple files and  multiple formats
    - Revert upstream change to FINAL_CONTENT_TYPE in order to fix
      printing to remote CUPS servers
  * On purge, also delete the cupsd.conf.pre16-bak file to leave no
    traces

cups (1.6.4-1) unstable; urgency=low

  * New 1.6.4 upstream release:
    - Removed some duplicate size definitions for some ISO sizes that
      were causing problems
    - The IPP backend did not add the "last-document" attribute
    - Added a SyncOnClose directive to cups-files.conf to force cupsd to
      call fsync before closing any configuration/state files it writes
    - Added USB quirk rule for Lexmark E238
    - Closed server connections were still not always detected
    - The libusb-based USB backend now loads its list of quirks from
      files in /usr/share/cups/usb instead of using a hardcoded table
    - The scheduler did not properly register ICC color profiles with
      colord

  [ Adam Conrad ]
  * Update the cupsfilters tests patch to reflect the filter list in
    cups-filters 1.0.36 and fix the testsuite
  *…
balabit-sync pushed a commit to balabit-deps/balabit-os-9-cups that referenced this issue Nov 15, 2022
cups (2.4.1op1-1ubuntu4.1) jammy-security; urgency=medium

  * SECURITY UPDATE: Local authorization cert bypass
    - debian/patches/CVE-2022-26691-1.patch: fix string comparison in
      scheduler/cert.c.
    - debian/patches/CVE-2022-26691-2.patch: fix the comment in
      scheduler/cert.c.
    - CVE-2022-26691

cups (2.4.1op1-1ubuntu4) jammy; urgency=low

  * Fixed PPD file auto-generation when a print queue is created with
    a DNS-SD-service-name-based URI and "-m everywhere" backporting the
    fix from upstream (Upstream issue #340, #343).

cups (2.4.1op1-1ubuntu3) jammy; urgency=low

  * Fixed crasher in the patch for temporary queues for local services
    in the previous release. Updated the patch and the upstream pull
    request (LP: #1965112, Upstream pull request #353).

cups (2.4.1op1-1ubuntu2) jammy; urgency=low

  * Fixed printing on temporary CUPS queues for local services, like
    IPP-over-USB or Printer Applications. Especially when printing from
    the GTK print dialog printing on such queues did not work (Upstream
    pull request #353).

cups (2.4.1op1-1ubuntu1) jammy; urgency=low

  * Merge from Debian unstable. Remaining changes:
    - Added "--enable-snapped-clients" to the "./configure" options to use
      the correct Snap mediation mode for an unsnapped cupsd, like provided
      by this package.
    - Build CUPS with "SystemGroup lpadmin root" in cups-files.conf by
      default, as CUPS always worked this way but the new patch for
      supporting the "cups-control" interface of Snaps does not allow
      implicit permission to everything for root any more.
    - In the AppArmor profile allow CUPS to access (/var)/run/snapd.socket
      to allow cupsd to determine which interfaces a snapped client
      is plugging.
    - Build-depend on libapparmor-dev, libsnapd-glib-dev, needed for
      Snap mediation.
    - Added fully automatic generation of PPD option setting presets to
      be applied depending on the settings of the job IPP attributes
      "print-color-mode", "print-quality", and "print-content-optimize".
      This allows easy control of any printer with only standard IPP
      attributes, as for example from a phone (functionality overtaken
      from cups-filters, mot (yet) upstream in CUPS).
  * Updated 9100-ppd-cache-add-auto-presets.patch

cups (2.4.1op1-1) unstable; urgency=medium

  * new upstream release
  * debian/patches/*: update and rebase
  * debian/control: add myself to Uploaders:
  * debian/copyright: remove unused BSD-3 license
  * exlucde some newly generated files
  * update symbols files
  * move back to gbp based workflow
    (git debrebase and dgit do not work in my world)

cups (2.3.3op2-7ubuntu2) impish; urgency=low

  * Updated patch for auto-generation of PPD presets to patch proposed
    upstream (Upstream pull request #236) due to added PPD options taken into
    account.

cups (2.3.3op2-7ubuntu1) impish; urgency=low

  * Merge from Debian unstable. Remaining changes:
    - Added extra checking when administrative requests (create queue,
      remove someone else's job, ...) reach cupsd. If the client is a Snap,
      it has to plug the cups-control interface to be allowed to do the
      task. Added libapparmor-dev and libsnapd-glib-dev to the build
      dependencies. Also added needed permissions to AppArmor profile.
    - Build CUPS with "SystemGroup lpadmin root" in cups-files.conf by
      default, as CUPS always worked this way but the new patch for
      supporting the "cups-control" interface of Snaps does not allow
      implicit permission to everything for root any more.
    - Added "--enable-snapped-clients"
      to the "./configure" options to use the correct checking mode for an
      unsnapped cupsd, like provided by this package.
    - Added fully automatic generation of PPD option setting presets to
      be applied depending on the settings of the job IPP attributes
      "print-color-mode", "print-quality", and "print-content-optimize".
      This allows easy control of any printer with only standard IPP
      attributes, as for example from a phone (functionality overtaken
      from cups-filters, mot (yet) upstream in CUPS).
  * Updated patch for auto-generation of PPD presets to patch proposed
    upstream (Upstream pull request #236).

cups (2.3.3op2-7) unstable; urgency=medium

  [ Didier Raboud ]
  * Remove myself from Uploaders

  [ Roger Lynn ]
  * Apparmor: allow CUPS to read /etc/letsencrypt/archive/ (Closes: #992378)

cups (2.3.3op2-6) unstable; urgency=medium

  * Migrate to unstable
  * Packaging cleanup
    - Update S-V to 4.6.0 without changes needed
    - Remove 3 obsolete maintscript entries

cups (2.3.3op2-5ubuntu1) impish; urgency=low

  * Merge from Debian unstable. Remaining changes:
    - Added extra checking when administrative requests (create queue,
      remove someone else's job, ...) reach cupsd. If the client is a Snap,
      it has to plug the cups-control interface to be allowed to do the
      task. Added libapparmor-dev and libsnapd-glib-dev to the build
      dependencies. Also added needed permissions to AppArmor profile.
    - Build CUPS with "SystemGroup lpadmin root" in cups-files.conf by
      default, as CUPS always worked this way but the new patch for
      supporting the "cups-control" interface of Snaps does not allow
      implicit permission to everything for root any more.
    - Added "--enable-snapped-clients"
      to the "./configure" options to use the correct checking mode for an
      unsnapped cupsd, like provided by this package.
  * Added fully automatic generation of PPD option setting presets to
    be applied depending on the settings of the job IPP attributes
    "print-color-mode", "print-quality", and "print-content-optimize".
    This allows easy control of any printer with only standard IPP
    attributes, as for example from a phone (functionality overtaken
    from cups-filters, mot (yet) upstream in CUPS).

cups (2.3.3op2-5) experimental; urgency=low

  * Backport 2 upstream USB backend fixes:
    - Revert enforcing read limits (caused a regression with Lexmark filters)
    - Use 60s timeout (instead of 250ms) for reading at backchannel, as some
      older models malfunction if timeout is too short (Closes: #989073)

cups (2.3.3op2-4) experimental; urgency=medium

  [ Helge Kreutzmann ]
  * Update German man page (2212t)

  [ Didier Raboud ]
  * Reorder and cleanup patch queue by replacing some by upstream's
  * Drop ancient symlink handling in preinsts (Closes: #986165)

cups (2.3.3op2-3+deb11u1) unstable; urgency=medium

  * Backport 2 upstream USB backend fixes:
    - Revert enforcing read limits (caused a regression with Lexmark filters)
    - Use 60s timeout (instead of 250ms) for reading at backchannel, as some
      older models malfunction if timeout is too short (Closes: #989073)

cups (2.3.3op2-3ubuntu3) hirsute; urgency=low

  * Updated AppArmor profile entries for CUPS accessing snapd to
    check whether a client is a Snap and which interfaces it plugs to.

cups (2.3.3op2-3ubuntu2) hirsute; urgency=low

  * Replaced patch for extra checking of admin requests from snapped
    clients by the current upstream code. Added "--enable-snapped-clients"
    to the "./configure" options to use the correct checking mode for an
    unsnapped cupsd, like provided by this package.

cups (2.3.3op2-3ubuntu1) hirsute; urgency=low

  * Merge from Debian unstable. Remaining changes:
    - Added extra checking when administrative requests (create queue,
      remove someone else's job, ...) reach cupsd. If the client is a Snap,
      it has to plug the cups-control interface to be allowed to do the
      task. Added libapparmor-dev and libsnapd-glib-dev to the build
      dependencies. Also added needed permissions to AppArmor profile.
    - Build CUPS with "SystemGroup lpadmin root" in cups-files.conf by
      default, as CUPS always worked this way but the new patch for
      supporting the "cups-control" interface of Snaps does not allow
      implicit permission to everything for root any more.
  * Clean up "Build-Depends:" to be in sync with Debian (delta overlooked
    for near a decade when cups-filters was introduced in 2012), removing
    the unneeded entries: ghostscript, libavahi-compat-libdnssd-dev,
    libfontconfig1-dev, libfreetype6-dev, libijs-dev, libjpeg-dev,
    libldap2-dev, libpng-dev, libtiff-dev, poppler-utils, sharutils
  * Removed the changes on the machine-generated "configure" file in the
    patch for checking snapped clients, the changes easily mis-match on
    updates and we run "autoconf" in debian/rules anyway.

cups (2.3.3op2-3) unstable; urgency=medium

  [ Helge Kreutzmann ]
  * Update German man page (2212t)

  [ Didier Raboud ]
  * Wrap-and-sort -baskt, keep comments
  * Let cups.1 point to client.conf.5, not client.conf.7 (Closes: #982303)
  * Make CUPS reproducible by patching it to;
    - skip the httpAddrGetHostname() test (that fails under reprotest)
    - skip the stp tests if ran as root, without aborting
    - run testlang for each provided CUPS locale only

cups (2.3.3op2-2) unstable; urgency=medium

  * Bump debhelper compat to 13, document not-installed files

cups (2.3.3op2-1) unstable; urgency=medium

  * New OpenPrinting 2.3.3op2 release
    - CVE-2020-10001: Fixed a buffer (read) overflow in the `ippReadIO`
      function
    - Drop 4 patches merged upstream
  * Update d/copyright authors and years

cups (2.3.3op1-7) unstable; urgency=medium

  [ Helmut Grohne ]
  * Reduce Build-Depends, move dh_apparmor to B-D-A (Closes: #980104)

cups (2.3.3op1-6) unstable; urgency=medium

  [ Till Kamppeter ]
  * In the AppArmor profile, allow cupsd to write to /run/systemd/notify to
    notify that it is up and running (systemd service type "notify")

cups (2.3.3op1-5ubuntu1) hirsute; urgency=low

  * Merge from Debian unstable. Remaining changes:
    - Added extra checking when administrative requests (create queue,
      remove someone else's job, ...) reach cupsd. If the client is a Snap,
      it has to plug the cups-control interface to be allowed to do the
      task. Added libapparmor-dev and libsnapd-glib-dev to the build
      dependencies. Also added needed permissions to AppArmor profile.
    - Build CUPS with "SystemGroup lpadmin root" in cups-files.conf by
      default, as CUPS always worked this way but the new patch for
      supporting the "cups-control" interface of Snaps does not allow
      implicit permission to everything for root any more.
  * In the AppArmor profile allow cupsd to write to /run/systemd/notify
    to notify that it is up and running (systemd service type "notify").

cups (2.3.3op1-5) unstable; urgency=medium

  * Update Homepage and Source fields to point
    https://github.com/OpenPrinting/cups/ as Debian's using the OpenPrinting
    (friendly) fork (Closes: #979461)

cups (2.3.3op1-4) unstable; urgency=medium

  * Drop ancient manual link-doc setting in cups-bsd.postinst
  * Let cups.service start after nslcd.service (Closes: #977198)

cups (2.3.3op1-3ubuntu1) hirsute; urgency=low

  * Merge from Debian unstable. Remaining changes:
    - Added extra checking when administrative requests (create queue,
      remove someone else's job, ...) rach cupsd. If the client is a Snap,
      it has to plug the cups-control interface to be allowed to do the
      task. Added libapparmor-dev and libsnapd-glib-dev to the build
      dependencies. Also added needed permissions to AppArmor profile.
    - Build CUPS with "SystemGroup lpadmin root" in cups-files.conf by
      default, as CUPS always worked this way but the new patch for
      supporting the "cups-control" interface of Snaps does not allow
      implicit permission to everything for root any more.

cups (2.3.3op1-3) unstable; urgency=medium

  [ Helge Kreutzmann ]
  * Update German man page (2211t)

  [ Didier Raboud ]
  * Patch configure scripts to fix FTBFS on freebsd-gnu systems

cups (2.3.3op1-2) unstable; urgency=medium

  * Backport upstream "Force a 5 second sleep to wait for the job control file
    to be written" patch, to address s390x test suite timing issue

cups (2.3.3op1-1) unstable; urgency=medium

  * Use OpenPrinting CUPS fork instead of Apple's codebase
    - Update d/upstream/metadata, d/watch
    - d/upstream/signing-key.asc: Swap Apple's with Michael R Sweet's
  * Large patch-suite cleanup thanks to lots of Debian proposals merged
    upstream; from 40 to 9;
    - Reorder (upstream-mergeable first, Debian-specific later)
    - Reword and refresh metadata for the last patches
  * Set Debian customizations in d/rules instead of patches;
    - Set --with-max-log-size=0
    - Set --enable-sync-on-close
    - Set --with-error-policy=retry-job
  * Packaging cleanup;
    - Drop the Debian-specific systemd units' renaming, now upstream
    - Drop pre-oldstable postinst ConfigFilePerm handling
    - Add missing BSD-2-Clause block in debian/copyright
    - Convert debian/po files to UTF-8
    - Drop --as-needed as it's now default in Debian
    - Drop Ubuntu-specific patch handling, in favour of compile-time option
      for --disable-browsing
    - Bump S-V to 4.5.1 without changes needed
    - Use debian/main as head branch; update d/gbp.conf accordingly
    - Drop outdated d/source/options
   * Refresh manpage translation pofiles for 2.3.3op1

cups (2.3.3-4) unstable; urgency=medium

  * Drop Ubuntu "Make lpoptions list a printer's options correctly also when
    CUPS is running on an alternative port" patch, refused upstream
    (Closes: #970725)
  * Use upstream-merged patches for fax numbers' fix and rastertopwg rounding

cups (2.3.3-3ubuntu1) groovy; urgency=medium

  * Merged with Debian unstable. Remaining changes:
    - Added extra checking when administrative requests (create queue,
      remove someone else's job, ...) rach cupsd. If the client is a Snap,
      it has to plug the cups-control interface to be allowed to do the
      task. Added libapparmor-dev and libsnapd-glib-dev to the build
      dependencies. Also added needed permissions to AppArmor profile.
  * Build CUPS with "SystemGroup lpadmin root" in cups-files.conf by
    defualt, as CUPS always worked this way but the new patch for
    supporting the "cups-control" interface of Snaps does not allow
    implicit permission to everything for root any more.

cups (2.3.3-3) unstable; urgency=medium

  [ Didier Raboud ]
  * Set lintian overrides for non-changeable upstream choices
  * Add missing Build-Depends-Package in symbols' files

  [ Till Kamppeter ]
  * Resolve DNS-SD-service-name-based URIs correctly also if they are
    from a service from localhost (like IPP-over-USB, Printer
    Application, ...)
  * Make lpoptions list a printer's options correctly also when CUPS is
    running on an alternative port
  * Fix fax numbers supplied via GTK print dialog, removing a "Custom."
    prefix; do not choke if the GTK dialog sends "None" as phone number
    or pre-dial prefix
  * Let the rastertopwg filter check rounding errors when calculating
    the page geometry

cups (2.3.3-2ubuntu5) groovy; urgency=medium

  * In all autopkgtests modify set "LogLevel debug2" in cupsd.conf and
    "SystemGroup lpadmin root" in cups-files.conf and restart cupsd,
    the former change to more easily find out what failed and the latter
    as the default configuration did not allow root to create queues,
    making all tests fail.

cups (2.3.3-2ubuntu4) groovy; urgency=medium

  * Let the rastertopwg filter check rounding errors when calculating the
    page geometry.

cups (2.3.3-2ubuntu3) groovy; urgency=medium

  * Do not choke if the GTK dialog sends "None" as phone number or pre-dial
    prefix.

cups (2.3.3-2ubuntu2) groovy; urgency=medium

  * Fix fax numbers supplied via GTK print dialog, removing a "Custom."
    prefix.

cups (2.3.3-2ubuntu1) groovy; urgency=medium

  * Added extra checking when administrative requests (create queue,
    remove someone else's job, ...) rach cupsd. If the client is a Snap,
    it has to plug the cups-control interface to be allowed to do the
    task. Added libapparmor-dev and libsnapd-glib-dev to the build
    dependencies. Also added needed permissions to AppArmor profile.
  * Resolve DNS-SD-service-name-based URIs correctly also if they are from
    a service from localhost (like IPP-over-USB, Printer Application, ...)
  * Make lpoptions list a printer's options correctly also when CUPS is
    running on an alternative port.

cups (2.3.3-2) unstable; urgency=medium

  * Add missing dh-strip-nondeterminism B-D
  * cups-daemon: Add ipp-usb Recommends

cups (2.3.3-1) unstable; urgency=medium

  * New 2.3.3 upstream release, with the two -12 security patches

cups (2.3.1-12) unstable; urgency=medium

  * Backport two security patches
    - CVE-2020-3898: heap-buffer-overflow in libcups’s ppdFindOption()
      function in ppd-mark.c
    - CVE-2019-8842: The `ippReadIO` function may under-read an extension
      field

cups (2.3.1-11) unstable; urgency=medium

  * CI Tests: fix cups-basiccommands:
    - swap awk with sed;
    - filter stderr away from known errors
    - add missing cups-bsd depends to test lpr commands

cups (2.3.1-10) unstable; urgency=medium

  * Add Requires=cups.socket to cups.service, to make sure they start in
    the right order
  * CI Tests: Add a test for all CUPS' basic commands, thanks to RedHat
  * Add Pre-Depends: ${misc:Pre-Depends} to cups-daemon to fix
    skip-systemd-native-flag-missing-pre-depends lintian flag
  * Add patch proposal from RedHat to fix leakage of ppd (Issue: #5738)

cups (2.3.1-9) unstable; urgency=medium

  * CI Tests: Ensure the job files are non-empty; should detect more
    regressions

cups (2.3.1-8) unstable; urgency=medium

  * Add patch to fix cupsctl when loading cupsd.conf (Issue: #5744)

cups (2.3.1-7) unstable; urgency=medium

  * Add patch to fix conversion of PPD InputSlot choice names; this should fix
    printers ignoring the paper tray selection (Issue: #5740, Closes: #949315)
  * lintian-brush:
    - Set upstream metadata fields: Bug-Database, Repository, Repository-Browse
    - Rewrap some d/changelog entries

cups (2.3.1-6) unstable; urgency=medium

  * Patch test suite to also ignore 'Job held' lines in error_log line
    counting

cups (2.3.1-5) unstable; urgency=medium

  * Move towards driverless-centered installation:
    - Drop all printer-driver-* and hplip recommends/suggests
  * Cleanup all versions from pre- Debian stable
  * Bump S-V to 4.5.0 without changes needed

cups (2.3.1-4) unstable; urgency=medium

  * Cleanup patch queue for cups' bts URLs and patch names
  * Update README.Debian to remove leftover SystemdIdleExit references

cups (2.3.1-2) unstable; urgency=medium

  * Drop pwg-raster-attributes.patch
  * Amend 2.3.1-1 changelog entry to add missing Ubuntu package drop and CVE
    bug closure

cups (2.3.1-1) unstable; urgency=medium

  [ Didier Raboud ]
  * New 2.3.1 upstream release:
    - CVE-2019-2228: The `ippSetValuetag` function did not validate the
      default language value (Closes: #946782)

  [ Steve Langasek ]
  * On Ubuntu i386, drop cups and cups-core-drivers (Closes: #947185)

  [ Helge Kreutzmann ]
  * Update German man page (2207t)

cups (2.3.0-7) unstable; urgency=medium

  * Packaging cleanup:
    - Set upstream metadata fields: Repository
    - Rely on pre-initialized dpkg-architecture variables
    - Fix day-of-week for changelog entries 1.0.1-1
    - Bump Standards-Version to 4.4.1 without changes needed
    - Replace dh-exec usage with manual renaming in debian/rules

cups (2.3.0-6) unstable; urgency=medium

  [ Didier Raboud ]
  * Tests-drivers: Cleanup output

  [ intrigeri ]
  * AppArmor: support cups-pdf "Out" directory pointing to almost anywhere
    below $HOME (Closes: #940578)

cups (2.3.0-5) unstable; urgency=medium

  * Let the test-drivers script stop waiting when a filter is allegedly
    failed, and give context

cups (2.3.0-4) unstable; urgency=medium

  [ Helge Kreutzmann ]
  * Update German man page (2197t)

cups (2.3.0-3) unstable; urgency=low

  * Fix autopkgtests for real; refactor lpadmin stderr filtering

cups (2.3.0-2) unstable; urgency=low

  [ Helge Kreutzmann ]
  * Update German man page (2100t58f39u)

  [ Didier Raboud ]
  * Fix autopkgtest by filtering away known stderr messages

cups (2.3.0-1) unstable; urgency=low

  * New 2.3.0 upstream release, to unstable
    - CVE-2019-8696 and CVE-2019-8675: Fixed SNMP buffer overflows
    - Fixed IPP buffer overflow
    - Fixed memory disclosure and DoS issues in the scheduler
    - CUPS is now provided under the Apache License, Version 2.0, with a
      GPL2/LGPL2 exception
  * Rewrite debian/copyright with the above license change, install the
    NOTICE file
  * Refresh manpage translations
  * Refresh upstream metadata
  * Bump S-V to 4.4 without changes needed

cups (2.3~rc1-2) experimental; urgency=medium

  * Merge 2.2.12-1 from unstable
  * Add missing colon in closes line.
  * Set upstream metadata fields: Contact, Name.
  * Bump debhelper from old 11 to 12.

cups (2.3~rc1-1) experimental; urgency=medium

  * New 2.3~rc1 upstream release:
    - Refresh patch queue
    - Refresh manpage translation files
    - Remove /usr/sbin/accept and /usr/sbin/reject symlinks

cups (2.3~b8-4) experimental; urgency=medium

  * Reset the LogDebugHistory setting to upstream default (LP: #1831021)

cups (2.3~b8-3) experimental; urgency=medium

  * Migrate to dgit-maint-debrebase workflow

cups (2.3~b8-2) experimental; urgency=medium

  * Backport upstream patch:
    - Block cups-files.conf directives (Issue #5530, Closes: #923115)

cups (2.3~b8-1) experimental; urgency=medium

  * New 2.3~b8 upstream release
    - Add patch to fix tests' failure

  * Redo manpage po4a translation infrastructure and installation
  * Merge 2.2.10-6 from unstable

cups (2.3~b7-1) experimental; urgency=medium

  * New 2.3~b7 upstream release
    - Drop two patches now included upstream

cups (2.3~b6-2) experimental; urgency=medium

  * Merge 2.2.10-3
  * Add patch to allow building with -Werror=maybe-uninitialized
  * Drop now-superflous --dbgsym-migration dh_strip argument

cups (2.3~b6-1) experimental; urgency=medium

  * New 2.3~b6 upstream pre-release
    - CVE-2018-4700: Linux session cookies used a predictable random number
      seed (Closes: #915909)
    - The `cupsaddsmb` program has been removed (Issue #5449)
    - The `cupstestdsc` program has been removed (Issue #5450)
    - Rebase patches

  * Merge 2.2.10-1
  * Manpage translations update
  * Add patch to fix FTBFS due to wrong `usage(int)` usage
  * Update libcups2 symbols: +12 cupsRaster*
  * Cope with cupsaddsmb and cupstestdsc removals:
    - Remove from cups-client installed files
    - Remove from manpage translation infrastructure
    - Remove from libcups2's README.Debian

cups (2.3~b5-2) experimental; urgency=medium

  * Merge 2.2.8-5, rebase patches

cups (2.3~b5-1) experimental; urgency=medium

  * New 2.3~b5 upstream release
  * Merge 2.2.8-2

cups (2.3~b4-3) experimental; urgency=medium

  * Merge 2.2.7-4, rebase patches

cups (2.3~b4-2) experimental; urgency=medium

  * Merge 2.2.7-2
  * Name source lintian override file correctly

cups (2.3~b4-1) experimental; urgency=medium

  * New 2.3~b4 upstream pre-release
    - NOTICE: Printer drivers are now deprecated (Issue #5270)

  * Add cupsEncodeOption@Base 2.3~b4 symbol in libcups2
  * Refresh manpage translations

cups (2.3~b3-1) experimental; urgency=medium

  * New 2.3~b3 upstream pre-release
   - The `lp` and `lpr` commands now provide better error messages when the
     default printer cannot be found (Issue #5096, Closes: #870463)
   - CUPS is now provided under the Apache License, Version 2.0

  * 2.3~b3 updates:
    - Update manpage translation files
    - Add 2 libcups2 symbols introduced in 2.3~b1
    - Backport patch from upstream to fix filter's installation (Issue #5247)

  * CUPS license change:
    - Add NEWS file to libcups2-dev
    - Rewrite debian/copyright

  * Add cups-daemon lintian override for WantedBy=printer.target systemd
    service file
  * Bump debhelper compat to 11

cups (2.2.12-2) unstable; urgency=medium

  [ Helge Kreutzmann ]
  * Update German man page (2193t)

cups (2.2.12-1) unstable; urgency=medium

  * New 2.2.12 upstream release
    - CVE-2019-8696 and CVE-2019-8675: Fixed SNMP buffer overflows
      (Closes: #934957)

  * Remove 11 backported patches
  * Fix CVE-2018-4{7,8}00 typo retrospectively in d/changelog
    (Closes: #933985)
  * Refresh debian/gitlab-ci.yml
  * Refresh manpage translations

cups (2.2.10-6) unstable; urgency=medium

  * Backport patch from upstream's 2.2 "stable" branch:
    - Fix an issue with `PreserveJobHistory` and time values (Issue #5538)
      (Closes: #921741)

cups (2.2.10-5) unstable; urgency=medium

  [ Helge Kreutzmann ]
  * Correct error in german manpage translation

  [ Didier Raboud ]
  * Backport patches from upstream's 2.2 "stable" branch:
    - Add USB quirks rule for Xerox printers (Issue #5523)
    - Add a USB quirks rule for the DYMO 450 Turbo (Issue #5521)

cups (2.2.10-4) unstable; urgency=low

  * Backport patches from upstream's 2.2 "stable" branch:
    - Protect against continuing to read from a file at EOF (Issue #5473)
    - Use the same requested-attributes values for all IPP Everywhere setup
      requests (Issue #5484)
    - Add a USB quirk rule for the Lexmark E120n (Issue #5478)
    - Updated the USB quirks rule for Zebra label printers (Issue #5395)
    - Fix compile error on Linux (Issue #5483)
    - Stop parsing the Emulators keywords in PPD files (Issue #5475)
    - Fix potential unaligned accesses in the string pool (Issue #5474)

cups (2.2.10-3) unstable; urgency=medium

  * reprotest errors; cleanup patches:
    - Remove culprit patches refused for upstream integration:
     - patch to implement PRINTER_LIST printer filtering (see #3092)
     - patch to read embedded options from postcript (see #4344)
     - patch to cope with newline in device IDs (see #4345)
    - Update no-conffile-timestamp.patch for syntax bug

cups (2.2.10-2) unstable; urgency=medium

  [ Helge Kreutzmann ]
  * Update German man page (2192t)

cups (2.2.10-1) unstable; urgency=medium

  * New 2.2.10 upstream release
    - CVE-2018-4700: Linux session cookies used a predictable random number
      seed (Closes: #915909)
  * Manpage translations refresh
  * Drop superfluous dpkg-dev B-D

cups (2.2.9-4) unstable; urgency=medium

  * Cherry-pick from upstream:
    - Fix handling of MaxJobTime 0
      (Issue #5438, LP: #1804576, Closes: #915724)

cups (2.2.9-3) unstable; urgency=medium

  * debian/control cleanup:
    - Refresh thanks to `cme fix dpkg-control`
    - Drop xpp suggest
    - Bump S-V to 4.2.1 without changes needed

  * Replace revert with upstream patch to fix `lpadmin -E` regression
    (Issue #5440)

cups (2.2.9-2) unstable; urgency=medium

  * Revert 2.2.9 lpadmin fixes to circumvent 2.2.9 regression revealed
    by autopkgtest, see https://github.com/apple/cups/issues/5440

cups (2.2.9-1) unstable; urgency=medium

  * New 2.2.9 upstream release
    - Remove libcups{cgi1,mime1,ppdc1} packages as they are not built
      anymore upstream

cups (2.2.8-5) unstable; urgency=high

  * CVE-2018-6553: Fix AppArmor cupsd sandbox bypass due to use of hard links
    (Closes: #903605)
  * All these were fixed in 2.2.8:
    - CVE-2018-4180 Local Privilege Escalation to Root in dnssd Backend
      (CUPS_SERVERBIN)
    - CVE-2018-4181 Limited Local File Reads as Root via cupsd.conf Include
      Directive
    - CVE-2018-4182 cups-exec Sandbox Bypass Due to Insecure Error Handling
    - CVE-2018-4183 cups-exec Sandbox Bypass Due to Profile Misconfiguration

cups (2.2.8-4) unstable; urgency=medium

  * Backport upstream patches:
    - Fix A4 crash in Epson 24-pin driver (Closes: #901860)

cups (2.2.8-3) unstable; urgency=medium

  * Renumber first 2.2.8 upload as 2.2.8-1; skip -2.
  * Drop the "Generalize the input validation of some kinds of attributes."
    revert in favour of "Fix regressions in ippValidateAttribute" from upstream

cups (2.2.8-1) unstable; urgency=medium

  * New upstream 2.2.8 release
    - The scheduler allowed environment variables to be specified in the
      `cupsd.conf` file

  [ Didier Raboud ]
  * Revert "Generalize the input validation of some kinds of attributes."
    Fixes FTBFS on 2.2.8, see https://github.com/apple/cups/issues/5322
  * Manpage refresh after 2.2.8

  [ Helge Kreutzmann ]
  * Update German man page (2193t)

cups (2.2.7-5) unstable; urgency=medium

  [ Jean-Paul Guillonneau ]
  * Update French man page (2185t2f) (Closes: #897406)

  [ Didier Raboud ]
  * Manpage refresh after 2.2.7

cups (2.2.7-4) unstable; urgency=medium

  [ Helge Kreutzmann ]
  * Update German man page (2187t)

  [ Didier Raboud ]
  * Backport an upstream fix:
    - Allow cupsd daemon to exit on idle (Closes: #898745)

cups (2.2.7-3) unstable; urgency=medium

  * Backport an upstream fix:
    - Fix another CUPS-Create-Local-Printer crash (Issue #5290)

cups (2.2.7-2) unstable; urgency=medium

  * Autopkgtest: blacklist the now-deprecated 'raw' queues (Closes: #894643)

cups (2.2.7-1) unstable; urgency=medium

  * New 2.2.7 upstream release
    - NOTICE: Raw print queues are now deprecated (Issue #5269)
    - Fixed an Avahi crash bug in the scheduler (Issue #5268, LP: #1725749)
    - Systemd did not restart cupsd when configuration changes were made that
      required a restart (Issue #5263. Closes: #861470)
    - The scheduler could crash while adding an IPP Everywhere printer (Issue
      #5258, LP: #1750514)
    - The `lp` and `lpr` commands now provide better error messages when the
      default printer cannot be found (Issue #5096, Closes: #870463)
   * Add cupsHashString@Base 2.2.7 symbol
   * Add lintian override for cups.service WantedBy=printer.target

cups (2.2.6-5) unstable; urgency=medium

  * Bump S-V to 4.1.3 without changes needed
  * Update Vcs-* fields for the move to salsa.d.o

cups (2.2.6-4) unstable; urgency=medium

  * Fix CI: indexv[3,4] Braille drivers cannot print PDF

cups (2.2.6-3) unstable; urgency=medium

  [ Helge Kreutzmann ]
  * Update German man page translations

  [ Didier Raboud ]
  * Bump S-V to 4.1.2 without changes needed
  * Remove trailing whitespace in d/control and d/changelog
  * Drop duplicate priority field for cups-bsd

cups (2.2.6-2) unstable; urgency=medium

  * Backport upstream patch from the 2.3 branch:
    - The `lp` and `lpr` commands now provide better error messages when the
      default printer cannot be found (Issue #5096, Closes: #870463)
  * On the repository: reduce the diff to the upstream tarball to zero to
    allow uploads with dgit.

cups (2.2.6-1) unstable; urgency=medium

  * New 2.2.6 upstream release
    - DBUS notifications could crash the scheduler (Issue #5143)
    - Added USB quirks rules for Canon MP540 and Samsung ML-2160 (Issue #5148)
    - Localization updates (Issue #5152)

  * Update manpage translations
  * Fix DEB_HOST_ARCH_OS dpkg-architecture variable setting
  * Move source local-options to options

cups (2.2.5-2) unstable; urgency=medium

  [ Helge Kreutzmann ]
    * Update German man page translations

cups (2.2.5-1) unstable; urgency=medium

  * New 2.2.5 upstream release
    - The scheduler now creates a PID file when not running on demand with a
      modern service launcher (Issue #5080)
    - The CUPS library did not reuse domain sockets
      (Issue #5098, Closes: #868316)

  [ Didier Raboud ]
  * Patches rework:
    - Drop Debian-specific pidfile patch
    - Drop the 8 patches which were backported from upstream:
      - The `cupsGetDests` function incorrectly returned an empty list of
        printers if there was no default printer (Issue #5046)
      - Workaround for wrong resolution in PPD Generator for driverless
        printing setup
      - Fix an Avahi-related crash bug in the scheduler (Issues #5085 & #5086)
      - The CUPS library did not reuse domain sockets (Issue #5098)
      - Fix the interactions between the "print-quality" and "cupsPrintQuality"
        options (Issue #5090)
      - Fix mapping and defaulting of print-quality/cupsPrintQuality
        (Issue #5090)
      - Fix for resolution list sorting in the PPD generator which caused
        segfaults when generating PPDs for driverless printing.
      - The scheduler (incorrectly) woke up once per second to remove stale
        temporary queues (Issue #5100)

  * Stop symlinking the ssl-cert snakeoil certificates, CUPS will generate them
    on-demand (with a different name)
  * Drop superfluous autotools-dev B-D
  * Let cups-bsd suggest one compatible inet server: inetutils-inetd
    (Closes: #676472)
  * Refresh manpage translations
  * Make cups-bsd priority optional, as 'extra' is deprecated

  [ intrigeri ]
  * AppArmor: allow dac_read_search, now needed on top of dac_override
    (Closes: #872817)

cups (2.2.4-9) unstable; urgency=medium

  [ Helmut Grohne ]
  * Fix FTCBS; fix manpage-translations.patch (Closes: #878326)

cups (2.2.4-8) unstable; urgency=medium

  [ Didier Raboud ]
  * Drop superfluous dh-systemd Build-Depend
  * Drop --with autotools_dev and autotools-dev B-D, as these are in the
    default dh sequence in compat 10

  [ Till Kamppeter ]
  * test-drivers script of autopkgtest for breakage with cups-filters 1.17.6
    and later: skip gen-brf.ppd and gen-ubrl.ppd as these are test/debug PPD
    for Braille embossers which do not accept PDF as input format

cups (2.2.4-7) unstable; urgency=medium

  [ Till Kamppeter ]
  * Backport upstream fixes:
    - Fix the interactions between the "print-quality" and "cupsPrintQuality"
      options (Issue #5090)
    - Fix mapping and defaulting of print-quality/cupsPrintQuality (Issue #5090)
    - Fix for resolution list sorting in the PPD generator which caused
      segfaults when generating PPDs for driverless printing
    - The scheduler (incorrectly) woke up once per second to remove stale
      temporary queues (Issue #5100)

cups (2.2.4-6) unstable; urgency=medium

  [ intrigeri ]
  * AppArmor: allow dac_read_search, now needed on top of dac_override
    (Closes: #872817)

cups (2.2.4-5) unstable; urgency=medium

  * Backport one upstream patch, thanks to Christoph Pleger
    - The CUPS library did not reuse domain sockets
      (Issue #5098, Closes: #868316)

cups (2.2.4-4) unstable; urgency=low

  * Backport two upstream patches, thanks to Till Kamppeter
    - The IPP Everywhere PPD generator now sorts the supported resolutions
      before choosing them for draft, normal, and best quality modes
      (Issue #5091)
    - Fix an Avahi-related crash bug in the scheduler
      (Issues #5085 & #5086)

cups (2.2.4-3) unstable; urgency=medium

  [ Helge Kreutzmann ]
  * Update German man page translations

cups (2.2.4-2) unstable; urgency=low

  * Cleanup patch suite to come closer to upstream:
    - Remove IPP backend from CUPS 1.4
    - Remove cupsd upstart support
    - Remove a test weakening for mips
    - Remove libcupsppdc dynamic linking for mipsen
  * Don't install the ipp14 backend
  * Drop all postinst code managing versions before the current oldoldstable
    (wheezy, 1.5.3-5)
  * Drop all postinst code managing versions before the current oldstable
    (jessie, 1.7.5-11)
  * Drop the Ubuntu-specific upstart patches and files
  * Drop Launchpad PNG_PKG_MANGLE workaround
  * Drop two unused lintian overrides
  * Allow parallel builds
  * Backport upstream patch:
    - The `cupsGetDests` function incorrectly returned an empty list of
      printers if there was no default printer (Issue #5046, Closes: #867818)

  [ Vangelis Skarmoutsos ]
  * Add Greek translation for debconf templates (Closes: #867339)

cups (2.2.4-1) unstable; urgency=medium

  * New 2.2.4 upstream release

  * Cope with upstream documentation format change to markdown
  * Migrate to debhelper compat 10
  * Add two new libcups2 symbols
  * Lintian overrides updates:
    - Update cups' override for the non-standard-executable-perm usb
      backend
    - Add source override for the libcups{,image}2-dev circular
      dependency
  * Make libcupsimage2-dev Multi-Arch: same
  * Bump Standards-Version to 4.0.0
    - Make sure to update config.{sub,guess} at build time

cups (2.2.3-2) unstable; urgency=low

  * Migrate 2.2.3 to unstable

cups (2.2.3-1) experimental; urgency=medium

  * New 2.2.3 upstream release
  * Cherry-pick upstream fix for regression in job file preservation

cups (2.2.2-2) experimental; urgency=medium

  * Use /run instead of /var/run everywhere meaningful
    (Closes: #858341)
    * /run/cups:
      - in debian/rules; pass --with-rundir=/run/cups
      - update cups.init
    * /run/cups/cupsd.pid:
      - update cups.init
      - update pidfile.patch
    * /run/cups/printcap:
      - in debian/rules; update --with-printcap
      - update cups-daemon postinst
    * /run/cups/cups.sock:
      - update cups postinst and postrm for the lpadmin calls
      - update the autopkgtest for the lpadmin call
      - update the libcups2 example script
      - update the upstart script
    * /run/cups/certs:
      - update cups.init
      - update the upstart script
    Thanks-To: Russell Coker <russell@coker.com.au>

   [ Jamie Strandboge ]
   * Update debian/local/apparmor-profile (Closes: #858571)
      - allow cupsd and cups-pdf to communicate via Unix sockets (LP: #1675503)
      - adjust cups-pdf log location
      - allow cups-pdf to read /etc/cups/ppd/*.ppd
      - silence noisy denials for cupsd occasionally trying to send signals to
        unconfined
      - allow capability wake_alarm (seen in LP: 1641985)

cups (2.2.2-1) experimental; urgency=medium

  * New 2.2.2 upstream release
  * Refresh manpage translations
  * dpkg-source: update extend-diff-ignore to cope with the difference between
    upstream's VCS and tarball

cups (2.2.1-56-ga2f30a72f-1) experimental; urgency=medium

  * New 2.2.1+ upstream snapshot
    - Updated systemd config files (Issue #4935)

  [ Didier Raboud ]
  * Merge 2.2.1-5 from unstable

  [ Till Kamppeter ]
  * Updated debian/control: CUPS does not support PPD-less printing any
    more, we do driverless printing instead

cups (2.2.1-46-g10887d272-2) experimental; urgency=medium

  * Merge 2.2.1-4 from unstable.

cups (2.2.1-46-g10887d272-1) experimental; urgency=medium

  * New 2.2.1+ upstream snapshot
    - Fix assymetric resolutions in IPP Everywhere and Apple Raster
      (Closes: #848164)

cups (2.2.1-41-g49c592936-1) experimental; urgency=medium

  * New 2.2.1+ upstream snapshot

cups (2.2.1-8) unstable; urgency=medium

  [ JP Guillonneau ]
  * French manpages translation update (Closes: #852662)

cups (2.2.1-6) unstable; urgency=medium

  * Cherry-pick three more upstream fixes:
    - Add a USB quirk rule for the Kyocera Ecosys P6026cdn (Issue #4900)
    - Fix rastertopwg line offset bug (Issue #4942)
    - Fix Russian localization bug (Issue #4946)

cups (2.2.1-5) unstable; urgency=medium

  * Cherry-pick and adapt upstream's systemd configuration update to ensure
    clean shutdown of CUPS (LP: #1642966)

cups (2.2.1-4) unstable; urgency=medium

  [ Didier Raboud ]
  * Cleanup the cups debconf questions from 'parallel' leftovers
    (Closes: #848718)

  [ intrigeri ]
  * AppArmor profile: support merged-/usr (Closes: #846868)

cups (2.2.1-3) unstable; urgency=low

  [ Helge Kreutzmann ]
  * Update German man page

cups (2.2.1-2) unstable; urgency=medium

  [ Helge Kreutzmann ]
  * Several fixes to german manpages due to proofreading on
    debian-l10n-german

cups (2.2.1-1) unstable; urgency=medium

  * New 2.2.1 upstream release
    - Updated man pages (PR #4885, Closes: #838854)

  [ Helge Kreutzmann ]
  * Update German man page

  [ Didier Raboud ]
  * Demote libcupsfilters{1,-dev} dependencies to recommends (Closes: #711697)
  * Remove lsb Depends from cups, bump cups-daemon's to 3.2-14~

  [ Helmut Grohne ]
  * Fix FTCBFS (Closes: #837936)
    - Build mantohtml with the build architecture compiler
    - Do not execute genstrings during build

cups (2.2.0-2) unstable; urgency=medium

  * Backport upstream patch to handle partial failures when connecting
    (Closes: #838434)

cups (2.2.0-1) unstable; urgency=medium

  * New 2.2.0 upstream release
    - http*Connect did not work on Linux when cupsd was not running
      (Issue #4870)

  [ Helge Kreutzmann ]
  * Several fixes due to proofreading on debian-l10n-german

  [ Didier Raboud ]
  * Update the manpage-po4a README

cups (2.2~rc1-5) experimental; urgency=medium

  * In tests, use variable test-environment directory CUPS_TESTBASE, thanks to
    Santiago Vila for the hint.
  * Patches:
    - Drop now-unneeded 'tests-use-cupsfilters.patch' patch
    - Refresh some patch titles
    - Rename Ubuntu-specific patches' directory to debian/patches-ubuntu to
      avoid wrong deletions when using git-dpm update-patches
  * Remove now-unneeded cups-filters from Build-Depends

cups (2.2~rc1-4) experimental; urgency=medium

  * Revert unintentional Ubuntu patches removal; refresh them

cups (2.2~rc1-3) experimental; urgency=medium

  [ Jeremy Bicha ]
  * Add libcups2-dev dependency on libcupsimage2-dev, as ppd.h includes raster.h
    (Closes: #833889)

cups (2.2~rc1-2) experimental; urgency=medium

  * Add patch to ignore the 'Unable to write uncompressed print data: Broken
    pipe' error on kfreebsd
  * Initialize git-dpm; reword most patch descriptions from the original
    commits

cups (2.2~rc1-1) experimental; urgency=medium

  * New 2.2~rc1 upstream release
  * Refresh patches

cups (2.2~b2-1) experimental; urgency=low

  * New 2.2b2 upstream release

  * Patches:
    - Refresh all
    - Drop the wrong fix for #2763
    - Udate patch to use the ipv4's 127.0.0.1 instead of localhost to also
      patch the ipp:// shared printer URL, that fixes the tests
    - Add patch to revert the addition of pdftourf usage in the test-suite
  * Refresh manpage translations
  * Rewrite debian/watch following the new upstream schema

cups (2.1.4-4) unstable; urgency=medium

  * Patch a final lpstat call to really make the build reproducible when built
    in italian

cups (2.1.4-3) unstable; urgency=low

  * Change the default ErrorPolicy from 'stop-printer' to 'retry-job'
    - Update documentation, manpage and manpage translations
    - Add a cups-daemon NEWS entry
    (Closes: #631025)
  * Patch another lpstat call to also make the build reproducible when built in
    italian

cups (2.1.4-2) unstable; urgency=medium

  [ Helge Kreutzmann ]
  * Update German man page (2118t3f1u)

  [ Didier Raboud ]
  * Add patch to force LC_ALL=C on lpstat when grepping its output for
    Description; should fix the FTBFS on forced-languages reproducible builds
    environments

cups (2.1.4-1) unstable; urgency=medium

  * New 2.1.4 upstream release

  * Update debian/watch to check for new releases on GitHub
  * Remove 3 patches backported from upstream, refresh some
  * Refresh manpage translations

cups (2.1.3-6) unstable; urgency=medium

  [ Till Kamppeter ]
  * De-activate CUPS web interface when the files for it are not installed.
    This allows for auto-shutdown on mobile device installations.
  * Make CUPS with the Upstart support patch (Ubuntu-only) also build on
    ubuntuBSD (LP: #1582002)

  [ Helge Kreutzmann ]
  * Update German translation

  [ Didier Raboud ]
  * Backport upstream-included patch to fix malformed device-id for printers
    found by dnssd, thanks to Laurent Bigonville.
  * Bump S-V to 3.9.8 without changes needed
  * Drop duplicate 'using' word in libcups2's README.Debian

cups (2.1.3-5) unstable; urgency=medium

  * Automatically generate debug package, B-D against debhelper >= 9.20160114
  * Convert homepage and Vcs-Browser to https urls
  * Drop the patch to allow auto-shutdown on idle with active web interface,
    this induces a regression for web-interface users (Closes: #816490)

cups (2.1.3-4) unstable; urgency=medium

  [ Till Kamppeter ]
  * Quirk rule to make Lexmark C540n work (STR #4778)
  * Quirk rule to make Xerox WorkCentre 3220 work (LP: #1406203, STR #4789)

cups (2.1.3-3) unstable; urgency=medium

  * Install missing cups-snmp.8 manpage (Closes: #816316)

cups (2.1.3-2) unstable; urgency=medium

  * Drop unused libslp-dev Build-Dependency (Closes: #815359)
  * Bump Standards-Version to 3.9.7 without changes needed

cups (2.1.3-1) unstable; urgency=medium

  * New 2.1.3 upstream release:
    - /admin resource files (like config files of CUPS) were not served when
      the web interface was disabled, breaking utilities like "cupsctl"
      (CUPS STR #4755)

cups (2.1.2-2) unstable; urgency=medium

  [ Till Kamppeter ]
  * Add patch to avoid letting pending subscriptions prevent CUPS from
    auto-shutdown when idle (CUPS STR#4754)
  * Add patch to allow auto-shutdown when idle if the web interface is not
    turned off in the CUPS configuration, the web interface is too important
    (CUPS STR #4755)

  [ Didier Raboud ]
  * Remove libpng12-dev Build-Depends alternative to libpng-dev
    (Closes: #810183)

cups (2.1.2-1) unstable; urgency=low

  * New 2.1.2 upstream release

  * Drop patches included upstream:
    - usb-backend-fix-infinite-loop-when-usblp-module-attached.patch
    - usb-backend-delayed-closing-for-old-laserjets.patch
    - fix-ppd-file-load-for-ipp-printers.patch
    Refresh 2 other patches
  * Update Apple Inc. Copyright years in debian/copyright

cups (2.1.0-7) unstable; urgency=medium

  [ Till Kamppeter ]
  * Removed deprecated no-op "--upstart-only" option from dh_installinit call
    in debian/rules (LP: #1519228)
  * Moved empty directories /etc/cups/ppd and /etc/cups/interfaces to the
    cups-core-drivers binary package
  * Moved mime.convs from cups-server-common to cups-core-drivers to get it
    onto mobile devices with level-2 printing stack (support for IPP printers
    with common PDLs auto-set-up by cups-browsed)

cups (2.1.0-6) unstable; urgency=medium

  [ Till Kamppeter ]
  * Move /usr/lib/cups/daemom/cups-exec from the "cups" binary package to the
    "cups-daemon" binary package as it is already needed for basic job
    execution and therefore already in the level-1 (minimum) printing stack
    (LP: #1509423)

cups (2.1.0-5) unstable; urgency=medium

  [ Till Kamppeter ]
  * Add upstream patch to fix cupsGetPPD* with IPP print queues
    (CUPS STR #4725)

cups (2.1.0-4) unstable; urgency=medium

  [ Till Kamppeter ]
  * Corrected info header (author and Debian bug closure) of
    usb-backend-fix-infinite-loop-when-usblp-module-attached.patch
  * USB-backend: Added new quirk rules for delayed closing of the backend for
    several older HP LaserJet printers (CUPS STR #4549)

  [ Didier Raboud ]
  * Add maintscript stanzas to properly remove the oopstops.{convs,types}
    conffiles in /etc/cups that are not shipped since 1.3.10-3
    (Closes: #799025)

cups (2.1.0-3) unstable; urgency=medium

  [ Helge Kreutzmann ]
  * Update German man page (2114t4f1u)

  [ Till Kamppeter ]
  * The libusb-based USB backend sometimes did not unload the kernel usblp
    module if it was preventing the backend from accessing the printer causing
    an infinite loop taking 100% CPU (CUPS STR #4707)

cups (2.1.0-2) unstable; urgency=low

  * Upload to unstable

  [ Helge Kreutzmann ]
  * Update German man page (2105t4f1u)

  [ Jean-Paul Guillonneau ]
  * Update french manual pages translations, for 2.0.3-6 (Closes: #798257)

  [ Didier Raboud ]
  * Refresh the manpage translations for 2.1.0
  * Given upstream's new enforcement of ConfigFilePerm on /etc/cups/ppd/ files,
    make sure this is enforced on upgrade

cups (2.1.0-1) experimental; urgency=medium

  * New 2.1.0 upstream release

  [ Till Kamppeter ]
  * Removed scheduler-create-ppd-correct-permissions.patch, included upstream
  * Refreshed patches with quilt for the new 2.1.0 source code

  [ Didier Raboud ]
  * Refresh manpage translations

cups (2.1~rc1-4) experimental; urgency=medium

  [ Till Kamppeter ]
  * Add patch from upstream to fix scheduler and make sure that the permissions
    and ownerships of PPDs in /etc/cups/ppd/ are always the same
    (STR #4703, Closes: #784271)

cups (2.1~rc1-3) experimental; urgency=medium

  * Remove leftover test changelog entry
  * Update the GetJobs patch in tests for the mips FTBFS

cups (2.1~rc1-2) experimental; urgency=medium

  * Add patch to use the IPv4 127.0.0.1 address instead the 'localhost'
    name in tests, this could fix the reproducible builds

cups (2.1~rc1-1) experimental; urgency=low

  * New 2.1~rc1 upstream version

  [ Helge Kreutzmann ]
  * Update German man page (2000t39f71u)

  [ Didier Raboud ]
  * Merge upstream version 2.0.4
    - Fixed processing of server overrides without port numbers
      (STR #4675, Closes: #711327, #791876)
  * Drop patches included upstream:
    - str4538-fix-redirection-from-cgi-scripts.patc
    - str4646-fix-the-activejobs-loop-in-cupsdcheckjobs.patch
    - cupsd-logs-manpage-in-section-5.patch
    - libsystemd.patch
    - str4679-fix-local-domainsocket-access-checking.patch
    Refresh other patches

cups (2.1~b1-4) experimental; urgency=medium

  * Merge 2.0.3-10 from unstable

cups (2.1~b1-3) experimental; urgency=medium

  * Merge 2.0.3-8 from unstable

cups (2.1~b1-2) experimental; urgency=low

  [ Michael Biebl ]
  * Transition from libsystemd-daemon to libsystemd:
    - Update Build-Depends
    - Patch the configuration system
    (Closes: #779770)

cups (2.1~b1-1) experimental; urgency=low

  * New 2.1~b1 release
   - No longer install banner files since third-party banner filters now
     supply their own (STR #4518)
   - The scheduler no longer listens on the loopback interface unless the
     web interface or printer sharing are enabled
   - Added a PPD generator for IPP Everywhere printers (STR #4258)
   - Now install "default" versions of more configuration files
   - Added SSLOptions values to allow Diffie-Hellman key exchange and
     disable TLS/1.0 support.
   - The scheduler now supports advanced ASL and journald logging when
     "syslog" output is configured (STR #4474)
   - The scheduler now supports logging to stderr when running in the
     foreground (STR #4505)

  * Drop two patches included upstream
  * Refresh all patches
  * Refresh manpage translations
  * Install the cups-files.conf and snmp.conf default files in usr/share/cups

cups (2.0.3-10) unstable; urgency=medium

  * Backport upstream patches:
    - Fix redirections from CGI scripts (STR: #4538)
    - Fix the active jobs loop (STR: #4646)

cups (2.0.3-9) unstable; urgency=medium

  [ Helge Kreutzmann ]
  * Update German man page (1606t320f184u)

  [ Didier Raboud ]
  * Add patch to relax socket access checking to only check read-and-write, not
    execution (Closes: #792730)
  * Add maintscript stanzas to properly remove the mime.convs and mime.types
    conffiles in /etc/cups that are not shipped in this path since
    1.4.0~svn8773-1~ (Closes: #792731, LP: #1475683)

cups (2.0.3-8) unstable; urgency=medium

  * Mark the libsystemd as reported (and fixed) upstream
  * Translate and install the cupsd-helper.8 manpage (Closes: #792484)
  * Update the manpage translation infrastructure: install multiple missing
    new manpages
  * Add patch to move cupsd-logs manpage to section 5

cups (2.0.3-7) unstable; urgency=medium

  [ Michael Biebl ]
  * Transition from libsystemd-daemon to libsystemd:
    - Update Build-Depends
    - Patch the configuration system
    (Closes: #779770)

cups (2.0.3-6) unstable; urgency=low

  * Fix the 'which' calls, causing uninstallation error of cups-bsd

cups (2.0.3-5) unstable; urgency=low

  * Amend the previous changelog to reflect its upload to unstable
  * Add patch to make some attributes optional in the IPP-1.1 3.2.6 GetJobs
    test, that was causing a FTBFS on mips

cups (2.0.3-4) unstable; urgency=medium

  * Upload to unstable

  [ Helge Kreutzmann ]
  * Update German man page (1366t464f280u)

  [ Didier Raboud ]
  * Replace full paths in maintainer scripts '[ -x ]' by 'which' calls
  * Refresh debian/copyright thanks to cme
  * Remove the superfluous XS-Testsuite header in debian/control

cups (2.0.3-3) experimental; urgency=medium

  [ Till Kamppeter ]
  * Created new binary package cups-ipp-utils for the IPP utilities ippfind,
    ipptool, and ippserver.

  [ Didier Raboud ]
  * Install the cups-ipp-utils translated manpages in the correct package
  * Translate the ippserver.1 manpage too, refresh the manpage translation
    files
  * Add debian/gbp.conf to ease dch and import-orig
  * Update README.source with the latest branch names

cups (2.0.3-2) experimental; urgency=medium

  [ Till Kamppeter ]
  * Fixed IPP Everywhere PPD generator patch. It passes the tests now.

  [ Helge Kreutzmann ]
  * Update German man page (870t789f404u)

  [ Didier Raboud ]
  * Set QUILT_PATCHES in the two README files that need it (Closes: #788481)

cups (2.0.3-1) experimental; urgency=medium

  * New 2.0.3 upstream release
    - Security: Fixed CERT VU #810572 exploiting the dynamic linker (STR #4609)
      - CVE-2015-1158 Improper Update of Reference Count
      - CVE-2015-1159 Cross-Site Scripting
    - Security: The scheduler could hang with malformed gzip data (STR #4602)

  [ Didier Raboud ]
  * Remove the upstream fix for the FTBS on mips through reordering of IPP-1.1
    tests, included in 2.0.3
  * Refresh patches
  * Disable the IPP Everywhere PPD generator patch, as it breaks the test-suite

  [ Till Kamppeter ]
  * Fixed PPD generator (for IPP printers) to write floating-point numbers in
    a locale-neutral way (always with decimal point, CUPS STR #4579).
  * Make fix for floating point number output in the PPD generator also apply
    to the PageRegion option (CUPS STR #4579).
  * Let the PPD generator not create a ColorModel option without choices
    (CUPS STR #4638).
  * Fix values of the pwg-raster-document-types-supported attribute of
    ippserver, the IPP printer emulator.

cups (2.0.2-3) experimental; urgency=medium

  [ Till Kamppeter ]
  * Re-introduced the patch for IdleExitTimeout under upstart, but
    Ubuntu-only.
  * Added PPD generator to support IPP Everywhere printers (Use "lpadmin -p pr
    -E -v ipp://... -m everywhere" or equivalent operation in the CUPS web
    interface).
  * Exclude driver "everywhere" from auto package tests as it only works with
    IPP URIs.
  * Refreshed patches with quilt.

  [ Didier Raboud ]
  * Merge Ubuntu's AppArmor profile diff in Debian's (Closes: #779901)
  * Import upstream fix for the FTBS on mips through reordering the IPP-1.1
    tests to avoid a timing issue

cups (2.0.2-2) experimental; urgency=low

  [ Till Kamppeter ]
  * Removed patches for USB quirk rules which got included upstream
  * Updated Ubuntu-specific patch for the AppArmor profile

  [ Didier Raboud ]
  * Drop the patch for IdleExitTimeout under upstart, as it breaks non-linux
    builds

cups (2.0.2-1) experimental; urgency=low

  * New 2.0.2 upstream version
    - Add 2.0.2 symbols
    - Drop 5 upstream patches that were from the upstream 2.0 branch
    - Drop systemd patches as systemd support got included upstream
    - Drop the patch avoiding the linking against libgrypt, as it got included
      upstream
    - Add patch and dh-exec magic to rename the upstream systemd units away
      from org.cups.cupsd.*
    - Drop all references to lppasswd, as it got dropped by upstream in 2.0b1
    - Refresh all patches for 2.0.2
    - Rebase the manpage translation infrastructure for 2.0.2
    - Refresh all test-related patches
    - Update debian/copyright with the updates made in 2.0.0
    - Update configure arguments

  [ Till Kamppeter ]
  * Merged in more Ubuntu-specific AppArmor profile changes:
     - Fix peer on signal rule to use /usr/sbin/cupsd//third_party
       (LP: #1376611)
     - Temporarily use attach_disconnected to work around LP: 1373070.
     - Allow all signals to /usr/sbin/cupsd//third_party
     - Allow unix to /usr/sbin/cupsd//third_party (LP: #1382042)
     - Added "flags=(attach_disconnected)" to third_party profile
       (LP: #1413313)
  * Fix -h option not honoured when CUPS_SERVER variable is defined
    (LP: #1352809)

cups (1.7.5-10) unstable; urgency=medium

  * Change ppd-updaters trigger to use interest-noawait instead of interest to
    avoid trigger cycles (Closes: #772871, #771765)

cups (1.7.5-9) unstable; urgency=medium

  * Drop color-management patch; it got refused by upstream and is not
    available in non-english translations (Closes: #763517, #768163)
  * Drop the upstream patch to limit Get-Jobs replies to 500, as this triggers
    a FTBS on mips

cups (1.7.5-8) unstable; urgency=medium

  * Add a USB quirk fix for Brother HL-1250 (Closes: #712512)
  * Backport upstream patch to fix random crash in TLS handling. The patch also
    enables coredumps.(Closes: #760475, #760476)

cups (1.7.5-7) unstable; urgency=medium

  * Revert to not socket-activating CUPS (Closes: #747073)
    - Drop patch to let CUPS write the systemd.socket configuration files
    - Replace preinst generation of the same configuration file, delete them on
      upgrade
    - Drop the symlink enforcing the automatic configuration
    - Update NEWS and README.Debian to reflect that change
    - Create two cups socket configuration examples, document their existence
      in README.Debian
    - Update the systemd socket activation patch to include
      PassCredentials=true in the socket configuration, following upstream's
      feedback
    - Disable automatic idle exit timeout under systemd, as this will get
      activated without socket activation

cups (1.7.5-6) unstable; urgency=medium

  * Backport several upstream patches:
    - Update the patch restoring the access to cupsd.conf with Upstream's
      latest
    - Fix the icon display in web interface during server restart (STR: #4475)
    - Enforce correct newest-to-oldest order in the completed jobs returned by
      the scheduler (STR: #4396)
    - Limit Get-Jobs replies to 500 jobs (STR: #2913)
    - Do not let cupsGetPPD* return a symlink if it was not readable by the
      user (STR: #4500). This should help with #764253.
  * Dropped the FINAL_CONTENT_TYPE revert, stick back to upstream, following
    RedHat's analysis
  * Add tests' patch to ignore the 'Address family not supported' that breaks
    the errorlines counting on buildds without a working IPv6 stack

cups (1.7.5-5) unstable; urgency=medium

  [ Didier Raboud ]
  * In debian/rules, add conditionals to enable build-indep build
  * Bump Standards-Version to 3.9.6 without changes needed
  * Remove Martin Pitt, Masayuki Hatta and Jeff Licquia from the Uploaders'
    field; with many thanks for their past work on CUPS.

  [ Ondřej Surý ]
  * Remove libjpeg8-dev from libcupsimage2-dev (Closes: #765919)

cups (1.7.5-4) unstable; urgency=medium

  [ intrigeri ]
  * In the apparmor profile, drop features yet unsupported in Debian
    (Closes: #763673)

  [ Didier Raboud ]
  * Add the Ubuntu-specific apparmor profile as Ubuntu-specific patch

cups (1.7.5-3) unstable; urgency=medium

  [ Didier Raboud ]
  * Add two USB quirk fixes for Canon MX310 and MX320 printers
    (LP: #1346868, #1369547)

  [ Jamie Strandboge ]
  * Update the apparmor-profile
    - move Ux to Cx -> third_party and provie a third_party child profile. In
      this manner, we can add some modest confinement (can't change MAC
      policy, change_profile or mount) but more importantly it allows us to
      specify peer=third_party to restrict where the strictly confined cups
      process can send signals (LP: #1370930)
    - allow r of /var/cache/samba/*.tdb (LP: #1371097)
    - allow r of /var/{cache,lib}/samba/printing/printers.tdb

cups (1.7.5-2) unstable; urgency=medium

  [ Helge Kreutzmann ]
  * Update German man page (1537t)

  [ Till Kamppeter ]
  * Updated color management extension patch to the newest version from Joseph
    Simon, especially to fix PPD updates via the web interface (LP: #1362321).

  [ Didier Raboud ]
  * Replace the RedHat patch restoring the access to cupsd.conf and logfiles
    with upstream's

cups (1.7.5-1) unstable; urgency=medium

  * New 1.7.5 upstream release
    - Drop upstream-originated patches, refresh all
    - Refresh manpage translations for new upstream release

cups (1.7.4-5) unstable; urgency=medium

  [ Till Kamppeter ]
  * Color management extensions: Added color management checkboxes to the
    Japanese version of the web interface, on request of Deng Pang from Ricoh.

  [ Didier Raboud ]
  * Add patch from RedHat to restore access to logfiles from the webinterface,
    regression from the fix for STR: #4455 (Closes: #757964)

cups (1.7.4-4) unstable; urgency=medium

  * Add patch to ignore the 'Failed to connect to system bus' error that
    sometimes breaks the errorlines counting on various architectures
  * Refresh cupsd-write-systemd-Port patch

cups (1.7.4-3) unstable; urgency=medium

  * In cups-daemon's postinst, remove leftover cups.patch symlink in
    multi-user.target.wants (Closes: #755932)
  * Correct default listening address used under systemd for new installations;
    also correct the discrepancy on upgrades (Closes: #755807)

cups (1.7.4-2) unstable; urgency=medium

  * Install systemd's cups.path in paths.target instead of multi-user.target
    (Closes: #755690)
  * Import two upstream patches:
    - Fix for unsufficient permission checking for files accesses from the
      webinterface (STR: #4455)
      CVE-2014-5029 Incomplete fix CVE-2014-3537
      CVE-2014-5030 Disallow symlinks for directory index files
      CVE-2014-5031 File/directory does not have world read permissions for
                    directory index files
    - Fix for CGI scripts (STR: #4454)

cups (1.7.4-1) unstable; urgency=medium

  * New 1.7.4 upstream release
    - Security: The web interface incorrectly served symlinked files and
      files that were not world-readable, potentially leading to a
      disclosure of information (STR #4450, CVE-2014-3537)
    - Added USB quirk rule for Lexmark E230 (STR #4448)
    - Fix broken links on the web homepage (STR #4453, Closes: #754243)
    - Refresh patches

  [ Helge Kreutzmann ]
  * Update German man page (1531t)

  [ Didier Raboud ]
  * Stop managing the rename of /etc/pam.d/cups in the cups binary package:
    /etc/pam.d/cups is not renamed anymore but is now just installed from a
    different package (cups-daemon). (Closes: #753439)
    Thanks to Raphaël Hertzog

cups (1.7.3-6) unstable; urgency=medium

  * Discard lpadmin stderr in the tests' utility, fixes autopkgtests.

cups (1.7.3-5) unstable; urgency=medium

  * Add a trap to test-drivers utility, move it to cups-client instead of cups
  * Run the tests using the installed test-drivers utility

cups (1.7.3-4) unstable; urgency=medium

  * In cups-config, run krb5-config at runtime to avoid architecture
    differences due to the output of krb5-config; add check at build-time to
    avoid this happening again (Closes: #751157)
  * Fix dpkg-architecture calls in cups-config
  * Make the test-drivers utility more generic, install it in the cups package
    to be able to use it in other packages' autopkgtests

cups (1.7.3-3) unstable; urgency=medium

  * Fix autopkgtests:
    - only use accessible files,
    - extend the tests to test-print all PDFs in the source test/ directory,
    - abstract the drivers testing script as a separate script.

cups (1.7.3-2) unstable; urgency=medium

  [ Till Kamppeter ]
  * Added IPP attributes required by IPP Everywhere for PWG Raster when PWG
    Raster as input format is supported. This is needed for shared printers
    correctly emulating an IPP Everywhere printer (CUPS STR #4428)

  [ Didier Raboud ]
  * Add SystemdIdleExit and IdleExitTimeout references in cupsd.conf manpage
  * Rename the cups pam configfile from cups-daemon to cups (Closes: #750602)
  * Rewrite the autopkgtests suite:
    - Drop isolation-container restriction
    - Test cups-core-drivers with no driver for now
    - Test cups with all available drivers

  [ Jean-Paul Guillonneau ]
  * Update the manpages' french translation (Closes: #744987)

cups (1.7.3-1) unstable; urgency=medium

  * New 1.7.3 upstream release
    - Refresh patches

  * Add one simple autopackagetest
  * In cups-daemon.preinst, only write ListenStream stanzas for 'Port' OR
    'Listen localhost', not both (Closes: #742668)
  * Explicitly install README.Debian to libcups2, add symlinks in various
    other packages (Closes: #750532)

cups (1.7.2-3) unstable; urgency=medium

  [ Till Kamppeter ]
  * Updated version numbers in Replaces:/Breaks: for cups-bsd to also work with
    updating CUPS under Ubuntu (LP: #1315766)

cups (1.7.2-2) unstable; urgency=low

  [ Helge Kreutzmann ]
  * Update German man page (1526t)

  [ Till Kamppeter ]
  * Removed Ubuntu difference in the dependency of cups-deamon on avahi-daemon:
    avahi-daemon is a Recommends for both now; remove "on started avahi-daemon"
    from the "start on ..." rule in /etc/init/cups.conf upstart script
    (LP: #1242185, #1178172)
  * Add two patches for Upstart socket-triggered activation:
    - allow starting cupsd socket-triggered through…
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants