cups-filters (1.0.18-0ubuntu0.4) precise-security; urgency=medium * SECURITY UPDATE: denial of service and possible code execution via overflows in testtopdf filter - debian/patches/CVE-2015-3258-3279.patch: move memory allocation from filter/texttopdf.c to filter/textcommon.c and perform bounds checking. - CVE-2015-3258 - CVE-2015-3279 -- Marc Deslauriers Fri, 03 Jul 2015 07:10:59 -0400 cups-filters (1.0.18-0ubuntu0.2) precise-security; urgency=medium * SECURITY UPDATE: arbitrary code execution via overflows in pdftoopvp - debian/patches/CVE-2013-647x.patch: use gmallocn and gmallocn3 in pdftoopvp/{oprs/OPVPSplash.cxx,OPVPOutputDev.cxx}. - CVE-2013-6474 - CVE-2013-6475 * SECURITY UPDATE: arbitrary code execution via driver in pdftoopvp - debian/patches/CVE-2013-647x.patch: restrict driver path in pdftoopvp/oprs/OPVPWrapper.cxx. - CVE-2013-6476 -- Marc Deslauriers Tue, 11 Mar 2014 11:05:12 -0400 cups-filters (1.0.18-0ubuntu0.1) precise-proposed; urgency=low [ Till Kamppeter ] * New upstream release - pdftops: Allow selection whether Ghostscript or Poppler is used at runtime, setting the "pdftops-renderer" option to "gs" or "pdftops". This way one can switch to Poppler per-queue if there are incompatibilities with certain PostScript printers. - pdftops: Allow setting an upper limit for the image rendering resolution, also at runtime, setting the option "pdftops-max-image-resolution-default" to the desired limit in dpi. "0" means no limit. - pdftops: Fixed crash by wrong usage of sizeof() function when adding "Collate" to the fifth command line argument for the "pstops" CUPS filter call (LP: #982675). - pdftops: Removed newline from copies value when reading it from the "%%PDFTOPDFNumCopies" entry of the incoming PDF file. - pdftops: Silenced compiler warning about ignoring the return value of the write() function. - pdftops: Added a crash guard. - pdftops: Start determining the printing resolution with cupsRasterInterpretPPD(), this is the most reliable as often the choice names of the "Resolution" option are marketing names with higher numerical values than the actual resolution. Also ignore error exit values of cupsRasterInterpretPPD() as the function can error out after having found the resolution (LP: #984082). - pdftops: If printing resolution is determined by cupsRasterInterpretPPD() do not stick on 100 dpi if the resolution cannot be determined (LP: #984082). * debian/rules: Set default renderer for the pdftops filter to Poppler due to many printer's buggy interpreters having problems with GhostScript's PostScript and set image rendering resolution limit of the pdftops filter to 360 dpi to prevents slow processing by the printer if very high resolutions are used or if the printing resolution is mis-detected by the pdftops filter (LP: #668800, LP #951627 (comment #30), LP: #998087, LP: #992982 (comments #26, #27, #30, #31), LP: #997728, LP: #994477, LP: #998087, LP: #978120, LP: #862167). [ Didier Raboud ] * Drop libtiff5-dev, just use libtiff-dev, this fixes the FTBFS due to incompatibility with cups. -- Till Kamppeter Wed, 16 May 2012 11:25:03 +0200 cups-filters (1.0.17-0bzr0.1) precise-proposed; urgency=low * New upstream release - pdftopdf: Fixed segmentation fault when printing selected pages ("page-ranges" option, LP: #980673). -- Till Kamppeter Fri, 20 Apr 2012 14:39:03 +0200 cups-filters (1.0.16-0bzr1) precise; urgency=low * New upstream release - pdftopdf: Fixed segmentation faults when using N-up with certain PDF files (LP: #980673) and when calling pdftopdf manually without specifyting a PPD file. -- Till Kamppeter Mon, 16 Apr 2012 11:51:11 +0200 cups-filters (1.0.15-0bzr1) precise; urgency=low * New upstream release - pdftops: Suppress image compression only for Brother printers as they really need this measure to print at all. This accelerates printer- internal job processing on most other printers (tested on HP and Kyocera). Also suppress page compression on Kyocera printers, this works around a bug in Kyocera's PostScript interpreters which makes printing pages with images very slow (LP: #977912). -- Till Kamppeter Wed, 11 Apr 2012 22:40:11 +0200 cups-filters (1.0.14-0bzr1) precise; urgency=low * New upstream release - pdftops: Determine printing resolution from the PPD file and supply it on the Ghostscript or pdftops (Poppler) command line, so that the renderer does the image rendering with a resolution matching the printer's resolution. This avoids too slow processing of the jobs by the printer's built-in PostScript interpreter. In addition a default resolution of 300 dpi is used for PPDs without any hint of the printer's resolution, as most PostScript lasers use multiples of 300 dpi as resolution (LP: #977912). -- Till Kamppeter Tue, 10 Apr 2012 19:40:11 +0200 cups-filters (1.0.13-1) unstable; urgency=low * New upstream release - Fixed display of job date on test page and banner pages (LP: #975064). -- Till Kamppeter Tue, 10 Apr 2012 07:40:11 +0200 cups-filters (1.0.12-1) unstable; urgency=low * New upstream release - Fixed crash of imagetopdf filter when it is called manually without supplying a valid PPD file (LP: #973564). -- Till Kamppeter Thu, 05 Apr 2012 13:35:24 +0200 cups-filters (1.0.11-1) unstable; urgency=low [ Till Kamppeter ] * New upstream release - Updated all code copied from Poppler to the current state of Poppler, to fix any bugs or security vulnerabilities which were in that Poppler code. - Made Poppler-based PDF filters building with various versions of Poppler. - Deactivated MIME conversion rules which are not used by the PDF- based printing workflow. - Added generic PPD for native PDF printers. - Cleaned up sample PPD file HP-Color_LaserJet_CM3530_MFP-PDF.ppd. - imagetopdf: Added support for native PDF printers. - imagetopdf, imagetoraster: Let image input "scale to fit" by default. This makes photo printing via AirPrint work, as the iOS devices send JPEG but do not allow setting options. - pdftops: Generally do not compress fonts and images, and also do not do CCITT compression for bitmap glyphs to make the PostScript output more compatible with buggy PostScript interpreters. The output gets 30-50% longer but will work on many more different printer models. Problems were also discovered on HP and not only on Brother (LP: #960666). [ Martin Pitt ] * Drop debian/patches/poppler-pre-0.18.patch and patch machinery around it. It's not necessary with the current upstream version any more. -- Till Kamppeter Fri, 30 Mar 2012 08:49:48 +0200 cups-filters (1.0.7-1) unstable; urgency=low * New upstream release - cups-filters 1.0.7 release - pdftops: Added debug mode for investigating PostScript printer incompatibilities and interpreter bugs. Now sending a job with "lpr -o psdebug" makes the filter sending uncompressed PostScript. - pdftops: Additional workaround for a bug in the PostsSript interpreters of Brother printers, calling Ghostscript with special command line options (LP: #955553). - pdftopdf: Correct handling of PJL output and page_log messages on native PDF printers and on printers using a driver after pdftopdf (including PostScript printers). - texttopdf: Full fontconfig support, several bug fixes and improvements to make the output work on more different PDF interpreters, including built-in interpreters in printers. - Fixed cupsfilters.drv PPD generator and rastertopclx filter to make the supported HP DesignJet printers actually work. - parallel backend: Use same method as CUPS to overcome infinite loop on side channel errors (LP: #936647, CUPS STR #4044). - "make clean" and "make distclesn" work also correctly now when called repeatedly (Closes: #663564). -- Till Kamppeter Wed, 21 Mar 2012 09:18:55 +0100 cups-filters (1.0.5-1) unstable; urgency=low * New upstream release - cups-filters 1.0.5 release - pdftops: Added insertion of workaround PostScript code for printers with bugs in their PS interpreters (LP: #950713, LP: #951627). - parallel backend: Break infinite loop (LP: #936647). - texttopdf: Complete the implementation of fontconfig-based font selection (Closes: #663070). -- Till Kamppeter Wed, 14 Mar 2012 11:43:22 +0100 cups-filters (1.0.4-1) unstable; urgency=low [ Till Kamppeter ] * New upstream release - cups-filters 1.0.4 release - texttopdf: Fall back to altermative fonts via fontconfig if the FreeMono TrueType fonts are not installed (Closes: #495598, Closes: #662660). - bannertopdf: Fix off-by-one error in page duplication - bannertopdf: Put indirect references to streams into the page's contents - bannertopdf: Let byte offsets for the Xref table of the PDF output being determined correctly also when the output goes to stdout (LP: #939735). - bannertopdf: Output multiple copies of the test page if duplex and/or N-up is chosen, to let the test page appear on all possible positions of the sheet (LP: #939530). - bannertopdf: Scale test page template to fit the job's page size, get and display full page geometry information, draw the frame which marks the printable area 1pt smaller, to assure that it gets completely visible (LP: #921073). * debian/local/default-testpage.pdf: Added missing "Q" operator to the end of the page. This broke N-up printing with pdftopdf (LP: #939530). * debian/control: Added explicit build dependency on libfontconfig1-dev. (Closes: #661127) * debian/control: Changed font dependency (for texttopdf) to "ttf-freefont | fonts-liberation | ttf-dejavu" instead of only "ttf-freefont" (Closes: #495598, Closes: #662660). [ Martin Pitt ] * debian/control: Build against libpng-dev, with an alternative to the older libpng12-dev. (Closes: #662295) * debian/control: Prefer building against libtiff5-dev if available, falling back to libtiff-dev. * debian/control, debian/rules: Move from hardening-wrapper to using dpkg-buildflags. Bump dpkg-dev build dependency to (>= 1.16.1~) for this. * debian/copyright: Update Format header for official copyright format 1.0. * debian/control: Bump Standards-Version to 3.9.3. * debian/rules: Drop LC_MESSAGES setting, leftover from cups. * debian/control: Bump libcupsimage2-dev build dependency to ensure to build against a version which does not conflict on the libtiff?-dev build dependency. -- Martin Pitt Wed, 07 Mar 2012 14:36:49 +0100 cups-filters (1.0.2-1) unstable; urgency=low [ Till Kamppeter ] * New upstream release - cups-filters 1.0.2 release - bannertopdf fixes * debian/local/default-testpage.pdf, debian/source/include-binaries: Added Ubuntu-branded test page template. * debian/rules: Replace the upstream test page template by the Ubuntu-branded one if the package is built under Ubuntu. [ Martin Pitt ] * debian/control: Build-depend on libpoppler-private-dev for the impending poppler 0.18 transition. Thanks Pino Toscano! (Closes: #660989) -- Martin Pitt Thu, 23 Feb 2012 14:48:00 +0100 cups-filters (1.0.1-1) unstable; urgency=low * New upstream release - cups-filters 1.0.1 release - Included the textonly filter, Red Hat's driver for text-only printers. - Install sample PPD file for pdftoijs (for HP PhotoSmart Pro B8300). - Added cupsfilters.drv, providing support for the HP DesignJet 600, 750C, 1050C, 4000, T1100, T790. - Added texttops and imagetops filters for backward compatibility (Closes: #658258). - Use Ghostscript as default renderer when building pdftops (LP: #926068). - Build system and documentation fixes - Incorporated distro patches upstream: Cost factor 100 for pdftoraster, installation of C headers, PDF filter documentation * debian/local/text*, debian/local/README.pdf-filters: Removed, incorporated upstream. * debian/cups-filters.ppd-updater: Updated appropriate to changes in the upstream package. * debian/cups-filters.install: Updated due to upstream inclusion of textonly filter. * debian/rules: Removed extra rules for working around build system bugs in 1.0b1. * debian/libcupsfilters-dev.install: Install the files via this .install file now and not via debian/rules. -- Till Kamppeter Tue, 14 Feb 2012 07:23:51 +0100 cups-filters (1.0~b1-3) unstable; urgency=low * debian/control: Add missing libijs-dev build dependency. -- Martin Pitt Mon, 30 Jan 2012 07:21:37 +0100 cups-filters (1.0~b1-2) unstable; urgency=low * Upload to unstable. -- Martin Pitt Mon, 30 Jan 2012 06:35:46 +0100 cups-filters (1.0~b1-1) experimental; urgency=low * Initial Release. This is a splitout of all filters which are currently being shipped by the "cups" package but are not provided by upstream any more. These now have a new home at openprinting.org. Upload to experimental for getting it through NEW, then cups and cups-filters will be uploaded to unstable in lockstep. -- Till Kamppeter Sat, 28 Jan 2012 13:13:07 +0100