Hello community, here is the log from the commit of package cups for openSUSE:Factory checked in at 2017-07-04 13:32:13 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/cups (Old) and /work/SRC/openSUSE:Factory/.cups.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "cups" Tue Jul 4 13:32:13 2017 rev:140 rq:506209 version:2.2.3 Changes: -------- --- /work/SRC/openSUSE:Factory/cups/cups.changes 2017-06-07 09:51:10.294734740 +0200 +++ /work/SRC/openSUSE:Factory/.cups.new/cups.changes 2017-07-04 13:32:15.356064309 +0200 @@ -1,0 +2,159 @@ +Thu Jun 8 15:52:34 CEST 2017 - [email protected] + +- In /usr/lib/tmpfiles.d/cups.conf use + group 'root' for /run/cups/certs (boo#1042916). + +------------------------------------------------------------------- +Fri Jun 2 10:32:33 CEST 2017 - [email protected] + +- Major backward incompatible change since CUPS 2.2.0: + There is no longer the directory /etc/cups/interfaces because + since CUPS 2.2.0 so called "System V style Interface Scripts" + are no longer supported for security reasons (see below the + entry about the changes included in CUPS 2.2.0). +- Disabled cups-2.1.0-cups-systemd-socket.patch + because it does no longer apply which needs to be examined + and decided by someone who knows about systemd internals. +- Disabled + 0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch + 0002-Save-work-on-Avahi-code.patch + 0003-Avahi-fixes-for-cupsEnumDests.patch + because they do no longer apply which needs to be examined + and decided by someone who knows about Avahi internals. +- Version upgrade to 2.2.3: + CUPS 2.2.3 is a general bug fix release. + See https://github.com/apple/cups/releases + Changes include: + * The IPP backend could get into an infinite loop for certain + errors, causing a hung queue (rdar://problem/28008717) + * The scheduler could pause responding to client requests in + order to save state changes to disk (rdar://problem/28690656) + * Added support for PPD finishing keywords + (Issue #4960, Issue #4961, Issue #4962) + * The IPP backend did not send a media-col attribute for just + the source or type (Issue #4963) + * IPP Everywhere print queues did not always support all print + qualities supported by the printer (Issue #4953) + * IPP Everywhere print queues did not always support all media + types supported by the printer (Issue #4953) + * The IPP Everywhere PPD generator did not return useful error + messages (Issue #4954) + * The IPP Everywhere finishings support did not work correctly + with common UI or command-line options (Issue #4976) + * Fixed an error handling issue for the network backends + (Issue #4979) + * The "reprint job" option was not available for some canceled + jobs (Issue #4915) + * Updated the job listing in the web interface (Issue #4978) + A detailed list of changes can be found in the CHANGES.txt file. +- Version upgrade to 2.2.2: + CUPS 2.2.2 is a general bug fix release. + See https://github.com/apple/cups/releases + Changes include: + * Fixed some issues with IPP Everywhere printer support + (Issue #4893, Issue #4909, Issue #4916, Issue #4921, + Issue #4923, Issue #4932, Issue #4933, Issue #4938) + * The rastertopwg filter could crash with certain input + (Issue #4942) + * The scheduler did not detect when an encrypted connection + was closed by the client on Linux (Issue #4901) + * The cups-lpd program did not catch all legacy usage + of ISO-8859-1 (Issue #4899) + * The scheduler no longer creates log files on startup + (<rdar://problem/28332470>) + * The ippContainsString function now uses case-insensitive + comparisons for mimeMediaType, name, and text values in + conformance with RFC 2911. + * The network backends now log the addresses that were found + for a printer (<rdar://problem/29268474>) + * Let's Encrypt certificates did not work when the hostname + contained uppercase letters (Issue #4919) + * Fixed reporting of printed pages in the web interface + (Issue #4924) + * Updated systemd config files (Issue #4935) + A detailed list of changes can be found in the CHANGES.txt file. +- Version upgrade to 2.2.1: + CUPS 2.2.1 is a general bug fix release. + See https://github.com/apple/cups/releases + Changes include: + * Added "CreateSelfSignedCerts" directive for cups-files.conf + to control whether the scheduler automatically creates + its own self-signed X.509 certificates for TLS connections + (Issue #4876) + * http*Connect did not handle partial failures (Issue #4870) + * cupsHashData did not use the correct hashing algorithm + (<rdar://problem/28209220>) + * Updated man pages (PR #4885) + A detailed list of changes can be found in the CHANGES.txt file. +- Version upgrade to 2.2.0: + CUPS 2.2.0 adds support for local IPP Everywhere print queues + and includes several performance and security improvements. + See https://github.com/apple/cups/releases + Changes include: + * Normalized the TLS certificate validation code and added + additional error messages to aid troubleshooting. + * http*Connect did not work on Linux when cupsd was not running + (Issue #4870) + * The --no-remote-any option of cupsctl had no effect + (Issue #4866) + * http*Connect did not return early when all addresses failed + (Issue #4870) + * The IPP backend did not validate TLS credentials properly. + * The printer-state-message attribute was not cleared after a + print job with no errors (Issue #4851) + * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer + operations did not always return an error for failed + adds (Issue #4854) + * PPD files with names longer than 127 bytes did not work + (Issue #4860) + * CUPS now supports Let's Encrypt certificates on Linux. + * All CUPS commands now support POSIX options (Issue #4813) + * The scheduler now restarts faster (Issue #4760) + * Improved performance of web interface with large numbers + of jobs (Issue #3819) + * Encrypted printing can now be limited to only trusted + printers and servers (<rdar://problem/25711658>) + * The scheduler now advertises PWG Raster attributes for + IPP Everywhere clients (Issue #4428) + * The scheduler now logs informational messages for jobs + at LogLevel "info" (Issue #4815) + * The scheduler now uses the getgrouplist function + when available (Issue #4611) + * The IPP backend no longer enables compression by default + except for certain raster formats that generally benefit + from it (<rdar://problem/25166952>) + * The scheduler did not handle out-of-disk situations + gracefully (Issue #4742) + * The LPD mini-daemon now detects invalid UTF-8 sequences + in job, document, and user names (Issue #4748) + * The IPP backend now continues on to the next job + when the remote server/printer puts the job on hold + (<rdar://problem/24858548>) + * The scheduler did not cancel multi-document jobs immediately + (<rdar://problem/24854834>) + * The scheduler did not return non-shared printers to local + clients unless they connected to the domain socket + (<rdar://problem/24566996>) + * The scheduler now reads the spool directory if one or more + job cache entries point to deleted jobs + (<rdar://problem/24048846>) + * Added support for disc media sizes (<rdar://problem/20219536>) + * The httpAddrConnect and httpConnect* APIs now try connecting + to multiple addresses in parallel (<rdar://problem/20643153>) + * Interface scripts are no longer supported for security reasons + (<rdar://problem/23135640>) + A detailed list of changes can be found in the CHANGES.txt file. +- Version upgrade to 2.1.4: + CUPS 2.1.4 is a general bug fix release. + See https://github.com/apple/cups/releases + Changes include: + * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836) + * Fixed printing of multiple files to raw queues (Issue #4782) + * The scheduler did not implement the Hold-New-Jobs opertion + correctly (Issue #4767) + * The cups-lpd mini-daemon incorrectly included the document-name + attribute when creating a job. It should only be included when + sending a job (Issue #4790) + A detailed list of changes can be found in the CHANGES.txt file. + +------------------------------------------------------------------- Old: ---- cups-2.1.3-source.tar.bz2 cups-2.1.3-source.tar.bz2.sig New: ---- cups-2.2.3-source.tar.gz cups-2.2.3-source.tar.gz.sig ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ cups.spec ++++++ --- /var/tmp/diff_new_pack.LpxcZ8/_old 2017-07-04 13:32:16.519900423 +0200 +++ /var/tmp/diff_new_pack.LpxcZ8/_new 2017-07-04 13:32:16.523899860 +0200 @@ -19,14 +19,18 @@ # _tmpfilesdir is not defined in systemd macros up to openSUSE 13.2 %{!?_tmpfilesdir: %global _tmpfilesdir %{_libexecdir}/tmpfiles.d } Name: cups -Version: 2.1.3 +Version: 2.2.3 Release: 0 Summary: The Common UNIX Printing System License: GPL-2.0 and LGPL-2.1 Group: Hardware/Printing Url: http://www.cups.org/ -Source0: http://www.cups.org/software/%{version}/cups-%{version}-source.tar.bz2 -Source1: http://www.cups.org/software/%{version}/cups-%{version}-source.tar.bz2.sig +# To download it use e.g. +# wget --no-check-certificate -O cups-2.2.3-source.tar.gz https://github.com/apple/cups/releases/download/v2.2.3/cups-2.2.3-source.tar.gz +Source0: https://github.com/apple/cups/releases/download/v2.2.3/cups-2.2.3-source.tar.gz +# To download it use e.g. +# wget --no-check-certificate -O cups-2.2.3-source.tar.gz.sig https://github.com/apple/cups/releases/download/v2.2.3/cups-2.2.3-source.tar.gz.sig +Source1: https://github.com/apple/cups/releases/download/v2.2.3/cups-2.2.3-source.tar.gz.sig Source2: cups.keyring Source102: Postscript.ppd.gz Source105: Postscript-level1.ppd.gz @@ -143,9 +147,9 @@ %package libs Summary: Libraries for CUPS -# Prerequire /sbin/ldconfig which is used in the traditional bash scriptlets for post/postun: License: GPL-2.0 and LGPL-2.1 Group: Hardware/Printing +# Prerequire /sbin/ldconfig which is used in the traditional bash scriptlets for post/postun: Requires(pre): /sbin/ldconfig %if 0%{?suse_version} >= 1330 Requires(pre): group(lp) @@ -167,6 +171,8 @@ %package client Summary: CUPS Client Programs +License: GPL-2.0 +Group: Hardware/Printing # Require the exact matching version-release of the cups-libs sub-package because # non-matching CUPS libraries may let CUPS software crash (e.g. segfault) # because all CUPS software is built from the one same CUPS source tar ball @@ -176,8 +182,6 @@ # on the same package repository where the cups package is because # all are built simulaneously from the same cups source package # and all required packages are provided on the same repository: -License: GPL-2.0 -Group: Hardware/Printing Requires: cups-libs = %{version}-%{release} # Conflicts with other print spoolers which provide same binaries like /usr/bin/lp and so on: Conflicts: lprng @@ -200,13 +204,13 @@ %package devel Summary: Development Environment for CUPS +License: GPL-2.0 +Group: Development/Libraries/C and C++ # Do not require the exact matching version-release of cups-libs # but only a cups-libs package with matching version because # for building third-party software which uses only the CUPS public API # there are no CUPS-internal dependencies via CUPS private API calls # (the latter would require the exact matching cups-libs version-release): -License: GPL-2.0 -Group: Development/Libraries/C and C++ Requires: cups-libs = %{version} Requires: glibc-devel @@ -265,30 +269,30 @@ # web content is installed from /usr/share/doc/cups to /usr/share/cups/webcontent # because the files of the CUPS web content are no documentation, see CUPS STR #3578 # and http://bugzilla.novell.com/show_bug.cgi?id=546023#c6 and subsequent comments: -%patch11 -b default-webcontent-path.prig +%patch11 -b default-webcontent-path.orig # Patch12 cups-2.1.0-cups-systemd-socket.patch Use systemd socket activation properly: -%patch12 -b cups-systemd-socket.orig +#patch12 -b cups-systemd-socket.orig # Patch13 0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch React properly to avahi's ALL_FOR_NOW signal to reduce unneeded delay -%patch13 -p1 +#patch13 -p1 # Patch14 0002-Save-work-on-Avahi-code.patch React properly to avahi's ALL_FOR_NOW signal to reduce unneeded delay -%patch14 -p1 +#patch14 -p1 # Patch15 0003-Avahi-fixes-for-cupsEnumDests.patch React properly to avahi's ALL_FOR_NOW signal to reduce unneeded delay -%patch15 -p1 +#patch15 -p1 # Patch100...Patch999 is for private patches from SUSE which are not intended for upstream: # Patch100 cups-pam.diff adds conf/pam.suse regarding support for PAM for SUSE: -%patch100 +%patch100 -b cups-pam.orig # Patch101 cups-2.0.3-additional_policies.patch adds the 'allowallforanybody' policy to cupsd.conf # see https://fate.novell.com/303515 and https://bugzilla.suse.com/show_bug.cgi?id=936309 -%patch101 +%patch101 -b additional_policies.orig # Patch103 cups-1.4-do_not_strip_recommended_from_PPDs.patch # reverts the change which was added by Michael Sweet in Jan 2007 # which strips the word "recommended" from NickName in PPDs because # at least yast2-printer in SUSE needs it, compare the # 'Why not "recommend" PPDs in the NickName?' and the subsequent # 'RFC: New Driver Rating/Information Attributes' mail thread on [email protected]: -%patch103 +%patch103 -b do_not_strip_recommended_from_PPDs.orig # Patch104 cups-config-libs.patch fixes option --libs in cups-config script: -%patch104 +%patch104 -b cups-config-libs.orig %build # Remove ".SILENT" rule for verbose build output @@ -421,11 +425,20 @@ ln -s service %{buildroot}%{_sbindir}/rccups ln -s service %{buildroot}%{_sbindir}/rccups-lpd # Install /usr/lib/tmpfiles.d/cups.conf +# According to +# https://developers.redhat.com/blog/2016/09/20/managing-temporary-files-with-systemd-tmpfiles-on-rhel7/ +# d /var/spool/cups/tmp - - - 30d +# results that each file older than 30 days on /var/spool/cups/tmp will be deleted where a file +# will be considered unused only if atime, mtime and ctime are all older than the specified time. +# We use group 'root' for /run/cups/certs (instead of 'sys') +# d /run/cups/certs 0511 lp root - +# because of https://bugzilla.opensuse.org/show_bug.cgi?id=1042916 mkdir -p %{buildroot}%{_tmpfilesdir} cat > %{buildroot}%{_tmpfilesdir}/cups.conf <<EOF # See tmpfiles.d(5) for details +# Type(d=directory) Path Mode UID GID Age(until delete when cleaning) d /run/cups 0755 root lp - -d /run/cups/certs 0511 lp sys - +d /run/cups/certs 0511 lp root - d %{_localstatedir}/spool/cups/tmp - - - 30d EOF # Never run fdupes carelessly over the whole buildroot directory @@ -513,7 +526,6 @@ %config %{_sysconfdir}/cups/cupsd.conf.default %config %{_sysconfdir}/cups/cups-files.conf.default %config %{_sysconfdir}/cups/snmp.conf.default -%dir %attr(755,root,lp) %{_sysconfdir}/cups/interfaces %dir %attr(755,root,lp) %{_sysconfdir}/cups/ppd %dir %attr(700,root,lp) %{_sysconfdir}/cups/ssl %{_unitdir}/cups.service
