[Bug 1848210] Re: ghostscript: ensure update of cups-filter
** Tags removed: sts-sponsor-slashd -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1848210 Title: ghostscript: ensure update of cups-filter To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/cups-filters/+bug/1848210/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1848210] Re: ghostscript: ensure update of cups-filter
** Patch added: "lp1848210_bionic.debdiff" https://bugs.launchpad.net/ubuntu/+source/ghostscript/+bug/1848210/+attachment/5297502/+files/lp1848210_bionic.debdiff -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1848210 Title: ghostscript: ensure update of cups-filter To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/cups-filters/+bug/1848210/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1848210] Re: ghostscript: ensure update of cups-filter
** Patch added: "lp1848210_xenial.debdiff" https://bugs.launchpad.net/ubuntu/+source/ghostscript/+bug/1848210/+attachment/5297503/+files/lp1848210_xenial.debdiff ** Changed in: cups-filters (Ubuntu) Status: New => Invalid ** Changed in: cups-filters (Ubuntu Xenial) Status: New => Invalid ** Changed in: cups-filters (Ubuntu Bionic) Status: New => Invalid ** Changed in: cups-filters (Ubuntu Xenial) Assignee: Mauricio Faria de Oliveira (mfo) => (unassigned) ** Changed in: cups-filters (Ubuntu Bionic) Assignee: Mauricio Faria de Oliveira (mfo) => (unassigned) ** Changed in: cups-filters (Ubuntu Xenial) Importance: Medium => Undecided ** Changed in: cups-filters (Ubuntu Bionic) Importance: Medium => Undecided -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1848210 Title: ghostscript: ensure update of cups-filter To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/cups-filters/+bug/1848210/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1848210] Re: ghostscript: ensure update of cups-filter
After discussing this with Eric (slashd) and Marc (mdeslaur), it seems like the Breaks: approach is indeed the way to go. Nonetheless, it doesn't warrant an USN notice (security-only), which is the bit that could make Landscape (problem trigger) to pick up the new ghostscript fix then update cups-filters. So, we agreed on likely folding this fix/update into another SRU, as the impact to other audiences (non-Landscape) is small, because both ghostscript/cups-filters are on -security pocket. If other users are hit by this issue, we can sure enough revisit that option and consider some form to deliver it. cheers, Mauricio -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1848210 Title: ghostscript: ensure update of cups-filter To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/cups-filters/+bug/1848210/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1848210] Re: ghostscript: ensure update of cups-filter
** Description changed: [Impact] * After an update of ghostscript but not cups-filters -(which is possible) users may hit errors printing PDF files (LP#1828401). + + * This is possible as Landscape does not consider the +-security pocket (has both ghostscript/cups-filters) +but rather USN notices and ghostscript had a notice [0]. +The regression on cups-filters was identified later, +and doesn't warrant a USN notice. * So, to ensure that ghostscript and cups-filters are both updated, add a versioned 'Breaks:' relationship to ghostscript for older cups-filters versions which are not yet fixed. Per Debian Policy [1]: """ Normally a Breaks entry will have an “earlier than” version clause; such a Breaks is introduced in the version ... [that] reveals a bug in earlier versions of the broken package ... This use of Breaks will inform higher-level package management tools that the broken package must be upgraded before the new one. """ * A versioned 'Depends:' relationship is not possible as ghostscript doesn't depend on cups-filters, thus it's possible to have ghostscript installed without cups-filters at all. + + * This doesn't fix the current situation with Landscape +and USNs so this same problem might still occur again, +but at least it is already in place on future updates. [Test Case] * Install cups-filters version without fix for LP#1828401: 1.20.2-0ubuntu3 in Bionic, and 1.8.3-2ubuntu3.4 in Xenial. * Update ghostscript to/later than fix for CVE-2019-3839-1/-2 9.26~dfsg+0-0ubuntu0.18.04.9 in Bionic / .16.04.9 in Xenial. * Notice it does _not_ update cups-filters to version with fix: 1.20.2-0ubuntu3.1 in Bionic, and 1.8.3-2ubuntu3.5 in Xenial. * $ wget -O ppd-with-pdf-support.ppd \ 'http://www.openprinting.org/ppd-o-matic.php?driver=hl7x0=Brother-HL-1020=1' * $ wget -O dummy.pdf \ https://www.w3.org/WAI/ER/tests/xhtml/testfiles/resources/pdf/dummy.pdf * $ foomatic-rip -v --ppd ppd-with-pdf-support.ppd dummy.pdf ... Filetype: PDF GPL Ghostscript 9.26: Unrecoverable error, exit code 1 Process is dying with "Unable to determine number of pages, page count: -1 ", exit stat 3 ... * Note it's broken. * Install ghostscript (test) packages with the relationships 'Breaks: cups-filters (<< 1.20.2-0ubuntu3.1)' in Bionic or 'Breaks: ..., cups-filters (<< 1.8.3-2ubuntu3.5)' in Xenial. * Note it _does_ update cups-filters to version with fix. * $ foomatic-rip -v --ppd ppd-with-pdf-support.ppd dummy.pdf ... Filetype: PDF File contains 1 pages Starting renderer with command: <...> ... * Note it's now working. [Regression Potential] * Low. This only causes an update to cups-filters to a version that fixes an already identified/resolved problem (LP#1828401), which is available in bionic- & xenial-updates since May 2019. [Other Info] * This is only required in Xenial and Bionic. * Trusty doesn't have the ghostscript update that causes the problem. * Disco/Eoan have the cups-filters fix that it requires (1.22.5+). - [1] https://www.debian.org/doc/debian-policy/ch-relationships.html - #packages-which-break-other-packages-breaks + [Links] + + [0] https://usn.ubuntu.com/3970-1/ + [1] https://www.debian.org/doc/debian-policy/ch-relationships.html#packages-which-break-other-packages-breaks -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1848210 Title: ghostscript: ensure update of cups-filter To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/cups-filters/+bug/1848210/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1848210] Re: ghostscript: ensure update of cups-filter
** Description changed: [Impact] * After an update of ghostscript but not cups-filters - (which is possible; eg unattended-upgrade/landscape) +(which is possible) users may hit errors printing PDF files (LP#1828401). - - * Landscape and unattended-upgrade allows packages -updates to security updates / USN-only, thus - ghostscript is updated for CVE-2019-3839-1 and -2 - (version 9.26~dfsg+0-0ubuntu0.18.04.9 and 16.04.9) - which may break printing PDF files on cups-filters. * So, to ensure that ghostscript and cups-filters are both updated, add a versioned 'Breaks:' relationship to ghostscript for older cups-filters versions which are not yet fixed. Per Debian Policy [1]: """ Normally a Breaks entry will have an “earlier than” version clause; such a Breaks is introduced in the version ... [that] reveals a bug in earlier versions of the broken package ... This use of Breaks will inform higher-level package management tools that the broken package must be upgraded before the new one. """ * A versioned 'Depends:' relationship is not possible as ghostscript doesn't depend on cups-filters, thus it's possible to have ghostscript installed without cups-filters at all. [Test Case] * Install cups-filters version without fix for LP#1828401: 1.20.2-0ubuntu3 in Bionic, and 1.8.3-2ubuntu3.4 in Xenial. * Update ghostscript to/later than fix for CVE-2019-3839-1/-2 9.26~dfsg+0-0ubuntu0.18.04.9 in Bionic / .16.04.9 in Xenial. * Notice it does _not_ update cups-filters to version with fix: 1.20.2-0ubuntu3.1 in Bionic, and 1.8.3-2ubuntu3.5 in Xenial. * $ wget -O ppd-with-pdf-support.ppd \ 'http://www.openprinting.org/ppd-o-matic.php?driver=hl7x0=Brother-HL-1020=1' * $ wget -O dummy.pdf \ https://www.w3.org/WAI/ER/tests/xhtml/testfiles/resources/pdf/dummy.pdf * $ foomatic-rip -v --ppd ppd-with-pdf-support.ppd dummy.pdf ... Filetype: PDF GPL Ghostscript 9.26: Unrecoverable error, exit code 1 Process is dying with "Unable to determine number of pages, page count: -1 ", exit stat 3 ... * Note it's broken. * Install ghostscript (test) packages with the relationships 'Breaks: cups-filters (<< 1.20.2-0ubuntu3.1)' in Bionic or 'Breaks: ..., cups-filters (<< 1.8.3-2ubuntu3.5)' in Xenial. * Note it _does_ update cups-filters to version with fix. * $ foomatic-rip -v --ppd ppd-with-pdf-support.ppd dummy.pdf ... Filetype: PDF File contains 1 pages Starting renderer with command: <...> ... * Note it's now working. [Regression Potential] * Low. This only causes an update to cups-filters to a version that fixes an already identified/resolved problem (LP#1828401), which is available in bionic- & xenial-updates since May 2019. [Other Info] * This is only required in Xenial and Bionic. * Trusty doesn't have the ghostscript update that causes the problem. * Disco/Eoan have the cups-filters fix that it requires (1.22.5+). [1] https://www.debian.org/doc/debian-policy/ch-relationships.html #packages-which-break-other-packages-breaks -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1848210 Title: ghostscript: ensure update of cups-filter To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/cups-filters/+bug/1848210/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1848210] Re: ghostscript: ensure update of cups-filter
$ pull-lp-source cups-filters xenial
debian/control:
.
Package: cups-filters
Architecture: any
Depends: ${shlibs:Depends},
${misc:Depends},
cups-filters-core-drivers (>= ${binary:Version}),
bc,
ghostscript (>= 9.02~),
imagemagick (>= 6.4~),
poppler-utils
$ pull-lp-source cups-filters bionic
debian/control:
Package: cups-filters
Architecture: any
Depends: ${shlibs:Depends},
${misc:Depends},
cups-filters-core-drivers (>= ${binary:Version}),
bc,
ghostscript (>= 9.02~),
poppler-utils
After more investigation, the Depends is already in place in both X/B.
- Eric
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1848210
Title:
ghostscript: ensure update of cups-filter
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/cups-filters/+bug/1848210/+subscriptions
--
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1848210] Re: ghostscript: ensure update of cups-filter
$ pull-lp-source cups-filters xenial
debian/control:
.
Package: cups-filters
Architecture: any
Depends: ${shlibs:Depends},
${misc:Depends},
cups-filters-core-drivers (>= ${binary:Version}),
bc,
ghostscript (>= 9.02~),
imagemagick (>= 6.4~),
poppler-utils
$ pull-lp-source cups-filter bionic
debian/control:
Package: cups-filters
Architecture: any
Depends: ${shlibs:Depends},
${misc:Depends},
cups-filters-core-drivers (>= ${binary:Version}),
bc,
ghostscript (>= 9.02~),
poppler-utils
The "Depends:" I was talking about is already in place, just need to
change the version.
** Changed in: cups-filters (Ubuntu Bionic)
Assignee: (unassigned) => Mauricio Faria de Oliveira (mfo)
** Changed in: cups-filters (Ubuntu Xenial)
Assignee: (unassigned) => Mauricio Faria de Oliveira (mfo)
** Changed in: cups-filters (Ubuntu Xenial)
Importance: Undecided => Medium
** Changed in: cups-filters (Ubuntu Bionic)
Importance: Undecided => Medium
** Changed in: ghostscript (Ubuntu)
Status: Invalid => Fix Released
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1848210
Title:
ghostscript: ensure update of cups-filter
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/cups-filters/+bug/1848210/+subscriptions
--
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1848210] Re: ghostscript: ensure update of cups-filter
** Tags added: sts-sponsor-slashd -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1848210 Title: ghostscript: ensure update of cups-filter To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/cups-filters/+bug/1848210/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1848210] Re: ghostscript: ensure update of cups-filter
I will be more favourable to do the other way around by adding a "Depends:" in cups-filters package for ghostscript version "X" ? Especially if cups-filters always needs ghostscript ? It will force ghostscript to get updated instead of making the package install to fails/breaks. At least it's worth testing IMHO that avenue before considering the current "Breaks:" approach. - Eric ** Also affects: cups-filters (Ubuntu) Importance: Undecided Status: New -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1848210 Title: ghostscript: ensure update of cups-filter To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/cups-filters/+bug/1848210/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1848210] Re: ghostscript: ensure update of cups-filter
I will be more favourable to do the other way around by adding a "Depends:" in cups-filters package for ghostscript version "X" ? Especially if cups-filters always needs ghostscript ? "Depends: ghostscript (>= CUPS_FILTER_VERSION)" to force ghostscript to get updated instead of making the package install to fails/breaks. At least it's worth testing IMHO that avenue before considering the current "Breaks:" approach. Eric -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1848210 Title: ghostscript: ensure update of cups-filter To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/cups-filters/+bug/1848210/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1848210] Re: ghostscript: ensure update of cups-filter
The approach to fix/deliver this is under discussion for a bit. We'll move forward once that's more clearly defined. ** Patch removed: "lp1848210_bionic.debdiff" https://bugs.launchpad.net/ubuntu/+source/ghostscript/+bug/1848210/+attachment/5297380/+files/lp1848210_bionic.debdiff ** Patch removed: "lp1848210_xenial.debdiff" https://bugs.launchpad.net/ubuntu/+source/ghostscript/+bug/1848210/+attachment/5297381/+files/lp1848210_xenial.debdiff -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1848210 Title: ghostscript: ensure update of cups-filter To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/ghostscript/+bug/1848210/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1848210] Re: ghostscript: ensure update of cups-filter
** Description changed: [Impact] * After an update of ghostscript but not cups-filters - (which is possible, including via Landscape tooling) + (which is possible; eg unattended-upgrade/landscape) users may hit errors printing PDF files (LP#1828401). - * Landscape allows packages updates to USN-only thus + * Landscape and unattended-upgrade allows packages +updates to security updates / USN-only, thus ghostscript is updated for CVE-2019-3839-1 and -2 (version 9.26~dfsg+0-0ubuntu0.18.04.9 and 16.04.9) which may break printing PDF files on cups-filters. * So, to ensure that ghostscript and cups-filters are both updated, add a versioned 'Breaks:' relationship to ghostscript for older cups-filters versions which are not yet fixed. Per Debian Policy [1]: """ Normally a Breaks entry will have an “earlier than” version clause; such a Breaks is introduced in the version ... [that] reveals a bug in earlier versions of the broken package ... This use of Breaks will inform higher-level package management tools that the broken package must be upgraded before the new one. """ * A versioned 'Depends:' relationship is not possible as ghostscript doesn't depend on cups-filters, thus it's possible to have ghostscript installed without cups-filters at all. [Test Case] * Install cups-filters version without fix for LP#1828401: 1.20.2-0ubuntu3 in Bionic, and 1.8.3-2ubuntu3.4 in Xenial. * Update ghostscript to/later than fix for CVE-2019-3839-1/-2 9.26~dfsg+0-0ubuntu0.18.04.9 in Bionic / .16.04.9 in Xenial. * Notice it does _not_ update cups-filters to version with fix: 1.20.2-0ubuntu3.1 in Bionic, and 1.8.3-2ubuntu3.5 in Xenial. * $ wget -O ppd-with-pdf-support.ppd \ 'http://www.openprinting.org/ppd-o-matic.php?driver=hl7x0=Brother-HL-1020=1' * $ wget -O dummy.pdf \ https://www.w3.org/WAI/ER/tests/xhtml/testfiles/resources/pdf/dummy.pdf * $ foomatic-rip -v --ppd ppd-with-pdf-support.ppd dummy.pdf ... Filetype: PDF GPL Ghostscript 9.26: Unrecoverable error, exit code 1 Process is dying with "Unable to determine number of pages, page count: -1 ", exit stat 3 ... * Note it's broken. * Install ghostscript (test) packages with the relationships 'Breaks: cups-filters (<< 1.20.2-0ubuntu3.1)' in Bionic or 'Breaks: ..., cups-filters (<< 1.8.3-2ubuntu3.5)' in Xenial. * Note it _does_ update cups-filters to version with fix. * $ foomatic-rip -v --ppd ppd-with-pdf-support.ppd dummy.pdf ... Filetype: PDF File contains 1 pages Starting renderer with command: <...> ... * Note it's now working. [Regression Potential] * Low. This only causes an update to cups-filters to a version that fixes an already identified/resolved problem (LP#1828401), which is available in bionic- & xenial-updates since May 2019. [Other Info] * This is only required in Xenial and Bionic. * Trusty doesn't have the ghostscript update that causes the problem. * Disco/Eoan have the cups-filters fix that it requires (1.22.5+). [1] https://www.debian.org/doc/debian-policy/ch-relationships.html #packages-which-break-other-packages-breaks -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1848210 Title: ghostscript: ensure update of cups-filter To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/ghostscript/+bug/1848210/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1848210] Re: ghostscript: ensure update of cups-filter
** Description changed: [Impact] * After an update of ghostscript but not cups-filters (which is possible, including via Landscape tooling) users may hit errors printing PDF files (LP#1828401). * Landscape allows packages updates to USN-only thus ghostscript is updated for CVE-2019-3839-1 and -2 (version 9.26~dfsg+0-0ubuntu0.18.04.9 and 16.04.9) which may break printing PDF files on cups-filters. * So, to ensure that ghostscript and cups-filters are both updated, add a versioned 'Breaks:' relationship to ghostscript for older cups-filters versions which are not yet fixed. + +Per Debian Policy [1]: + + """ + Normally a Breaks entry will have an “earlier than” version clause; + such a Breaks is introduced in the version ... [that] reveals a bug + in earlier versions of the broken package ... + + This use of Breaks will inform higher-level package management tools + that the broken package must be upgraded before the new one. + """ * A versioned 'Depends:' relationship is not possible as ghostscript doesn't depend on cups-filters, thus it's possible to have ghostscript installed without cups-filters at all. [Test Case] * Install cups-filters version without fix for LP#1828401: 1.20.2-0ubuntu3 in Bionic, and 1.8.3-2ubuntu3.4 in Xenial. * Update ghostscript to/later than fix for CVE-2019-3839-1/-2 9.26~dfsg+0-0ubuntu0.18.04.9 in Bionic / .16.04.9 in Xenial. * Notice it does _not_ update cups-filters to version with fix: 1.20.2-0ubuntu3.1 in Bionic, and 1.8.3-2ubuntu3.5 in Xenial. * $ wget -O ppd-with-pdf-support.ppd \ 'http://www.openprinting.org/ppd-o-matic.php?driver=hl7x0=Brother-HL-1020=1' * $ wget -O dummy.pdf \ https://www.w3.org/WAI/ER/tests/xhtml/testfiles/resources/pdf/dummy.pdf * $ foomatic-rip -v --ppd ppd-with-pdf-support.ppd dummy.pdf ... Filetype: PDF GPL Ghostscript 9.26: Unrecoverable error, exit code 1 Process is dying with "Unable to determine number of pages, page count: -1 ", exit stat 3 ... * Note it's broken. * Install ghostscript (test) packages with the relationships 'Breaks: cups-filters (<< 1.20.2-0ubuntu3.1)' in Bionic or 'Breaks: ..., cups-filters (<< 1.8.3-2ubuntu3.5)' in Xenial. * Note it _does_ update cups-filters to version with fix. * $ foomatic-rip -v --ppd ppd-with-pdf-support.ppd dummy.pdf ... Filetype: PDF File contains 1 pages Starting renderer with command: <...> ... * Note it's now working. [Regression Potential] * Low. This only causes an update to cups-filters to a version that fixes an already identified/resolved problem (LP#1828401), which is available in bionic- & xenial-updates since May 2019. + + [1] https://www.debian.org/doc/debian-policy/ch-relationships.html + #packages-which-break-other-packages-breaks ** Description changed: [Impact] * After an update of ghostscript but not cups-filters (which is possible, including via Landscape tooling) users may hit errors printing PDF files (LP#1828401). * Landscape allows packages updates to USN-only thus ghostscript is updated for CVE-2019-3839-1 and -2 (version 9.26~dfsg+0-0ubuntu0.18.04.9 and 16.04.9) which may break printing PDF files on cups-filters. * So, to ensure that ghostscript and cups-filters are both updated, add a versioned 'Breaks:' relationship to ghostscript for older cups-filters versions which are not yet fixed. -Per Debian Policy [1]: + Per Debian Policy [1]: - """ - Normally a Breaks entry will have an “earlier than” version clause; - such a Breaks is introduced in the version ... [that] reveals a bug - in earlier versions of the broken package ... + """ + Normally a Breaks entry will have an “earlier than” version clause; + such a Breaks is introduced in the version ... [that] reveals a bug + in earlier versions of the broken package ... - This use of Breaks will inform higher-level package management tools - that the broken package must be upgraded before the new one. - """ + This use of Breaks will inform higher-level package management tools + that the broken package must be upgraded before the new one. + """ * A versioned 'Depends:' relationship is not possible as ghostscript doesn't depend on cups-filters, thus it's possible to have ghostscript installed without cups-filters at all. [Test Case] * Install cups-filters version without fix for LP#1828401: 1.20.2-0ubuntu3 in Bionic, and 1.8.3-2ubuntu3.4 in Xenial. * Update ghostscript to/later than fix for CVE-2019-3839-1/-2 9.26~dfsg+0-0ubuntu0.18.04.9 in Bionic / .16.04.9 in Xenial. * Notice it does _not_ update cups-filters to version with
[Bug 1848210] Re: ghostscript: ensure update of cups-filter
** Patch added: "lp1848210_bionic.debdiff" https://bugs.launchpad.net/ubuntu/+source/ghostscript/+bug/1848210/+attachment/5297380/+files/lp1848210_bionic.debdiff -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1848210 Title: ghostscript: ensure update of cups-filter To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/ghostscript/+bug/1848210/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1848210] Re: ghostscript: ensure update of cups-filter
** Patch added: "lp1848210_xenial.debdiff" https://bugs.launchpad.net/ubuntu/+source/ghostscript/+bug/1848210/+attachment/5297381/+files/lp1848210_xenial.debdiff -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1848210 Title: ghostscript: ensure update of cups-filter To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/ghostscript/+bug/1848210/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1848210] Re: ghostscript: ensure update of cups-filter
Testing on Xenial --- Files) $ wget -O ppd-with-pdf-support.ppd 'http://www.openprinting.org/ppd-o-matic.php?driver=hl7x0 =Brother-HL-1020=1' $ wget -O dummy.pdf https://www.w3.org/WAI/ER/tests/xhtml/testfiles/resources/pdf/dummy.pdf Test 0) Before updating ghostscript or cups-filters $ dpkg -s cups-filters ghostscript | grep ^Version: Version: 1.8.3-2ubuntu3.4 Version: 9.26~dfsg+0-0ubuntu0.16.04.8 $ foomatic-rip -v --ppd ppd-with-pdf-support.ppd dummy.pdf ... Filetype: PDF File contains 1 pages Starting renderer with command: <...> ... Test 1) After updating ghostscript (not cups-filters) $ dpkg -s cups-filters ghostscript | grep ^Version: Version: 1.8.3-2ubuntu3.4 Version: 9.26~dfsg+0-0ubuntu0.16.04.11 $ foomatic-rip -v --ppd ppd-with-pdf-support.ppd dummy.pdf ... Filetype: PDF GPL Ghostscript 9.26: Unrecoverable error, exit code 1 Process is dying with "Unable to determine number of pages, page count: -1 ", exit stat 3 ... Test 2) Checking before updating ghostscript with test package (thus cups-filters too) Checking update of cups-filters with apt-get and apt: $ sudo apt-get install --dry-run ghostscript ... The following packages will be upgraded: cups-filters cups-filters-core-drivers ghostscript libgs9 libgs9-common ... Inst cups-filters [1.8.3-2ubuntu3.4] (1.8.3-2ubuntu3.5 Ubuntu:16.04/xenial-updates, Ubuntu:16.04/xenial-security [amd64]) Inst ghostscript [9.26~dfsg+0-0ubuntu0.16.04.11] (9.26~dfsg+0-0ubuntu0.16.04.11+test20191510b1 mfo-sf246942:16.04/xenial [amd64]) [] ... $ sudo apt install --dry-run ghostscript ... The following packages will be upgraded: cups-filters cups-filters-core-drivers ghostscript libgs9 libgs9-common ... Inst cups-filters [1.8.3-2ubuntu3.4] (1.8.3-2ubuntu3.5 Ubuntu:16.04/xenial-updates, Ubuntu:16.04/xenial-security [amd64]) Inst ghostscript [9.26~dfsg+0-0ubuntu0.16.04.11] (9.26~dfsg+0-0ubuntu0.16.04.11+test20191510b1 mfo-sf246942:16.04/xenial [amd64]) [] ... Test 3) After updating ghostscript with test package (thus cups-filters too) $ dpkg -s cups-filters ghostscript | grep ^Version: Version: 1.8.3-2ubuntu3.5 Version: 9.26~dfsg+0-0ubuntu0.16.04.11+test20191510b1 $ foomatic-rip -v --ppd ppd-with-pdf-support.ppd dummy.pdf ... Filetype: PDF File contains 1 pages Starting renderer with command: <...> ... -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1848210 Title: ghostscript: ensure update of cups-filter To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/ghostscript/+bug/1848210/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1848210] Re: ghostscript: ensure update of cups-filter
Test packages used for verification in comments #1 and #2 built successfully on all architectures, ppa:mfo/sf246942 [1]. [1] https://launchpad.net/~mfo/+archive/ubuntu/sf246942 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1848210 Title: ghostscript: ensure update of cups-filter To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/ghostscript/+bug/1848210/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1848210] Re: ghostscript: ensure update of cups-filter
Testing on Bionic --- Files) $ wget -O ppd-with-pdf-support.ppd 'http://www.openprinting.org/ppd-o-matic.php?driver=hl7x0 =Brother-HL-1020=1' $ wget -O dummy.pdf https://www.w3.org/WAI/ER/tests/xhtml/testfiles/resources/pdf/dummy.pdf Test 0) Before updating ghostscript or cups-filters $ dpkg -s cups-filters ghostscript | grep ^Version: Version: 1.20.2-0ubuntu3 Version: 9.26~dfsg+0-0ubuntu0.18.04.8 $ foomatic-rip -v --ppd ppd-with-pdf-support.ppd dummy.pdf ... Filetype: PDF File contains 1 pages Starting renderer with command: <...> ... Test 1) After updating ghostscript (not cups-filters) $ dpkg -s cups-filters ghostscript | grep ^Version: Version: 1.20.2-0ubuntu3 Version: 9.26~dfsg+0-0ubuntu0.18.04.11 $ foomatic-rip -v --ppd ppd-with-pdf-support.ppd dummy.pdf ... Filetype: PDF GPL Ghostscript 9.26: Unrecoverable error, exit code 1 Process is dying with "Unable to determine number of pages, page count: -1 ", exit stat 3 ... Test 2) Checking before updating ghostscript with test package (thus cups-filters too) Checking update of cups-filters with apt: $ sudo apt install --dry-run ghostscript ... The following packages will be upgraded: cups-filters ghostscript libgs9 libgs9-common ... Inst cups-filters [1.20.2-0ubuntu3] (1.20.2-0ubuntu3.1 Ubuntu:18.04/bionic-updates, Ubuntu:18.04/bionic-security [amd64]) Inst ghostscript [9.26~dfsg+0-0ubuntu0.18.04.11] (9.26~dfsg+0-0ubuntu0.18.04.11+test20191510b1 mfo-sf246942:18.04/bionic [amd64]) [] ... Checking update of cups-filters with apt-get: $ sudo apt-get install --dry-run ghostscript ... The following packages will be upgraded: cups-filters ghostscript libgs9 libgs9-common ... Inst cups-filters [1.20.2-0ubuntu3] (1.20.2-0ubuntu3.1 Ubuntu:18.04/bionic-updates, Ubuntu:18.04/bionic-security [amd64]) Inst ghostscript [9.26~dfsg+0-0ubuntu0.18.04.11] (9.26~dfsg+0-0ubuntu0.18.04.11+test20191510b1 mfo-sf246942:18.04/bionic [amd64]) [] ... Test 3) After updating ghostscript with test package (thus cups-filters too) $ dpkg -s cups-filters ghostscript | grep ^Version: Version: 1.20.2-0ubuntu3.1 Version: 9.26~dfsg+0-0ubuntu0.18.04.11+test20191510b1 $ foomatic-rip -v --ppd ppd-with-pdf-support.ppd dummy.pdf ... Filetype: PDF File contains 1 pages Starting renderer with command: <...> ... -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1848210 Title: ghostscript: ensure update of cups-filter To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/ghostscript/+bug/1848210/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1848210] Re: ghostscript: ensure update of cups-filter
** Description changed: - Add a Breaks: relationship to cups-filter to prevent LP#1828401. + [Impact] - Landscape allows packages updates to only USNs, so ghostscript - can be updated to a version that breaks the older cups-filters. + * After an update of ghostscript but not cups-filters +(which is possible, including via Landscape tooling) +users may hit errors printing PDF files (LP#1828401). - Patches to be provided shortly. + * Landscape allows packages updates to USN-only thus +ghostscript is updated for CVE-2019-3839-1 and -2 +(version 9.26~dfsg+0-0ubuntu0.18.04.9 and 16.04.9) +which may break printing PDF files on cups-filters. + + * So, to ensure that ghostscript and cups-filters are +both updated, add a versioned 'Breaks:' relationship +to ghostscript for older cups-filters versions which +are not yet fixed. + + * A versioned 'Depends:' relationship is not possible +as ghostscript doesn't depend on cups-filters, thus +it's possible to have ghostscript installed without +cups-filters at all. + + [Test Case] + + * Install cups-filters version without fix for LP#1828401: +1.20.2-0ubuntu3 in Bionic, and 1.8.3-2ubuntu3.4 in Xenial. + + * Update ghostscript to/later than fix for CVE-2019-3839-1/-2 +9.26~dfsg+0-0ubuntu0.18.04.9 in Bionic / .16.04.9 in Xenial. + + * Notice it does _not_ update of cups-filters. + + * $ wget -O ppd-with-pdf-support.ppd \ + 'http://www.openprinting.org/ppd-o-matic.php?driver=hl7x0=Brother-HL-1020=1' + + * $ wget -O dummy.pdf \ + https://www.w3.org/WAI/ER/tests/xhtml/testfiles/resources/pdf/dummy.pdf + + * $ foomatic-rip -v --ppd ppd-with-pdf-support.ppd dummy.pdf +... +Filetype: PDF +GPL Ghostscript 9.26: Unrecoverable error, exit code 1 +Process is dying with "Unable to determine number of pages, page count: -1 +", exit stat 3 +... + + * Note it's broken. + + * Install ghostscript (test) packages with the relationships +'Breaks: cups-filters (<< 1.20.2-0ubuntu3.1)' in Bionic or +'Breaks: ..., cups-filters (<< 1.8.3-2ubuntu3.5)' in Xenial. + + * Note it _does_ update cups-filters. + + * $ foomatic-rip -v --ppd ppd-with-pdf-support.ppd dummy.pdf +... +Filetype: PDF +File contains 1 pages +Starting renderer with command: <...> +... + + * Note it's now working. + + [Regression Potential] + + * Low. This only causes an update to cups-filters to a version +that fixes an already identified/resolved problem (LP#1828401), +which is available in bionic- & xenial-updates since May 2019. ** Description changed: [Impact] - * After an update of ghostscript but not cups-filters -(which is possible, including via Landscape tooling) -users may hit errors printing PDF files (LP#1828401). + * After an update of ghostscript but not cups-filters + (which is possible, including via Landscape tooling) + users may hit errors printing PDF files (LP#1828401). - * Landscape allows packages updates to USN-only thus -ghostscript is updated for CVE-2019-3839-1 and -2 -(version 9.26~dfsg+0-0ubuntu0.18.04.9 and 16.04.9) -which may break printing PDF files on cups-filters. + * Landscape allows packages updates to USN-only thus + ghostscript is updated for CVE-2019-3839-1 and -2 + (version 9.26~dfsg+0-0ubuntu0.18.04.9 and 16.04.9) + which may break printing PDF files on cups-filters. - * So, to ensure that ghostscript and cups-filters are -both updated, add a versioned 'Breaks:' relationship -to ghostscript for older cups-filters versions which -are not yet fixed. + * So, to ensure that ghostscript and cups-filters are + both updated, add a versioned 'Breaks:' relationship + to ghostscript for older cups-filters versions which + are not yet fixed. - * A versioned 'Depends:' relationship is not possible -as ghostscript doesn't depend on cups-filters, thus -it's possible to have ghostscript installed without -cups-filters at all. + * A versioned 'Depends:' relationship is not possible + as ghostscript doesn't depend on cups-filters, thus + it's possible to have ghostscript installed without + cups-filters at all. [Test Case] - * Install cups-filters version without fix for LP#1828401: -1.20.2-0ubuntu3 in Bionic, and 1.8.3-2ubuntu3.4 in Xenial. + * Install cups-filters version without fix for LP#1828401: + 1.20.2-0ubuntu3 in Bionic, and 1.8.3-2ubuntu3.4 in Xenial. - * Update ghostscript to/later than fix for CVE-2019-3839-1/-2 -9.26~dfsg+0-0ubuntu0.18.04.9 in Bionic / .16.04.9 in Xenial. + * Update ghostscript to/later than fix for CVE-2019-3839-1/-2 + 9.26~dfsg+0-0ubuntu0.18.04.9 in Bionic / .16.04.9 in Xenial. - * Notice it does _not_ update of cups-filters. + * Notice it does _not_ update cups-filters to version with fix: +1.20.2-0ubuntu3.1 in Bionic, and 1.8.3-2ubuntu3.5 in Xenial. - * $ wget -O
[Bug 1848210] Re: ghostscript: ensure update of cups-filter
** Summary changed: - ghostscript: add Breaks: relationship to cups-filter + ghostscript: ensure update of cups-filter -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1848210 Title: ghostscript: ensure update of cups-filter To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/ghostscript/+bug/1848210/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
