Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package cups for openSUSE:Factory checked in at 2022-06-03 14:16:31 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/cups (Old) and /work/SRC/openSUSE:Factory/.cups.new.1548 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "cups" Fri Jun 3 14:16:31 2022 rev:163 rq:980461 version:2.4.2 Changes: -------- --- /work/SRC/openSUSE:Factory/cups/cups.changes 2022-04-13 21:04:40.152551003 +0200 +++ /work/SRC/openSUSE:Factory/.cups.new.1548/cups.changes 2022-06-03 14:16:32.317306527 +0200 @@ -1,0 +2,46 @@ +Mon May 30 08:12:20 UTC 2022 - jsm...@suse.de + +- Version upgrade to 2.4.2: + See https://github.com/openprinting/cups/releases + CUPS 2.4.2 brings the fix for CVE-2022-26691 (#bsc1199474) + together with LibreSSL/OpenSSL and minimal AIX support. + * Fixed certificate strings comparison + for Local authorization (CVE-2022-26691) + * The `cupsFileOpen` function no longer opens files + for append in read-write mode (Issue #291) + * The cupsd daemon removed processing temporary + queue (Issue #364) + * Fixed delay in IPP backend if GNUTLS is used and endpoint + doesn't confirm closing the connection (Issue #365) + * Fixed conditional jump based on uninitialized value + in cups/ppd.c (Issue #329) + * Fixed CSS related issues in CUPS Web UI (Issue #344) + * Fixed copyright in CUPS Web UI trailer template (Issue #346) + * mDNS hostname in device uri is not resolved when installaling + a permanent IPP Everywhere queue (Issues #340, #343) + * The `lpstat` command now reports when the scheduler + is not running (Issue #352) + * Updated the man pages concerning the `-h` option (Issue #357) + * Re-added LibreSSL/OpenSSL support (Issue #362) + * Updated the Solaris smf service file (Issue #368) + * Fixed a regression in lpoptions option support (Issue #370) + * The scheduler now regenerates the PPD cache information after + changing the "cupsd.conf" file (Issue #371) + * Updated the scheduler to set "auth-info-required" + to "username,password" if a backend reports it needs + authentication info but doesn't set a method + for authentication (Issue #373) + * Updated the configure script to look for the OpenSSL library + the old way if pkg-config is not available (Issue #375) + * Fixed the prototype for the `httpWriteResponse` + function (Issue #380) + * Brought back minimal AIX support (Issue #389) + * `cupsGetResponse` did not always set the last error. + * Fixed a number of old references to the Apple CUPS web page. + * Restored the default/generic printer icon file + for the web interface. + * Removed old stylesheet classes that are no longer used + by the web interface. +- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.2 + +------------------------------------------------------------------- Old: ---- cups-2.4.1-source.tar.gz cups-2.4.1-source.tar.gz.sig New: ---- cups-2.4.2-source.tar.gz cups-2.4.2-source.tar.gz.sig ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ cups.spec ++++++ --- /var/tmp/diff_new_pack.pfCYGE/_old 2022-06-03 14:16:33.181307650 +0200 +++ /var/tmp/diff_new_pack.pfCYGE/_new 2022-06-03 14:16:33.185307655 +0200 @@ -30,18 +30,18 @@ # "zypper vcmp 2.3.b99 2.3.0" shows "2.3.b99 is older than 2.3.0" and # "zypper vcmp 2.2.99 2.3b6" show "2.2.99 is older than 2.3b6" so that # version upgrades from 2.2.x via 2.3.b* to 2.3.0 work: -Version: 2.4.1 +Version: 2.4.2 Release: 0 Summary: The Common UNIX Printing System License: Apache-2.0 Group: Hardware/Printing URL: https://openprinting.github.io/cups # To get Source0 go to https://github.com/OpenPrinting/cups/releases or use e.g. -# wget --no-check-certificate -O cups-2.4.1-source.tar.gz https://github.com/OpenPrinting/cups/releases/download/v2.4.1/cups-2.4.1-source.tar.gz -Source0: https://github.com/OpenPrinting/cups/releases/download/v2.4.1/cups-2.4.1-source.tar.gz +# wget --no-check-certificate -O cups-2.4.2-source.tar.gz https://github.com/OpenPrinting/cups/releases/download/v2.4.2/cups-2.4.2-source.tar.gz +Source0: https://github.com/OpenPrinting/cups/releases/download/v2.4.2/cups-2.4.2-source.tar.gz # To get Source1 go to https://github.com/OpenPrinting/cups/releases or use e.g. -# wget --no-check-certificate -O cups-2.4.1-source.tar.gz.sig https://github.com/OpenPrinting/cups/releases/download/v2.4.1/cups-2.4.1-source.tar.gz.sig -Source1: https://github.com/OpenPrinting/cups/releases/download/v2.4.1/cups-2.4.1-source.tar.gz.sig +# wget --no-check-certificate -O cups-2.4.2-source.tar.gz.sig https://github.com/OpenPrinting/cups/releases/download/v2.4.2/cups-2.4.2-source.tar.gz.sig +Source1: https://github.com/OpenPrinting/cups/releases/download/v2.4.2/cups-2.4.2-source.tar.gz.sig # To make Source2 use e.g. # gpg --keyserver keys.openpgp.org --recv-keys 7082A0A50A2E92640F3880E0E4522DCC9B246FF7 # gpg --export --armor 7082A0A50A2E92640F3880E0E4522DCC9B246FF7 >cups.keyring @@ -51,7 +51,7 @@ # To manually verify Source0 with Source1 and Source2 do e.g. # gpg --import cups.keyring # gpg --list-keys | grep -1 'Zdenek Dohnal' -# gpg --verify cups-2.4.1-source.tar.gz.sig cups-2.4.1-source.tar.gz +# gpg --verify cups-2.4.2-source.tar.gz.sig cups-2.4.2-source.tar.gz Source102: Postscript.ppd.gz Source105: Postscript-level1.ppd.gz Source106: Postscript-level2.ppd.gz @@ -318,7 +318,7 @@ %patch107 -p1 -b harden_cups.service.orig # Patch108 downgrade-autoconf-requirement.patch # downgrades the autoconf requirement to the autoconf available in Tumbleweed as of this writing: -%patch108 -p1 -b downgrade-autoconf-requirement.orig +%patch108 -b downgrade-autoconf-requirement.orig %build # Remove ".SILENT" rule for verbose build output ++++++ cups-2.4.1-source.tar.gz -> cups-2.4.2-source.tar.gz ++++++ /work/SRC/openSUSE:Factory/cups/cups-2.4.1-source.tar.gz /work/SRC/openSUSE:Factory/.cups.new.1548/cups-2.4.2-source.tar.gz differ: char 5, line 1 ++++++ downgrade-autoconf-requirement.patch ++++++ --- /var/tmp/diff_new_pack.pfCYGE/_old 2022-06-03 14:16:33.297307800 +0200 +++ /var/tmp/diff_new_pack.pfCYGE/_new 2022-06-03 14:16:33.301307806 +0200 @@ -1,8 +1,6 @@ -diff --git a/configure.ac b/configure.ac -index a8c6c1040..6ace74a8d 100644 ---- a/configure.ac -+++ b/configure.ac -@@ -9,8 +9,8 @@ dnl Licensed under Apache License v2.0. See the file "LICENSE" for more +--- configure.ac.orig 2022-05-26 08:17:21.000000000 +0200 ++++ configure.ac 2022-05-30 10:26:29.258674533 +0200 +@@ -9,8 +9,8 @@ dnl Licensed under Apache License v2.0. dnl information. dnl @@ -12,5 +10,5 @@ +AC_PREREQ([2.69]) dnl Package name and version... - AC_INIT([CUPS],[2.4.1],[https://github.com/openprinting/cups/issues],[cups],[https://openprinting.github.io/cups]) + AC_INIT([CUPS],[2.4.2],[https://github.com/openprinting/cups/issues],[cups],[https://openprinting.github.io/cups])
