lp://qastaging/ubuntu/lucid-updates/hplip

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

139. By Marc Deslauriers on 2014-01-20

* SECURITY UPDATE: insecure temp file use in pkit.py
  - debian/patches/CVE-2013-6402.dpatch: remove logging to temp file in
    base/pkit.py.
  - CVE-2013-6402

138. By Marc Deslauriers on 2013-09-27

* SECURITY UPDATE: arbitrary file overwrite via temp file vulnerability
  - debian/patches/CVE-2011-2722.dpatch: remove insecure code from
    prnt/hpijs/hpcupsfax.cpp.
  - CVE-2011-2722
* SECURITY UPDATE: arbitrary file overwrite via temp file vulnerability
  - debian/patches/CVE-2013-0200.dpatch: use unpredictable temp file names
    in prnt/hpcups/HPCupsFilter.cpp, prnt/hpcups/SystemServices.cpp,
    prnt/hpijs/hpijs.cpp.
  - CVE-2013-0200
* debian/patches/00patch-opts: remove deprecated U option so we can
  manipulate this package in saucy.

137. By Marc Deslauriers on 2013-09-13

* SECURITY UPDATE: possible privilege escalation via policykit UID lookup
  race.
  - debian/patches/CVE-2013-4325.dpatch: pass system-bus-name as a
    subject instead of pid so policykit can get the information from the
    system bus in base/pkit.py.
  - CVE-2013-4325

136. By Marc Deslauriers on 2011-01-24

* SECURITY UPDATE: denial of service and possible arbitrary code
  execution via long SNMP response
  - debian/patches/CVE-2010-4267.dpatch: validate dLen in io/hpmud/pml.c.
  - CVE-2010-4267

135. By Till Kamppeter on 2010-04-12

* debian/hplip-dbg.install, debian/hplip.install, debian/control: Moved
  hp-check into hplip-dbg, as it is a debugging tool. Added dependency
  on libcups2-dev to hplip-dbg, as hp-check needs cups-config
  (LP: #530327).
* debian/hplip-cups.postinst, debian/hpijs.postinst,
  debian/hpijs-ppds.postinst: Updated also PPDs with version numbers like
  3.10.2rc1.9.

134. By Till Kamppeter on 2010-04-11

* debian/control: As we use HPIJS as default printer driver flavor again,
  let the "hplip" package recommend the "hpijs" package and not the
  "hplip-cups" package.
* debian/patches/remove-duplicate-entry-for-cp1700-in-drv-files.dpatch,
  debian/non-shipped-files.txt: Removed duplicate entry for the HP Color
  Inkjet Printer 1700, the wrong entry missed also the large (A3,
  SuperB, ...) paper sizes (LP: #290559).

133. By Till Kamppeter on 2010-04-09

[ Till Kamppeter ]
* debian/patches/make-commafy-correctly-work-with-python-2.dpatch:
  Installation of the proprietary plug-in did not work with some locales
  (LP: #525901).
* debian/hplip-cups.postinst, debian/hpijs.postinst: Switch back to HPIJS as
  default driver (migrate hpcups queues to HPIJS) as there are new problems
  with hpcups (LP: #553573, LP: #539708, LP: #538031, LP: #405116).

[ Mark Purcell ]
* Fix "can't add printer (Printer queue setup failed)" added debian/hplip.NEWS
  - CUPS requires user to be a member of lpadmin group. (Closes: #566692)
* Add Recommends: avahi-daemon "HP Color Laserjet CM1312nfi" (Closes: #564520)
* Add bug/presubj to hplip-cups, hplip-gui & hpijs
* Add hplip-cups.NEWS
* bug/script provide status message before hp-check
* Patch hp-check to check for group membership of lp & lpadmin

132. By Till Kamppeter on 2010-03-25

debian/patches/hp-systray-segfault-on-quit.dpatch: Fixed a hp-systray to
not segfaulting when quitting the program (LP: #546816).

131. By Till Kamppeter on 2010-03-24

debian/patches/simple-scan-as-default.dpatch: Make simple-scan the default
scanning frontend (LP: #539015).

130. By Till Kamppeter on 2010-03-23

* debian/control: Added lsb-release to the build dependencies, as we use
  lsb_release to determine whether we build on Ubuntu, to do Ubuntu-specific
  steps.
* debian/rules, debian/hplip.install: Install hp-plugin-ubuntu directly
  into debian/hplip/, as we cannot use debian/hplip.install for this Ubuntu-
  specific file.