[SECURITY] Fedora 19 Update: cups-filters-1.0.53-2.fc19

Tue Jun 10 02:53:28 UTC 2014

--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2014-5759
2014-04-29 03:23:17
--------------------------------------------------------------------------------

Name        : cups-filters
Product     : Fedora 19
Version     : 1.0.53
Release     : 2.fc19
URL         : http://www.linuxfoundation.org/collaborate/workgroups/openprinting/cups-filters
Summary     : OpenPrinting CUPS filters and backends
Description :
Contains backends, filters, and other software that was
once part of the core CUPS distribution but is no longer maintained by
Apple Inc. In addition it contains additional filters developed
independently of Apple, especially filters for the PDF-centric printing
workflow introduced by OpenPrinting.

--------------------------------------------------------------------------------
Update Information:

This update fixes two flaws and various bugs.

--------------------------------------------------------------------------------
ChangeLog:

* Fri May  9 2014 Jiri Popelka <jpopelka at redhat.com> - 1.0.53-2
- Return Tim's work-around patch for bug #768811.
* Mon Apr 28 2014 Jiri Popelka <jpopelka at redhat.com> - 1.0.53-1
- 1.0.53
* Wed Apr  2 2014 Jiri Popelka <jpopelka at redhat.com> - 1.0.41-6
- Remote command injection in cups-browsed (bug #1083327).
* Tue Mar 11 2014 Jiri Popelka <jpopelka at redhat.com> - 1.0.41-5
- Don't ship pdftoopvp (#1027557) and urftopdf (#1002947).
* Tue Nov 19 2013 Tim Waugh <twaugh at redhat.com> - 1.0.41-4
- Adjust filter costs so application/vnd.adobe-read-postscript input
  doesn't go via pstotiff (bug #1008166).
* Thu Nov 14 2013 Jaromír Končický <jkoncick at redhat.com> - 1.0.41-3
- Fix memory leaks in cups-browsed (bug #1027317).
* Wed Nov  6 2013 Tim Waugh <twaugh at redhat.com> - 1.0.41-2
- Include dbus so that colord support works (bug #1026928).
* Wed Oct 30 2013 Jiri Popelka <jpopelka at redhat.com> - 1.0.41-1
- 1.0.41 - PPD-less printing support
* Mon Oct 21 2013 Tim Waugh <twaugh at redhat.com> - 1.0.40-4
- Fix socket leaks in the BrowsePoll code (bug #1021512).
* Wed Oct 16 2013 Tim Waugh <twaugh at redhat.com> - 1.0.40-3
- Ship the gstoraster MIME conversion rule now we provide that filter
  (bug #1019261).
* Fri Oct 11 2013 Tim Waugh <twaugh at redhat.com> - 1.0.40-2
- Fix PDF landscape printing (bug #768811).
* Fri Oct 11 2013 Jiri Popelka <jpopelka at redhat.com> - 1.0.40-1
- 1.0.40
- Use new "hybrid" pdftops renderer.
* Thu Oct  3 2013 Jaromír Končický <jkoncick at redhat.com> - 1.0.39-1
- 1.0.39
- Removed obsolete patches "pdf-landscape" and "browsepoll-notifications"
* Tue Oct  1 2013 Tim Waugh <twaugh at redhat.com> - 1.0.38-4
- Use IPP notifications for BrowsePoll when possible (bug #975241).
* Tue Oct  1 2013 Tim Waugh <twaugh at redhat.com> - 1.0.38-3
- Fixes for some printf-type format mismatches (bug #1014093).
* Tue Sep 17 2013 Tim Waugh <twaugh at redhat.com> - 1.0.38-2
- Fix landscape printing for PDFs (bug #768811).
* Wed Sep  4 2013 Jiri Popelka <jpopelka at redhat.com> - 1.0.38-1
- 1.0.38
* Thu Aug 29 2013 Jaromír Končický <jkoncick at redhat.com> - 1.0.37-1
- 1.0.37.
* Tue Aug 27 2013 Jaromír Končický <jkoncick at redhat.com> - 1.0.36-5
- Added build dependency - font required for running tests
* Tue Aug 27 2013 Jaromír Končický <jkoncick at redhat.com> - 1.0.36-4
- Added checking phase (make check)
* Wed Aug 21 2013 Tim Waugh <twaugh at redhat.com> - 1.0.36-3
- Upstream patch to re-work filter costs (bug #998977). No longer need
  text filter costs patch as paps gets used by default now if
  installed.
* Mon Aug 19 2013 Marek Kasik <mkasik at redhat.com> - 1.0.36-2
- Rebuild (poppler-0.24.0)
* Tue Aug 13 2013 Tim Waugh <twaugh at redhat.com> - 1.0.36-1
- 1.0.36.
* Tue Aug 13 2013 Tim Waugh <twaugh at redhat.com> - 1.0.35-7
- Upstream patch to move in filters from ghostscript.
* Tue Jul 30 2013 Tim Waugh <twaugh at redhat.com> - 1.0.35-6
- Set cost for text filters to 200 so that the paps filter gets
  preference for the time being (bug #988909).
* Wed Jul 24 2013 Tim Waugh <twaugh at redhat.com> - 1.0.35-5
- Handle page-label when printing n-up as well.
* Tue Jul 23 2013 Tim Waugh <twaugh at redhat.com> - 1.0.35-4
- Added support for page-label (bug #987515).
* Thu Jul 11 2013 Jiri Popelka <jpopelka at redhat.com> - 1.0.35-3
- Rebuild (qpdf-5.0.0)
* Mon Jul  1 2013 Jiri Popelka <jpopelka at redhat.com> - 1.0.35-2
- add cups-browsed(8) and cups-browsed.conf(5)
- don't reverse lookup IP address in URI (#975822)
* Wed Jun 26 2013 Jiri Popelka <jpopelka at redhat.com> - 1.0.35-1
- 1.0.35
* Mon Jun 24 2013 Marek Kasik <mkasik at redhat.com> - 1.0.34-9
- Rebuild (poppler-0.22.5)
* Wed Jun 19 2013 Jiri Popelka <jpopelka at redhat.com> - 1.0.34-8
- fix the note we add in cups-browsed.conf
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1091565 - cups-filters: inadequate fix for CVE-2014-2707
        https://bugzilla.redhat.com/show_bug.cgi?id=1091565
  [ 2 ] Bug #1091568 - cups-filters: unsupported BrowseAllow value lets cups-browsed accept from all hosts
        https://bugzilla.redhat.com/show_bug.cgi?id=1091568
  [ 3 ] Bug #1083326 - CVE-2014-2707 cups-filters: remote command injection in cups-browsed
        https://bugzilla.redhat.com/show_bug.cgi?id=1083326
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program.  Use
su -c 'yum update cups-filters' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------