« back to all changes in this revision
Viewing changes to debian/changelog
- browse files at revision 2
- compare with another revision
- download diff
- download tarball
- view history from revision 2
- Committer: Bazaar Package Importer
- Author(s): Martin Schulze
- Date: 2003-03-15 14:54:38 UTC
- Revision ID: james.westby@ubuntu.com-20030315145438-wvhdf01k99wvq846
Tags: 1:2000.05.07-4.3
* Non-maintainer upload by the Security Team
* Applied patch from SuSE to fix buffer overvlow and arbitrary file access
* Applied patch from SuSE to fix buffer overvlow and arbitrary file access
- files added:
- common_source/getcap.c
- debian
- files modified:
- common_source/common.c
added
removed
debian/changelog
1
lpr (1:2000.05.07-4.3) stable-security; urgency=high
2
3
* Non-maintainer upload by the Security Team
4
* Applied patch from SuSE to fix buffer overvlow and arbitrary file access
5
6
-- Martin Schulze <joey@infodrom.org> Sat, 15 Mar 2003 14:54:38 +0100
7
8
lpr (1:2000.05.07-4.2) unstable; urgency=low
9
10
* NMU
11
* Fix lpr -# handling (closes: #103562, #112523)
12
13
-- Julian Gilbey <jdg@debian.org> Thu, 21 Mar 2002 15:14:38 +0000
14
15
lpr (1:2000.05.07-4.1) unstable; urgency=low
16
17
* NMU
18
* handle non-tty remove's, patch in bts. Closes: #116728.
19
20
-- LaMont Jones <lamont@debian.org> Mon, 11 Mar 2002 11:37:43 -0700
21
22
lpr (1:2000.05.07-4) unstable; urgency=low
23
24
* Reverted to mktemp() for now, because for some inexplicable reason I
25
didn't notice that mkstemp() isn't a drop-in replacement
26
27
-- Adam Klein <aklein@debian.org> Thu, 18 Jan 2001 20:40:53 -0800
28
29
lpr (1:2000.05.07-3) unstable; urgency=low
30
31
* Applied patch from Matt Zimmerman <mdz@debian.org> to have lpd
32
itself parse hosts.{equiv,lpd} instead of using an internal glibc
33
function (closes: #67044)
34
* Modified lpr to use getopt() (closes: #51157)
35
* Removed suidmanager use
36
* Removed potato build stuff from rules
37
* Use mkstemp() in place of mktemp() in printjob.c
38
* Moved the master lockfile back to /var/run/lpd.pid for the Nth time
39
(closes: #80486)
40
41
-- Adam Klein <aklein@debian.org> Mon, 15 Jan 2001 15:17:34 -0800
42
43
lpr (1:2000.05.07-2) unstable; urgency=low
44
45
* Got rid of duplicate fclose()s in getcap.c (closes: #64199, #63929)
46
47
-- Adam Klein <aklein@debian.org> Tue, 16 May 2000 23:15:24 -0700
48
49
lpr (1:2000.05.07-1) unstable; urgency=low
50
51
* Now using OpenBSD as upstream source (may close many bugs)
52
53
-- Adam Klein <aklein@debian.org> Sun, 7 May 2000 21:40:41 -0700
54
55
lpr (1:0.48-1) unstable; urgency=low
56
57
* New upstream version; Security fixes:
58
+ Tighten host authentication
59
+ Don't let user supply arguments to sendmail
60
* Added note to BUGS section of lpr manpage about not support multiple
61
options after a dash (makes #51157 a wishlist bug)
62
63
-- Adam Klein <aklein@debian.org> Sat, 8 Jan 2000 01:38:12 -0800
64
65
lpr (1:0.46-1-3) unstable; urgency=low
66
67
* Moved socket back to /dev/printer after rereading the relevant
68
passage in the FHS
69
70
-- Adam Klein <aklein@debian.org> Wed, 8 Dec 1999 15:37:01 -0800
71
72
lpr (1:0.46-1-2) unstable; urgency=low
73
74
* Fixed up build files to make builds _really_ work on slink
75
* cron.weekly now checks that lpr is installed (closes: #49092)
76
* Policy 3.1.0: added Build-Depends
77
78
-- Adam Klein <aklein@debian.org> Thu, 11 Nov 1999 14:10:50 -0800
79
80
lpr (1:0.46-1-1) unstable; urgency=low
81
82
* New upstream version
83
* Once again, may fix some bugs
84
85
-- Adam Klein <aklein@debian.org> Tue, 26 Oct 1999 18:42:41 -0700
86
87
lpr (1:0.44-1-1) unstable; urgency=low
88
89
* New upstream version (stupid typo fix release)
90
* May fix bugs 45820, 47006, 48037
91
92
-- Adam Klein <aklein@debian.org> Sat, 23 Oct 1999 10:42:53 -0700
93
94
lpr (1:0.43-2-1) unstable; urgency=low
95
96
* Upped version number to correspond to upstream
97
* Should compile cleanly on slink
98
* Removed debhelper v2 support for now
99
100
-- Adam Klein <aklein@debian.org> Mon, 18 Oct 1999 22:03:35 -0700
101
102
lpr (1:0.43-1-1) unstable; urgency=low
103
104
* New upstream release
105
* Fixes two security problems: one permissions race, one symlink attack
106
* Removed BUGS section from printcap.5
107
108
-- Adam Klein <aklein@debian.org> Sat, 16 Oct 1999 14:15:48 -0700
109
110
lpr (1:0.42-1-1) unstable; urgency=low
111
112
* New upstream release
113
* Possible fix for bugs 45820, 46888, 46633, 47006
114
* Switch to using upstream versioning (makes it a bit
115
more confusing, but more correct)
116
* "No" is now the default in the postrm (closes: #46402)
117
* Removed install-stamp target
118
119
-- Adam Klein <aklein@debian.org> Mon, 11 Oct 1999 19:14:11 -0700
120
121
lpr (1:0.41.2-1) unstable; urgency=low
122
123
* New upstream version: 'sh' now works for remote printers (closes: #37625)
124
125
-- Adam Klein <aklein@debian.org> Mon, 20 Sep 1999 14:25:49 -0700
126
127
lpr (1:0.39.3-3) unstable; urgency=low
128
129
* Corrected location of example printcap file (closes: #44560)
130
131
-- Adam Klein <aklein@debian.org> Tue, 7 Sep 1999 22:58:22 -0700
132
133
lpr (1:0.39.3-2) unstable; urgency=low
134
135
* Updated to FHS compliance with new debhelper (Policy version 3.0.1)
136
* Check for existance of /usr/sbin/pac instead of doc dir
137
138
-- Adam Klein <aklein@debian.org> Mon, 6 Sep 1999 01:35:52 -0700
139
140
lpr (1:0.39.3-1) unstable; urgency=low
141
142
* New upstream version
143
144
-- Adam Klein <aklein@debian.org> Sun, 29 Aug 1999 10:26:22 -0700
145
146
lpr (1:0.39-1) unstable; urgency=low
147
148
* New upstream source
149
+ Possible fix for #36794
150
* Changed DEFUID to 7 (lp), fixes #36582
151
152
-- Adam Klein <aklein@debian.org> Sat, 7 Aug 1999 13:35:20 -0700
153
154
lpr (1:0.35-6) unstable; urgency=low
155
156
* Okay, here's the situation: lpd pid/lock file is in
157
/var/spool/lpd/lpd.lock, and that's the file the init script references
158
159
-- Adam Klein <aklein@debian.org> Mon, 12 Jul 1999 10:46:58 -0700
160
161
lpr (1:0.35-5) unstable; urgency=low
162
163
* Instead of including printcap in the package, it's now copied from
164
/usr/doc/lpr/examples if it doesn't exist; this seems much more
165
reasonable, as most people will be using magicfilter or apsfilter.
166
* Added info to control about why magicfilter/apsfilter should be
167
installed
168
* Also suggest gs
169
170
-- Adam Klein <aklein@debian.org> Thu, 1 Jul 1999 23:25:38 -0700
171
172
lpr (1:0.35-4) unstable; urgency=low
173
174
* update-mime is now run if upgrading from a version prior to 1:0.35-3
175
* Changed default printcap file to use /dev/lp0 (closes: #40537)
176
* Added a BUGS section to printcap.5 noting that the `sh' option doesn't
177
work for remote printers (makes #37625 a wishlist bug)
178
179
-- Adam Klein <aklein@debian.org> Wed, 30 Jun 1999 19:51:33 -0700
180
181
lpr (1:0.35-3) unstable; urgency=low
182
183
* Removed MIME entry, as it was breaking lynx and was apparently
184
going against the RFC (closes: #36943)
185
* Moved pid file back to /var/run/lpd.pid, just for fun :)
186
* Fixed up init script with help from Joey Hess (closes: #39185)
187
* Put quotes in the proper places in postrm (closes: #39457)
188
* Removed second killing of lpd, as it doesn't seem to run two
189
daemons when using remote printers (any more?). If I'm wrong,
190
please whack me over the head and I'll put it back.
191
192
-- Adam Klein <aklein@debian.org> Thu, 17 Jun 1999 10:03:45 -0700
193
194
lpr (1:0.35-2) unstable; urgency=low
195
196
* Added two 'sleep 1' commands to init script; this may fix the
197
"lpd mysteriously disappears" problem. (please test)
198
199
-- Adam Klein <aklein@debian.org> Tue, 8 Jun 1999 21:33:31 -0700
200
201
lpr (1:0.35-1) unstable; urgency=low
202
203
* New upstream version
204
+ Fixes the problem with remote users and filters: without 'rs',
205
the filter will run as user 'lp'. (closes: Bug#33687)
206
* Use dh_installmime
207
* No longer installs filter.{ps,pcl}. People should really be using
208
magicfilter or apsfilter or something. (Makes #33564 a wishlist bug)
209
210
-- Adam Klein <aklein@debian.org> Sat, 15 May 1999 11:38:08 -0700
211
212
lpr (1:0.33-7) unstable; urgency=low
213
214
* Okay, now it _really_ redirects stderr to /dev/null
215
216
-- Adam Klein <aklein@debian.org> Mon, 19 Apr 1999 08:03:08 -0700
217
218
lpr (1:0.33-6) unstable; urgency=low
219
220
* Only check that local users have an account if we need to run a filter
221
(part of #33687)
222
* Added info on this to README.debian
223
* Added PATH=/bin:/usr/bin:/sbin:/usr/sbin to init script
224
* Really add '2>&1 >/dev/null' this time
225
226
-- Adam Klein <aklein@debian.org> Fri, 9 Apr 1999 19:53:19 -0700
227
228
lpr (1:0.33-5) unstable; urgency=low
229
230
* Added a '2>&1 >/dev/null' to the killing of the second lpd process
231
(closes: #38549)
232
233
-- Adam Klein <aklein@debian.org> Thu, 1 Apr 1999 22:52:27 -0800
234
235
lpr (1:0.33-4) unstable; urgency=low
236
237
* Include a minimal manpage for lpf (closes: #2556)
238
* Ask in the postrm if we should remove /var/spool/lpd (closes: #5165)
239
* Tweaked rules file
240
241
-- Adam Klein <aklein@debian.org> Sat, 20 Feb 1999 12:31:34 -0800
242
243
lpr (1:0.33-3) frozen unstable; urgency=low
244
245
* Reupload, including upstream source (DOH!)
246
* Upload to frozen
247
(This version is more secure than the old 5.9 based versions)
248
* Pristine upstream source
249
250
-- Adam Klein <aklein@debian.org> Fri, 5 Feb 1999 20:17:18 -0800
251
252
lpr (1:0.33-2) unstable; urgency=low
253
254
* Applied lpr-security.patch from Chris Evans <chris@ferret.lmh.ox.ac.uk>
255
256
-- Adam Klein <aklein@debian.org> Thu, 4 Feb 1999 08:38:07 -0800
257
258
lpr (1:0.33-1) unstable; urgency=low
259
260
* New upstream source from Red Hat.
261
* Possible fix for many bugs; please test.
262
* Cleaned up around the edges.
263
* New debian/rules file.
264
* Use --name with start-stop-daemon instead of pidfile.
265
* Moved pidfile (which is actually a lock file) to /var/spool/lpd.
266
* Updated to standards version 2.5.0.0 (no changes).
267
268
-- Adam Klein <aklein@debian.org> Sun, 29 Nov 1998 11:50:17 -0800
269
270
lpr (5.9-34) frozen unstable; urgency=high
271
272
* security fix: lpd no longer segfaults on requests from hosts with long
273
names. (part of Bug#29872)
274
275
-- Adam Klein <aklein@debian.org> Sat, 28 Nov 1998 23:06:25 -0800
276
277
lpr (5.9-33) unstable; urgency=low
278
279
* Added patches for the Alpha from Paul Slootman (closes: Bug#28549)
280
* This patch also cleans up the code here and there (thanks!)
281
282
-- Adam Klein <aklein@debian.org> Wed, 28 Oct 1998 19:59:15 -0800
283
284
lpr (5.9-32) unstable; urgency=low
285
286
* Correctly install MIME file (closes: Bug#27882)
287
* Install binaries with correct permissions by commenting out dh_fixperms in debian/rules
288
(closes: Bug#27884)
289
290
-- Adam Klein <aklein@debian.org> Tue, 13 Oct 1998 19:30:21 -0700
291
292
lpr (5.9-31) unstable; urgency=low
293
294
* Now includes MIME support (closes: Bug#25889)
295
296
-- Adam Klein <aklein@debian.org> Sat, 10 Oct 1998 11:44:38 -0700
297
298
lpr (5.9-30) unstable; urgency=low
299
300
* lpd now removes /var/run/lpd.pid when it exits (closes: Bug#24833)
301
(may also fix Bug#22837)
302
* Removed bashism from init script (closes: Bug#25364)
303
* init script now checks for existance of /usr/doc/lpr
304
(work-around for Bug#23756)
305
306
-- Adam Klein <aklein@debian.org> Wed, 12 Aug 1998 11:01:37 -0700
307
308
lpr (5.9-29) frozen unstable; urgency=low
309
310
* lprm no longer truncates the queue name to 2 characters
311
when communicating with remote printers (closes: important Bug#24440)
312
313
-- Adam Klein <aklein@debian.org> Thu, 2 Jul 1998 23:38:16 -0700
314
315
lpr (5.9-28) unstable; urgency=low
316
317
* Added "kill $(pidof lpd)" to init script (closes: Bug#22805)
318
319
-- Adam Klein <aklein@debian.org> Thu, 11 Jun 1998 10:03:08 -0700
320
321
lpr (5.9-27) frozen unstable; urgency=medium
322
323
* Work-around for release-critical Bug#22837: Added "sleep 2" to restart
324
(thanks to Nils Rennebarth)
325
* fs and fc are now read as unsigned longs (closes: Bug#16153)
326
(fix taken from RedHat version of lpr)
327
* Removed "TODO" file (it was _very_ out of date)
328
329
-- Adam Klein <aklein@debian.org> Tue, 2 Jun 1998 07:50:16 -0700
330
331
lpr (5.9-26.1) frozen unstable; urgency=high
332
333
* Non-maintainer release to fix buffer overflow in lprm
334
335
-- Hamish Moffatt <hamish@debian.org> Sun, 26 Apr 1998 01:42:00 +1100
336
337
lpr (5.9-26) frozen unstable; urgency=low
338
339
* Now "Depends" on netbase (closes: #20807)
340
* Moved heavily modified rc.lpd to debian/init
341
* Changes to debian/rules:
342
+ Requires version 0.72 or greater of debhelper
343
+ Use "dh_installinit --init-script=lpd"
344
+ Use dh_fixperms
345
346
-- Adam Klein <aklein@debian.org> Fri, 10 Apr 1998 16:27:46 -0400
347
348
lpr (5.9-25) frozen unstable; urgency=low
349
350
* Added patch for Alpha (closes: #19551)
351
352
-- Adam Klein <aklein@debian.org> Sun, 22 Mar 1998 01:19:11 -0500
353
354
lpr (5.9-24) unstable; urgency=low
355
356
* Tweaked preinst
357
* Removed "set -e" from init.d script
358
* Corrected spelling in description (closes: #18937)
359
* Removed dh_du call in debian/rules
360
* Symlink lpf.1 to undocumented.7
361
* Tweaked init.d script
362
* Changes made in the last version but not documented:
363
Added a cron.weekly script (closes: #7409)
364
Added "Suggests: magicfilter" to debian/control
365
366
-- Adam Klein <aklein@debian.org> Sat, 21 Feb 1998 21:41:53 -0800
367
368
lpr (5.9-23) unstable; urgency=low
369
370
* Uses debhelper
371
* lpr/lpr.c: fixed symlink inode validation (closes: #16205)
372
* Uses printcap.5 manpage from Jim Van Zandt <jrv@vanzandt.mv.com>
373
(closes: #16946)
374
* Tweaked preinst
375
* Updated to Standards-Version 2.4.0.0
376
377
-- Adam Klein <aklein@debian.org> Tue, 10 Feb 1998 20:28:57 -0800
378
379
lpr (5.9-22) unstable; urgency=low
380
381
* New maintainer
382
383
-- Adam Klein <aklein@debian.org> Tue, 10 Feb 1998 20:04:30 -0800
384
385
lpr (5.9-21) unstable; urgency=low
386
387
* recompiled against libc6
388
* lpd/lpd.c: use __ivaliduser instead of _validuser
389
* debian/rules: strip executables (#14564, #15323)
390
* lpr/lpr.c: set char host[] length to MAXHOSTNAMELEN
391
* lpr/lpr.c: print symlink inode validation info as unsigned
392
* debian/rules: clean target: remove */*~
393
* debian/rules: install debian/changelog (#12673)
394
395
-- Sven Rudolph <sr1@inf.tu-dresden.de> Mon, 22 Dec 1997 16:55:35 +0100
396
397
lpr (5.9-20) stable unstable; urgency=low
398
399
* debian/postinst: add $i to chown call
400
401
-- Sven Rudolph <sr1@inf.tu-dresden.de> Wed, 30 Jul 1997 23:10:15 +0200
402
403
lpr (5.9-19) stable unstable; urgency=low
404
405
* upload to stable with long changelog
406
* create logfiles in postinst (part of #7409)
407
* debian/control: extended description changed
408
409
-- Sven Rudolph <sr1@inf.tu-dresden.de> Wed, 30 Jul 1997 12:00:23 +0200
410
411
lpr (5.9-18) stable unstable; urgency=low
412
413
* upload to stable
414
415
-- Sven Rudolph <sr1@inf.tu-dresden.de> Sun, 20 Jul 1997 15:46:43 +0200
416
417
lpr (5.9-17) unstable; urgency=low
418
419
* debian/rules: don't reset permission/ownership for lpr etc.
420
421
-- Sven Rudolph <sr1@inf.tu-dresden.de> Tue, 15 Jul 1997 13:05:56 +0200
422
423
lpr (5.9-16) unstable; urgency=low
424
425
* lpr/lpr.c: avoid buffer overflow via strcat
426
427
-- Sven Rudolph <sr1@inf.tu-dresden.de> Wed, 9 Jul 1997 22:11:43 +0200
428
429
lpr (5.9-15) unstable; urgency=low
430
431
* lpc/cmds.c: added workaround for new HP-UX bug; by
432
Miquel van Smoorenburg <miquels@cistron.nl>
433
434
-- Sven Rudolph <sr1@inf.tu-dresden.de> Tue, 8 Jul 1997 23:29:25 +0200
435
436
lpr (5.9-14) unstable; urgency=low
437
438
* converted to Standards-Version: 2.1.0.0 (#7117)
439
* lprm/lprm.c: use FQDN for permission checking; patch by
440
Juan-Mariano de Goyeneche <goyenech@dat.etsit.upm.es>
441
(#5791, #6085, #7589, #7611, #8438, #8689, #11032)
442
* Makefile: don't set -N -s for LDFLAGS
443
444
-- Sven Rudolph <sr1@inf.tu-dresden.de> Sun, 6 Jul 1997 22:04:45 +0200
445
446
lpr (5.9-13) unstable; urgency=low
447
448
Sun Nov 24 21:03:28 1996 Sven Rudolph <sr1@inf.tu-dresden.de>
449
450
* lpr/lpr.c: fixed buffer-overflow security bug
451
452
Mon Jul 29 22:38:55 1996 Sven Rudolph <sr1@inf.tu-dresden.de>
453
454
* debian.rules: added multi-architecture support (Bug#3346)
455
456
* lpr/lpr.c: added fix for canonizing hostname (Bug#3034, patch
457
in Bug#3038)
458
459
* lpd/recvjob.c: chksize should work now (Bug#3935)
460
461
* debian.rules: fixed typo in clean rule, deleted some junk (Bug#2555)
462
463
* new maintainer
464
465
Sat Nov 25 17:04:59 EST 1995 D.J. Gregor <dgregor@gregor.com>
466
467
lpr-5.9-7:
468
469
* removed if filter from etc.printcap
470
471
* changed maintainer
472
473
474
Fri May 12 01:17:37 MET DST 1995 Peter Tobias <tobias@et-inf.fho-emden.de>
475
476
lpr-5.9-6:
477
478
* moved filter.ps/filter.pcl files to /etc and added them to
479
conffiles (Bug#858)
480
481
* Added a short notice about filter entries to /etc/printcap
Loggerhead is a web-based interface for Breezy
Version: 2.0.1