Branches for Saucy

Author: Till Kamppeter
Revision Date: 2013-10-10 12:04:57 UTC

* New upstream bug fix release 1.0.40:
   - pdftops: Introduced new "hybrid" renderer: Here usually
     Ghostscript is used, but if the printer is a Brother,
     Minolta, or Konica Minolta Poppler's pdftops gets used. This
     is a quirk rule to work around bugs in the PS interpreters
     of the printers (LP: #1097105, LP: #1053443, LP: #1205898, LP: #238129,
     LP: #1072915, LP: #293832).
   - Fixed format string issues and added __attribute__ wording
     to printf-like functions to catch any regressions. Thanks to
     Tim Waugh from Red Hat for the patch.
   - pdftops: Fix for landscape PDF handling. Do not use the
     command line options "-origpagesizes" and
     "-choosePaperByPDFPageSize" of Poppler's pdftops utility on
     already processed PDF data. Thanks to Tim Waugh from Red Hat
     for the patch.
   - cups-browsed: Improve the efficiency of BrowsePoll by using
     IPP notifications when possible. It falls back to the
     previous behaviour if it is not possible to use this
     optimization. Thanks to Tim Waugh from Red Hat for the patch.
* pdftops-only-use-origpagesizes-on-unprocessed-PDFs.patch: Removed patch
  backported from upstream.
* debian/rules: Added ./configure option "--with-pdftops=hybrid" to activate
  the hybrid rendering mode (LP: #1097105, LP: #1053443, LP: #1205898,
  LP: #238129, LP: #1072915, LP: #293832).

Author: Marc Deslauriers
Revision Date: 2014-03-11 10:52:15 UTC

* SECURITY UPDATE: arbitrary code execution via overflows in urftopdf
  - debian/patches/CVE-2013-647x.patch: check sizes in
    filter/urftopdf.cpp.
  - CVE-2013-6473
* SECURITY UPDATE: arbitrary code execution via overflows in pdftoopvp
  - debian/patches/CVE-2013-647x.patch: use gmallocn and gmallocn3 in
    filter/pdftoopvp/{oprs/OPVPSplash.cxx,OPVPOutputDev.cxx}.
  - CVE-2013-6474
  - CVE-2013-6475
* SECURITY UPDATE: arbitrary code execution via driver in pdftoopvp
  - debian/patches/CVE-2013-647x.patch: restrict driver path in
    filter/pdftoopvp/oprs/OPVPWrapper.cxx.
  - CVE-2013-6476

Author: Marc Deslauriers
Revision Date: 2014-03-11 10:52:15 UTC

* SECURITY UPDATE: arbitrary code execution via overflows in urftopdf
  - debian/patches/CVE-2013-647x.patch: check sizes in
    filter/urftopdf.cpp.
  - CVE-2013-6473
* SECURITY UPDATE: arbitrary code execution via overflows in pdftoopvp
  - debian/patches/CVE-2013-647x.patch: use gmallocn and gmallocn3 in
    filter/pdftoopvp/{oprs/OPVPSplash.cxx,OPVPOutputDev.cxx}.
  - CVE-2013-6474
  - CVE-2013-6475
* SECURITY UPDATE: arbitrary code execution via driver in pdftoopvp
  - debian/patches/CVE-2013-647x.patch: restrict driver path in
    filter/pdftoopvp/oprs/OPVPWrapper.cxx.
  - CVE-2013-6476

Author: Till Kamppeter
Revision Date: 2013-10-10 12:04:57 UTC

* New upstream bug fix release 1.0.40:
   - pdftops: Introduced new "hybrid" renderer: Here usually
     Ghostscript is used, but if the printer is a Brother,
     Minolta, or Konica Minolta Poppler's pdftops gets used. This
     is a quirk rule to work around bugs in the PS interpreters
     of the printers (LP: #1097105, LP: #1053443, LP: #1205898, LP: #238129,
     LP: #1072915, LP: #293832).
   - Fixed format string issues and added __attribute__ wording
     to printf-like functions to catch any regressions. Thanks to
     Tim Waugh from Red Hat for the patch.
   - pdftops: Fix for landscape PDF handling. Do not use the
     command line options "-origpagesizes" and
     "-choosePaperByPDFPageSize" of Poppler's pdftops utility on
     already processed PDF data. Thanks to Tim Waugh from Red Hat
     for the patch.
   - cups-browsed: Improve the efficiency of BrowsePoll by using
     IPP notifications when possible. It falls back to the
     previous behaviour if it is not possible to use this
     optimization. Thanks to Tim Waugh from Red Hat for the patch.
* pdftops-only-use-origpagesizes-on-unprocessed-PDFs.patch: Removed patch
  backported from upstream.
* debian/rules: Added ./configure option "--with-pdftops=hybrid" to activate
  the hybrid rendering mode (LP: #1097105, LP: #1053443, LP: #1205898,
  LP: #238129, LP: #1072915, LP: #293832).