linux/poky.git/meta/recipes-extended/cups, branch honister-3.4.2

cups: Fix missing installation of cups sysv init scripts

2021-11-24T21:12:50+00:00

The packageconfig needs to be --disable-systemd as documented in configure file for cups. With the current value "--without-systemd" the SYSTEM_DIR variable ends up being set to "no" It is caused by the --without-* section in configure file resulting in eval with_$ac_useropt=no ;; $ac_useropt is "systemd" causing the variable $with_systemd to be set to "no", because of below test if test ${with_systemd+y} then : withval=$with_systemd; SYSTEMD_DIR="$withval" else $as_nop SYSTEMD_DIR="" fi cups configure test for i if SYSTEMD_DIR is empty to decide if the init scripts need to be installed. A value of "no" results in that no init scripts is installed. With --disable-systemd it works as expected - installing the init files. Though cups should properly improve their configure script. (From OE-Core rev: e2518c2eba8c6e486aee3273dc2cba9ab51ffb69) Signed-off-by: Claus Stovgaard Signed-off-by: Richard Purdie (cherry picked from commit 967fdd2ba12f22d8e46600ff085833993a32cfeb) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

Convert to new override syntax

2021-08-02T14:44:10+00:00

This is the result of automated script conversion: scripts/contrib/convert-overrides.py converting the metadata to use ":" as the override character instead of "_". (From OE-Core rev: 42344347be29f0997cc2f7636d9603b1fe1875ae) Signed-off-by: Richard Purdie

cups: update to 2.3.3op2

2021-07-19T12:34:26+00:00

Apple are no longer maintaining CUPS, and future development is now happening under the OpenPrinting project: https://ftp.pwg.org/pub/pwg/liaison/openprinting/presentations/cups-plenary-may-2021.pdf Also stop disabling the manpage installation as manpages are useful, and remove some patch chunks that are not required. The CVE-2020-10001 patch is dropped as this is incorporated into 2.3.3op2. (From OE-Core rev: 53bd9a96a003a7103b8475f9c1ad7ef999e34f87) Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

cups: whitelist CVE-2021-25317

2021-05-18T11:43:00+00:00

This CVE relates to bad ownership of /var/log/cups, which we don't have. (From OE-Core rev: 0792312f3637ec160d2ef90781a8cb1f75b84940) Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

cups: Turn gnutls into a packageconfig knob

2021-04-20T12:56:48+00:00

Disable it by default (From OE-Core rev: 438d00af14a0cc108a25b36bf37502f1383865be) Signed-off-by: Khem Raj Signed-off-by: Richard Purdie

cups: fix CVE-2020-10001

2021-02-26T15:21:20+00:00

A buffer (read) overflow in the ippReadIO function. References: https://nvd.nist.gov/vuln/detail/CVE-2020-10001 Upstream patches: https://github.com/OpenPrinting/cups/commit/efbea1742bd30f842fbbfb87a473e5c84f4162f9 (From OE-Core rev: 90eba79bf6f623aa3021eafd0141dad1c3059001) Signed-off-by: Stefan Ghinea Signed-off-by: Richard Purdie

cups: Fix reproducibility issues

2021-02-26T15:21:20+00:00

configure inspects the host's /etc/group for these configuration options, fix this to the correct values by using configure options. (From OE-Core rev: f16f9c727569414cd52862dcba18d8e423f4e961) Signed-off-by: Richard Purdie

cups: Mark CVE-2008-1033 as a non-issue

2020-12-21T22:29:57+00:00

It only applies to MacOS. (From OE-Core rev: cad1162f41c4c060744b98109514f761aa64d34a) Signed-off-by: Richard Purdie

cups: Mark CVE-2009-0032 as a non-issue

2020-12-21T22:29:57+00:00

The CVE was against a cups plugin which is obsolete and we don't include. (From OE-Core rev: 5f7cb9f6ec4b14f992d265b8c67a9f5589f9b842) Signed-off-by: Richard Purdie

cups: whitelist CVE-2018-6553

2020-11-24T10:27:45+00:00

This an Ububtu specific issue: The CUPS AppArmor profile incorrectly confined the dnssd backend due to use of hard links. A local attacker could possibly use this issue to escape confinement. This flaw affects versions prior to 2.2.7-1ubuntu2.1 in Ubuntu 18.04 LTS, prior to 2.2.4-7ubuntu3.1 in Ubuntu 17.10, prior to 2.1.3-4ubuntu0.5 in Ubuntu 16.04 LTS, and prior to 1.7.2-0ubuntu1.10 in Ubuntu 14.04 LTS (From OE-Core rev: 22e89983a8f83a369d83bc67e4f3492bc50db648) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie