Subject: CVS commit: pkgsrc/doc
To: None <pkgsrc-changes@NetBSD.org>
From: Johnny C. Lam <jlam@netbsd.org>
List: pkgsrc-changes
Date: 01/06/2005 07:26:41
Module Name:	pkgsrc
Committed By:	jlam
Date:		Thu Jan  6 07:26:41 UTC 2005

Modified Files:
	pkgsrc/doc: CHANGES

Log Message:
Update print/cups to 1.1.23.  Changes from version 1.1.22 include:

- The scheduler's is_path_absolute() code could cause a DoS (STR #1042)
- The scheduler's device loading code used the wrong size limits for the
  make/model and info parameters (STR #1035)
- The PNG loading code did not use a "long unsigned integer" format
  specifier for the width and height (STR #1032)
- The web interface only showed the first 4 or 8 characters of
  "{variable-name}" for undefined template variables (STR #1031)
- The hpgltops filter did not handle a common PCL command to enter
  HP-GL/2 mode (STR #1037)
- The scheduler no longer sends the page-set option when printing banner
  pages (STR #995)
- The hpgltops filter contained two buffer overflows that could
  potentially allow remote access to the "lp" account (STR #1024)
- The lppasswd command did not protect against file descriptor or ulimit
  attacks (STR #1023)
- The "lpc status" command used the wrong resource path when querying
  the list of printers and jobs, causing unnecessary authentication
  requests (STR #1018)
- The httpWait() function did not handle signal interruptions (STR #1020)
- The USB backend used the wrong size status variable when checking the
  printer status (STR #1017)
- The scheduler did not delete classes from other classes or implicit
  classes, which could cause a crash (STR #1015)
- The IPP backend now logs the remote print job ID at log level NOTICE
  instead of INFO (so it shows up in the error_log file...)


To generate a diff of this commit:
cvs rdiff -r1.8625 -r1.8626 pkgsrc/doc/CHANGES

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.