Merge changes from CUPS 1.5svn-r9198.

[thirdparty/cups.git] / CHANGES-1.4.txt

diff --git a/CHANGES-1.4.txt b/CHANGES-1.4.txt
index 3bd701b819f2bfe0bb500db433e919f6939a9794..5dac60fbc9026175c572e17925b9a282c1167df2 100644 (file)
--- a/CHANGES-1.4.txt
+++ b/CHANGES-1.4.txt
@@ -1,9 +1,58 @@
 CHANGES-1.4.txt
 ---------------
 
+CHANGES IN CUPS V1.4.5
+
+       - Documentation fixes (STR #3542)
+       - Fixed the Solaris SMF configuration file for cups-lpd (STR #3611)
+       - The scheduler did not set the notify-subscribed-event attribute when
+         delivering printer-added or printer-modified events (STR #3608)
+       - The mailto notifier could get into an infinite loop (STR #3609)
+       - Date/time information was not shown in banner pages.
+       - Relational operators were broken in #if/#elif/#else/#endif expressions
+         for the PPD compiler.
+       - Moving a job via the web interface failed without asking for
+         authentication (STR #3559)
+       - The scheduler now clears the printer-state-reasons when the driver is
+         changed (STR #3570)
+       - The web interface did not allow a user to change the driver
+         (STR #3537, STR #3601)
+       - The scheduler was not setting the PATH_INFO environment variable when
+         needed (STR #3600)
+       - The scheduler incorrectly set the CUPSD_AUTH_TYPE environment
+         variable instead of AUTH_TYPE (STR #3599)
+       - Fixed a buffer overrun in the PPD compiler (STR #3594)
+       - Fixed some additional IPP job template attribute mapping issues in the
+         scheduler.
+
+
 CHANGES IN CUPS V1.4.4
 
-       - Documentation updates (STR #3453)
+       - Documentation updates (STR #3453, STR #3527, STR #3528, STR #3529)
+       - Security: The fix for CVE-2009-3553 was incomplete (STR #3490)
+       - Security: The texttops filter did not check the results of allocations
+         (STR #3516)
+       - Security: The web admin interface could disclose the contents of
+         memory (STR #3577)
+       - Security: CUPS could overwrite files as root in directories owned or
+         writable by non-root users (STR #3510)
+       - The cups-config utility did not return the correct linker options on
+         AIX (STR #3587)
+       - Fixed some IPP conformance issues with the scheduler's
+         ippget-event-life, operations-supported, output-bin, and sides
+         attributes (STR #3554)
+       - The OpenSSL interfaces have been made thread-safe and the GNU TLS
+         interface is explicitly forbidden when threading is enabled
+         (STR #3461)
+       - Fixed an IPP conformance issue with the scheduler's Send-Document
+         implementation (STR #3514)
+       - Added additional validation checks for the 1284 device ID (STR #3534)
+       - Fixed a problem with the RPM spec file (STR #3544)
+       - The lpstat command did not limit the job list to the specified
+         printers (STR #3541)
+       - The cupsfilter command did not set the RIP_MAX_CACHE environment
+         variable (STR #3531)
+       - Fixed support for media-col and page size variants (STR #3394)
        - The PostScript filter did not support all media selection options for
          the first page (STR #3525)
        - The scheduler did not always remove job control files (STR #3425)
@@ -38,6 +87,8 @@ CHANGES IN CUPS V1.4.3
 
        - SECURITY: The scheduler could try responding on a closed client
          connection, leading to a crash (STR #3200)
+       - SECURITY: The lppasswd program allowed the localization files to be
+         overridden when running in setuid mode (STR #3482)
        - Localization updates (STR #3352, STR #3409, STR #3422, STR #3452,
          STR #3473, STR #3502)
        - Documentation updates (STR #3451, STR #3504)