** Tags removed: sts-sponsor-slashd
--
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to cups-filters in Ubuntu.
https://bugs.launchpad.net/bugs/1848210
Title:
ghostscript: ensure update of cups-filter
Status in cups-filters package in Ubuntu:
Invalid
Status in ghostscript package in Ubuntu:
Fix Released
Status in cups-filters source package in Xenial:
Invalid
Status in ghostscript source package in Xenial:
In Progress
Status in cups-filters source package in Bionic:
Invalid
Status in ghostscript source package in Bionic:
In Progress
Bug description:
[Impact]
* After an update of ghostscript but not cups-filters
users may hit errors printing PDF files (LP#1828401).
* This is possible as Landscape does not consider the
-security pocket (has both ghostscript/cups-filters)
but rather USN notices and ghostscript had a notice [0].
The regression on cups-filters was identified later,
and doesn't warrant a USN notice.
* So, to ensure that ghostscript and cups-filters are
both updated, add a versioned 'Breaks:' relationship
to ghostscript for older cups-filters versions which
are not yet fixed.
Per Debian Policy [1]:
"""
Normally a Breaks entry will have an “earlier than” version clause;
such a Breaks is introduced in the version ... [that] reveals a bug
in earlier versions of the broken package ...
This use of Breaks will inform higher-level package management tools
that the broken package must be upgraded before the new one.
"""
* A versioned 'Depends:' relationship is not possible
as ghostscript doesn't depend on cups-filters, thus
it's possible to have ghostscript installed without
cups-filters at all.
* This doesn't fix the current situation with Landscape
and USNs so this same problem might still occur again,
but at least it is already in place on future updates.
[Test Case]
* Install cups-filters version without fix for LP#1828401:
1.20.2-0ubuntu3 in Bionic, and 1.8.3-2ubuntu3.4 in Xenial.
* Update ghostscript to/later than fix for CVE-2019-3839-1/-2
9.26~dfsg+0-0ubuntu0.18.04.9 in Bionic / .16.04.9 in Xenial.
* Notice it does _not_ update cups-filters to version with fix:
1.20.2-0ubuntu3.1 in Bionic, and 1.8.3-2ubuntu3.5 in Xenial.
* $ wget -O ppd-with-pdf-support.ppd \
'http://www.openprinting.org/ppd-o-matic.php?driver=hl7x0&printer=Brother-HL-1020&show=1'
* $ wget -O dummy.pdf \
https://www.w3.org/WAI/ER/tests/xhtml/testfiles/resources/pdf/dummy.pdf
* $ foomatic-rip -v --ppd ppd-with-pdf-support.ppd dummy.pdf
...
Filetype: PDF
GPL Ghostscript 9.26: Unrecoverable error, exit code 1
Process is dying with "Unable to determine number of pages, page count: -1
", exit stat 3
...
* Note it's broken.
* Install ghostscript (test) packages with the relationships
'Breaks: cups-filters (<< 1.20.2-0ubuntu3.1)' in Bionic or
'Breaks: ..., cups-filters (<< 1.8.3-2ubuntu3.5)' in Xenial.
* Note it _does_ update cups-filters to version with fix.
* $ foomatic-rip -v --ppd ppd-with-pdf-support.ppd dummy.pdf
...
Filetype: PDF
File contains 1 pages
Starting renderer with command: <...>
...
* Note it's now working.
[Regression Potential]
* Low. This only causes an update to cups-filters to a version
that fixes an already identified/resolved problem (LP#1828401),
which is available in bionic- & xenial-updates since May 2019.
[Other Info]
* This is only required in Xenial and Bionic.
* Trusty doesn't have the ghostscript update that causes the problem.
* Disco/Eoan have the cups-filters fix that it requires (1.22.5+).
[Links]
[0] https://usn.ubuntu.com/3970-1/
[1]
https://www.debian.org/doc/debian-policy/ch-relationships.html#packages-which-break-other-packages-breaks
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/cups-filters/+bug/1848210/+subscriptions
--
Mailing list: https://launchpad.net/~desktop-packages
Post to : desktop-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~desktop-packages
More help : https://help.launchpad.net/ListHelp
