CHANGES.md

   1 CHANGES - 2.3.3 - 2020-04-24
   2 ============================
   3
   4 Changes in CUPS v2.3.3
   5 ----------------------
   6
   7 - CVE-2020-3898: The `ppdOpen` function did not handle invalid UI
   8   constraint.  `ppdcSource::get_resolution` function did not handle
   9   invalid resolution strings.
  10 - CVE-2019-8842: The `ippReadIO` function may under-read an extension
  11   field.
  12 - Fixed WARNING_OPTIONS support for GCC 9.x
  13
  14 Changes in CUPS v2.3.2
  15 ----------------------
  16
  17 - Localization updates.
  18
  19
  20 Changes in CUPS v2.3.1
  21 ----------------------
  22
  23 - Documentation updates (Issue #5661, #5674, #5682)
  24 - CVE-2019-2228: The `ippSetValuetag` function did not validate the default
  25   language value.
  26 - Fixed a crash bug in the web interface (Issue #5621)
  27 - The PPD cache code now looks up page sizes using their dimensions
  28   (Issue #5633)
  29 - PPD files containing "custom" option keywords did not work (Issue #5639)
  30 - Added a workaround for the scheduler's systemd support (Issue #5640)
  31 - On Windows, TLS certificates generated on February 29 would likely fail
  32   (Issue #5643)
  33 - Added a DigestOptions directive for the `client.conf` file to control whether
  34   MD5-based Digest authentication is allowed (Issue #5647)
  35 - Fixed a bug in the handling of printer resource files (Issue #5652)
  36 - The libusb-based USB backend now reports an error when the distribution
  37   permissions are wrong (Issue #5658)
  38 - Added paint can labels to Dymo driver (Issue #5662)
  39 - The `ippeveprinter` program now supports authentication (Issue #5665)
  40 - The `ippeveprinter` program now advertises DNS-SD services on the correct
  41   interfaces, and provides a way to turn them off (Issue #5666)
  42 - The `--with-dbusdir` option was ignored by the configure script (Issue #5671)
  43 - Sandboxed applications were not able to get the default printer (Issue #5676)
  44 - Log file access controls were not preserved by `cupsctl` (Issue #5677)
  45 - Default printers set with `lpoptions` did not work in all cases (Issue #5681,
  46   Issue #5683, Issue #5684)
  47 - Fixed an error in the jobs web interface template (Issue #5694)
  48 - Fixed an off-by-one error in `ippEnumString` (Issue #5695)
  49 - Fixed some new compiler warnings (Issue #5700)
  50 - Fixed a few issues with the Apple Raster support (rdar://55301114)
  51 - The IPP backend did not detect all cases where a job should be retried using
  52   a raster format (rdar://56021091)
  53 - Fixed spelling of "fold-accordion".
  54 - Fixed the default common name for TLS certificates used by `ippeveprinter`.
  55 - Fixed the option names used for IPP Everywhere finishing options.
  56 - Added support for the second roll of the DYMO Twin/DUO label printers.
  57
  58
  59 Changes in CUPS v2.3.0
  60 ----------------------
  61
  62 - CVE-2019-8696 and CVE-2019-8675: Fixed SNMP buffer overflows (rdar://51685251)
  63 - Added a GPL2/LGPL2 exception to the new CUPS license terms.
  64 - Documentation updates (Issue #5604)
  65 - Localization updates (Issue #5637)
  66 - Fixed a bug in the scheduler job cleanup code (Issue #5588)
  67 - Fixed builds when there is no TLS library (Issue #5590)
  68 - Eliminated some new GCC compiler warnings (Issue #5591)
  69 - Removed dead code from the scheduler (Issue #5593)
  70 - "make" failed with GZIP options (Issue #5595)
  71 - Fixed potential excess logging from the scheduler when removing job files
  72   (Issue #5597)
  73 - Fixed a NULL pointer dereference bug in `httpGetSubField2` (Issue #5598)
  74 - Added FIPS-140 workarounds for GNU TLS (Issue #5601, Issue #5622)
  75 - The scheduler no longer provides a default value for the description
  76   (Issue #5603)
  77 - The scheduler now logs jobs held for authentication using the error level so
  78   it is clear what happened (Issue #5604)
  79 - The `lpadmin` command did not always update the PPD file for changes to the
  80   `cupsIPPSupplies` and `cupsSNMPSupplies` keywords (Issue #5610)
  81 - The scheduler now uses both the group's membership list as well as the
  82   various OS-specific membership functions to determine whether a user belongs
  83   to a named group (Issue #5613)
  84 - Added USB quirks rule for HP LaserJet 1015 (Issue #5617)
  85 - Fixed some PPD parser issues (Issue #5623, Issue #5624)
  86 - The IPP parser no longer allows invalid member attributes in collections
  87   (Issue #5630)
  88 - The configure script now treats the "wheel" group as a potential system
  89   group (Issue #5638)
  90 - Fixed a USB printing issue on macOS (rdar://31433931)
  91 - Fixed IPP buffer overflow (rdar://50035411)
  92 - Fixed memory disclosure issue in the scheduler (rdar://51373853)
  93 - Fixed DoS issues in the scheduler (rdar://51373929)
  94 - Fixed an issue with unsupported "sides" values in the IPP backend
  95   (rdar://51775322)
  96 - The scheduler would restart continuously when idle and printers were not
  97   shared (rdar://52561199)
  98 - Fixed an issue with `EXPECT !name WITH-VALUE ...` tests.
  99 - Fixed a command ordering issue in the Zebra ZPL driver.
 100 - Fixed a memory leak in `ppdOpen`.
 101
 102
 103 Changes in CUPS v2.3rc1
 104 -----------------------
 105
 106 - The `cups-config` script no longer adds extra libraries when linking against
 107   shared libraries (Issue #5261)
 108 - The supplied example print documents have been optimized for size
 109   (Issue #5529)
 110 - The `cupsctl` command now prevents setting "cups-files.conf" directives
 111   (Issue #5530)
 112 - The "forbidden" message in the web interface is now explained (Issue #5547)
 113 - The footer in the web interface covered some content on small displays
 114   (Issue #5574)
 115 - The libusb-based USB backend now enforces read limits, improving print speed
 116   in many cases (Issue #5583)
 117 - The `ippeveprinter` command now looks for print commands in the "command"
 118   subdirectory.
 119 - The `ipptool` command now supports `$date-current` and `$date-start` variables
 120   to insert the current and starting date and time values, as well as ISO-8601
 121   relative time values such as "PT30S" for 30 seconds in the future.
 122
 123
 124 Changes in CUPS v2.3b8
 125 ----------------------
 126
 127 - Media size matching now uses a tolerance of 0.5mm (rdar://33822024)
 128 - The lpadmin command would hang with a bad PPD file (rdar://41495016)
 129 - Fixed a potential crash bug in cups-driverd (rdar://46625579)
 130 - Fixed a performance regression with large PPDs (rdar://47040759)
 131 - Fixed a memory reallocation bug in HTTP header value expansion
 132   (rdar://problem/50000749)
 133 - Timed out job submission now yields an error (Issue #5570)
 134 - Restored minimal support for the `Emulators` keyword in PPD files to allow
 135   old Samsung printer drivers to continue to work (Issue #5562)
 136 - The scheduler did not encode octetString values like "job-password" correctly
 137   for the print filters (Issue #5558)
 138 - The `cupsCheckDestSupported` function did not check octetString values
 139   correctly (Issue #5557)
 140 - Added support for `UserAgentTokens` directive in "client.conf" (Issue #5555)
 141 - Updated the systemd service file for cupsd (Issue #5551)
 142 - The `ippValidateAttribute` function did not catch all instances of invalid
 143   UTF-8 strings (Issue #5509)
 144 - Fixed an issue with the self-signed certificates generated by GNU TLS
 145   (Issue #5506)
 146 - Fixed a potential memory leak when reading at the end of a file (Issue #5473)
 147 - Fixed potential unaligned accesses in the string pool (Issue #5474)
 148 - Fixed a potential memory leak when loading a PPD file (Issue #5475)
 149 - Added a USB quirks rule for the Lexmark E120n (Issue #5478)
 150 - Updated the USB quirks rule for Zebra label printers (Issue #5395)
 151 - Fixed a compile error on Linux (Issue #5483)
 152 - The lpadmin command, web interface, and scheduler all queried an IPP
 153   Everywhere printer differently, resulting in different PPDs for the same
 154   printer (Issue #5484)
 155 - The web interface no longer provides access to the log files (Issue #5513)
 156 - Non-Kerberized printing to Windows via IPP was broken (Issue #5515)
 157 - Eliminated use of private headers and some deprecated macOS APIs (Issue #5516)
 158 - The scheduler no longer stops a printer if an error occurs when a job is
 159   canceled or aborted (Issue #5517)
 160 - Added a USB quirks rule for the DYMO 450 Turbo (Issue #5521)
 161 - Added a USB quirks rule for Xerox printers (Issue #5523)
 162 - The scheduler's self-signed certificate did not include all of the alternate
 163   names for the server when using GNU TLS (Issue #5525)
 164 - Fixed compiler warnings with newer versions of GCC (Issue #5532, Issue #5533)
 165 - Fixed some PPD caching and IPP Everywhere PPD accounting/password bugs
 166   (Issue #5535)
 167 - Fixed `PreserveJobHistory` bug with time values (Issue #5538)
 168 - The scheduler no longer advertises the HTTP methods it supports (Issue #5540)
 169 - Localization updates (Issue #5461, Issues #5471, Issue #5481, Issue #5486,
 170   Issue #5489, Issue #5491, Issue #5492, Issue #5493, Issue #5494, Issue #5495,
 171   Issue #5497, Issue #5499, Issue #5500, Issue #5501, Issue #5504)
 172 - The scheduler did not always idle exit as quickly as it could.
 173 - Added a new `ippeveprinter` command based on the old ippserver sample code.
 174
 175
 176 Changes in CUPS v2.3b7
 177 ----------------------
 178
 179 - Fixed some build failures (Issue #5451, Issue #5463)
 180 - Running ppdmerge with the same input and output filenames did not work as
 181   advertised (Issue #5455)
 182
 183
 184 Changes in CUPS v2.3b6
 185 ----------------------
 186
 187 - Localization update (Issue #5339, Issue #5348, Issue #5362, Issue #5408,
 188   Issue #5410)
 189 - Documentation updates (Issue #5369, Issue #5402, Issue #5403, Issue #5404)
 190 - CVE-2018-4300: Linux session cookies used a predictable random number seed.
 191 - All user commands now support the `--help` option (Issue #5326)
 192 - The `lpoptions` command now works with IPP Everywhere printers that have not
 193   yet been added as local queues (Issue #5045)
 194 - The lpadmin command would create a non-working printer in some error cases
 195   (Issue #5305)
 196 - The scheduler would crash if an empty `AccessLog` directive was specified
 197   (Issue #5309)
 198 - The scheduler did not idle-exit on some Linux distributions (Issue #5319)
 199 - Fixed a regression in the changes to ippValidateAttribute (Issue #5322,
 200   Issue #5330)
 201 - Fixed a crash bug in the Epson dot matrix driver (Issue #5323)
 202 - Automatic debug logging of job errors did not work with systemd (Issue #5337)
 203 - The web interface did not list the IPP Everywhere "driver" (Issue #5338)
 204 - The scheduler did not report all of the supported job options and values
 205   (Issue #5340)
 206 - The IPP Everywhere "driver" now properly supports face-up printers
 207   (Issue #5345)
 208 - Fixed some typos in the label printer drivers (Issue #5350)
 209 - Setting the `Community` name to the empty string in `snmp.conf` now disables
 210   SNMP supply level monitoring by all the standard network backends
 211   (Issue #5354)
 212 - Multi-file jobs could get stuck if the backend failed (Issue #5359,
 213   Issue #5413)
 214 - The IPP Everywhere "driver" no longer does local filtering when printing to
 215   a shared CUPS printer (Issue #5361)
 216 - The lpadmin command now correctly reports IPP errors when configuring an
 217   IPP Everywhere printer (Issue #5370)
 218 - Fixed some memory leaks discovered by Coverity (Issue #5375)
 219 - The PPD compiler incorrectly terminated JCL options (Issue #5379)
 220 - The cupstestppd utility did not generate errors for missing/mismatched
 221   CloseUI/JCLCloseUI keywords (Issue #5381)
 222 - The scheduler now reports the actual location of the log file (Issue #5398)
 223 - Added USB quirk rules (Issue #5395, Issue #5420, Issue #5443)
 224 - The generated PPD files for IPP Everywhere printers did not contain the
 225   cupsManualCopies keyword (Issue #5433)
 226 - Kerberos credentials might be truncated (Issue #5435)
 227 - The handling of `MaxJobTime 0` did not match the documentation (Issue #5438)
 228 - Fixed a bug adding a queue with the `-E` option (Issue #5440)
 229 - The `cupsaddsmb` program has been removed (Issue #5449)
 230 - The `cupstestdsc` program has been removed (Issue #5450)
 231 - The scheduler was being backgrounded on macOS, causing applications to spin
 232   (rdar://40436080)
 233 - The scheduler did not validate that required initial request attributes were
 234   in the operation group (rdar://41098178)
 235 - Authentication in the web interface did not work on macOS (rdar://41444473)
 236 - Fixed an issue with HTTP Digest authentication (rdar://41709086)
 237 - The scheduler could crash when job history was purged (rdar://42198057)
 238 - Fixed a crash bug when mapping PPD duplex options to IPP attributes
 239   (rdar://46183976)
 240 - Fixed a memory leak for some IPP (extension) syntaxes.
 241 - The `cupscgi`, `cupsmime`, and `cupsppdc` support libraries are no longer
 242   installed as shared libraries.
 243 - The `snmp` backend is now deprecated.
 244
 245
 246 Changes in CUPS v2.3b5
 247 ----------------------
 248
 249 - The `ipptool` program no longer checks for duplicate attributes when running
 250   in list or CSV mode (Issue #5278)
 251 - The `cupsCreateJob`, `cupsPrintFile2`, and `cupsPrintFiles2` APIs did not use
 252   the supplied HTTP connection (Issue #5288)
 253 - Fixed another crash in the scheduler when adding an IPP Everywhere printer
 254   (Issue #5290)
 255 - Added a workaround for certain web browsers that do not support multiple
 256   authentication schemes in a single response header (Issue #5289)
 257 - Fixed policy limits containing the `All` operation (Issue #5296)
 258 - The scheduler was always restarted after idle-exit with systemd (Issue #5297)
 259 - Added a USB quirks rule for the HP LaserJet P1102 (Issue #5310)
 260 - The mailto notifier did not wait for the welcome message (Issue #5312)
 261 - Fixed a parsing bug in the pstops filter (Issue #5321)
 262 - Documentation updates (Issue #5299, Issue #5301, Issue #5306)
 263 - Localization updates (Issue #5317)
 264 - The scheduler allowed environment variables to be specified in the
 265   `cupsd.conf` file (rdar://37836779, rdar://37836995, rdar://37837252,
 266   rdar://37837581)
 267 - Fax queues did not support pause (p) or wait-for-dialtone (w) characters
 268   (rdar://39212256)
 269 - The scheduler did not validate notify-recipient-uri values properly
 270   (rdar://40068936)
 271 - The IPP parser allowed invalid group tags (rdar://40442124)
 272 - Fixed a parsing bug in the new authentication code.
 273
 274
 275 Changes in CUPS v2.3b4
 276 ----------------------
 277
 278 - NOTICE: Printer drivers are now deprecated (Issue #5270)
 279 - Kerberized printing to another CUPS server did not work correctly
 280   (Issue #5233)
 281 - Fixed printing to some IPP Everywhere printers (Issue #5238)
 282 - Fixed installation of filters (Issue #5247)
 283 - The scheduler now supports using temporary print queues for older IPP/1.1
 284   print queues like those shared by CUPS 1.3 and earlier (Issue #5241)
 285 - Star Micronics printers need the "unidir" USB quirk rule (Issue #5251)
 286 - Documentation fixes (Issue #5252)
 287 - Fixed a compile issue when PAM is not available (Issue #5253)
 288 - Label printers supported by the rastertolabel driver don't support SNMP, so
 289   don't delay printing to test it (Issue #5256)
 290 - The scheduler could crash while adding an IPP Everywhere printer (Issue #5258)
 291 - The Lexmark Optra E310 printer needs the "no-reattach" USB quirk rule
 292   (Issue #5259)
 293 - Systemd did not restart cupsd when configuration changes were made that
 294   required a restart (Issue #5263)
 295 - The IPP Everywhere PPD generator did not include the `cupsJobPassword`
 296   keyword, when supported (Issue #5265)
 297 - Fixed an Avahi crash bug in the scheduler (Issue #5268)
 298 - Raw print queues are now deprecated (Issue #5269)
 299 - Fixed an RPM packaging problem (Issue #5276)
 300 - The IPP backend did not properly detect failed PDF prints (rdar://34055474)
 301 - TLS connections now properly timeout (rdar://34938533)
 302 - Temp files could not be created in some sandboxed applications
 303   (rdar://37789645)
 304 - The ipptool `--ippserver` option did not encode out-of-band attributes
 305   correctly.
 306 - Added public `cupsEncodeOption` API for encoding a single option as an IPP
 307   attribute.
 308 - Removed support for the `-D_PPD_DEPRECATED=""` developer cheat - the PPD API
 309   should no longer be used.
 310 - Removed support for `-D_IPP_PRIVATE_STRUCTURES=1` developer cheat - the IPP
 311   accessor functions should be used instead.
 312
 313
 314 Changes in CUPS v2.3b3
 315 ----------------------
 316
 317 - More fixes for printing to old CUPS servers (Issue #5211)
 318 - The IPP Everywhere PPD generator did not support deep grayscale or 8-bit per
 319   component AdobeRGB (Issue #5227)
 320 - Additional changes for the scheduler to substitute default values for invalid
 321   job attributes when running in "relaxed conformance" mode (Issue #5229)
 322 - Localization changes (Issue #5232, rdar://37068158)
 323 - The `cupsCopyDestInfo` function did not work with all print queues
 324   (Issue #5235)
 325
 326
 327 Changes in CUPS v2.3b2
 328 ----------------------
 329
 330 - Localization changes (Issue #5210)
 331 - Build fixes (Issue #5217)
 332 - IPP Everywhere PPDs were not localized to English (Issue #5205)
 333 - The `cupsGetDests` and `cupsEnumDests` functions no longer filter out local
 334   print services like IPP USB devices (Issue #5206)
 335 - The `cupsCopyDest` function now correctly copies the `is_default` value
 336   (Issue #5208)
 337 - Printing to old CUPS servers has been fixed (Issue #5211)
 338 - The `ppdInstallableConflict` tested too many constraints (Issue #5213)
 339 - All HTTP field values can now be longer than `HTTP_MAX_VALUE` bytes
 340   (Issue #5216)
 341 - Added a USB quirk rule for Canon MP280 series printers (Issue #5221)
 342 - The `cupsRasterWritePixels` function did not correctly swap bytes for some
 343   formats (Issue #5225)
 344 - Fixed an issue with mapping finishing options (rdar://34250727)
 345 - The `ppdLocalizeIPPReason` function incorrectly returned a localized version
 346   of "none" (rdar://36566269)
 347 - The scheduler did not add ".local" to the default DNS-SD host name when
 348   needed.
 349
 350
 351 Changes in CUPS v2.3b1
 352 ----------------------
 353
 354 - CUPS is now provided under the Apache License, Version 2.0.
 355 - Documentation updates (Issue #4580, Issue #5177, Issue #5192)
 356 - The `cupsCopyDestConflicts` function now handles collection attribute
 357   ("media-col", "finishings-col", etc.) constraints (Issue #4096)
 358 - The `lpoptions` command incorrectly saved default options (Issue #4717)
 359 - The `lpstat` command now reports when new jobs are being held (Issue #4761)
 360 - The `ippfind` command now supports finding printers whose name starts with an
 361   underscore (Issue #4833)
 362 - The CUPS library now supports the latest HTTP Digest authentication
 363   specification including support for SHA-256 (Issue #4862)
 364 - The scheduler now supports the "printer-id" attribute (Issue #4868)
 365 - No longer support backslash, question mark, or quotes in printer names
 366   (Issue #4966)
 367 - The scheduler no longer logs pages as they are printed, instead just logging
 368   a total of the pages printed at job completion (Issue #4991)
 369 - Dropped RSS subscription management from the web interface (Issue #5012)
 370 - Bonjour printer sharing now uses the DNS-SD hostname (or ServerName value if
 371   none is defined) when registering shared printers on the network (Issue #5071)
 372 - The `ipptool` command now supports writing `ippserver` attributes files
 373   (Issue #5093)
 374 - The `lp` and `lpr` commands now provide better error messages when the default
 375   printer cannot be found (Issue #5096)
 376 - The `lpadmin` command now provides a better error message when an unsupported
 377   System V interface script is used (Issue #5111)
 378 - The scheduler did not write out dirty configuration and state files if there
 379   were open client connections (Issue #5118)
 380 - The `SSLOptions` directive now supports `MinTLS` and `MaxTLS` options to
 381   control the minimum and maximum TLS versions that will be allowed,
 382   respectively (Issue #5119)
 383 - Dropped hard-coded CGI scripting language support (Issue #5124)
 384 - The `cupsEnumDests` function did not include options from the lpoptions
 385   files (Issue #5144)
 386 - Fixed the `ippserver` sample code when threading is disabled or unavailable
 387   (Issue #5154)
 388 - Added label markup to checkbox and radio button controls in the web interface
 389   templates (Issue #5161)
 390 - Fixed group validation on OpenBSD (Issue #5166)
 391 - Improved IPP Everywhere media support, including a new
 392   `cupsAddDestMediaOptions` function (Issue #5167)
 393 - IPP Everywhere PPDs now include localizations of printer-specific media types,
 394   when available (Issue #5168)
 395 - The cups-driverd program incorrectly stopped scanning PPDs as soon as a loop
 396   was seen (Issue #5170)
 397 - IPP Everywhere PPDs now support IPP job presets (Issue #5179)
 398 - IPP Everywhere PPDs now support finishing templates (Issue #5180)
 399 - Fixed a journald support bug in the scheduler (Issue #5181)
 400 - Fixed PAM module detection and added support for the common PAM definitions
 401   (Issue #5185)
 402 - The scheduler now substitutes default values for invalid job attributes when
 403   running in "relaxed conformance" mode (Issue #5186)
 404 - The scheduler did not work with older versions of uClibc (Issue #5188)
 405 - The scheduler now generates a strings file for localizing PPD options
 406   (Issue #5194)