]> git.ipfire.org Git - thirdparty/cups.git/blob - CHANGES.md
CVE-2018-4700: Linux session cookies used a predictable random number seed.
[thirdparty/cups.git] / CHANGES.md
1 CHANGES - 2.3b6 - 2018-12-07
2 ============================
3
4 Changes in CUPS v2.3b6
5 ----------------------
6
7 - Localization update (Issue #5339, Issue #5348, Issue #5362, Issue #5408,
8 Issue #5410)
9 - Documentation updates (Issue #5369, Issue #5402, Issue #5403, Issue #5404)
10 - CVE-2018-4700: Linux session cookies used a predictable random number seed.
11 - All user commands now support the `--help` option (Issue #5326)
12 - The `lpoptions` command now works with IPP Everywhere printers that have not
13 yet been added as local queues (Issue #5045)
14 - The lpadmin command would create a non-working printer in some error cases
15 (Issue #5305)
16 - The scheduler would crash if an empty `AccessLog` directive was specified
17 (Issue #5309)
18 - The scheduler did not idle-exit on some Linux distributions (Issue #5319)
19 - Fixed a regression in the changes to ippValidateAttribute (Issue #5322,
20 Issue #5330)
21 - Fixed a crash bug in the Epson dot matrix driver (Issue #5323)
22 - Automatic debug logging of job errors did not work with systemd (Issue #5337)
23 - The web interface did not list the IPP Everywhere "driver" (Issue #5338)
24 - The scheduler did not report all of the supported job options and values
25 (Issue #5340)
26 - The IPP Everywhere "driver" now properly supports face-up printers
27 (Issue #5345)
28 - Fixed some typos in the label printer drivers (Issue #5350)
29 - Setting the `Community` name to the empty string in `snmp.conf` now disables
30 SNMP supply level monitoring by all the standard network backends
31 (Issue #5354)
32 - Multi-file jobs could get stuck if the backend failed (Issue #5359,
33 Issue #5413)
34 - The IPP Everywhere "driver" no longer does local filtering when printing to
35 a shared CUPS printer (Issue #5361)
36 - The lpadmin command now correctly reports IPP errors when configuring an
37 IPP Everywhere printer (Issue #5370)
38 - Fixed some memory leaks discovered by Coverity (Issue #5375)
39 - The PPD compiler incorrectly terminated JCL options (Issue #5379)
40 - The cupstestppd utility did not generate errors for missing/mismatched
41 CloseUI/JCLCloseUI keywords (Issue #5381)
42 - The scheduler now reports the actual location of the log file (Issue #5398)
43 - Added USB quirk rules (Issue #5395, Issue #5420, Issue #5443)
44 - The generated PPD files for IPP Everywhere printers did not contain the
45 cupsManualCopies keyword (Issue #5433)
46 - Kerberos credentials might be truncated (Issue #5435)
47 - The handling of `MaxJobTime 0` did not match the documentation (Issue #5438)
48 - Fixed a bug adding a queue with the `-E` option (Issue #5440)
49 - The `cupsaddsmb` program has been removed (Issue #5449)
50 - The `cupstestdsc` program has been removed (Issue #5450)
51 - The scheduler was being backgrounded on macOS, causing applications to spin
52 (rdar://40436080)
53 - The scheduler did not validate that required initial request attributes were
54 in the operation group (rdar://41098178)
55 - Authentication in the web interface did not work on macOS (rdar://41444473)
56 - Fixed an issue with HTTP Digest authentication (rdar://41709086)
57 - The scheduler could crash when job history was purged (rdar://42198057)
58 - Fixed a crash bug when mapping PPD duplex options to IPP attributes
59 (rdar://46183976)
60 - Fixed a memory leak for some IPP (extension) syntaxes.
61 - The `cupscgi`, `cupsmime`, and `cupsppdc` support libraries are no longer
62 installed as shared libraries.
63 - The `snmp` backend is now deprecated.
64
65
66 Changes in CUPS v2.3b5
67 ----------------------
68
69 - The `ipptool` program no longer checks for duplicate attributes when running
70 in list or CSV mode (Issue #5278)
71 - The `cupsCreateJob`, `cupsPrintFile2`, and `cupsPrintFiles2` APIs did not use
72 the supplied HTTP connection (Issue #5288)
73 - Fixed another crash in the scheduler when adding an IPP Everywhere printer
74 (Issue #5290)
75 - Added a workaround for certain web browsers that do not support multiple
76 authentication schemes in a single response header (Issue #5289)
77 - Fixed policy limits containing the `All` operation (Issue #5296)
78 - The scheduler was always restarted after idle-exit with systemd (Issue #5297)
79 - Added a USB quirks rule for the HP LaserJet P1102 (Issue #5310)
80 - The mailto notifier did not wait for the welcome message (Issue #5312)
81 - Fixed a parsing bug in the pstops filter (Issue #5321)
82 - Documentation updates (Issue #5299, Issue #5301, Issue #5306)
83 - Localization updates (Issue #5317)
84 - The scheduler allowed environment variables to be specified in the
85 `cupsd.conf` file (rdar://37836779, rdar://37836995, rdar://37837252,
86 rdar://37837581)
87 - Fax queues did not support pause (p) or wait-for-dialtone (w) characters
88 (rdar://39212256)
89 - The scheduler did not validate notify-recipient-uri values properly
90 (rdar://40068936)
91 - The IPP parser allowed invalid group tags (rdar://40442124)
92 - Fixed a parsing bug in the new authentication code.
93
94
95 Changes in CUPS v2.3b4
96 ----------------------
97
98 - NOTICE: Printer drivers are now deprecated (Issue #5270)
99 - Kerberized printing to another CUPS server did not work correctly
100 (Issue #5233)
101 - Fixed printing to some IPP Everywhere printers (Issue #5238)
102 - Fixed installation of filters (Issue #5247)
103 - The scheduler now supports using temporary print queues for older IPP/1.1
104 print queues like those shared by CUPS 1.3 and earlier (Issue #5241)
105 - Star Micronics printers need the "unidir" USB quirk rule (Issue #5251)
106 - Documentation fixes (Issue #5252)
107 - Fixed a compile issue when PAM is not available (Issue #5253)
108 - Label printers supported by the rastertolabel driver don't support SNMP, so
109 don't delay printing to test it (Issue #5256)
110 - The scheduler could crash while adding an IPP Everywhere printer (Issue #5258)
111 - The Lexmark Optra E310 printer needs the "no-reattach" USB quirk rule
112 (Issue #5259)
113 - Systemd did not restart cupsd when configuration changes were made that
114 required a restart (Issue #5263)
115 - The IPP Everywhere PPD generator did not include the `cupsJobPassword`
116 keyword, when supported (Issue #5265)
117 - Fixed an Avahi crash bug in the scheduler (Issue #5268)
118 - Raw print queues are now deprecated (Issue #5269)
119 - Fixed an RPM packaging problem (Issue #5276)
120 - The IPP backend did not properly detect failed PDF prints (rdar://34055474)
121 - TLS connections now properly timeout (rdar://34938533)
122 - Temp files could not be created in some sandboxed applications
123 (rdar://37789645)
124 - The ipptool `--ippserver` option did not encode out-of-band attributes
125 correctly.
126 - Added public `cupsEncodeOption` API for encoding a single option as an IPP
127 attribute.
128 - Removed support for the `-D_PPD_DEPRECATED=""` developer cheat - the PPD API
129 should no longer be used.
130 - Removed support for `-D_IPP_PRIVATE_STRUCTURES=1` developer cheat - the IPP
131 accessor functions should be used instead.
132
133
134 Changes in CUPS v2.3b3
135 ----------------------
136
137 - More fixes for printing to old CUPS servers (Issue #5211)
138 - The IPP Everywhere PPD generator did not support deep grayscale or 8-bit per
139 component AdobeRGB (Issue #5227)
140 - Additional changes for the scheduler to substitute default values for invalid
141 job attributes when running in "relaxed conformance" mode (Issue #5229)
142 - Localization changes (Issue #5232, rdar://37068158)
143 - The `cupsCopyDestInfo` function did not work with all print queues
144 (Issue #5235)
145
146
147 Changes in CUPS v2.3b2
148 ----------------------
149
150 - Localization changes (Issue #5210)
151 - Build fixes (Issue #5217)
152 - IPP Everywhere PPDs were not localized to English (Issue #5205)
153 - The `cupsGetDests` and `cupsEnumDests` functions no longer filter out local
154 print services like IPP USB devices (Issue #5206)
155 - The `cupsCopyDest` function now correctly copies the `is_default` value
156 (Issue #5208)
157 - Printing to old CUPS servers has been fixed (Issue #5211)
158 - The `ppdInstallableConflict` tested too many constraints (Issue #5213)
159 - All HTTP field values can now be longer than `HTTP_MAX_VALUE` bytes
160 (Issue #5216)
161 - Added a USB quirk rule for Canon MP280 series printers (Issue #5221)
162 - The `cupsRasterWritePixels` function did not correctly swap bytes for some
163 formats (Issue #5225)
164 - Fixed an issue with mapping finishing options (rdar://34250727)
165 - The `ppdLocalizeIPPReason` function incorrectly returned a localized version
166 of "none" (rdar://36566269)
167 - The scheduler did not add ".local" to the default DNS-SD host name when
168 needed.
169
170
171 Changes in CUPS v2.3b1
172 ----------------------
173
174 - CUPS is now provided under the Apache License, Version 2.0.
175 - Documentation updates (Issue #4580, Issue #5177, Issue #5192)
176 - The `cupsCopyDestConflicts` function now handles collection attribute
177 ("media-col", "finishings-col", etc.) constraints (Issue #4096)
178 - The `lpoptions` command incorrectly saved default options (Issue #4717)
179 - The `lpstat` command now reports when new jobs are being held (Issue #4761)
180 - The `ippfind` command now supports finding printers whose name starts with an
181 underscore (Issue #4833)
182 - The CUPS library now supports the latest HTTP Digest authentication
183 specification including support for SHA-256 (Issue #4862)
184 - The scheduler now supports the "printer-id" attribute (Issue #4868)
185 - No longer support backslash, question mark, or quotes in printer names
186 (Issue #4966)
187 - The scheduler no longer logs pages as they are printed, instead just logging
188 a total of the pages printed at job completion (Issue #4991)
189 - Dropped RSS subscription management from the web interface (Issue #5012)
190 - Bonjour printer sharing now uses the DNS-SD hostname (or ServerName value if
191 none is defined) when registering shared printers on the network (Issue #5071)
192 - The `ipptool` command now supports writing `ippserver` attributes files
193 (Issue #5093)
194 - The `lp` and `lpr` commands now provide better error messages when the default
195 printer cannot be found (Issue #5096)
196 - The `lpadmin` command now provides a better error message when an unsupported
197 System V interface script is used (Issue #5111)
198 - The scheduler did not write out dirty configuration and state files if there
199 were open client connections (Issue #5118)
200 - The `SSLOptions` directive now supports `MinTLS` and `MaxTLS` options to
201 control the minimum and maximum TLS versions that will be allowed,
202 respectively (Issue #5119)
203 - Dropped hard-coded CGI scripting language support (Issue #5124)
204 - The `cupsEnumDests` function did not include options from the lpoptions
205 files (Issue #5144)
206 - Fixed the `ippserver` sample code when threading is disabled or unavailable
207 (Issue #5154)
208 - Added label markup to checkbox and radio button controls in the web interface
209 templates (Issue #5161)
210 - Fixed group validation on OpenBSD (Issue #5166)
211 - Improved IPP Everywhere media support, including a new
212 `cupsAddDestMediaOptions` function (Issue #5167)
213 - IPP Everywhere PPDs now include localizations of printer-specific media types,
214 when available (Issue #5168)
215 - The cups-driverd program incorrectly stopped scanning PPDs as soon as a loop
216 was seen (Issue #5170)
217 - IPP Everywhere PPDs now support IPP job presets (Issue #5179)
218 - IPP Everywhere PPDs now support finishing templates (Issue #5180)
219 - Fixed a journald support bug in the scheduler (Issue #5181)
220 - Fixed PAM module detection and added support for the common PAM definitions
221 (Issue #5185)
222 - The scheduler now substitutes default values for invalid job attributes when
223 running in "relaxed conformance" mode (Issue #5186)
224 - The scheduler did not work with older versions of uClibc (Issue #5188)
225 - The scheduler now generates a strings file for localizing PPD options
226 (Issue #5194)