- The scheduler's is_path_absolute() code could cause a DoS (STR #1042)
- The scheduler's device loading code used the wrong size limits for the
make/model and info parameters (STR #1035)
- The PNG loading code did not use a "long unsigned integer" format
specifier for the width and height (STR #1032)
- The web interface only showed the first 4 or 8 characters of
"{variable-name}" for undefined template variables (STR #1031)
- The hpgltops filter did not handle a common PCL command to enter
HP-GL/2 mode (STR #1037)
- The scheduler no longer sends the page-set option when printing banner
pages (STR #995)
- The hpgltops filter contained two buffer overflows that could
potentially allow remote access to the "lp" account (STR #1024)
- The lppasswd command did not protect against file descriptor or ulimit
attacks (STR #1023)
- The "lpc status" command used the wrong resource path when querying
the list of printers and jobs, causing unnecessary authentication
requests (STR #1018)
- The httpWait() function did not handle signal interruptions (STR #1020)
- The USB backend used the wrong size status variable when checking the
printer status (STR #1017)
- The scheduler did not delete classes from other classes or implicit
classes, which could cause a crash (STR #1015)
- The IPP backend now logs the remote print job ID at log level NOTICE
instead of INFO (so it shows up in the error_log file...)
Bug fixes:
- The HTTP code did not use a case-insensitive
comparison when checking for the Basic authentication
method (STR #407)
- The cupsaddsmb program didn't export the new CUPS
driver for Windows properly (STR #390)
- The default landscape orientation was not the same as
that defined in the PPD file (STR #397)
- The pdftops filter incorrectly auto-rotated pages when
the user already had specified the proper orientation
(STR #207)
- The scheduler did not reset the group list when
running CGI and filter processes (STR #185)
Enhancements:
- Updated the pdftops filter to use the annotation flags
instead of the subtype to determine whether to print
an annotation (STR #425)
- The pdftops filter no longer needs to create temporary
files with tmpnam (STR #406)
- The scheduler now waits up to 60 seconds before
restarting to allow active jobs to complete printing
and pending requests to be processed (STR #226)
- Added new cupsDoAuthentication(), cupsGetFd(),
cupsGetFile(), cupsPutFd(), and cupsPutFile() functions
to the CUPS API (STR #112)
- The PDF filter always scaled and offset pages; this
caused problems under MacOS X, so now the "fitplot"
option controls whether PDF files are scaled to fit
within the printable area of the page (STR #250)
- Updated the pdftops filter to be based upon Xpdf
2.02pl1 (STR #191)
Change the cupsd rc.d script to REQUIRE slpd. This is needed for the
case where cupsd actually uses SLP to register services (by setting
BrowseProtocols to include "slp") and does nothing otherwise.
to IPP requests. It's controlled by two new variables that may be set in
/etc/rc.conf:
cupsd_wait=YES # set to "YES" to wait for cupsd to detect printers;
# this variable is optional and defaults to "NO".
cupsd_timeout=60 # set to the number of seconds we wait for cupsd
# to respond before we declare it not responding;
# this variable is optional and defaults to "60".
The wait command may also be directly invoked as "/etc/rc.d/cupsd wait".
Bump PKGREVISION of print/cups to 1.
CUPS 1.1.16 adds support for a new CUPS printer driver for Windows
NT/2000/XP that provides accurate page accounting as well as support
for the banner, job billing, job priority, and page label options. The
new release also contains many small bug fixes and enhancements,
including better USB printing support, support for printer names
containing any printable character (123print, my-long-printer-name,
etc.), and French language localization of the web interface and
documentation.
======================================================================
* Removed the pstoraster filter (based on GNU Ghostscript 5.50) and now
* provide the raster "driver" and patch file necessary to use the current
* GNU Ghostscript 7.05 release. Pkgsrc users should install the
* print/ghostscript-esp package.
======================================================================
- Many, many bug fixes.
- Improvements to polling and scheduling of jobs to CUPS and to connected
printers.
- Updated the CUPS license agreement for the new MacOS and OpenSSL license
exceptions.
- The jobs.cgi web interface now handles all job operations, allowing the
administrator to allow "job administrators" or operators to manage jobs
(but not queues) on the server.
- New SCSI printer backend.
- The PostScript filter now supports 6, 9, and 16-up output, as well as new
page-border and number-up-layout options.
- Added ConfigFilePerm and LogFilePerm directives.
- The HTML job operation templates now link back to the destination printer
or class.
- Removed unnecessary fonts and updated the Courier and Symbol fonts to the
latest versions to better support non-ISOLatin1 text.
- The text filter now always embeds the Courier and Symbol fonts to ensure
that they contain the full set of glyphs.
- The PostScript image filter (imagetops) now supports printing CMYK images
using the CMYK colorspace.
- The cupsaddsmb program was updated to use the setdriver command instead of
addprinter.
- The Allow, Deny, BrowseAllow, BrowseDeny, and BrowseAddress directives
now support the network interface names "@LOCAL" and "@IF(name)" for
access control and browsing based on the current interface addresses
instead of fixed names or IP addresses.
- The cupsaddsmb program now supports alternative CUPS and SAMBA server names.
- The PostScript filter now supports the Orientation comment and rotates the
page as needed automatically.
bsd.pkg.install.mk:
* Remove old DEINSTALL/INSTALL scripts.
* Move some text printed at POST-INSTALL time into the MESSAGE file.
* Adjust rc.d scripts to respect rc.conf settings, so that the
script may be directly copied into /etc/rc.d.
+ Use our own cupsd rc.d-style script instead of using the one supplied
with the CUPS sources.
- Bug fixes.
- Added a driver for DYMO label printers.
- Added new ClassifyOverride directive to allow users to override the
classification of individual jobs.
- Added new BrowseProtocols directive to control which browse protocols
are used (currently CUPS and SLP).
- Added SLPv2 support.
- The pdftops filter did not have the Japanese and Chinese text support
compiled into it.
from the mailing list:
1) Use /dev/urandom instead of /dev/random for random device.
2) Read configuration file before creating certificates as the conf
file may redefine the location of the certs directory.
version 1.1.6.2nb1 include incorporation of USB fixes from NetBSD pkgsrc,
security fixes from SuSE, lpr-compatibility fixes from Caldera, and:
- Fix problem exposed by the MaxJobs directive where the scheduler was
losing count of the number of jobs. This fix, stored in patch-ah, was
gleaned from the CUPS mailing list, and bumps the cups packages version
number to 1.1.6.3nb1.
- The updated cupsTempFile() function did not return the filename when
called with a filename buffer of NULL (previously it used a static
buffer.)
- DeletePrinter() didn't remove the printer from any classes it was a member of.
- DeletePrinterFromClass() didn't preserve the implicit status of a class.
- DeletePrinterFromClasses() didn't remove printers from implicit classes.
- StartJob() didn't send the job-sheets, job-priority, and job-hold-until
attributes to remote printers.
- LoadAllJobs() was looking for job-sheets-completed instead of
job-media-sheets-completed. This would prevent accumulation of page data
after a restart of the scheduler.
- The pstops and imagetops filters now generate copies using the appropriate
method for a Level 1, 2, or 3 printer since some Level 2/3 printers don't
support the /#copies variable anymore.
- The IPP backend didn't handle version-not-supported errors and revert to
IPP/1.0 (previously it only checked for a bad-request error)
- Added changes to support NetBSD startup scripts.
- The mime.types file contained syntax errors.
- Updated the FreeBSD USB device filenames to use the /dev/unlptN files
so that the USB device is not reset prior to printing (causes print
corruption on many printers)
- Added new cupsTempFd() function to avoid serious security bug in
glibc fopen() function. The glibc fopen() function unlinks a file
before creating it, which opens up possible symlink attacks.
- Now reject 0-length names in add-printer and add-class
requests.
- cupsGetPPD() didn't reconnect when a HTTP connection
was lost.
- Many security-related fixes from SuSE.
additions to the documentation, plus the following changes:
- Fixed another possible DoS attack in httpGets().
- Added check for "LANGUAGE = PCL" and "LANGUAGE = POSTSCRIPT" in
mime.types.
- The printers.conf and classes.conf files are now written with
restricted permissions.
- If LoadAllJobs() is unable to determine the file type of a print
job, assume "application/vnd.cups-raw".
- The web interface now provides a job_printer_name value for any
corresponding job_printer_uri value.
- The cups-lpd mini-daemon now logs the client address and hostname
as well as all commands and errors in the syslog file.
- The IPP backend now detects the supported file formats and only
specifies the document format if it is supported. This makes IPP
printing to network print servers and cards more reliable without
affecting the capabilities of CUPS servers.
- The time_at_xyz attributes are now converted to human-readable
dates and times for the web interfaces.
- The file type logging code in the scheduler referenced the optional
document-format attribute; the new code uses the resolved MIME type
instead.
- The client.conf parsing code now removes trailing whitespace.
- The lpadmin command now supports setting of options and user-level
access control.
- Added "-E" option to all printing commands to force encryption.
- The socket backend now starts retries at 5 seconds and increases
the interval to 30 seconds. This should provide faster printing
when multiple jobs/files are queued for a printer.
- The filters and backends no longer buffer output to stderr. This
should provide much more accurate status reporting.
bug and security fixes, improvements to the efficiency of the server and
utilities, improvements to the documentation, plus the following:
* Security updates - new default configuration does not broadcast
printer information and only allows access from the local system.
* EXPERIMENTAL encryption support - CUPS now optionally supports TLS/SSL
encryption via the OpenSSL library.
* Updated PDF filter to Xpdf 0.91.
* Added PPD files for 9-pin and 24-pin OKIDATA printers.
* Changed all sprintf's that use string formats to snprintf's, even if
the destination buffer is larger than the source string(s); this
protects against buffer overflows caused outside of CUPS...
* Changed all strcpy's to strncpy's between local and global variables,
even if the destination buffer is larger than the source string; this
protects against buffer overflows caused outside of CUPS...
* Added new mime.types rules to allow automatic raw printing of PCL and
ESC/P files; PJL headers are parsed to differentiate between
PostScript and PCL job files. This should eliminate a lot of the
reports of SAMBA printing problems due to the missing "-oraw" or "-l"
options.
* Jobs are now assigned to printers in a class round-robin style. This
should prevent the first server in the class from bearing the brunt of
the jobs.
* The serial backend didn't support the higher baud rates with the old
termios interface. It now supports 57600 and 115200 baud.
* The serial backend now supports different types of flow control;
previously it ignored the flow=XYZ option in the device URI.
* The serial backend now supports DTR/DSR flow control, which is popular
on dot-matrix printers (access with "flow=dtrdsr" in the device URI)
* Added new job-originating-host-name attribute for jobs. The new
attribute provides the hostname or IP address of the machine that
submitted the job.
* Added quota and allow/deny user support for printers and classes.
bugfixes, security fixes, improvements to the web admin interface, addition
of new printer drivers, improved documentation, and improvements to the CUPS
API for client development.
the author to make this package compile more seamlessly on BSD systems,
and in particular with the NetBSD pkgsrc software collection.
CUPS 1.1 is the newest production (stable) release of CUPS. It
provides many new features from the 1.0.x releases, including a
new Level 3 PostScript RIP, a new PDF filter, EPSON printer
drivers, IPP/1.1 support, banner page support, and LPD client
support. Binaries for several platforms are also available.
Major changes in v1.1 include:
- The text filter now embeds missing fonts.
- Integrated Xpdf's pdftops filter into CUPS, which is a
lightweight and reliable replacement for Ghostscript's
PDF support.
- The web administration interface now allows you to set
the default banner pages.
- Images can now be positioned on the page using the new
"position" option.
- Updated the serial, parallel, and usb backends to do
multiple writes and ignore ioctl() errors as needed;
this should fix problems with serial printing on old
serial drivers and with the UltraSPARC parallel port
driver under Solaris 2.7.
- Now propagate LD_LIBRARY_PATH to child processes from
cupsd.
- Queued remote jobs recreate remote printers as needed
when the scheduler is started.
- Deleting a printer also purges all jobs on that
printer.
- Old job and control files that don't belong to a
printer are automatically deleted.
- cups-lpd now supports options set with lpoptions.
- The IPP backend now switches to IPP/1.0 if a 1.1
request fails.
