CVE-2019-8696 and CVE-2019-8675: Fixed SNMP buffer overflows (rdar://51685251)
Added a GPL2/LGPL2 exception to the new CUPS license terms.
Documentation updates (Issue #5604)
Localization updates (Issue #5637)
Fixed a bug in the scheduler job cleanup code (Issue #5588)
Fixed builds when there is no TLS library (Issue #5590)
Eliminated some new GCC compiler warnings (Issue #5591)
Removed dead code from the scheduler (Issue #5593)
"make" failed with GZIP options (Issue #5595)
Fixed potential excess logging from the scheduler when removing job files (Issue #5597)
Fixed a NULL pointer dereference bug in `httpGetSubField2` (Issue #5598)
Added FIPS-140 workarounds for GNU TLS (Issue #5601, Issue #5622)
The scheduler no longer provides a default value for the description (Issue #5603)
The scheduler now logs jobs held for authentication using the error level so it is clear what happened (Issue #5604)
The `lpadmin` command did not always update the PPD file for changes to the `cupsIPPSupplies` and `cupsSNMPSupplies` keywords (Issue #5610)
The scheduler now uses both the group's membership list as well as the various OS-specific membership functions to determine whether a user belongs to a named group (Issue #5613)
Added USB quirks rule for HP LaserJet 1015 (Issue #5617)
Fixed some PPD parser issues (Issue #5623, Issue #5624)
The IPP parser no longer allows invalid member attributes in collections (Issue #5630)
The configure script now treats the "wheel" group as a potential system group (Issue #5638)
Fixed a USB printing issue on macOS (rdar://31433931)
Fixed IPP buffer overflow (rdar://50035411)
Fixed memory disclosure issue in the scheduler (rdar://51373853)
Fixed DoS issues in the scheduler (rdar://51373929)
Fixed an issue with unsupported "sides" values in the IPP backend (rdar://51775322)
The scheduler would restart continuously when idle and printers were not shared (rdar://52561199)
Fixed an issue with `EXPECT !name WITH-VALUE ...` tests.
Fixed a command ordering issue in the Zebra ZPL driver.
CVE-2019-8696 and CVE-2019-8675: Fixed SNMP buffer overflows (rdar://51685251)
The `cupsctl` command now prevents setting "cups-files.conf" directives (Issue #5530)
Updated the systemd service file for cupsd (Issue #5551)
The `cupsCheckDestSupported` function did not check octetString values correctly (Issue #5557)
The scheduler did not encode octetString values like "job-password" correctly for the print filters (Issue #5558)
Restored minimal support for the `Emulators` keyword in PPD files to allow old Samsung printer drivers to continue to work (Issue #5562)
Timed out job submission now yields an error (Issue #5570)
The footer in the web interface covered some content on small displays (Issue #5574)
The libusb-based USB backend now enforces read limits, improving print speed in many cases (Issue #5583)
Fixed some compatibility issues with old releases of CUPS (Issue #5587)
Fixed a bug in the scheduler job cleanup code (Issue #5588)
"make" failed with GZIP options (Issue #5595)
Added FIPS-140 workarounds for GNU TLS (Issue #5601, Issue #5622)
The scheduler no longer provides a default value for the description (Issue #5603)
The `lpadmin` command did not always update the PPD file for changes to the `cupsIPPSupplies` and `cupsSNMPSupplies` keywords (Issue #5610)
The scheduler now uses both the group's membership list as well as the various OS-specific membership functions to determine whether a user belongs to a named group (Issue #5613)
Added USB quirks rule for HP LaserJet 1015 (Issue #5617)
Fixed some PPD parser issues (Issue #5623, Issue #5624)
The IPP parser no longer allows invalid member attributes in collections (Issue #5630)
Fixed IPP buffer overflow (rdar://50035411)
Fixed memory disclosure issue in the scheduler (rdar://51373853)
Fixed DoS issues in the scheduler (rdar://51373929)
The scheduler would restart continuously when idle and printers were not shared (rdar://52561199)
Fixed a command ordering issue in the Zebra ZPL driver.
The cups-config script no longer adds extra libraries when linking against shared libraries (Issue #5261)
The supplied example print documents have been optimized for size (Issue #5529)
The cupsctl command now prevents setting "cups-files.conf" directives (Issue #5530)
The "forbidden" message in the web interface is now explained (Issue #5547)
The footer in the web interface covered some content on small displays (Issue #5574)
The libusb-based USB backend now enforces read limits, improving print speed in many cases (Issue #5583)
The ippeveprinter command now looks for print commands in the "command" subdirectory.
The ipptool command now supports $date-current and $date-start variables to insert the current and starting date and time values, as well as ISO-8601 relative time values such as "PT30S" for 30 seconds in the future.
Media size matching now uses a tolerance of 0.5mm (rdar://33822024)
The lpadmin command would hang with a bad PPD file (rdar://41495016)
Fixed a potential crash bug in cups-driverd (rdar://46625579)
Fixed a performance regression with large PPDs (rdar://47040759)
Fixed a memory reallocation bug in HTTP header value expansion (rdar://problem/50000749)
Timed out job submission now yields an error (Issue #5570)
Restored minimal support for the Emulators keyword in PPD files to allow old Samsung printer drivers to continue to work (Issue #5562)
The scheduler did not encode octetString values like "job-password" correctly for the print filters (Issue #5558)
The cupsCheckDestSupported function did not check octetString values correctly (Issue #5557)
Added support for UserAgentTokens directive in "client.conf" (Issue #5555)
Updated the systemd service file for cupsd (Issue #5551)
The ippValidateAttribute function did not catch all instances of invalid UTF-8 strings (Issue #5509)
Fixed an issue with the self-signed certificates generated by GNU TLS (Issue #5506)
Fixed a potential memory leak when reading at the end of a file (Issue #5473)
Fixed potential unaligned accesses in the string pool (Issue #5474)
Fixed a potential memory leak when loading a PPD file (Issue #5475)
Added a USB quirks rule for the Lexmark E120n (Issue #5478)
Updated the USB quirks rule for Zebra label printers (Issue #5395)
Fixed a compile error on Linux (Issue #5483)
The lpadmin command, web interface, and scheduler all queried an IPP Everywhere printer differently, resulting in different PPDs for the same printer (Issue #5484)
The web interface no longer provides access to the log files (Issue #5513)
Non-Kerberized printing to Windows via IPP was broken (Issue #5515)
Eliminated use of private headers and some deprecated macOS APIs (Issue #5516)
The scheduler no longer stops a printer if an error occurs when a job is canceled or aborted (Issue #5517)
Added a USB quirks rule for the DYMO 450 Turbo (Issue #5521)
Added a USB quirks rule for Xerox printers (Issue #5523)
The scheduler's self-signed certificate did not include all of the alternate names for the server when using GNU TLS (Issue #5525)
Fixed compiler warnings with newer versions of GCC (Issue #5532, Issue #5533)
Fixed some PPD caching and IPP Everywhere PPD accounting/password bugs (Issue #5535)
Fixed PreserveJobHistory bug with time values (Issue #5538)
The scheduler no longer advertises the HTTP methods it supports (Issue #5540)
Running ppdmerge with the same input and output filenames did not work as advertised (Issue #5455)
Fixed a potential memory leak when reading at the end of a file (Issue #5473)
Fixed potential unaligned accesses in the string pool (Issue #5474)
Fixed a potential memory leak when loading a PPD file (Issue #5475)
Added a USB quirks rule for the Lexmark E120n (Issue #5478)
Updated the USB quirks rule for Zebra label printers (Issue #5395)
Fixed a compile error on Linux (Issue #5483)
The lpadmin command, web interface, and scheduler all queried an IPP Everywhere printer differently, resulting in different PPDs for the same printer (Issue #5484)
Fixed an issue with the self-signed certificates generated by GNU TLS (Issue #5506)
The `ippValidateAttribute` function did not catch all instances of invalid UTF-8 strings (Issue #5509)
Non-Kerberized printing to Windows via IPP was broken (Issue #5515)
The scheduler no longer stops a printer if an error occurs when a job is canceled or aborted (Issue #5517)
Added a USB quirks rule for the DYMO 450 Turbo (Issue #5521)
Added a USB quirks rule for Xerox printers (Issue #5523)
The scheduler's self-signed certificate did not include all of the alternate names for the server when using GNU TLS (Issue #5525)
Fixed compiler warnings with newer versions of GCC (Issue #5532, Issue #5533)
Fixed some PPD caching and IPP Everywhere PPD accounting/password bugs (Issue #5535)
Fixed `PreserveJobHistory` bug with time values (Issue #5538)
Media size matching now uses a tolerance of 0.5mm (rdar://33822024)
The lpadmin command would hang with a bad PPD file (rdar://41495016)
Fixed a potential crash bug in cups-driverd (rdar://46625579)
Fixed a performance regression with large PPDs (rdar://47040759)
The scheduler did not always idle exit as quickly as it could.
CVE-2018-4700: Linux session cookies used a predictable random number seed.
All user commands now support the `--help` option (Issue #5326)
The `lpoptions` command now works with IPP Everywhere printers that have not yet been added as local queues (Issue #5045)
The lpadmin command would create a non-working printer in some error cases (Issue #5305)
The scheduler would crash if an empty `AccessLog` directive was specified (Issue #5309)
The scheduler did not idle-exit on some Linux distributions (Issue #5319)
Fixed a regression in the changes to ippValidateAttribute (Issue #5322, Issue #5330)
Fixed a crash bug in the Epson dot matrix driver (Issue #5323)
Automatic debug logging of job errors did not work with systemd (Issue #5337)
The web interface did not list the IPP Everywhere "driver" (Issue #5338)
The scheduler did not report all of the supported job options and values (Issue #5340)
The IPP Everywhere "driver" now properly supports face-up printers (Issue #5345)
Fixed some typos in the label printer drivers (Issue #5350)
Setting the `Community` name to the empty string in `snmp.conf` now disables SNMP supply level monitoring by all the standard network backends (Issue #5354)
Multi-file jobs could get stuck if the backend failed (Issue #5359, Issue #5413)
The IPP Everywhere "driver" no longer does local filtering when printing to a shared CUPS printer (Issue #5361)
The lpadmin command now correctly reports IPP errors when configuring an IPP Everywhere printer (Issue #5370)
Fixed some memory leaks discovered by Coverity (Issue #5375)
The PPD compiler incorrectly terminated JCL options (Issue #5379)
The cupstestppd utility did not generate errors for missing/mismatched CloseUI/JCLCloseUI keywords (Issue #5381)
The scheduler now reports the actual location of the log file (Issue #5398)
Added USB quirk rules (Issue #5395, Issue #5420, Issue #5443)
The generated PPD files for IPP Everywhere printers did not contain the cupsManualCopies keyword (Issue #5433)
Kerberos credentials might be truncated (Issue #5435)
The handling of `MaxJobTime 0` did not match the documentation (Issue #5438)
Fixed a bug adding a queue with the `-E` option (Issue #5440)
The `cupsaddsmb` program has been removed (Issue #5449)
The `cupstestdsc` program has been removed (Issue #5450)
The scheduler was being backgrounded on macOS, causing applications to spin (rdar://40436080)
The scheduler did not validate that required initial request attributes were in the operation group (rdar://41098178)
Authentication in the web interface did not work on macOS (rdar://41444473)
Fixed an issue with HTTP Digest authentication (rdar://41709086)
The scheduler could crash when job history was purged (rdar://42198057)
Fixed a crash bug when mapping PPD duplex options to IPP attributes (rdar://46183976)
Fixed a memory leak for some IPP (extension) syntaxes.
The `cupscgi`, `cupsmime`, and `cupsppdc` support libraries are no longer installed as shared libraries.
The scheduler allowed environment variables to be specified in the `cupsd.conf` file (rdar://37836779, rdar://37836995, rdar://37837252, rdar://37837581)
Fax queues did not support pause (p) or wait-for-dialtone (w) characters (rdar://39212256)
The scheduler did not validate notify-recipient-uri values properly (rdar://40068936)
The IPP parser allowed invalid group tags (rdar://40442124)
Fixed a parsing bug in the new authentication code.
The scheduler allowed environment variables to be specified in the `cupsd.conf` file (rdar://37836779, rdar://37836995, rdar://37837252, rdar://37837581)
Fax queues did not support pause (p) or wait-for-dialtone (w) characters (rdar://39212256)
The scheduler did not validate notify-recipient-uri values properly (rdar://40068936)
The IPP parser allowed invalid group tags (rdar://40442124)
Fixed a parsing bug in the new authentication code.
NOTICE: Raw print queues are now deprecated (Issue #5269)
Fixed an Avahi crash bug in the scheduler (Issue #5268)
The IPP Everywhere PPD generator did not include the `cupsJobPassword` keyword, when supported (Issue #5265)
Systemd did not restart cupsd when configuration changes were made that required a restart (Issue #5263)
The Lexmark Optra E310 printer needs the "no-reattach" USB quirk rule (Issue #5259)
The scheduler could crash while adding an IPP Everywhere printer (Issue #5258)
Label printers supported by the rastertolabel driver don't support SNMP, so don't delay printing to test it (Issue #5256)
Fixed a compile issue when PAM is not available (Issue #5253)
Documentation fixes (Issue #5252)
Star Micronics printers need the "unidir" USB quirk rule (Issue #5251)
The scheduler now supports using temporary print queues for older IPP/1.1 print queues like those shared by CUPS 1.3 and earlier (Issue #5241)
Fixed printing to some IPP Everywhere printers (Issue #5238)
Kerberized printing to another CUPS server did not work correctly (Issue #5233)
The `cupsRasterWritePixels` function did not correctly swap bytes for some formats (Issue #5225)
Added a USB quirk rule for Canon MP280 series printers (Issue #5221)
The `ppdInstallableConflict` tested too many constraints (Issue #5213)
More fixes for printing to old CUPS servers (Issue #5211)
The `cupsCopyDest` function now correctly copies the `is_default` value (Issue #5208)
The scheduler did not work with older versions of uClibc (Issue #5188)
The scheduler now substitutes default values for invalid job attributes when running in "relaxed conformance" mode (Issue #5186)
Fixed PAM module detection and added support for the common PAM definitions (Issue #5185)
Fixed a journald support bug in the scheduler (Issue #5181)
The cups-driverd program incorrectly stopped scanning PPDs as soon as a loop was seen (Issue #5170)
Fixed group validation on OpenBSD (Issue #5166)
Fixed the `ippserver` sample code when threading is disabled or unavailable (Issue #5154)
The `cupsEnumDests` function did not include options from the lpoptions files (Issue #5144)
The `SSLOptions` directive now supports `MinTLS` and `MaxTLS` options to control the minimum and maximum TLS versions that will be allowed, respectively (Issue #5119)
The scheduler did not write out dirty configuration and state files if there were open client connections (Issue #5118)
The `lpadmin` command now provides a better error message when an unsupported System V interface script is used (Issue #5111)
The `lp` and `lpr` commands now provide better error messages when the default printer cannot be found (Issue #5096)
No longer support backslash, question mark, or quotes in printer names (Issue #4966)
The CUPS library now supports the latest HTTP Digest authentication specification including support for SHA-256 (Issue #4862)
The `lpstat` command now reports when new jobs are being held (Issue #4761)
The `lpoptions` command incorrectly saved default options (Issue #4717)
The `ppdLocalizeIPPReason` function incorrectly returned a localized version of "none" (rdar://36566269)
TLS connections now properly timeout (rdar://34938533)
The IPP backend did not properly detect failed PDF prints (rdar://34055474)
Temporary files are now placed in the correct directory for sandboxed applications on macOS (rdar://problem/37789645)
The cupsCopyDestConflicts function now handles collection attribute ("media-col", "finishings-col", etc.) constraints (Issue #4096)
The lpoptions command incorrectly saved default options (Issue #4717)
The lpstat command now reports when new jobs are being held (Issue #4761)
The ippfind command now supports finding printers whose name starts with an underscore (Issue #4833)
The CUPS library now supports the latest HTTP Digest authentication specification including support for SHA-256 (Issue #4862)
The scheduler now supports the "printer-id" attribute (Issue #4868)
No longer support backslash, question mark, or quotes in printer names (Issue #4966)
The scheduler no longer logs pages as they are printed, instead just logging a total of the pages printed at job completion (Issue #4991)
Dropped RSS subscription management from the web interface (Issue #5012)
Bonjour printer sharing now uses the DNS-SD hostname (or ServerName value if none is defined) when registering shared printers on the network (Issue #5071)
The ipptool command now supports writing ippserver attributes files (Issue #5093)
The lp and lpr commands now provide better error messages when the default printer cannot be found (Issue #5096)
The lpadmin command now provides a better error message when an unsupported System V interface script is used (Issue #5111)
The scheduler did not write out dirty configuration and state files if there were open client connections (Issue #5118)
The SSLOptions directive now supports MinTLS and MaxTLS options to control the minimum and maximum TLS versions that will be allowed, respectively (Issue #5119)
Dropped hard-coded CGI scripting language support (Issue #5124)
The cupsEnumDests function did not include options from the lpoptions files (Issue #5144)
Fixed the ippserver sample code when threading is disabled or unavailable (Issue #5154)
Added label markup to checkbox and radio button controls in the web interface templates (Issue #5161)
Fixed group validation on OpenBSD (Issue #5166)
Improved IPP Everywhere media support, including a new cupsAddDestMediaOptions function (Issue #5167)
IPP Everywhere PPDs now include localizations of printer-specific media types, when available (Issue #5168)
The cups-driverd program incorrectly stopped scanning PPDs as soon as a loop was seen (Issue #5170)
IPP Everywhere PPDs now support IPP job presets (Issue #5179)
IPP Everywhere PPDs now support finishing templates (Issue #5180)
Fixed a journald support bug in the scheduler (Issue #5181)
Fixed PAM module detection and added support for the common PAM definitions (Issue #5185)
The scheduler now substitutes default values for invalid job attributes when running in "relaxed conformance" mode (Issue #5186)
The scheduler did not work with older versions of uClibc (Issue #5188)
The scheduler now generates a strings file for localizing PPD options (Issue #5194)
The `cupsGetDests` function incorrectly returned an empty list of printers if there was no default printer (Issue #5046)
The `cupsGetDests` function waited too long for network printers (Issue #5049)
Libtool support was completely broken with current libtool versions that use an incompatible command-line syntax (Issue #5050)
Fixed a build issue with `--enable-mallinfo` (Issue #5051)
The ippserver test program contained a deadlock issue (Issue #5054)
The `cupsLocalizeDest*` functions did not provide base localizations for all registered IPP attributes and values (Issue #5056)
The --enable-libtool configure option requires a path to the libtool program, but doesn't document or check for it (Issue #5062)
Fixed the `SSLOptions DenyCBC` option when using GNU TLS (Issue #5065)
Fixed the `ServerTokens None` option (Issue #5065)
Fixed the default `ServerAlias` value from `ServerName` (Issue #5072)
Fixed the adminurl field in the TXT record for fully-qualified `ServerName` values (Issue #5074)
The scheduler now creates a PID file when not running on demand with a modern service launcher (Issue #5080)
The web interface did not support newer language identifiers used by Microsoft web browsers (Issue #5803)
Updated the cups-files.conf and cupsd.conf file documentation for missing directives (Issue #5084)
Fixed an Avahi-related crash bug in the scheduler (Issue #5085, Issue #5086)
Fixed the interactions between the "print-quality" and "cupsPrintQuality" options (Issue #5090)
The IPP Everywhere PPD generator now sorts the supported resolutions before choosing them for draft, normal, and best quality modes (Issue #5091)
Fixed the localization unit test on Linux (Issue #5097)
The CUPS library did not reuse domain sockets (Issue #5098)
Fixed the "make check" target for some environments (Issue #5099)
The scheduler woke up once per second to remove old temporary queues (Issue #5100)
Added USB quirk rule for Kyocera printer (Issue #5102, Issue #5103)
Re-documented the limits of `file:///...` device URIs and moved the FileDevice directive in `cups-files.conf` to the list of deprecated configuration directives (Issue #5117)
Added USB quirk rule for HP LaserJet 1160 printer (Issue #5121)
Fixed the script interpreter detection in the configure script (Issue #5122)
The network backends now retry on more error conditions (Issue #5123)
Added a French translation of the web interface (Issue #5134)
`cupsGetDests2` was not using the supplied HTTP connection (Issue #5135)
`httpAddrConnect` leaked sockets in certain circumstances, causing some printers to hang (rdar://31965686)
Fixed an issue with Chinese localizations on macOS (rdar://32419311)
The IPP backend now always sends the "finishings" attribute for printers that support it because otherwise the client cannot override printer defaults (rdar://33169732)
The `cupsGetNamedDest` function did not use the local default printer (rdar://33228500)
The IPP backend incorrectly sent the "job-pages-per-set" attribute to PDF printers (rdar://33250434)
Fixed the `cups.strings` file that is used on macOS (rdar://33287650)
CUPS now sends the `Date` HTTP header in IPP requests (rdar://33302034)
The `ippCopyAttribute` function did not copy out-of-band values correctly (rdar://33688003)
Fixed the localization fallback code on macOS (rdar://33583699)
The scheduler did not run with a high enough priority, causing problems on busy systems (rdar://33789342)
Added support for Japanese Kaku 1 envelope size (rdar://34774110)
The `ipptool` program's `-P` option did not work correctly.
The `ipptool` program did not compare URI scheme or hostname components correctly for the WITH-ALL-HOSTNAMES, WITH-ALL-SCHEMES, WITH-HOSTNAME, or WITH-SCHEME predicates.
The scheduler did not remove old job files (Issue #4987)
cupsEnumDests did not return early when all printers had been discovered (Issue #4989)
The CUPS build system now supports cross-compilation (Issue #4897)
Added a new CUPS Programming Manual to replace the aging API documentation.
Added the `cupsAddIntegerOption` and `cupsGetIntegerOption` functions (Issue #4992)
The `cupsGetDests` and `cupsCreateJob` functions now support Bonjour printers (Issue #4993)
Added a USB quirk rule for Lexmark E260dn printers (Issue #4994)
Fixed a potential buffer overflow in the `cupstestppd` utility (Issue #4996)
IPP Everywhere improvements (Issue #4998)
Fixed the "cancel all jobs" function in the web interface for several languages (Issue #4999)
Fixed issues with local queues (Issue #5003, Issue #5008, Issue #5009)
The `lpstat` command now supports a `-e` option to enumerate local printers (either previously added or on the network) that can be accessed (Issue #5005)
The `lp` and `lpr` commands now support printing to network printers that haven't yet been added (Issue #5006)
Fixed a typo in the mime.types file.
Fixed a bug in the Spanish web interface template (Issue #5016)
The `cupsEnumDests*` and `cupsGetDest*` functions now report the value of the "printer-is-temporary" Printer Status attribute (Issue #5028)
Added Chinese localization (Issue #5029)
The `cupsCheckDestSupported` function did not support `NULL` values (Issue #5031)
Fixed some issues in the RPM spec file (Issue #5032)
The `cupsConnectDest` function now supports the `CUPS_DEST_FLAGS_DEVICE` flag for explicitly connecting to the device (printer) associated with the destination.
The `SSLOptions` directive in "client.conf" and "cupsd.conf" now supports `DenyCBC` and `DenyTLS1.0` options (Issue #5037)
Added "CreateSelfSignedCerts" directive for cups-files.conf to control whether the scheduler automatically creates its own self-signed X.509 certificates for TLS connections (Issue #4876)
http*Connect did not handle partial failures (Issue #4870)
Addressed some build warnings on Linux (Issue #4881)
cupsHashData did not use the correct hashing algorithm (<rdar://problem/28209220>)
Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
Fixed printing of multiple files to raw queues (Issue #4782)
The scheduler did not implement the Hold-New-Jobs operation correctly (Issue #4767)
The ipptool program truncated values at 8k (Issue #4786)
The ipptool program did not correctly report uriScheme values in plist output (Issue #4785)
The cups-lpd mini-daemon incorrectly included the document-name attribute when creating a job. It should only be included when sending a job (Issue #4790)