1Change History 2============== 3 4Changes in CUPS v2.3.6 5---------------------- 6- CVE-2022-26691: An incorrect comparison in local admin authentication. 7 8 9Changes in CUPS v2.3.5 10---------------------- 11 12- The automated test suite can now be activated using `make test` for 13 consistency with other projects and CI environments - the old `make check` 14 continues to work as well, and the previous test server behavior can be 15 accessed by running `make testserver`. 16- ippeveprinter now supports multiple icons and strings files. 17- ippeveprinter now uses the system's FQDN with Avahi. 18- ippeveprinter now supports Get-Printer-Attributes on "/". 19- ippeveprinter now uses a deterministic "printer-uuid" value. 20- ippeveprinter now uses system sounds on macOS for Identify-Printer. 21- Updated ippfind to look for files in "~/Desktop" on Windows. 22- Updated ippfind to honor `SKIP-XXX` directives with `PAUSE`. 23- Updated IPP Everywhere support to work around printers that only advertise 24 color raster support but really also support grayscale (OpenPrinting #1) 25- ipptool now supports DNS-SD URIs like `ipps://My%20Printer._ipps._tcp.local` 26 (OpenPrinting #5) 27- ipptool now supports monitoring the printer state while submitting a job 28 with the `MONITOR-PRINTER-STATE` directive (OpenPrinting #153) 29- ipptool now supports testing for unique values with the `WITH-DISTINCT-VALUES` 30 predicate (OpenPrinting #153) 31- ipptool now supports retrying requests on a `server-error-busy` status code 32 (OpenPrinting #153) 33- ipptool now supports `value-tag(MAX)` and `value-tag(MIN:MAX)` for the 34 `OF-TYPE` predicate (OpenPrinting #153) 35- The scheduler now allows root backends to have world read permissions but not 36 world execute permissions (OpenPrinting #21) 37- Failures to bind IPv6 listener sockets no longer cause errors if IPv6 is 38 disabled on the host (OpenPrinting #25) 39- The SNMP backend now supports the HP and Ricoh vendor MIBs (OpenPrinting #28) 40- The scheduler no longer includes a timestamp in files it writes (OpenPrinting #29) 41- IPP Everywhere PPDs could have an "unknown" default InputSlot (OpenPrinting #44) 42- The `httpAddrListen` function now uses a listen backlog of 128. 43- The PPD functions now treat boolean values as case-insensitive (OpenPrinting #106) 44- Temporary queue names no longer end with an underscore (OpenPrinting #110) 45- Added USB quirks (Issue #5789, #5766, #5823, #5831, #5838, #5843, #5867) 46- Fixed IPP Everywhere v1.1 conformance issues in ippeveprinter. 47- Fixed DNS-SD name collision support in ippeveprinter. 48- Fixed compiler and code analyzer warnings. 49- Fixed TLS support on Windows. 50- Fixed ippfind sub-type searches with Avahi. 51- Fixed the default hostname used by ippeveprinter on macOS. 52- Fixed resolution of local IPP-USB printers with Avahi. 53- Fixed coverity issues (OpenPrinting #2) 54- Fixed `httpAddrConnect` issues (OpenPrinting #3) 55- Fixed web interface device URI issue (OpenPrinting #4) 56- Fixed lp/lpr "printer/class not found" error reporting (OpenPrinting #6) 57- Fixed a memory leak in the scheduler (OpenPrinting #12) 58- Fixed a potential integer overflow in the PPD hashing code (OpenPrinting #13) 59- Fixed output-bin and print-quality handling issues (OpenPrinting #18) 60- Fixed PPD options getting mapped to odd IPP values like "tray---4" (OpenPrinting #23) 61- Fixed remote access to the cupsd.conf and log files (OpenPrinting #24) 62- Fixed a logging regression caused by a previous change for Issue #5604 63 (OpenPrinting #25) 64- Fixed the "uri-security-supported" value from the scheduler (OpenPrinting #42) 65- Fixed IPP backend crash bug with "printer-alert" values (OpenPrinting #43) 66- Fixed default options that incorrectly use the "custom" prefix (OpenPrinting #48) 67- Fixed a memory leak when resolving DNS-SD URIs (OpenPrinting #49) 68- Fixed cupsManualCopies values in IPP Everywhere PPDs (Issue #5807) 69- Fixed duplicate ColorModel entries for AirPrint printers (Issue 59) 70- Fixed crash bug in `ppdOpen` (OpenPrinting #64, OpenPrinting #78) 71- Fixed regression in `snprintf` emulation function (OpenPrinting #67) 72- Fixed reporting of printer instances when enumerating and when no options are 73 set for the main instance (OpenPrinting #71) 74- Fixed segfault in help.cgi when searching in man pages (OpenPrinting #81) 75- Fixed a bug in ipptool that caused the reuse of request IDs when repeating a 76 test (OpenPrinting #153) 77- Root certificates were incorrectly stored in "~/.cups/ssl". 78- Fixed a PPD memory leak caused by emulator definitions (OpenPrinting #124) 79- Fixed a `DISPLAY` bug in `ipptool` (OpenPrinting #139) 80- `httpReconnect2` did not reset the socket file descriptor when the TLS 81 negotiation failed (Issue #5907) 82- `httpUpdate` did not reset the socket file descriptor when the TLS 83 negotiation failed (Apple #5915) 84- The `ippeveprinter` tool now automatically uses an available port. 85- The IPP backend now retries Validate-Job requests (OpenPrinting #132) 86- Removed support for the (long deprecated and unused) `KeepAliveTimeout` 87 directive in `cupsd.conf` (Issue #5733) 88- Fixed `@IF(name)` handling in `cupsd.conf` (Issue #5918) 89- The scheduler now supports the "everywhere" model directly (Issue #5919) 90- Fixed documentation and added examples for CUPS' limited CGI support 91 (Issue #5940) 92- Fixed the `lpc` command prompt (Issue #5946) 93- Fixed `job-pages-per-set` value for duplex print jobs. 94 95 96Changes in CUPS v2.3.4 97---------------------- 98 99- CVE-2020-10001: Fixed a buffer (read) overflow in the `ippReadIO` function. 100 101 102Changes in CUPS v2.3.3 103---------------------- 104 105- CVE-2020-3898: The `ppdOpen` function did not handle invalid UI 106 constraint. `ppdcSource::get_resolution` function did not handle 107 invalid resolution strings. 108- CVE-2019-8842: The `ippReadIO` function may under-read an extension 109 field. 110- Fixed WARNING_OPTIONS support for GCC 9.x 111 112 113Changes in CUPS v2.3.2 114---------------------- 115 116- Localization updates. 117 118 119Changes in CUPS v2.3.1 120---------------------- 121 122- Documentation updates (Issue #5661, #5674, #5682) 123- CVE-2019-2228: The `ippSetValuetag` function did not validate the default 124 language value. 125- Fixed a crash bug in the web interface (Issue #5621) 126- The PPD cache code now looks up page sizes using their dimensions 127 (Issue #5633) 128- PPD files containing "custom" option keywords did not work (Issue #5639) 129- Added a workaround for the scheduler's systemd support (Issue #5640) 130- On Windows, TLS certificates generated on February 29 would likely fail 131 (Issue #5643) 132- Added a DigestOptions directive for the `client.conf` file to control whether 133 MD5-based Digest authentication is allowed (Issue #5647) 134- Fixed a bug in the handling of printer resource files (Issue #5652) 135- The libusb-based USB backend now reports an error when the distribution 136 permissions are wrong (Issue #5658) 137- Added paint can labels to Dymo driver (Issue #5662) 138- The `ippeveprinter` program now supports authentication (Issue #5665) 139- The `ippeveprinter` program now advertises DNS-SD services on the correct 140 interfaces, and provides a way to turn them off (Issue #5666) 141- The `--with-dbusdir` option was ignored by the configure script (Issue #5671) 142- Sandboxed applications were not able to get the default printer (Issue #5676) 143- Log file access controls were not preserved by `cupsctl` (Issue #5677) 144- Default printers set with `lpoptions` did not work in all cases (Issue #5681, 145 Issue #5683, Issue #5684) 146- Fixed an error in the jobs web interface template (Issue #5694) 147- Fixed an off-by-one error in `ippEnumString` (Issue #5695) 148- Fixed some new compiler warnings (Issue #5700) 149- Fixed a few issues with the Apple Raster support (rdar://55301114) 150- The IPP backend did not detect all cases where a job should be retried using 151 a raster format (rdar://56021091) 152- Fixed spelling of "fold-accordion". 153- Fixed the default common name for TLS certificates used by `ippeveprinter`. 154- Fixed the option names used for IPP Everywhere finishing options. 155- Added support for the second roll of the DYMO Twin/DUO label printers. 156 157 158Changes in CUPS v2.3.0 159---------------------- 160 161- CVE-2019-8696 and CVE-2019-8675: Fixed SNMP buffer overflows (rdar://51685251) 162- Added a GPL2/LGPL2 exception to the new CUPS license terms. 163- Documentation updates (Issue #5604) 164- Localization updates (Issue #5637) 165- Fixed a bug in the scheduler job cleanup code (Issue #5588) 166- Fixed builds when there is no TLS library (Issue #5590) 167- Eliminated some new GCC compiler warnings (Issue #5591) 168- Removed dead code from the scheduler (Issue #5593) 169- "make" failed with GZIP options (Issue #5595) 170- Fixed potential excess logging from the scheduler when removing job files 171 (Issue #5597) 172- Fixed a NULL pointer dereference bug in `httpGetSubField2` (Issue #5598) 173- Added FIPS-140 workarounds for GNU TLS (Issue #5601, Issue #5622) 174- The scheduler no longer provides a default value for the description 175 (Issue #5603) 176- The scheduler now logs jobs held for authentication using the error level so 177 it is clear what happened (Issue #5604) 178- The `lpadmin` command did not always update the PPD file for changes to the 179 `cupsIPPSupplies` and `cupsSNMPSupplies` keywords (Issue #5610) 180- The scheduler now uses both the group's membership list as well as the 181 various OS-specific membership functions to determine whether a user belongs 182 to a named group (Issue #5613) 183- Added USB quirks rule for HP LaserJet 1015 (Issue #5617) 184- Fixed some PPD parser issues (Issue #5623, Issue #5624) 185- The IPP parser no longer allows invalid member attributes in collections 186 (Issue #5630) 187- The configure script now treats the "wheel" group as a potential system 188 group (Issue #5638) 189- Fixed a USB printing issue on macOS (rdar://31433931) 190- Fixed IPP buffer overflow (rdar://50035411) 191- Fixed memory disclosure issue in the scheduler (rdar://51373853) 192- Fixed DoS issues in the scheduler (rdar://51373929) 193- Fixed an issue with unsupported "sides" values in the IPP backend 194 (rdar://51775322) 195- The scheduler would restart continuously when idle and printers were not 196 shared (rdar://52561199) 197- Fixed an issue with `EXPECT !name WITH-VALUE ...` tests. 198- Fixed a command ordering issue in the Zebra ZPL driver. 199- Fixed a memory leak in `ppdOpen`. 200 201 202Changes in CUPS v2.3rc1 203----------------------- 204 205- The `cups-config` script no longer adds extra libraries when linking against 206 shared libraries (Issue #5261) 207- The supplied example print documents have been optimized for size 208 (Issue #5529) 209- The `cupsctl` command now prevents setting "cups-files.conf" directives 210 (Issue #5530) 211- The "forbidden" message in the web interface is now explained (Issue #5547) 212- The footer in the web interface covered some content on small displays 213 (Issue #5574) 214- The libusb-based USB backend now enforces read limits, improving print speed 215 in many cases (Issue #5583) 216- The `ippeveprinter` command now looks for print commands in the "command" 217 subdirectory. 218- The `ipptool` command now supports `$date-current` and `$date-start` variables 219 to insert the current and starting date and time values, as well as ISO-8601 220 relative time values such as "PT30S" for 30 seconds in the future. 221 222 223Changes in CUPS v2.3b8 224---------------------- 225 226- Media size matching now uses a tolerance of 0.5mm (rdar://33822024) 227- The lpadmin command would hang with a bad PPD file (rdar://41495016) 228- Fixed a potential crash bug in cups-driverd (rdar://46625579) 229- Fixed a performance regression with large PPDs (rdar://47040759) 230- Fixed a memory reallocation bug in HTTP header value expansion 231 (rdar://problem/50000749) 232- Timed out job submission now yields an error (Issue #5570) 233- Restored minimal support for the `Emulators` keyword in PPD files to allow 234 old Samsung printer drivers to continue to work (Issue #5562) 235- The scheduler did not encode octetString values like "job-password" correctly 236 for the print filters (Issue #5558) 237- The `cupsCheckDestSupported` function did not check octetString values 238 correctly (Issue #5557) 239- Added support for `UserAgentTokens` directive in "client.conf" (Issue #5555) 240- Updated the systemd service file for cupsd (Issue #5551) 241- The `ippValidateAttribute` function did not catch all instances of invalid 242 UTF-8 strings (Issue #5509) 243- Fixed an issue with the self-signed certificates generated by GNU TLS 244 (Issue #5506) 245- Fixed a potential memory leak when reading at the end of a file (Issue #5473) 246- Fixed potential unaligned accesses in the string pool (Issue #5474) 247- Fixed a potential memory leak when loading a PPD file (Issue #5475) 248- Added a USB quirks rule for the Lexmark E120n (Issue #5478) 249- Updated the USB quirks rule for Zebra label printers (Issue #5395) 250- Fixed a compile error on Linux (Issue #5483) 251- The lpadmin command, web interface, and scheduler all queried an IPP 252 Everywhere printer differently, resulting in different PPDs for the same 253 printer (Issue #5484) 254- The web interface no longer provides access to the log files (Issue #5513) 255- Non-Kerberized printing to Windows via IPP was broken (Issue #5515) 256- Eliminated use of private headers and some deprecated macOS APIs (Issue #5516) 257- The scheduler no longer stops a printer if an error occurs when a job is 258 canceled or aborted (Issue #5517) 259- Added a USB quirks rule for the DYMO 450 Turbo (Issue #5521) 260- Added a USB quirks rule for Xerox printers (Issue #5523) 261- The scheduler's self-signed certificate did not include all of the alternate 262 names for the server when using GNU TLS (Issue #5525) 263- Fixed compiler warnings with newer versions of GCC (Issue #5532, Issue #5533) 264- Fixed some PPD caching and IPP Everywhere PPD accounting/password bugs 265 (Issue #5535) 266- Fixed `PreserveJobHistory` bug with time values (Issue #5538) 267- The scheduler no longer advertises the HTTP methods it supports (Issue #5540) 268- Localization updates (Issue #5461, Issues #5471, Issue #5481, Issue #5486, 269 Issue #5489, Issue #5491, Issue #5492, Issue #5493, Issue #5494, Issue #5495, 270 Issue #5497, Issue #5499, Issue #5500, Issue #5501, Issue #5504) 271- The scheduler did not always idle exit as quickly as it could. 272- Added a new `ippeveprinter` command based on the old ippserver sample code. 273 274 275Changes in CUPS v2.3b7 276---------------------- 277 278- Fixed some build failures (Issue #5451, Issue #5463) 279- Running ppdmerge with the same input and output filenames did not work as 280 advertised (Issue #5455) 281 282 283Changes in CUPS v2.3b6 284---------------------- 285 286- Localization update (Issue #5339, Issue #5348, Issue #5362, Issue #5408, 287 Issue #5410) 288- Documentation updates (Issue #5369, Issue #5402, Issue #5403, Issue #5404) 289- CVE-2018-4300: Linux session cookies used a predictable random number seed. 290- All user commands now support the `--help` option (Issue #5326) 291- The `lpoptions` command now works with IPP Everywhere printers that have not 292 yet been added as local queues (Issue #5045) 293- The lpadmin command would create a non-working printer in some error cases 294 (Issue #5305) 295- The scheduler would crash if an empty `AccessLog` directive was specified 296 (Issue #5309) 297- The scheduler did not idle-exit on some Linux distributions (Issue #5319) 298- Fixed a regression in the changes to ippValidateAttribute (Issue #5322, 299 Issue #5330) 300- Fixed a crash bug in the Epson dot matrix driver (Issue #5323) 301- Automatic debug logging of job errors did not work with systemd (Issue #5337) 302- The web interface did not list the IPP Everywhere "driver" (Issue #5338) 303- The scheduler did not report all of the supported job options and values 304 (Issue #5340) 305- The IPP Everywhere "driver" now properly supports face-up printers 306 (Issue #5345) 307- Fixed some typos in the label printer drivers (Issue #5350) 308- Setting the `Community` name to the empty string in `snmp.conf` now disables 309 SNMP supply level monitoring by all the standard network backends 310 (Issue #5354) 311- Multi-file jobs could get stuck if the backend failed (Issue #5359, 312 Issue #5413) 313- The IPP Everywhere "driver" no longer does local filtering when printing to 314 a shared CUPS printer (Issue #5361) 315- The lpadmin command now correctly reports IPP errors when configuring an 316 IPP Everywhere printer (Issue #5370) 317- Fixed some memory leaks discovered by Coverity (Issue #5375) 318- The PPD compiler incorrectly terminated JCL options (Issue #5379) 319- The cupstestppd utility did not generate errors for missing/mismatched 320 CloseUI/JCLCloseUI keywords (Issue #5381) 321- The scheduler now reports the actual location of the log file (Issue #5398) 322- Added USB quirk rules (Issue #5395, Issue #5420, Issue #5443) 323- The generated PPD files for IPP Everywhere printers did not contain the 324 cupsManualCopies keyword (Issue #5433) 325- Kerberos credentials might be truncated (Issue #5435) 326- The handling of `MaxJobTime 0` did not match the documentation (Issue #5438) 327- Fixed a bug adding a queue with the `-E` option (Issue #5440) 328- The `cupsaddsmb` program has been removed (Issue #5449) 329- The `cupstestdsc` program has been removed (Issue #5450) 330- The scheduler was being backgrounded on macOS, causing applications to spin 331 (rdar://40436080) 332- The scheduler did not validate that required initial request attributes were 333 in the operation group (rdar://41098178) 334- Authentication in the web interface did not work on macOS (rdar://41444473) 335- Fixed an issue with HTTP Digest authentication (rdar://41709086) 336- The scheduler could crash when job history was purged (rdar://42198057) 337- Fixed a crash bug when mapping PPD duplex options to IPP attributes 338 (rdar://46183976) 339- Fixed a memory leak for some IPP (extension) syntaxes. 340- The `cupscgi`, `cupsmime`, and `cupsppdc` support libraries are no longer 341 installed as shared libraries. 342- The `snmp` backend is now deprecated. 343 344 345Changes in CUPS v2.3b5 346---------------------- 347 348- The `ipptool` program no longer checks for duplicate attributes when running 349 in list or CSV mode (Issue #5278) 350- The `cupsCreateJob`, `cupsPrintFile2`, and `cupsPrintFiles2` APIs did not use 351 the supplied HTTP connection (Issue #5288) 352- Fixed another crash in the scheduler when adding an IPP Everywhere printer 353 (Issue #5290) 354- Added a workaround for certain web browsers that do not support multiple 355 authentication schemes in a single response header (Issue #5289) 356- Fixed policy limits containing the `All` operation (Issue #5296) 357- The scheduler was always restarted after idle-exit with systemd (Issue #5297) 358- Added a USB quirks rule for the HP LaserJet P1102 (Issue #5310) 359- The mailto notifier did not wait for the welcome message (Issue #5312) 360- Fixed a parsing bug in the pstops filter (Issue #5321) 361- Documentation updates (Issue #5299, Issue #5301, Issue #5306) 362- Localization updates (Issue #5317) 363- The scheduler allowed environment variables to be specified in the 364 `cupsd.conf` file (rdar://37836779, rdar://37836995, rdar://37837252, 365 rdar://37837581) 366- Fax queues did not support pause (p) or wait-for-dialtone (w) characters 367 (rdar://39212256) 368- The scheduler did not validate notify-recipient-uri values properly 369 (rdar://40068936) 370- The IPP parser allowed invalid group tags (rdar://40442124) 371- Fixed a parsing bug in the new authentication code. 372 373 374Changes in CUPS v2.3b4 375---------------------- 376 377- NOTICE: Printer drivers are now deprecated (Issue #5270) 378- Kerberized printing to another CUPS server did not work correctly 379 (Issue #5233) 380- Fixed printing to some IPP Everywhere printers (Issue #5238) 381- Fixed installation of filters (Issue #5247) 382- The scheduler now supports using temporary print queues for older IPP/1.1 383 print queues like those shared by CUPS 1.3 and earlier (Issue #5241) 384- Star Micronics printers need the "unidir" USB quirk rule (Issue #5251) 385- Documentation fixes (Issue #5252) 386- Fixed a compile issue when PAM is not available (Issue #5253) 387- Label printers supported by the rastertolabel driver don't support SNMP, so 388 don't delay printing to test it (Issue #5256) 389- The scheduler could crash while adding an IPP Everywhere printer (Issue #5258) 390- The Lexmark Optra E310 printer needs the "no-reattach" USB quirk rule 391 (Issue #5259) 392- Systemd did not restart cupsd when configuration changes were made that 393 required a restart (Issue #5263) 394- The IPP Everywhere PPD generator did not include the `cupsJobPassword` 395 keyword, when supported (Issue #5265) 396- Fixed an Avahi crash bug in the scheduler (Issue #5268) 397- Raw print queues are now deprecated (Issue #5269) 398- Fixed an RPM packaging problem (Issue #5276) 399- The IPP backend did not properly detect failed PDF prints (rdar://34055474) 400- TLS connections now properly timeout (rdar://34938533) 401- Temp files could not be created in some sandboxed applications 402 (rdar://37789645) 403- The ipptool `--ippserver` option did not encode out-of-band attributes 404 correctly. 405- Added public `cupsEncodeOption` API for encoding a single option as an IPP 406 attribute. 407- Removed support for the `-D_PPD_DEPRECATED=""` developer cheat - the PPD API 408 should no longer be used. 409- Removed support for `-D_IPP_PRIVATE_STRUCTURES=1` developer cheat - the IPP 410 accessor functions should be used instead. 411 412 413Changes in CUPS v2.3b3 414---------------------- 415 416- More fixes for printing to old CUPS servers (Issue #5211) 417- The IPP Everywhere PPD generator did not support deep grayscale or 8-bit per 418 component AdobeRGB (Issue #5227) 419- Additional changes for the scheduler to substitute default values for invalid 420 job attributes when running in "relaxed conformance" mode (Issue #5229) 421- Localization changes (Issue #5232, rdar://37068158) 422- The `cupsCopyDestInfo` function did not work with all print queues 423 (Issue #5235) 424 425 426Changes in CUPS v2.3b2 427---------------------- 428 429- Localization changes (Issue #5210) 430- Build fixes (Issue #5217) 431- IPP Everywhere PPDs were not localized to English (Issue #5205) 432- The `cupsGetDests` and `cupsEnumDests` functions no longer filter out local 433 print services like IPP USB devices (Issue #5206) 434- The `cupsCopyDest` function now correctly copies the `is_default` value 435 (Issue #5208) 436- Printing to old CUPS servers has been fixed (Issue #5211) 437- The `ppdInstallableConflict` tested too many constraints (Issue #5213) 438- All HTTP field values can now be longer than `HTTP_MAX_VALUE` bytes 439 (Issue #5216) 440- Added a USB quirk rule for Canon MP280 series printers (Issue #5221) 441- The `cupsRasterWritePixels` function did not correctly swap bytes for some 442 formats (Issue #5225) 443- Fixed an issue with mapping finishing options (rdar://34250727) 444- The `ppdLocalizeIPPReason` function incorrectly returned a localized version 445 of "none" (rdar://36566269) 446- The scheduler did not add ".local" to the default DNS-SD host name when 447 needed. 448 449 450Changes in CUPS v2.3b1 451---------------------- 452 453- CUPS is now provided under the Apache License, Version 2.0. 454- Documentation updates (Issue #4580, Issue #5177, Issue #5192) 455- The `cupsCopyDestConflicts` function now handles collection attribute 456 ("media-col", "finishings-col", etc.) constraints (Issue #4096) 457- The `lpoptions` command incorrectly saved default options (Issue #4717) 458- The `lpstat` command now reports when new jobs are being held (Issue #4761) 459- The `ippfind` command now supports finding printers whose name starts with an 460 underscore (Issue #4833) 461- The CUPS library now supports the latest HTTP Digest authentication 462 specification including support for SHA-256 (Issue #4862) 463- The scheduler now supports the "printer-id" attribute (Issue #4868) 464- No longer support backslash, question mark, or quotes in printer names 465 (Issue #4966) 466- The scheduler no longer logs pages as they are printed, instead just logging 467 a total of the pages printed at job completion (Issue #4991) 468- Dropped RSS subscription management from the web interface (Issue #5012) 469- Bonjour printer sharing now uses the DNS-SD hostname (or ServerName value if 470 none is defined) when registering shared printers on the network (Issue #5071) 471- The `ipptool` command now supports writing `ippserver` attributes files 472 (Issue #5093) 473- The `lp` and `lpr` commands now provide better error messages when the default 474 printer cannot be found (Issue #5096) 475- The `lpadmin` command now provides a better error message when an unsupported 476 System V interface script is used (Issue #5111) 477- The scheduler did not write out dirty configuration and state files if there 478 were open client connections (Issue #5118) 479- The `SSLOptions` directive now supports `MinTLS` and `MaxTLS` options to 480 control the minimum and maximum TLS versions that will be allowed, 481 respectively (Issue #5119) 482- Dropped hard-coded CGI scripting language support (Issue #5124) 483- The `cupsEnumDests` function did not include options from the lpoptions 484 files (Issue #5144) 485- Fixed the `ippserver` sample code when threading is disabled or unavailable 486 (Issue #5154) 487- Added label markup to checkbox and radio button controls in the web interface 488 templates (Issue #5161) 489- Fixed group validation on OpenBSD (Issue #5166) 490- Improved IPP Everywhere media support, including a new 491 `cupsAddDestMediaOptions` function (Issue #5167) 492- IPP Everywhere PPDs now include localizations of printer-specific media types, 493 when available (Issue #5168) 494- The cups-driverd program incorrectly stopped scanning PPDs as soon as a loop 495 was seen (Issue #5170) 496- IPP Everywhere PPDs now support IPP job presets (Issue #5179) 497- IPP Everywhere PPDs now support finishing templates (Issue #5180) 498- Fixed a journald support bug in the scheduler (Issue #5181) 499- Fixed PAM module detection and added support for the common PAM definitions 500 (Issue #5185) 501- The scheduler now substitutes default values for invalid job attributes when 502 running in "relaxed conformance" mode (Issue #5186) 503- The scheduler did not work with older versions of uClibc (Issue #5188) 504- The scheduler now generates a strings file for localizing PPD options 505 (Issue #5194) 506