PaperCut NG - Complete Release History

New Features

• Windows Protected Print (WPP) mode support (BETA)
  • Computers with Windows Protected Print mode enabled can now print to Mobility Print print queues that are deployed via Print Deploy. See the Windows Protected Print percolator page for more information. [PD-2070]
• Print Deploy client management
  • Admins can now view details of all connected clients (workstations) in the Print Deploy admin interface. This displays the username, hostname, IP address, OS, user groups, and the zone the client is connected to.
  • Print queues can now be deployed directly to individual clients in addition to zones. [PD-1984]

Fixes

• Improved Global Entitlements Service (GES) sync performance. Changes included adjusting the synchronization frequency within MF to stagger customer check-ins throughout each hour, preventing simultaneous server requests. See known issue for more information. [PO-2745]

• Removed the outdated local copy of the PaperCut NG/MF manual, from the Application server which has been replaced with the online PaperCut NG/MF manual . [PO-1946]

   

  Print Deploy Shared Secret Expiration with Entra ID SSO

  This version contains the fix for Print Deploy (1.9.2785). This shared secret expired as of November 24, 2024. More information listed in known issue . [PD-2133]

Security

• The Environmental Impact Widget (not supported since 2022), is now disabled by default on all upgrades and new installations. [PO-2748]
• Hardened error handling for security improvements
  • See PaperCut NG/MF Security Bulletin (Dec 2024) for more information .

Enhancements:

• Enhanced the Activated Servers table on the About > Registration page so that the UUID is now fully displayed. [PO-2710]
• Improved the user experience when configuring Google OAuth SMTP settings, so that values do not need need to be re-entered after succesfully authenticating. [PO-2576]

Fixes:

• Fixed an issue that was causing a NullPointer exception during an LDAP sync with Novell eDirectory. [PO-2619]

• Fixed an issue affecting v24.0.4 installs, that was causing the job log layout options to be missing on the printer and device job log pages. [PO-2684]

• Fixed an issue where some entitlements are displaying as “unknown” on the About > Registration page. [PO-2402]

• Changed the app log severity type from ERROR to WARN for the background entitlements sync process where connection to the cloud service is unsuccessful. Please note that customers may still see sync errors in the Application Log - see known issue PO-2745 for more information. [PO-2569]

   

Print Provider:

• Print analysis: Fixed an issue where an image printed in color detected as grayscale when printing with the HP Universal PostScript printer driver on macOS. [PIE-807]
• Web Print (Windows): Fixed an issue where the image handler did not support hot folders specified as a root directory with only a drive letter. [PIE-812]

Enhancements:

• Added a new table in the About > Registration page showing a list of active Application Servers using the same CRN. A ‘deactivate’ option allows admins to deactivate the Application Server remotely. This will release entitlements from the server and make them available for other active servers to claim. See Releasing all entitlements from an Application Server for more info. [PO-2508]
• Added Admin Rights to control access to the Enable Printing section, including Print Deploy, Mobility Print and Universal Print. Note, the “View connected clients and assign print queues” right is for a new Print Deploy feature that will be released in PaperCut NG version 24.1. [PD-2006]

Fixes:

• Fixed an issue that was causing a page error to occur when pay stations were created. [PO-2548]
• Fixed an issue that was erroneously reporting 0.0 MB free space available in the header of the PaperCut NG/MF Application Server log files. [PO-2095]
• Fixed an issue in the CSV version of the Shared account security access report where only Sub Shared Account Pin Codes were shown. Please note: A new column has been added called `shared-account-parent-code` and the `code` column has been renamed `shared-account-sub-code`. [PO-1793]
• HP Color LaserJet Pro MFP 4303 devices: Fixed an issue that prevented the serial number and toner information from being read from HP Color LaserJet Pro MFP 4303 devices. [PIE-782]

Print Provider:

• PDL transforms for Epson: Input tray and staple settings enabled for print jobs using the PaperCut Global PostScript printer driver are now properly handled by Epson devices. Thank you to Epson for implementing the PDL transform script. [PIE-770]

Security:

• Upgraded GhostTrap (1.4.10.03.1) with an updated version of Ghostscript (10.03.1). For more information, see Ghost Script Vulnerabilities . [PO-2204]

Universal Print:

• Updated the Universal Print connector to version 2024-08-09-2032 .

New Features:

PaperCut NG v24.0.3 is available for PaperCut NG customers. The following changes have been introduced:

• Internet access is required when upgrading to v24.0.3 NG and syncing entitlements. PaperCut NG must be able to connect to a new Global Entitlements Service to sync its installed license entitlements. Existing licenses will be activated automatically on upgrade. See Important points to know about PaperCut NG/MF licensing (Internet connection requirements) for more information.
• New ‘Registration’ page. Added a ‘Registration’ page within the PaperCut NG admin interface to display license details and PaperCut contact details. See Managing entitlements for more information. [PO-1299]
• Deactivating an installation. The ‘Registration’ page contains a new button for PaperCut NG administrators to deactivate the installation. Clicking this button clears out the entitlements that the install has claimed so the entitlements can be reused for another site, or another fresh install. This requires a connection to the Global Entitlements Service. See Managing entitlements for more information. [PO-1658]
• Environments with multiple application servers. Due to the new mechanism for syncing entitlements, multiple Application Servers will sync to a single source of entitlements for the customer. This means that PaperCut NG environments that are using the same license file on each server will now use a single set of licensed items. Prior to upgrading to v24, customers must ensure that their license covers the total number of devices used across their Application Servers. See Important points to know about PaperCut NG/MF licensing (Global set of entitlements) for more information. [PO-1302]
• Updated EULA. The EULA has been updated for version 24. See End User License Agreement (EULA) for more information. [PO-2072]

Security:

• Updated third party dependancies [PO-1725][PO-2306]

Fixes:

• Increased the grace period for existing customers who upgrade to 24.x that cannot access the Global Entitlements Service from 30 to 120 days. See Known issue PO-2223 (Internet connection required) for more information. [PO-2440]
• Fixed a rare issue where bulk user actions could create/update a user to have the same primary username as another user’s alias. For bulk user operations, the primary username will now always take priority and the clashing alias will be removed. [PO-2143]
• Fixed a problem that when an end user clicks on the shared PCClient/win/pc-client-local-cache.exe file in the server folder, the cached version of the desktop client was always 1.0.0.0, which prevented timely updates of the user client binaries to the end user computers. [PO-1877]
• Google Cloud Directory: Multi-domain user syncing for normalized (aka domain-less) user names. [PO-2341]
• Fixed the setup of user groups to reflect changes made to the sync domain(s) specified. [PO-2380]
• Added the ability to batch import internal users without having to specify passwords (reverting back to the behavior prior to version 22.1.0). [PO-2236]
• Fixed a web-SSO issue that caused admins to be incorrectly redirected to the logout page. [PO-1812]
• Fixed an issue where a user sync was occurring on a secondary sync source when disabled. [PO-2403]
• Fixed a bug that allowed the creation of new internal users with usernames already taken for other users’ aliases in both UI and server command CLI. Also fixed a bug in the server command that could create a new standard user with a username already taken as another user’s alias. [PO-1506]
• User Sync: Improved user card PIN encoding times, and added an option to configure encoding strength. [PO-2226]
• Fixed an issue that prevented the user client and release station from launching in conjunction with screen readers such as NVDA. [PO-1700]

Print Provider:

• Sharp PostScript printer drivers and PPDs: Fixed an issue that caused incorrect total and color page counts when using booklet or poster print mode. [PIE-744]
• Fixed an issue that could cause delays when releasing print jobs if the ‘ServerName’ configuration is set. [PIE-762]

Other notes:

• A DB upgrade does occur when upgrading to this version.

Fixes:

• Fixed issue with “About > Update contact details” not working in certain circumstances. [PO-2238], [PO-1930]

Print Provider:

• PaperCut Global PostScript Driver: Fixed a driver signing issue that caused the driver installation to fail. [PIE-752]

Security:

• Hardened access control. [PIE-743]
• See PaperCut NG/MF Security Bulletin (May 2024) for more information.

Fixes:

• Fixed an issue that could prevent users that have multiple email addresses from syncing. [PO-2144]
• Web Print: Fixed an issue where the color scheme was not loading in the Web Print user interface. [PO-1974]
• Fixed the UI text layout in PaperCut NG/MF Admin Portal > Options > Advanced tab - Security section, to better match the input field order. [PO-1977]
• Logging: Changed a log ERROR message to WARN in Email to Print as we now better support network connection issues. [PO-2004]
• Payment Gateway: Fixed an issue where Payment Gateway postback fails. KB, manual. [PO-1879]
• Added the ability to delete Google Cloud Directory (GCD) certificate from the administrator UI User/Group Sync page when Google Cloud Directory is the sync source. [PO-2142]
• Fixed an in product documentation link for configuring Single Sign on with Google. [PO-1943]
• Widows Active Directory: Fixed user card PINs being omitted from group user imports. [PO-2188]

Print Provider:

• Windows Direct Print Monitor: Fixed an issue that caused Print Deploy to overwrite manually configured settings in print-provider.conf, for example debug=on/off. [PIE-689]
• Windows Print Provider: Fixed an issue where the Print Provider in rare cases would crash during startup. [PIE-698]
• macOS Print Provider: Fixed an issue that the Print Provider and Direct Print Monitor running on macOS Sonoma 14.4 could not track print jobs on newly added printers. [PIE-720], [PIE-722]
• Use new code signing certificate for all Print Provider executables [PIE-713]
• Print Provider: macOS 10.15 Mojave and earlier are no longer supported. macOS 11 Big Sur or later is required to run. [PIE-654]
• PDL transform: Fixed an issue that caused stapling to fail on Xerox printers when using non-envelope paper sizes. [PIE-636]
• CUPS: Fixed an issue that caused print jobs to be logged as successful when printers did not respond for 10 minutes. [PIE-628]
• CUPS: Fixed an issue where a printer called PaperCut was incorrectly listed under available printers to install. [PIE-702]
• Print analysis: Fixed an issue on large format Canon printers that caused the wrong page size dimensions to be detected. [PIE-638]
• Print analysis: Fixed an issue that caused grayscale printing to be detected as color when using Fujifilm PostScript printer drivers. [PIE-650]
• Hardware Page Count on macOS: Fixed an issue that caused Hardware Page Count to fail when HTTPS is enabled. [PIE-655]
• Hardware Page Count: Added support for printers Kyocera ECOSYS P3055dn, P3051dn, and P5026. [PIE-683]

Web Print and Email to Print:

• Web Print, Email to Print, when using SHARP MX-4070N PCL6 or SHARP MX-4070N PS drivers. Fixed an issue that caused 11x17 inch page size documents to be printed as A4 or Letter size. [PIE-651]
• Web Print, Email to Print: Updated a dependent library that improves security. [PIE-559]
• Web Print, Email to Print: Fixed an issue that in some cases would cause Letter and 11x17 inch documents to be printed in A4 instead. [PIE-662]
• Web Print (Windows): Fixed an issue that caused PDF documents to fail to print when the Web Print service is run as a Group Managed Service Account. [PIE-643]

Security:

• Enhanced the UI for the user and admin login screens to optimize the SSO sign-in experience when enabled. [PO-1965]
• Various 3rd party dependency upgrades. [PO-2170][PO-2168][PO-2166][PO-2130][PO-1886]
• Various security enhancements to improve the overall security of the product.

Fixes:

• Fixed an issue that prevented the application server from starting in some Linux environments. [PO-2119]

Security: 

• Various security fixes. See PaperCut NG/MF Security Bulletin (March 2024) for more information. [CDSS-3505], [CDSS-3325], [PO-2080], [PIE-708], [PO-2030]
• This release also includes several pre-emptive security improvements and additions to layers of defense. These improvements were made as a result of code audits, pen tests and security reviews. Changes were made in line with our security uplift initiative.

Fixes:

• macOS: Fixed an issue that, in some cases, when deploying Mobility Print or IPPS print queues via Print Deploy, the Print Deploy client caused the CUPS IPP backend to fail, resulting in any IPP/IPPS/HTTP/HTTPS print jobs failing. This fix will also restore a user’s CUPS IPP backend if Print Deploy previously broke it. See known issue for more information. [PD-1892]

Fixes:

• Email to Print: Improvement to the efficiency of bulk folder operations when using the IMAP protocol. [PO-1735]
• User/Group Sync Source: Added the ability to configure an alternative email address for UPN users with the Standard Azure sync. [PO-949]
• Print Deploy: Allows admins to downgrade the execution privileges of the Print Deploy server. Note that this is applied by default in a fresh installation of 23.0.5, but will need manually applying (if required) for upgrades. See How to downgrade the execution privilege of the Print Deploy server on Linux and macOS for more information. [PD-1690]

Fixes:

• Fixed an issue where client authentication and unauthenticated printers are not working correctly with the 23.0.3 version user client. [PO-1853], [PO-1845]
• PostgreSQL - Fixed an issue that was introduced in 23.0.3 that caused database imports to fail when using postgresSQL. [PO-1855]

New Features:

• Added support for users logging in to the PaperCut NG/MF User Client with Azure credentials & authenticating with Microsoft MFA flow (requires user clients to be upgraded). Find out what’s supported [PO-1643], [PO-1637]
• PaperCut username field now supports up to 255 characters (increased from 50 to 255 characters) to allow better support for customers using UPNs as usernames. [PO-1034]

Security:

• For new installations only, we are changing the default configuration for “Allowed remote provider IP addresses (e.g. secondary print servers)” under Options->Advanced->Security to only allow connections from local IP ranges by default. More details can be found here [PO-1649]
• Introduced the ability for Admins to update their company contact details in the About Page in MF/NG to be alerted in the event of a critical security incident. For more regular PaperCut security notifications please subscribe to security notifications [PO-1670]

Fixes:

• Updates to color contrast of text and elements for enhanced accessibility compliance on MF/NG Admin and User PaperCut web interfaces. [PO-1778]
• Fixed a bug with Email to Print when configured with Gmail over OAuth, which caused email to print to stop working until an Application Server restart. [PO-1672]
• Improved email sending behavior when using Outlook or Gmail connections with OAuth. This should reduce Scan to Email notification failures. [PO-1671]
• Addressed an issue that could cause Windows AD users to lose association with groups following a user sync failure. [PO-648]

Print Provider:

• Windows, Linux: Fixed an issue that caused Hardware Page Count to fail if HTTPS communication was enabled in the Print Provider. See known issues for macOS. [PO-1786]

Other notes:

• A DB upgrade occurs when upgrading to this version.

New Features:

• Added the ability for customers with Azure user/group sync to enable multi factor authentication (MFA) on their tenancy under certain circumstances. This enables MFA login flow across all web based authentication, however does not support the MF User Client. See Overview of synchronizing user and group details with Entra ID (Azure AD) for more information. [PO-1593], [PO-1275]
• Security communications enhancement to allow PaperCut to publish a banner to the Admin web interface to alert customers of any critical security incidents that may arise and guide them to take action to mitigate the issue. [PO-1448]

Security:

• Fixed a potential privilege escalation vulnerability when using the Print Archiving feature (CVE-2023-6006). See our Security bulletin (November 2023) for more information. [PIE-547]
• Security enhancement requiring Admins to re-authenticate their session before updating or assigning the admin rights or admin password. [PO-1558], [PO-1557]
• Security enhancement to comply with GDPR guidelines to redact personably identifiable information in Worldpay (RBS) Payment Gateway logs. [PO-1166]
• Updated several third party libraries. [PIE-625], [PO-30], [PO-858], [PO-859], [PO-862], [PO-947], [PO-963]
• Security enhancement to ensure that all password fields within the configuration files; server.properties and any payment gateway configuration files, are encrypted. These values will then be encrypted automatically after restarting the Application Server service. [PO-1130]

Fixes:

• Fixed a bug that prevented the editing of scheduled reports where the report contained invalid email addresses. [PO-1231]
• Fixed an issue that prevented scheduled reports being sent if any recipient contained an invalid email address. [PO-910]

Print Provider:

• Print Provider: Added options to configure the HTTPS/TLS communication port, cipher suite, TLS version and whether self-signed certificates should be accepted. [PIE-47]
• Print Analysis: Fixed an issue that caused page color to be detected as grayscale when using the Fujifilm Apeos series PCL6 printer driver to print booklets. [PIE-537]
• Email to Print and Web Print: Fixed an issue that caused printing to fail for some drivers when Tabloid page size is used. [PIE-616]

Other notes:

• If you are running v22.1.3 or later, there is NO database upgrade.

Security:

• Various security fixes. See PaperCut NG/MF Security Bulletin (March 2024) for more information. [CDSS-3505], [CDSS-3325], [PO-2080], [PIE-708], [PO-2030]
• This release also includes several pre-emptive security improvements and additions to layers of defense. These improvements were made as a result of code audits, pen tests and security reviews. Changes were made in line with our security uplift initiative.

Fixes:

• Fixed an issue that prevented the [internal users] group from being created when enabling internal users via the global config key. [PO-1531]
• Fixed the url link to the manual section for user aliases. [PO-1486]
• Added support for displaying Toner levels for Epson printers with two identical black cartridges. [PIE-458]

Print Provider:

• Direct Print Monitor: Fixed an issue that may cause a delay when releasing print jobs if the ‘ServerName’ configuration is set. [PIE-545]
• PDL transforms: Fixed an issue where using the PaperCut Global PostScript printer driver and redirecting to an HP printer could cause squaring of the printed copies of the document. [PIE-546]
• Email to Print: Fixed an issue that caused A4 or Letter size to be chosen when printing to the 11x17 inch page size for the following printer drivers.
  • KONICA MINOLTA C360iSeriesPCL [PIE-283]
  • Kyocera TASKalfa 5500i KX [PIE-260]
  • Kyocera TASKalfa 4054ci KX [PIE-552]
  • Sharp BP-70C36 PCL6 [PIE-554]

For more information about security improvements and vulnerabilities being addressed in this release, please see our Security Bulletin (July 2023) .

Enhancements:

• For internal user accounts only, re-introduced honoring of config key min-password-length to allow admins to set minimum password length for users. Admin password length minimum is still 8 characters since 22.1.1. [PO-1465]
• Added Customer Reference Number (CRN) to the About Page. [PO-1376]

Fixes:

• Fixed an issue where the Model/Type would not be correct on the Printer/Device details page for certain Fujifilm devices. [PIE-532]
• Admin message: Print Scripting and Device Scripting are enabled by default was still appearing after config had been set to “N”. Fixed issue so that message only appears when required. [PO-1491]
• Fixed an issue that caused some fields under Options > Notifications > SMTP Server Options to show as blank, after upgrading to 22.1.2 [PO-1487]
• Addressed an issue where Email Printing services using Gmail Over OAuth will stop trying to reconnect after encountering a network problem. Now the service will try to reconnect after the configured interval if the problem appears to be network related. [PO-1392]
• Fixed an issue that caused the ‘Balance After’ field to be missing from the Web Cashier Deposit Acknowledgement Slip. [PO-1336]
• Fixed an issue that caused refunds to be refunded to the default account rather than the originating account, when using multiple personal accounts. [PO-1345]

Security:

• Addressed file traversal issues. [CDSS-2495], [PO-1447]
• Hardened internal API Authentication. [PO-1474]
• Updated several third party libraries to recommended patch levels. [PO-1445], [PO-1364], [PO-1359], [PO-1391], [PO-1441]

For more information about these security improvements and vulnerabilities, please see our Security Bulletin (July 2023) .

Print Provider:

• Page analysis: Fixed an issue that caused the print costs to be incorrect for fixed-length charging in Canon/OCE Plotters. [PIE-465]
• Windows: Fixed an issue that caused Print Provider to crash when redirecting print jobs to HTTPS/IPPS target print queues. [PIE-250]
• CUPS: Fixed an issue that caused printing to fail with a ‘filter failed’ error message when processing the print-provider.uuid4 file. [PIE-449]
• PDL transform: Fixed a rare issue that caused the device screen to prompt users to adjust paper orientation when printing multiple copies to certain Ricoh devices via a Find-Me queue with the PaperCut Global PostScript printer driver. [PIE-457]

Other notes:

• This release contains a database upgrade

New Features:

• Over 50+ contextual links to the online manual added to the Admin UI to assist in configuration. [PO-1270], [PO-1259], [PO-1261], [PO-1262]
• Self signed certificates created using the create-ssl-keystore tool can now have additional values set via a new -rdn parameter, including the ability to set Country (CN) for compatibility with HP Gemstone devices. More information is available in the manual here . [PO-1226]
• Customers using Office 365 or Google email services can now utilise OAuth authentication for SMTP notifications. [PO-1218]
• When using db-tools for database imports and migrations, Added additonal validations to check file paths are correct, and backup zip files are valid. Error messages displayed to the administrator have been improved. [PO-1085]

Fixes:

• Changed the wording of the default English language Forgotten Password message. [PO-1278]
• Fixed an issue that prevented changes to the User/Group sync form from being saved when smtp notifications were not configured. [PO-1257]
• Added support for a “back off” response from Office 365 mail servers. PaperCut will now observe a backoff period returned by the mail server. [PO-1102]
• Fixed a problem that could cause the wrong user to be associated to a print job after a Print Deploy client reconnects to the application server. [PO-1031]

New Features:

Introduced a new security hardening feature designed to uplift default security and provide additional layers of protection. We’ve added configuration and new defaults to make it hard for attackers to initiate a chained attack.

This includes a new security.properties file to separate the configuration of some components from the web administration interface. These include:

• Print Scripting and Device Scripting settings, such as the ability to run executables and unsafe code from scripts
• Explicit granting of permission to run external executables such as those used with custom authentication providers and other plugins

For the vast majority of customers, no action will be required after the upgrade. Please see the PaperCut MF/NG 22.1.1 upgrade checklist for more information. [PO-1327]

Security:

• Addressed a Path Traversal vulnerability in the Application Server and Site Server. Under specific conditions, this could potentially allow an attacker read-only access to the server’s file system. CVE-2023-31046 . [PO-1277]
• Addressed a Cross-Site Request Forgery (CSRF) vulnerability in the Application Server, which, under specific conditions, could potentially enable an attacker to alter security settings or execute arbitrary code. This could be exploited if the target is an admin with a current login session. Exploiting this would typically involve the possibility of deceiving an admin into clicking a specially crafted malicious link, potentially leading to unauthorized changes. CVE-2023-2533 . [PO-1366]
• Introduced security hardening layer through security.properties files - as per new features section above.
• Increased the minimum password length requirement for newly created internal users to 8 characters. [PO-1373]

For more information refer to the June Security Bulletin .

Fixes:

• Fixed an issue that caused ancillary PaperCut executables including the PC-Client to crash with an error when run in some Windows environments. [PO-1295]
• Fixed an issue that was causing the Accessible UI for PaperCut 22.0.11 and 22.0.12 to display a blank screen after login. [PO-1400]

Other notes:

• If you are running v22.0.10 or later, there is NO database upgrade.

Print Deploy:

• Includes latest Print Deploy release 1.7.2336 for customers who do not have Print Deploy auto-update enabled. [PD-1659]

Enhancements:

• PaperCut will now allow access to the Admin UI users screen when the licenced user allowance has been exceeded. [PO-1142]

Print Provider:

• CUPS Only: Fixed an issue that occurred if the papercut account’s directory was not coinciding with the PaperCut MF or NG directory, then the Print Provider backend failed to write to its log file. [PIE-17]

Enhancements:

• Added a link to the web UI login page that will display instructions on what to do if a user has forgotten their password. Added configuration items on the Options page to disable (on by default) and to change the displayed text - found under Options > General > Branding. [PO-1092]
• End user error pages now display the contact info for the Reseller and Authorized Partner, rather than for PaperCut support. [PO-1119]
• Minor security improvement in cookie handling for web requests. [PO-388]

Fixes:

• Fixed issue that could prevent Unicode characters in printer scripts from being saved when using an MSSQL database. [PO-1083]
• Fixed an issue that caused the config key email-printing.imap-fetchsize-bytes not to be honored for IMAP over OAuth with both Gmail and Outlook services. [PO-1108]
• Fixed visual misalignment of buttons on the Change Details page. [PO-1181]
• Fixed an issue that could cause a “null pointer exception” message to be displayed when the custom report folder is not found. [PO-1201]
• Fixed some broken links to the online user manual. [PO-1240]

Print Provider and Application Server:

• Fixed an issue with length based charging in the Application Server and Print Provider for 90 degree rotation of print jobs for Canon and OCE Plotters using PCL5. [PIE-261]

Print Provider:

• CUPS Only: Added a config key to the print-provider.conf file - JobHoldPersistence (commented out and disabled by default). This config key controls whether the Print Provider will retain info regarding all currently held CUPS jobs during a server restart. [PIE-294]
• Add toner support for Konica Bizhub 5020i and similar devices. [PIE-234]
• Added PaperCut transform support for stapling with Canon Generic PS Driver. [PIE-247]

Enhancements:

• Improved work flow of internal user self-registration by ensuring that the end user can see their own PIN in an email delivered to them if they could not or did not choose their own PIN. If the admin does not allow self selection of PINs for self registration, they must enforce 2 rules: 1) the user must enter an email address; and 2) email confirmation must be sent. For new installations only, tick box “Also email confirmation message to user” is now by default ticked. Admin creation of new internal users is not affected. [PO-1122], [PO-1210]
• Dependency: Various minor dependency upgrades. [PO-1096]
• Updated links to the user manual to point to the online user manual hosted on the PaperCut website. [PO-989]
• Added Primary and Secondary card ID import options, including regex, to Microsoft Azure AD user sync configuration. [PO-405]
• Added customizable import of username aliases from Microsoft Azure AD. [PO-550]

Fixes:

• Security improvements to address an issue identified as ZDI-CAN-18987 in the NG/MF Application Server and Site Server (see Security Bulletin ). [PO-1216]
• Security improvements to address an issue identified as ZDI-CAN-19226 in the NG/MF Application Server (see Security Bulletin ). [PO-1219]
• Fixed an issue that prevented the admin from using long URLs in the custom links section of the user web page. [PO-1080]
• Fixed an issue that caused some actions and requests involving sub accounts (including importing sub-accounts) to fail. [PO-1205]
• Improved application server health check performance. [PO-1116]
• Fixed an issue that could cause an error to be displayed in the UI when selecting audit logs with a large number of users. [PO-1073]
• Minor security improvement. [PO-1062]
• Removed some redundant libraries. [PO-861]
• Fixed an issue that could cause Azure AD ID/card numbers not to be imported when ‘import users from selected groups’ is selected. [PO-971]
• Fixed an issue seen in PaperCut NG/MF 22.0.8 that prevented the Print Deploy Server service from starting properly after a brand new installation, causing a AdminAPIAuth: error: authorization key provided for this request is invalid error in the Print Deploy Server log file. [PD-1583]

Print Provider:

• [Unreleased feature not impacting General Availability installs] Fixed an issue on Print Provider for CUPS with persisted held jobs to ensure that held job processes exit properly when service is shutdown. Refer to this known issue for more information. [PIE-69]
• Fixed an issue where some Epson and Canon printers (e.g. Canon IJ, Garo, UFR) were not being monitored by PaperCut. [PIE-195]
• Fixed an issue that caused slow Web Print printing for PDF documents processed by recent Acrobat Reader versions. [PIE-208]
• Fixed an issue that caused conversion to grayscale on Canon UFR to produce blank pages. [PIE-210]
• Fixed an issue where grayscale conversion did not work on FujiFilm PCL6 drivers. [PIE-214]
• [Linux] - Fixed an issue that caused thumbnail image generation to fail for archived PostScript spool files. [PIE-216]
• When “Block the release of jobs when this device is in error” is enabled and NoPaper has been selected as an error to block on, print jobs will no longer by default be blocked when any tray is empty. [PIE-219]
• Fixed an issue where the Mac/Linux Print Provider would not always wait for the Application Server to start up, which could lead to the Print Provider briefly switching into an Application Server connection failure mode. [PIE-226]

Enhancements:

• Added functionality to force expiry of print jobs that have been removed from the print spooler. New config key “release-station.forced-job-expiry-min” to set expiry time. If not explicitly set, will default to maximum hold time (same as previous behaviour). [PO-1032]
• Improve the App Server error message if the Print Provider is newer than the App Server. [PC-18820]
• Added an admin configuration option, “ldap.schema.user-search-ignored-error-codes”, which can be set to ignore any error codes that are returned while synchronising users from LDAP. [PO-1054]
• Upgraded to Java 11.0.16.9.1. [PO-1015]
• Enhanced the long running tasks pop-up window to resize content based on window dimensions. [PO-1014]
• Improved setup experience when setting up Email to Print with IMAP OAuth for Office 365. [PO-1012]
• Minor improvements to Mobile web UI layout. [PO-981]
• Asynchronous client/server requests are now enabled (server property “server.enable-async-requests” = true) by default for new installs and for upgrades where the server property is not explicitly set. [PO-960]
• Improved handling of access token expiry in Email to Print. [PO-944]
• Updated various libraries to latest version. [PO-928] [PO-927] [PO-912] [PO-743] [PO-741]
• Removed all Kotlin dependencies (performance improvement). [PO-984]
• Installer now removes previously deprecated legacy MacOS version desktop client package (occasionally flagged by security scans) on upgrade. [PO-836]
• Minor improvements to Accessible end user UI. [PO-827]
• Removed deprecated Google Cloud Print functionality. [PO-832]
• Made some minor performance improvements to DB transaction code. [PO-776]
• Made some improvements to server logging performance. [PO-760]
• Added an option to ignore Disabled users during user sync from Azure AD. [PO-645]
• Added support for Realex 3D Secure payment. [PO-543]
• Reduced frequency of “long lived DB connection” logging checks. [PO-98]

Fixes:

• Fixed an issue that could cause transactions via the Paypal payment gateway to be cancelled at end of transaction. [PO-1058]
• Fixed an issue that prevented users with admin privileges from uploading files to WebPrint. [PO-1045]
• Fixed a minor typo in the Moneris payment gateway configuration file. [PO-1025]
• Changed company name in copyright notices to not end in a period i.e. PaperCut Software Pty Ltd. [PO-1008]
• App server will now use server.force-host-header value, if set, to set Location header when Host header is not in an incoming request. [PC-18833]
• Improved legacy certificate cipher support. [PO-975]
• Fixed an issue that caused the wrong language to be displayed in the footer area of the web UI. [PO-959]
• Fixed an issue that caused the title of the “Add Custom Navigation Link” dialog to be displayed incorrectly. [PO-962]
• Fixed an issue that could cause an internal user to be blocked from logging in to PaperCut after changing password via API or server command. [PO-953]
• Fixed a bug that prevented the Print Jobs table in the UI from being refreshed after the date filter was cleared. [PO-929]
• Fixed an issue that prevented download of diagnostic bundle on MacOS and Linux. [PO-920]
• Fixed an issue that caused card self-association to fail when the “ext-device.self-association-allowed-card-regex” config key was set to DEFAULT. [PO-913]
• Fixed an issue that caused Scan to email with Interactive Destination Mode enabled not to work properly if the email contained an Apostrophe character. [PO-904]
• Fixed a bug in the Accessible end-user UI that caused the wrong language to be displayed when the host OS language differed from the PaperCut MF default language. [PO-800]
• Fixed an issue that caused the wrong notification email to be sent when importing batches of users via server command. [PO-168]
• Fixed an issue that could cause users to lose association with groups following a user sync failure. [PO-648]

Print Provider:

• Improved the logging of directory creation failures. [PC-18715]
• Newer versions of Print Provider can now communicate with older versions of the Application Server. [PC-18655]
• Added the ability to use extra SNMP data to better support the No Paper error condition in the Device In Error feature on devices that support it. [PIE-9]
• Added an early access enhancement that enables hold/release jobs on Mac and Linux CUPS Print Servers to be held over server reboot. To enable this functionality see the known issue . [PIE-40]
• Windows, PaperCut Global PostScript printer driver used for Riso printers: Fixed an issue that caused documents with titles containing special characters such as emojis to fail to print. [PIE-5]
• Windows, Xerox printers: Fixed an issue where printing to paper size Envelope 10 using the PaperCut Global PostScript printer driver didn’t auto tray select. [PIE-48]
• Windows (Since version 22.0.1): Fixed an issue where held print jobs would fail to be held over restarts of the Print Provider service. [PIE-52]
• macOS and Linux: Fixed an issue that caused the copy count on print jobs to be squared when in raw printing mode. [PC-18730]
• Xerox Enhanced PDL transform to automatically feed paper from the bypass tray when printing to a Xerox device with envelope-size paper specified. [PO-48]

Fixes:

• Fixed an issue that could cause the Executive Summary report to fail with an error with some external databases [PO-1063]
• Fixed an issue that caused Google authentication to fail with Email to Print if the PaperCut application server ports were 80 or 443. [PO-1021]
• Fixed an issue that caused Print Deploy Extended Enablement Pack licence checks to fail if licence was within 20 days of Support expiry. [PO-1029]
• Added a link on the Email to Print setup page to a Knowledge Base article with trouble-shooting tips [PO-1059]

Fixes:

• Resolved an issue caused by upgrading from 22.0.2 that caused “Full Access” Admin users to be labelled as “Limited Access” but still have full system access. This issue also removed their access to the Help page. [PO-985]

Fixes:

• Fixed an issue that prevented import of Google Cloud Directory certificates when setting up a new GCD user source [PO-970]

Enhancements:

• Enhancements to Batch Internal User email notifications. [PO-273]
• Improved performance of the Device Details page for installations with large queue numbers. [PO-762]
• Upgraded the Java Runtime Environment (JRE) to version 11.0.15. [PO-880]
• App Server: Added OAuth2 over IMAP authentication method for Gmail in Email Printing. Users will be able to use OAuth2 to authenticate their Gmail address to continue to use Email Printing after Google deprecates basic authentications. [PO-660]

Fixes:

• App Server: Fixed custom logo size and position in the Accessible Web Interface. [PO-822]
• App Server: Fixed an issue where several user UI options became hidden in the Options > General page. [PO-828]
• App Server: Removed Google Cloud Print section from the Enable Printing > Mobile & BYOD section as Google has deprecated the service. [PO-867]
• App Server: Fixed external license updates (including the server command executable) to notify PaperCut Grows of any license changes. [PO-882]
• App Server: Added Help page to the left side menu bar, giving the admin the most relevant information to seek support. The Help section can be accessed below “About”. [PO-903]
• App Server: Fixed a JavaScript dependency vulnerability problem that may be exploited. [PO-885]
• App Server: Fixed an issue where the locale override option was missing from default device configurations. [PO-895]
• App Server: Removed incorrect logging of apparent errors related to the “Azure AD” user source on a clean install. [PO-898]
• Print Provider: Fixed an issue that may prevent monitoring of Print Deploy deployed Windows print queues with long print names. [PC-18740]
• Print Provider: Fixed an issue that caused PDL transforms to not get applied when redirected from a queue using PaperCut Global PostScript driver to a destination queue using HP Universal PostScript driver. [PC-18741]
• Print Provider: Fixed a rare issue that may cause an incorrect page count when printing a document that contains images using PaperCut Global PostScript driver. [PC-18870]
• Print Provider: Canon Oce PlotWave 360 PostScript printer driver: Fixed an issue that caused the document size to be used incorrectly as the paper size if the document size is larger than the output paper size. [PC-18737]
• Print Provider: RISO PostScript printer driver: Fixed an issue that may cause an incorrect page size to be reported when output paper size is set to auto. [PC-18797]
• Print Provider: Konica Minolta printer drivers: Fixed an issue that caused print job grayscale conversion to fail when the color mode is set to 2-color. [PC-18853]
• Print Provider (CUPS): Fixed an issue that caused cross-server printing (print from a print queue on one server and release it from a queue on a different server) to fail. [PC-18859]
• Print Provider (CUPS): Fixed a rare issue that may cause print redirection to fail if print job attribute modification (for example, watermarking, grayscale conversion) is enabled. [PC-18789]
• Print Provider (CUPS): Fixed an issue that caused newly added printers to not get registered with PaperCut when automatic registering is enabled using EnablePrinterAutoImport configuration key. [PC-18788]
• Print Provider (iPrint): Fixed an issue that caused printer redirection and hardware page count to fail when using iPrint version 4.2 and above. [PC-18745]

Other notes:

• This version contains a database upgrade.

Enhancements:

• Email to Print - OAuth email server authentication for MS cloud email is now available. [PO-792]
• Print Provider - Improved the start-up time of the Print Provider on Windows. [PO-649]
• PaperCut Global PostScript print driver - Added ARM support and two new paper sizes (Envelope 10 and Envelope Com10). [PO-422]
• A banner now displays to alert customers of upcoming and expired Maintenance & Support. [PO-670]
• The character limit for the ‘Confirmation message’ field for the ‘Internal User Options’ configuration has been increased to 1000 characters. [PO-676]
• Added server.cookies.session.same-site parameter to the server.properties file to set same-site and secure attributes for browser cookies. Setting this to “none” will add the attributes. Note that this must only be enabled if all communications are HTTPS. [PO-344]
• Improved the Application Server’s performance when Debug is enabled. [PO-516]

Fixes:

• Fixed a minor formatting issue on the Admin Rights page, next to the ‘Access device and site sections’ checkbox. [PO-723]
• Fixed an issue that caused printing to break when there was a macOS update or other Print Provider restart. The CUPS Sandboxing is now set to relaxed for PaperCut. [PO-681]
• Enhanced the Azure Active Directory security in MF/NG. [PO-668]
• Fixed a bug in the Web Services API method batchImportInternalUsers. Now, if not explicitly set, when calling this method the default is for new users to NOT be notified by email. [PO-7]
• Fixed an issue that caused the cost multiplier of the selected account to not be applied when copying at embedded devices. [PC-18705]
• Fixed a problem when setting up High Availability in a protected network that caused the connection to fail when the Application Server tried to connect to the MFD after the device was registered. [PC-18696]
• Fixed a bug where Internal Users could not be renamed without also resetting their credentials. [PO-510]
• The Environmental Dashboard now honours SSO logins, so after users log in with SSO credentials they don’t need to re-authenticate to access this dashboard. [PO-531]
• Fixed an issue that caused yearly reports that were scheduled through the scheduled-reports.yearly-date config key to return data for 1 year + 1 day instead of the expected 1 exact year. Reports now return data for the exact 1 year period from the specified date value. [PO-394]
• Device/Printer Names: Fixed an issue when renaming devices/printers that didn’t allow hashes to be used. Added tests for illegal characters when creating a device/printer name. [PO-685]
• User Low Balance Notification: Fixed an issue where only positive LBN values were checked. [PO-512]
• PaperCut Global PostScript print driver: Added two new paper sizes (Envelope 10 and Envelope Com10). [PO-415]​
• Print Provider: Canon Generic Plus PCL6 printer driver: Fixed an issue where the page size could not be recognized and was always detected as A4 when using some device profiles [PC-18704]
• User Source - Azure AD: Renamed “Client Secret” to “Client Secret Value” to prevent ambiguity. [PO-696]
• Login: Fixed the SSO login page to have the “or” option translatable. [PO-647]
• Print Provider: fixed an issue where printing multiple copies of a document on Mac/Linux with raw printing would print the document too many times. [PC-18730]

Other notes:

• Removed the RBS prefix from Worldpay name in payment gateway configurations and templates in the App Server. [PO-566]
• If you are running v21.2.8 or older, there is a database upgrade.

Security:

• Various security fixes. See PaperCut NG/MF Security Bulletin (March 2024) for more information. [CDSS-3505], [CDSS-3325], [PO-2080], [PIE-708], [PO-2030]
• This release also includes several pre-emptive security improvements and additions to layers of defense. These improvements were made as a result of code audits, pen tests and security reviews. Changes were made in line with our security uplift initiative.

Fixes:

• Addressed file traversal issues. [CDSS-2495], [PO-1447]
• Hardened internal API Authentication. [PO-1474]
• Updated third party libraries to recommended patch levels. [PO-1441]

Fixes:

• Addressed a Path Traversal vulnerability in the Application Server and Site Server. Under specific conditions, this could potentially allow an attacker read-only access to the server’s file system.  CVE-2023-31046 . [PO-1277]
• Addressed a Cross-Site Request Forgery (CSRF) vulnerability in the Application Server, which, under specific conditions, could potentially enable an attacker to alter security settings or execute arbitrary code. This could be exploited if the target is an admin with a current login session. Exploiting this would typically involve the possibility of deceiving an admin into clicking a specially crafted malicious link, potentially leading to unauthorized changes.  CVE-2023-2533 . [PO-1366]

Fixes:

• Security improvements to address an issue identified as ZDI-CAN-18987 in the NG/MF Application Server and Site Server. [PO-1216]
• Security improvements to address an issue identified as ZDI-CAN-19226 in the NG/MF Application Server. [PO-1219]

Fixes:

• Fixed an issue that could cause an upgrade to fail when using version 21.2.9 with an MS SQL Server database. [PC-18810]

Other Notes:

• Note that this release includes the 3 security improvements listed in the previous release 21.2.9.

Fixes:

• Security improvements to address an issue in the Application Server. More information . [PC-18750]
• Security improvements to address potential Spring4Shell vulnerabilities in the Application Server. More information . [PC-18756]
• Security improvements to the Rhino.js scripting engine used with the Application Server. More information . [PO-816]

Other Notes:

• Note that this release has been removed from the website and from release archives, with a fix released in 21.2.10.

Fixes:

• Removed log4j 1.x dependencies from the PaperCut application install. Log4j 2.17.1 is now used exclusively. Note that customers upgrading from previous versions will also need to manually remove the /client/mac/legacy/PCClient.app application to avoid vulnerability scanners flagging this deprecated legacy client. [PO-725]

Fixes:

• Restored latest (2.17.1) versions of log4j2 libs accidentally reverted in previous release. [PO-785]
• Fixed an issue on Email To Print and Mobility Print where the printed page of the pdf file could be clipped. [PC-18698]

Enhancements:

• Added the tbl_printer_usage_log, table tbl_print_hardware_check, and tbl_refund_request tables to the list of tables that can be purged with db-tools. [PO-73]

Fixes:

• Fixed an issue that caused account balance adjustment to be off by a very small amount because of rounding issues. [PO-706]

• Fixed an issue that prevented device type filtering on the Devices page from working. [PO-655]

• Added a new config key (user.card.pin.hash-encode) to control whether user PINs will be hashed encoded and therefore unrecoverable. Default is ‘Y’. Set to ‘N’ if you are using the PaperCut Toshiba V2 and use PINs for login, to prevent user PINs from being hash encoded. [PO-540]

• Fixed an issue that could cause PDFs printed via Mobility print to fail to print “i” characters that were adjacent to “f” characters. [PO-236]

• Fixed an issue on macOS and Linux that could cause the number of copies made to be incorrect (number would be the square of the correct number). [PO-710]

• Fixed an issue with the Network Payment API that could cause top-up amounts to be calculated incorrectly in some edge cases. [PO-439]

• Fixed an issue that could cause print script pop up windows to be incorrectly sized in relation to the text. [PO-735]

• Fixes a bug that caused the User Client to present a Low Balance Notification on launch when Low Balance Notifications for the User Client were disabled. [PO-594]

• Fixed an issue that caused the user associated with anonymous/guest login with email to print to always be set to unrestricted when settings are saved. [PO-724]

• Fixed an issue that could cause long-run copy jobs that were interrupted (e.g. to refill paper tray) to be ended prematurely by the copier. [PO-731]

• Payment Gateway

  • Fixed an issue that caused PaperCut to incorrectly notify the user that the PayPal transaction was canceled, after returning to the PaperCut interface from the PayPal payment gateway. [PO-604]

• Release Station (Windows):

  • Fixed a configuration issue that prevented the release station from running on Windows network share paths (e.g. \\server\PCRelease). [PO-611]

• Print Provider:

  • Fixed an issue that could cause Canon UFR data to be interpreted incorrectly, leading to the number of pages to be calculated incorrectly. [PC-18465]
  • FX Versant 180 Press GX230 PostScript printer driver: Fixed an issue that caused grayscale output to be incorrectly detected as color. [PO-618]
  • Brother PCL5 printer driver: Fixed an issue that caused the page size to be treated as A4 when printing on some other paper sizes (e.g. A5). [PO-662]

Other Notes:

• Updated Handlebars.js library to version 4.7.7. [PO-603]
• Upgraded internal Jetty server to version 9.4.44. [PO-228]
• Updated licensing information summary to say “Licensed devices & connectors” [PO-621]

Fixes:

• Fixed an issue that caused the Web Cashier username search field dropdown to not function correctly. [PO-513]
• Upgraded all log4j2 libs to v2.17.1 to remove any possible vulnerability to CVE-2021-44832.

Fixes:

• Upgraded all log4j2 libs to v2.17 to remove vulnerability to CVE-2021-45105.

Fixes:

• Upgraded all log4j libs to v2.16 to remove vulnerability to CVE-2021-44228 (Log4Shell) and CVE-2021–45046.

Enhancements:

• Batch User Import:
  • Optimized to improve import times. [PO-573]
• Web Print:
  • Added the ability to detect password-protected Word documents and fail with a meaningful error message instead of waiting indefinitely. [PC-5325]
• Added password authentication support to the Standard Azure AD sync source. [PO-553]
• Improved Azure AD graph sync to now sync the users’ department. [PO-404]
• Changed the Health Check endpoint example to be a less expensive endpoint. [PO-276]
• Improved usability by removing the Azure ID configuration from the setup wizard to the Options > User Group Sync page. [PO-587]
• Added advanced config keys for the following, for which more information is available on request:
  • Hide the “Jobs” (Web Client) link in Mobile Print Release. [PC-18630]
  • Hide Mobile Print Release username and password authentication. [PC-18624]
  • Enable a custom program for resolving user card number lookups. [PC-17219]

Fixes:

• Batch User Import:
  • Fixed a bug that updated all database user records even when there was no data to update. [PO-567]
• Print Provider:
  • Fixed an issue that prevented PaperCut from detecting when Konica Minolta and Kyocera devices were out of paper. [PO-460]
  • Fixed an issue that caused the Print Provider to crash when certain PCL5 data was printed. [PO-561]
• Fixed an issue that prevented users from logging on if their Network Payment Gateway balance was a whole number (for example, $10) instead of a number that included a decimal point (for example, $10.00). [PO-377]
• Fixed an issue that caused SNI host checking to still be active if both SNI host checking and HSTS were disabled. [PO-511]

Enhancements:

• Improved editing experience when adding/modifying custom links in the user.web.custom-links config key. [PO-400]

Fixes:

• Fixed a Print Provider issue that could prevent job release when using “HideDocumentNames=on”. [PO-608]
• Improved editing experience when adding/modifying custom links in the user.web.custom-links config key. [PO-474]
• PaperCut Global PostScript printer driver:
  • Fixed an issue that could have caused a document printed from Microsoft Office and some other products to be printed in color even though the “Black & White” output was set. This fix applies only when the color detection mode on the admin console is set to page-level. [PO-16]

Enhancements:

• Improved customization and flexibility. Added support for syncing custom attributes to the Card ID field when using Google Cloud Directory. [PO-180]

Fixes:

• For customers running a large number of Direct Print Monitor clients, we have optimised the Application Server performance to improve performance and scalability. [PO-219]
• Security improvements to address an issue in the NG/MF Application Server. [PO-480]
• ‘Sign in with Microsoft’ button no longer asks for consent from the user at every login. [PC-18419]

Fixes:

• Security improvements to address an issue in the NG/MF Application Server. [PO-480]

Other notes:

• If you are running v21.0.1 or older, there is a database upgrade.

Enhancements:

• Added the capability to configure the maximum number of printers monitored by the Print Provider. [PO-373]

Fixes:

• Fixed compatibility issues with MySQL 8.0.23. [PO-336]
• Fixed an issue that could cause incorrect paper size selection when printing to a Sharp MX-3071 with PCL6 drivers. [PO-386]
• Fixed an issue that caused user sync tests to fail and ultimately to lock the app server. [PO-426]
• Security improvement: Fixed an issue that in some cases could cause session tracing via url rewriting to occur, if cookies were disabled in the user’s browser. [PO-388]

Copier/Device Integration

• FujiFilm
  • Fixed a problem preventing usernames longer than 32 characters from working on Fuji Xerox copiers. [PO-372]

Other Notes:

• If you are running v21.0.1 or older, there is a database upgrade.

Enhancements:

• Added support to the webservices API for deleting delegated groups, delegated users and other email addresses. [PO-290]

• Added new substitution variables %device_name% and %device_location% to the available macros for integrated scanning destination paths. [PO-193]

• Added the new config property schedule.daily-maintenence-reports to allow scheduled reports to be run at a different time to the daily maintenance tasks. [PO-130]

• Added SSL support for PaperCut desktop client communications. [PO-50]

• Added support for usernames longer than 32 characters, previously this could prevent users from scanning or copying if their username was longer than 32 characters. [PO-188]

• Print Archiving:

  • Added support for latest GhostPDL executable naming convention on Windows, Linux/Unix and Mac. [PO-94]

Fixes:

• Fixed an issue for third party providers who have created a top up link using our Payment Gateway Module API; previously the user could have their account topped up 100x more than it should if one of the following three config keys were set and the top up amount was equal to one of these values - Min, Max and Default Transfer Amounts. [PO-282]

• Fixed an issue with the webservices API that did not support group lookups when using username aliases. [PO-263]

• Fixed an issue with LDAP user syncing that caused the domain component of UPN usernames to be appended twice when syncing with multidomain enabled, for sources other than GSuite. [PO-259]

• Fixed an issue that could cause web print to fail for images when .NET runtimes other than Standard are installed. [PO-181]

• Fixed an issue that prevented Unicode language names (e.g. Hebrew) from being displayed correctly in the file-based group import (additional-groups.txt). [PO-324]

• Fixed a Cross-Site Scripting vulnerability in the user import (from a TSV file). [PO-305]

• Removed authentication requirement from /verify page of PaperCut user interface so that new account verification links will still be usable when WebSSO is enabled. [PO-43]

• Updated Google OAuth libraries to version 1.35.0. [PO-15]

• Fixed an issue that caused the Scan Next Page button to be hidden on some devices with small screens. [PO-17]

• Fixed an issue that prevented OpenAPI logs from being generated. [PO-301]

• Fixed an issue that caused color pages to be incorrectly detected as grayscale when printing from the iOS Photos app. [PO-217]

• FUJIFILM Business Innovation ART EX printer driver:

  • Fixed an issue that prevented page size and grayscale page detection from working. [PO-304]

Other Notes:

• If you are running v21.0.1 or older, there is a database upgrade.
• 21.0.3 is a combination of all the changes in 21.0.2 as well as 21.0.3, due to timings the two releases were combined.

Enhancements:

• Updated environmental impact widget appearance. [PO-68]
• Upgraded the app server logging system to a newer version. [PO-63]
• The PaperCut Connector for Microsoft Universal Print is now included in the standard server installation. [PC-18287]
• Added alternative method for synchronizing and authenticating users with Azure Active Directory that no longer requires AD Domain Services. [PC-18120]
• Now include previously deleted users when running the redaction feature. [PO-77]
• Changed the unit measurements for environmental savings on the dashboard. [PO-65]
• Diagnostics files can no longer be uploaded to the cloud from NG. [PO-166]
• Added the card/ID numbers (primary and secondary) number fields to the fields that can be redacted using our redaction feature. [PO-161]
• Add the name for any secondary personal accounts to the fields that can be redacted using our redaction feature. [PO-160]
• Added PDF/A conversion support for DocProc. [PO-56]
• The Admin web interface now displays the full version of each Site Server in the Sites area. [PO-133]

Fixes:

• Fixed an issue on Linux with pdftocairo that might cause an incorrect number of color pages to be detected. [PO-135]
• Updated Jetty to version 9.4.35.v20201120 for security reasons. [PO-41]
• New Behaviour for Mobile Release page /mr/(printerIdentifier) search. Previous behaviour was that if you entered /mr/(printerIdentifier) and it matched more than one printer, then it would display an error ‘failed to match’ and show all printers. New behaviour is that if your search matches more than one, it displays the printer list page pre-filtered to your search, if your search term is a full printer name that matches a single printer, then it will take you straight to the printer’s job page as it did previously. Allows users to store a bookmark which filters the release page by name/location/etc. which was not possible before. [PC-17411]
• Fixed an issue that could cause the Print Provider to crash parsing PCL5 data generated by SAP ERP. [PO-189]
• Fixed an issue when using certain Konica Minolta PCL6 printer drivers, printing on Tabloid (11x17) paper size with Email to Print or Web Print, that could cause the printer to print A4 or Letter size instead. [PO-182]

Other notes:

• If you are running v20.1.3 or older, there is a database upgrade.
• Devices marked with * require installing an updated version of the embedded software to access new features and fixes.

Security:

• Various security fixes. See PaperCut NG/MF Security Bulletin (March 2024) for more information. [CDSS-3505], [CDSS-3325], [PO-2080], [PIE-708], [PO-2030]
• This release also includes several pre-emptive security improvements and additions to layers of defense. These improvements were made as a result of code audits, pen tests and security reviews. Changes were made in line with our security uplift initiative.

Fixes:

• Addressed file traversal issues. [CDSS-2495], [PO-1447]
• Hardened internal API Authentication. [PO-1474]
• Updated third party libraries to recommended patch levels. [PO-1441]

Fixes:

• Addressed a Cross-Site Request Forgery (CSRF) vulnerability in the Application Server, which, under specific conditions, could potentially enable an attacker to alter security settings or execute arbitrary code. This could be exploited if the target is an admin with a current login session. Exploiting this would typically involve the possibility of deceiving an admin into clicking a specially crafted malicious link, potentially leading to unauthorized changes.  CVE-2023-2533 . [PO-1366]
  
  (Note that version 20.x is not impacted by  CVE-2023-31046 )

Fixes:

• Security improvements to address an issue identified as ZDI-CAN-18987 in the NG/MF Application Server and Site Server. [PO-1216]
• Security improvements to address an issue identified as ZDI-CAN-19226 in the NG/MF Application Server. [PO-1219]

Fixes:

• Fixed an issue that could cause an upgrade to fail when using version 20.1.5 with an MS SQL Server database. [PC-18810]

Other Notes:

• Note that this release includes the 3 security improvements listed in the previous release 20.1.5.

Fixes:

• Security improvements to address an issue in the Application Server. More information . [PC-18750]
• Security improvements to address potential Spring4Shell vulnerabilities in the Application Server. More information . [PC-18756]
• Security improvements to the Rhino.js scripting engine used with the Application Server. More information . [PO-816]

Other notes:

• Note that this release has been removed from the website and from release archives, with a fix released in 20.1.6.

Fixes:

• Security improvements to address an issue in the NG/MF Application Server. [PO-480]

Other notes:

• If you are running v20.0.4 or older, there is a database upgrade.

Enhancements:

• Enhanced the Admin UI to display a status message if Universal Print is configured but the MS Universal Print connector is not running. [PO-141]
• Updated the example C# code supplied in ServerCommandProxy.cs to show latest web services API features.
• Updated the build instructions for the C# example code. [PO-120]
• User Web Interface:
  • Added to the “Change Details” description that card/ID numbers can contain numbers, text and symbols. [PO-203]

Fixes:

• Improved the performance of “Sign in with Google” to Mobility Print (especially when synchronizing users from many domains). [PO-199]
• Added a housekeeping job to delete obsolete font files from the temp folder on startup. [PO-205]
• Added sendStringParametersAsUnicode=false to the template SQL Server database URL (to ensure that queries use indexes and run fast) [PO-204]
• Enabled a clean shutdown when stopping the PaperCut service on Linux. [PC-18090]
• Updated Java Runtime Environment to version 11.0.9. [PO-104]
• Fixed an issue that could cause some LDAP group members to not be synced correctly. [PO-102]
• Fixed an issue that caused Windows client dlls to not be included when installing on Mac or Linux. [PO-103]
• Fixed an issue introduced in PaperCut 20.1.1 that prevented PaperCut desktop clients from connecting to the PaperCut server when server.enable-async-requests was set to “Y”. [PO-153]

• Ricoh PCL6 printer driver:
  • Fixed an issue that a grayscale image might be treated as color when printing via Mobility Print [PC-17826]
• Linux with pdftocairo:
  • Fixed an issue that caused incorrect color page number and page size [PO-197]
• Windows Installer:
  • Fixed an issue that caused a site server warning dialog to be displayed when performing automated installations. [PO-100]

Other Notes:

• If you are running v19.2.4 or older, there is a database upgrade.

Enhancements:

• Added a config key (notify.partial-translations=“N”) to disable pop-up warnings for languages with missing translations. [PC-17762]
• Payment Gateways:
  • Added a new metric to record on demand top-up usage. [PC-17391]

Fixes:

• Fixed remaining compatibility issues with MacOS Big Sur. Big Sur is now fully supported. [PC-17585]
• Fixed an issue preventing warning messages from being displayed on the Printer & Device Details pages. [PC-17758]
• Fixed an issue that caused the CUPS pc-event-monitor to restart occasionally. [PC-17756]
• Fixed an issue that could cause Job Ticketing errors when multiple domains pointed to the application server. [PC-17693]
• Fixed an issue with mobile print release that caused the filter to break when using an Oracle DB [PC-17605]
• Fixed an issue that could cause Desktop Clients on MacOS to be logged out when another MacOS Desktop Client logs out. [PC-17820]
• Fixed an issue that caused a browser console warning (IE only) to be logged on the Scan Action Details page. [PC-17680]
• Fixed an issue with HP devices that could cause letter size jobs to be charged as statement size. [PC-17712]
• Konica Minolta bizhub C368 Series PCL and Kyocera TASKalfa 5053ci KX printer driver: Fixed an issue that caused A4 or Letter size to be chosen when printing to the 11x17 inch page size via Mobility Print [PC-17710]
• Device Config Editor:
  • Fixed an issue that caused new config key names to retain leading and trailing spaces. [PC-17705]
• Linux:
  • Fixed an issue with the un-installation process leaving files and directories behind after uninstall. [PC-9248]
• Print Provider:
  • Konica Minolta PostScript and PCL6 printer driver: Fixed an issue that caused incorrect page number and page size calculations when using “Center Staple and Fold”. [PC-17771]
  • Konica Minolta PCL6 printer driver: Fixed an issue that could cause an incorrect number of pages if “collate” was selected when printing multiple copies to a device that HDD was not installed or a Find-Me print queue [PC-17732]

Other notes:

• If you are running v20.0.4 or older, there is a database upgrade.

New Features:

• Data Integration:
  • Global release of the Data Integration platform that enables the export of PaperCut NG usage data for consumption into 3rd party Business Intelligence tool of choice. The platform supports the ability to load multiple integrations and is configured within the PaperCut NG Admin web interface under Reports. Automated export of daily changes for users, printers, print usage (print, copy and scan), accounts and server datasets as well as the ability to export your organizations historical usage data. [PC-17460]
• Print Provider:
  • Added a new option in the PaperCut NG Admin web interface to enable spool file encryption on Windows. This encrypts print job spool files before they are saved to disk on the Print Provider when used with hold/release security. [PC-17444]

Enhancements:

• Active Directory multi-domain support using User Principal Names has been moved out of Percolator and is now a fully supported feature. [PC-17575]
• Options → Advanced → “Trusted Proxy Servers” (X-Forwarded-For header handling for proxies and load balancers) now applies to all relevant connections, rather than just mobile clients. [PC-4953]
• Data Integration:
  • Added deleted users and devices in the initial historical export. Any deletes of users or devices within the historical days period now get exported. [PC-17799]

Fixes:

• Application Server:
  • Fixed user activity rate limiter not taking into account Trusted Proxy Servers setting when considering the X-Forwarded-For header. [PC-17675]
  • Fixed the Trusted Proxy Servers setting not trusting Google Cloud Platform HTTP(S) load balancers, due to their non-standard X-Forwarded-For header format. [PC-17562]
  • Added device ID to external device API for shared Account methods. [PC-15813]
• User Card PIN:
  • User card PINs are now one-way hashed for additional security. [PC-17476]
• Print Provider:
  • Added the capability into Print Provider to append a unique identifier to the operating system job id reported to the Application Server. This is useful in a clustered environment when all secondary servers use the same ServerName. [PC-17583]
• Updated Secondary Server and Direct Print Monitor installer for macOS 11 (Big Sur) compatibility. See the Known Issue for more details. [PC-17642]

Other notes:

• If you are running v20.0.4 or older, there is a database upgrade.
• Devices marked with * require installing an updated version of the embedded software to access new features and fixes.

Enhancements:

• Reduced the load time of the device list page for sites with a high device count. [PC-17499]

Fixes:

• Fixed an issue when the browser saves login details, to no longer populate the device username/password fields with the current login. [PC-17203]
• Added the ability to synchronize groups for multi-domain Google Cloud Directories. [PC-17386]
• Upgraded jQuery to 3.5.1 [PC-17437]
• Server Command: Fixed “enable-command” usage description. [PC-17604]
• Fixed an issue that in rare circumstances could cause the Print Provider to crash and restart. [PC-17590]
• Fixed an issue that could cause JavaScript login errors for restricted users on some Fuji Xerox devices [PC-17570]
• Fixed an issue that could cause a grayscale document to be counted as color when the standard color detection was used with PaperCut Global PostScript print driver [PC-17535]
• Fixed a locking issue caused by many user clients logged in with the same username. [PC-17610]
• Fixed an issue causing multiple “Invalid username or password” messages displayed when logging in via a device or through Client application [PC-17593]
• Removed a redundant file that was created after the Application server startup. [PC-17641]
• Updated the Windows installer to automatically create the nul printer port. [PC-17621]
• Fixed an issue that caused email-to-print jobs on site server queues to be deleted when the site server went offline. [PC-17584]
• Fixed an issue causing incorrect Page Size detection with HP Designjet Raster Driver [PC-17654]
• PostgreSQL Database Driver: Upgraded JDBC driver from 42.2.5 to 42.2.16. [PC-17531]
• Reports: Added an error message when the “generate-scheduled-report” server command is used to try and run a Custom Report, which is not currently supported. [PC-16979]

Other notes:

• If you are running v20.0.3, there is NO database upgrade.

Enhancements:

• Data integration CSV exports will now obey the reports.csv-charset setting for character encoding. [PC-17498]
• Updated the default value for print-provider.throttle-thread-db-ratio to 3. This will not affect existing installations that have manually set the value. [PC-17495]
• Improved the handling of GSuite groups in multiple domain environments. [PC-17358]
• Added capability to split large scan files into smaller chunks for emailing. [PC-17521]
• Added new get and set properties in Server-Command to modify User Defined Persistent Properties outside of print and device scripts [PC-9423]
• Improved the process to unregister PaperCut from a Konica Minolta device when the device encounters error during registration. All installed apps on the the device will also be removed. [PC-17027]
• Added the ability to “Sign in with Google” to the mobile release page. [PC-17361]
• Added a configuration switch to block secure connections to email servers which present untrusted (e.g. self-signed) certificates [PC-14424]

Fixes:

• Fixed an issue that sometimes caused the user client to show an error and exit while waiting for an on-demand user creation [PC-17436]
• Fixed an issue where the user client erroneously used the IP address instead of the hostname to connect to the server [PC-17425]
• Fixed an issue with autocomplete on the login page not respecting the config key ‘auth.web-login.autocomplete’ [PC-17394]
• Fixed an issue where custom reports did not return any data when selecting “today” or “yesterday” as the date range. To use the fix, update any existing custom reports which use the parameters DATE_FROM and DATE_TO and change their data type from “java.util.Date” to “java.sql.Timestamp”. [PC-17316]
• Fixed an issue with truncated refund comments [PC-17256]
• Added the config key “reports.pdf-locale” to set the locale that’s used to determine the font for PDF reports. [PC-16972]
• Fixed an issue that was causing “Unable to resolve expression ‘showGoogleLogin’” errors on the Login page in some scenarios when Integrated Windows Authentication was enabled (auth.web-login.sso-method=WINDOWSAUTH). [PC-16273]
• Fixed an issue that could cause Direct Print on Windows to fail to link some print queues. [PC-17378]
• Fixed an access control issue with batch user import. [PC-17191]
• Print Provider:
  • Added “Bolt PDF”, “FAXCOM Image Driver”, “ImageNow Printer”, and “Microsoft Software Printer Driver” to the list of ignored virtual printers. (Windows only) [PC-17553]
  • Fixed an issue that could cause an incorrect calculation of number of coloured pages when analysing some PostScript data, in Standard mode. [PC-17341]
  • Generic PCL 6/PCL XL Printer Foomatic/pxlcolor: Fixed an issue where B5 page size was detected as A4. [PC-17282]
  • Epson PX-M270T printer driver: Fixed an issue that caused incorrect page count in duplex mode. [PC-17224]

Other notes:

• This release does NOT contain a database upgrade.

Fixes:

• Desktop Client: Fixed an issue that could cause print jobs to not be accepted at sites using desktop client with popups, when the status dashboard has been left open.. [PC-17485]

New Features:

• Automatic Application Server Failover:
  • Provide in-app Application Server Failover for customers with a network load balancer. [PC-16516]

Enhancements:

• Google Cloud Directory (GSuite) User Sync:

  • Added support for syncing users from multiple domains. [PC-15004]

• Print Provider:

  • Added a script to turn on/off the auto-import Print Provider feature on Mac/Linux. [PC-17221]

• Web Cashier:

  • Added user balance to email acknowledgment. [PC-16610]

• Added an Application Log warning message when the application server is not listening on a network interface that is accessible outside the server. [PC-16088]

Fixes:

• Device Scripting:

  • Fixed Device Scripting recipes that used incorrect date to enforce daily limit. Please note all scripts that currently use date.getDay() need to be manually updated. [EAD-278]

• Print Deploy:

  • Fixed an issue when upgrading on macOS servers where configuration files were set back to default. [PC-17259]

• Print Provider:

  • OKI C811 and C835 PCL printer driver: Fixed an issue that caused an incorrect page count when multiple pages were printed on a single sheet of paper (n-up printing). [PC-17177]
  • Fixed a potential crash in Print Provider for certain Postscript print jobs when processing paper size names. [PC-17195]
  • Added “NuancePDF” driver to the list of ignored virtual printers. (Windows only) [PC-17220]

• Site Server:

  • Fix to handle device capability updates when capabilities files are invalid. [PC-15997]

• User Client:

  • Server performance improvements when dealing with large numbers of user clients. [PC-16545]
  • Fixed an issue where the User Client on MacOS required the use of the GPU unnecessarily. [PC-11261]

• Fixed an issue where System Info section of the About page was incorrectly reporting Operating System as Windows Server 2016 on Windows Server 2019 servers. [PC-16214]

• Fixed a rare issue where direct print queue linking is not done when there are multiple possible queue candidates. [PC-16962]

• Ensure OS handles are closed when launching processes from the app server such as during periodic user/group sync. [PC-16772]

• Fixed an issue where a user email cannot be updated if the email suffix option was enabled. [PC-16701]

• Fixed missing single quotes from some translated strings on the Device/Printer copy setting page in the Admin Web Interface. [PC-16241]

• Fixed and issue with Server-Command that resulted in Konica Minolta devices erroring after being deleted. [EAD-482]

• Updated the bundled Java Runtime Environment to version 11.0.5, to incorporate the latest security fixes. [PC-15760]

• Remove the requirement of a PaperCut group for Linux/systemd installs. [PC-16505]

• Stop warning messages when a client is testing a pc-lpd connection on port 515 to ensure the service is running. [PC-17023]

Other notes:

• This release includes a database upgrade.
• Devices marked with * require installing an updated version of the embedded software to access new features and fixes.

Fixes:

• Fixed an issue that could cause an upgrade to fail when using version 19.2.6 with an MS SQL Server database. [PC-18810]

Other Notes:

• Note that this release includes the 3 security improvements listed in the previous release 19.2.6.

Fixes:

• Security improvements to address an issue in the Application Server. More information . [PC-18750]
• Security improvements to address potential Spring4Shell vulnerabilities in the Application Server. More information . [PC-18756]
• Security improvements to the Rhino.js scripting engine used with the Application Server. More information . [PO-816]

Other notes:

• Note that this release has been removed from the website and from release archives, with a fix released in 19.2.7.

Fixes:

• Security improvements to address an issue in the NG/MF Application Server. [PO-480]

Other notes:

• This release does NOT contain a database upgrade.

Enhancements:

• Call-home data is now communicated via HTTPS without the ability to downgrade to HTTP. [PC-17075]
• Print Provider :Ensured that a new instance of the PaperCut CUPS backend and filter are installed for PaperCut NG/MF upgrades on Catalina so that security requirements are met. [PC-17186]

Fixes:

• Fixed an issue related to processing paper size names for some Postscript print jobs that could cause the Print Provider to crash. [PC-17195]
• Fixed an issue which could cause license warnings to display with an incorrect (very large) number of days remaining. [PC-16791]
• Site Server : Added a fix to handle device capability updates when capability files are invalid. [PC-15997]
• Print Provider :
  • Brother HL-L2350W PCL printer driver : Fixed an issue that caused incorrect page counts. [PC-17229]
  • OKI C811 and C835 PCL printer driver : Fixed an issue that caused an incorrect page count when multiple pages were printed on a single sheet of paper (n-up printing).
  • Canon imagePROGRAF printer driver : Fixed an issue that might cause some paper sizes such as JIS-B0 to be incorrectly detected as A4 or Letter. [PC-17123]
  • Brother PCL6 printer driver : Fixed an issue that caused duplex print jobs to be detected as simplex [PC-17122]
  • Konica Minolta bizhub PRESS series Fiery PostScript3 printer driver :Fixed an issue where custom page size is detected as A4. [PC-17068]
  • Konica Minolta AccurioPress series PostScript printer driver :Fixed an analysis issue of simplex being counted as duplex. [PC-17059]
  • Fixed an issue when using CUPS and Epson plotters / wide-format printers that caused print jobs to be cut off, and PaperCut client to pop up multiple times. [PC-17144]
  • Windows Print Provider : Added ‘NuancePDF’ driver to the list of ignored virtual printers. [PC-17220]
• Fixed a typo in a Print Script example snippet. [PC-5190]
• Fixed an issue on the OKI Open Platform that could cause an invalid “Role already exists” message to be shown, and prevent jobs from being tracked. [PC-17205]

Other notes:

• This release does NOT contain a database upgrade.

Enhancements:

• Improve Email to Print filtering. If the mail’s received date is not available, fall back to its sent date. [PC-17102]
• The example C# code supplied in ServerCommandProxy.cs now reflects newer web services API features
• The build instructions for the C# example code have been updated for the .NET Core framework [PC-9495]

Fixes:

• Bulk User Operations: Fix to handle large user lists. [PC-17087]
• Fixed an issue where duplicate firewall rules were created during a server installation or upgrade for the Print Deploy component. [PC-17074]
• Fix bug in getGroupMembers() call. All members are now returned, not just the 1st requested slice. Also fixes a similar problem in server-command [PC-17042]
• Improved the logging for when errors occur calling our XML-RPC APIs [PC-17001]
• Fixed a bug in the advanced external device API that caused an exception to be thrown when trying to fetch a list of shared accounts in debug mode. [PC-16850]
• Fixed an issue preventing email to print from working with some mail servers. [PC-17077]
• Print Provider:
  • Riso ComColor GD series GDI printer driver: Fixed an issue that paper sizes other than A4 were incorrectly detected as A4 [PC-17049]
  • fixed a non backward compatibility issue that could be caused on full-page watermark applied to PCL6 data [PC-17044]
  • Océ varioPRINT series PostScript, PCL6 printer driver: Fixed an issue that the following job attributes could not be identified.
    • duplex
    • the number of copies
    • the number of pages when multipage-up (n-up) or booklet layout is used Océ varioPRINT series XPS printer driver: Fixed an issue that PDL (page description language) detection and a spool file analysis always failed [PC-17021]
  • PaperCut Global Print Driver: Fixed an issue that Canon devices might select an unexpected tray when setting Paper Source to Automatically Select or Manual Feed [PC-16796]
  • Windows:
    • Fixed an issue that a job printed to a physical queue with server-side rendering enabled via Windows Store apps or the Edge browser might not be deleted from the queue after releasing the job. [PC-16928]
    • Added ‘ImageFlow’ driver variants to the list of ignored virtual printers. [PC-17032]

Other notes:

• This release does NOT contain a database upgrade.

Enhancements:

• Added an external device API call to rename printers and devices. This is an advanced feature. [PC-8850]

• Added a new option to the create internal user web services call (& server command) to send a “welcome” email to the new user. [PC-14871]

• Fixed an issue in Print Deploy that caused some designated print queues not to be installed on the computers of users whose usernames include a period character. [PC-16961]

• The warning notification for exceeding the licensed users limit is now updated in real time, instead of waiting until the next admin login. [PC-16827]

• Removed an extraneous warning message about chmod failure when upgrading on Linux. [PC-15399]

• Removed unnecessary and misleading SSL keystore tool messages that were being logged during upgrades on Linux. [PC-14832]

• Improved help text for ‘set-shared-account-property’ in the server-command utility. [EAD-327]

• Improved the server-command help text for removing printer groups from a printer. [EAD-257]

• The server-command utility will now check before renaming an internal user to an existing username. [EAD-256]

• Server-command will now check that an internal user exists before trying to rename the account. [EAD-255]

• The list printers webservice call and server-command no longer include the template printer in the returned list. [PC-16707]

• User client:

  • Added scroll bars where needed to work around occasional dialog sizing issues with script-triggered pop-ups.
  • The upgrade process for locally installed Mac clients now removes existing runtime binaries before upgrading the client. [PC-16940]

• Web Cashier: Made the “Print” button on the Web Cashier deposit receipt page translatable. [PC-16926]

• Email to print: Added a filter to optionally ignore emails more than a configurable number of hours old when printing emails. [PC-16908]

Fixes:

• Fixed a possible server performance issue when storing system state files on network based drives. [PC-16866]

• Fixed an error that caused issues with running custom reports for customers with 10 or more custom reports. [PC-17013]

• Fixed an issue caused by not removing the previous JRE when upgrading the user client, which could sometimes prevent the client from running. [PC-15711]

• Print Provider:

  • Fixed an issue that caused thumbnail image creation for Print Archiving to fail if PCL6 data contained images. [PC-16976]
  • Fixed an issue that could cause an incorrect calculation of number of pages, or slow print analysis, when analyzing some PostScript data. [PC-16904]
  • Added configurable improvement to the PCL6 full-page watermark so that it is printed properly when used over a dark background or a full-color image. (This improvement is turned off by default. To enable, add the line ConfigureFullPageWatermark=true to the print-provider.conf file). [PC-16785]
  • Canon LIPS LX printer driver: Fixed an issue that caused some paper sizes, such as Japanese postcard and envelope, to be incorrectly detected as A4. [PC-16861]
  • PaperCut Global PostScript printer driver: Fixed an issue that prevented a sheet from being fed from Tray 3, Tray 4, or Bypass Tray when printing to a Sharp device. (Note that to feed a sheet from the Bypass Tray, Manual Feed on the PaperCut Global PostScript printer driver must to be selected). [PC-16856]
  • Xerox D95 Linux Intel printer driver: Fixed an issue that caused incorrect page counts. [PC-16747]
  • PaperCut Global PostScript printer driver: Fixed an issue that enabled auto tray selection when a paper tray was set to the bypass tray and the printing destination was a Konica Minolta device. [PC-16716]
  • Konica Minolta bizhub 558, C554 and C658 Series PCL printer driver: Fixed an issue that caused incorrect page size detection when printing on 11x17 inch page size. [PC-16597]
  • Kyocera TASKalfa 6053ci KX printer driver: Fixed an issue that caused incorrect page size detection when printing on 11x17 inch page size. [PC-16597]
  • Ricoh SP C740 PCL5 printer driver: Fixed an issue that caused an incorrect page count when printing multiple pages on a single sheet of paper (n-up printing). [PC-16466]

• Print Provider on Windows:

  • Fixed a rare issue that could cause the Print Provider to crash when a print queue was added/removed/renamed or a daily internal maintenance process was performed. [PC-16996]
  • Fixed a rare issue that could cause a redirected print job to be left in a redirect queue when server side rendering was used. [PC-16923]

Other notes:

• This release does NOT contain a database upgrade.

New Features:

• Print Deploy:

  • Added the ability to deploy printers, drivers and default print settings based on user groups. [PD-329]
  • For additional Print Deploy updates, see the Print Deploy release notes

• New Percolator feature providing the ability to request text or numeric values from MFD users as part of a scan action, and interpolate those values into a Scan to Email destination address. Supports full or partial email addresses, and email-to-fax gateways. [PC-16740]

• Document Processing now includes:

  • Batch Splitting: Split a single multi-page scan job into multiple output documents by page count or blank page separator
  • Blank Page Removal: automatically detects and removes blank pages
  • Despeckle: removes pixel noise for sharper images
  • Deskew: straightens crooked pages by up to 45 degrees
  • Multi-server support for locally hosted deployments
  • OCR is now part of Document Processing, and performed by the updated Document Processing service, (formerly the OCR service) for both locally hosted and PaperCut MF Cloud Services configurations. [PC-9321]

Enhancements:

• Removed license warning, when there are more than 3 custom reports. [PC-16593]
• Added support for CSV export in custom reports. [PC-15983]
• Multi-domain Active Directory User Source: Added ability to use the user’s UPN as their PaperCut username. [PC-15330]
• Added distinct error codes to all <fault> payloads for the Web services API. [PC-12797]
• Added ability to bulk update PaperCut Application Server SSL Certificate details to embedded devices [EAD-129]
• Added support for Elatec TCP3 converter in Client Mode. [PC-12427]
• Added scan notifications configuration to a new scan notifications tab on the devices page. [PC-15453]
• The number of log entries in server log created by the web services API or server-command has been reduced. The detailed log entries will reappear when debug logging is switched on [PC-15010]
• New printer property to identify if the print queue is virtual. [PC-141317]
• System administrators can now retrieve a list of all printers or devices via the server-command utility, or the web services API. [PC-141317]
• A new RESTful API to support developers who need to add an “on-demand” payment workflow to PaperCut MF. Contact support for more information. NOTE: This replaces the legacy Java plugin API [PC-15171]

Fixes:

• Page size calculation issue for HPGL custom size paper is fixed. [PC-16541]

• Fixed suggested queues not appearing in the Find-Me-Printing destinations queue list [PC-15720]

• Reduced the number of unnecessary calls to CBORD DX payment gateway. If the property"cbord-dx.on-demand-transfer.enabled-groups" is not empty then only appropriate balances are retrieved. [PC-12981]

• Fixed an issue preventing username & password login on FX ApeosPort-VII MFDs [EAD-190]

• Users can provide a user principle name (UPN) suffix which will be appended to the windows user name to form a UPN at the print server. [PC-15329]

• Fix an issue preventing app server from shutting down promptly sometimes. [PC-15498]

• Fixed an issue where accessing parts of job ticketing would result in a cross origin request block error when accessed through a reverse proxy [PC-16583]

• Added a new configuration property in PayPal WPS payment gateway to that allows you to specify the return URL from PayPal back to the application server. [PC-16000]

• Konica Minolta PostScript printer driver: Fixed an issue that caused incorrect color detection if output color is set to “Gray Scale” [PC-16663]

• Oki Universal PCL5 printer driver: Fixed an issue that caused an incorrect page count when printing multiple pages on a single sheet of paper (n-up printing) [PC-16655]

• Epson Universal printer driver: Fixed an issue that pages were identified as color when the printer control language was set to “ESC/P-R” and a color document was printed in grayscale [PC-16619]

• Fixed an issue where duplicate firewall rules were created during a server installation or upgrade of the Print Deploy component. [PC-16783]

• Fixed a packaging issue which the Samsung XOA fix in MAC-5822 was not included in 1.4.1 [EAT-212]

• Fixed a rare issue where the Print Deploy page in the PaperCut NG/MF admin web interface shows a HTTP 500 Timeout Error under some network conditions. [PC-16881]

• Print Provider: Fixed an issue that could cause the Print Provider to crash when processing a PostScript document that for some reason, such as a spooler timeout, has corrupted ASCII85-encoded data. [PC-16825]

• Print Provider on Windows:

  • Fixed an issue that caused print jobs held in a print queue to disappear from the Jobs Pending Release screen when the Print Provider service was restarted several times. Provider service was restarted several times within a short space of time. [PC-16886]
  • Fixed an issue that could cause the Print Provider to crash if Print Archiving was enabled and a job printed from Windows Apps was redirected [PC-16873]
  • Fixed an issue where in rare cases some print jobs could be charged twice and/or fail to print after release. [PC-16907]

• User Client (Windows): Fix adding Java 11 DLL dependencies to the MSI. [PC-16526]

Copier / Device Integration:

• Canon (MEAP)*:

  • Optimised database connection utilisation to mitigate some scenarios when pool can be exhausted resulting in app server crashing. [PC-16560]
  • Resolved an issue with older devices being unable to log in. [MAC-6249]
  • Fix for intermittent excess memory usage on Java ME (2nd generation) devices. [EAD-205]

• Canon Gen3+ (MEAP)*:

  • Increased max custom logo width from 260px to 360px. [MAC-5997]
  • Resolved an issue with older devices being unable to log in. [MAC-6249]
  • Workaround to use remote control software (VNC and remote software kit). [PC-16544]

• Fuji Xerox (AIP) / Dell (AIP):

  • Added the ability to install PaperCut MF in bulk when deploying devices for large rollouts. [PC-16424]
  • Made the touchable area of the delete button bigger on print-release page.
  • Rectified the position of the refresh button on print-release page on small screens. [MAC-5996]
  • Optimised database connection utilisation to mitigate some scenarios when pool can be exhausted resulting in app server crashing. [PC-16560]

• Fuji Xerox ApeosPort V+:

  • Added the ability to install PaperCut MF in bulk when deploying devices for large rollouts. [PC-16424]
  • Increased max custom logo width from 260px to 360px. [MAC-5997]
  • Prevented new keyboard “Enter” key from prematurely submitting forms in the embedded UI. [MAC-5995]
  • Updated Fuji Xerox XCP plugins to be smaller and consume fewer resources.
  • Configuration of the “PaperCut Auth” embedded plugin is now done through CWIS. Customers who has previously customised the “ext-device.fuji_xerox_aip.login.in-progress-time-millis” advanced config key will now need to set the value in the new plugin configuration screen. [MAC-5895]

• HP (OXP Printer Only):

  • Added the ability to install PaperCut MF in bulk when deploying devices for large rollouts. [PC-16424]
  • Increased max custom logo width from 260px to 360px. [MAC-5997]
  • Optimised database connection utilisation to mitigate some scenarios when pool can be exhausted resulting in app server crashing. [PC-16560]

• HP (OXP):

  • Added the ability to install PaperCut MF in bulk when deploying devices for large rollouts. [PC-16424]
  • Optimised database connection utilisation to mitigate some scenarios when pool can be exhausted resulting in app server crashing. [PC-16560]
  • Increased max custom logo width from 260px to 360px. [MAC-5997]

• Konica Minolta (OpenAPI):

  • Added the ability to install PaperCut MF in bulk when deploying devices for large rollouts. [PC-16424]
  • Fixed a bug that caused the password exposed in Konica Minolta’s OpenAPI log [PC-16717]
  • Fixed an issue where zero stop on konica minolta would prevent a user from copying even if they have enough balance to do so [PC-15321]

• Ricoh (SDK/J) version 6.0.9*:

  • Fixed an issue where Integrated Scanning failed to start because compression was disabled. [PC-15538]

• Ricoh (SmartSDK) version 2.4.2*:

  • Added a config key to customize the text of the Device functions icon and the Use device functions button that appears on the PaperCut MF Home screen and the PaperCut MF Account Confirmation screen, respectively (ext-device.ricoh.device-functions.label). [PC-14967]

  • PaperCut MF now provides a new solution for supported Ricoh single-function devices. This new “Ricoh (SmartSDK) Printer Only” solution offers job tracking, secure print release, the ability to allocate accounts, and change print jobs settings at the device.

    Note: Existing Ricoh (SmartSDK) licenses can continue to be used for this new solution. However, if you do not have an existing Ricoh (SmartSDK) license, you can purchase a lower-cost SFP license. [MAC-5955]

  • Integrated Scanning:

    • Added a new checkbox “Prompt for more pages” on the PaperCut MF Scan details and Scan settings screens. This controls the display of the PaperCut MF Scan more or finish screen. [MAC-5206]
    • Added the ability to start a new scan job or add more pages to a current scan job from the PaperCut MF Scan more or finish screen, retaining the current scan job’s settings and account selection attributes. [MAC-5537]

  • Fixed a text alignment issue on the print job details screen that happens on IM series devices. [PC-15976]

  • Improved usability when the soft keyboard is displayed. [MAC-5903]

  • Fixed an issue which prevented the administrator from logging out of the MFD when the embedded application was not configured. [MAC-5899]

  • Fixed an issue of wrong icon size on big screens. [MAC-5861]

  • Fixed an issue where an unrestricted user got an error message about insufficient credit. [MAC-4213]

  • Fixed an issue on the account options screen where the soft keyboard on the comment field would still display after clicking the “done” button on the keyboard. [MAC-3879]

• Ricoh (SmartSDK) version 2.4.3:

  • Fixed an issue on IM models that caused the embedded application to go to the background on System Auto Reset. [MAC-5769]

• Sharp (OSA):

  • Optimised database connection utilisation to mitigate some scenarios when pool can be exhausted resulting in app server crashing. [PC-16560]

• Sharp OSA (HTML Browser n2.0+):

  • Increased max custom logo width from 260px to 360px. [MAC-5997]

• Sindoh (OpenAPI):

  • Added the ability to install PaperCut MF in bulk when deploying devices for large rollouts. [PC-16424]

• Toshiba (e-BRIDGE Open Platform V2):

  • Added the ability to install PaperCut MF in bulk when deploying devices for large rollouts. [PC-16424]
  • Fixed a bug that caused “Permission of execution denied” error message while performing native functions on Toshiba V2 devices. [PC-16660]
  • Optimised database connection utilisation to mitigate some scenarios when pool can be exhausted resulting in app server crashing. [PC-16560]

• Toshiba (e-Bridge Open Platform V3+):

  • Added the ability to install PaperCut MF in bulk when deploying devices for large rollouts. [PC-16424]
  • Optimised database connection utilisation to mitigate some scenarios when pool can be exhausted resulting in app server crashing. [PC-16560]
  • Increased max custom logo width from 260px to 360px. [MAC-5997]

• Xerox (EIP) Print Only:

  • Added the ability to install PaperCut MF in bulk when deploying devices for large rollouts. [PC-16424]

  • PaperCut MF now provides a new solution for supported Xerox single-function devices. This new “Xerox (Secure Access EIP 1.5+) Print Only” solution offers job tracking, secure print release, the ability to allocate accounts, and change print jobs settings at the device.

    Note: Existing Xerox Secure Access EIP 1.5+ licenses can continue to be used for this new solution. However, if you do not have an existing Xerox Secure Access EIP 1.5+ license, you can purchase a lower-cost SFP license. [PC-12801]

• Xerox (EIP):

  • Added the ability to install PaperCut MF in bulk when deploying devices for large rollouts. [PC-16424]
  • Optimised database connection utilisation to mitigate some scenarios when pool can be exhausted resulting in app server crashing. [PC-16560]
  • Increased max custom logo width from 260px to 360px. [MAC-5997]

Other Notes:

• If you are running v19.1.1, there is NO database upgrade.
• Devices marked with * require installing an updated version of the embedded software to access new features and fixes.

Fixes:

• Print Provider:

  • Fixed an issue where the Print Provider could crash while analyzing corrupted PostScript spool files containing ASCII85-encoded data. [PC-16825]

• Print Provider on Windows:

  • Fixed an issue where in rare cases some jobs printed via Windows store apps or the Edge browser with server-side rendering enabled do not get tracked and retained in the print queue. [PC-16922]
  • Fixed an issue in Windows print servers where in rare cases print jobs could be charged twice and/or fail to print after release. [PC-16907]
  • Fixed an issue that caused print jobs held in a print queue to disappear from the Jobs Pending Release screen when the Print Provider service was restarted multiple times. [PC-16886]

Other notes:

• This release does NOT contain a database upgrade.

Fixes:

• Removed a faulty fix for PaperCut Global PostScript printer driver that was released in 19.1.4. Downloads for 19.1.4 have been removed to avoid confusion. [PC-16685]

Other Notes:

• If you are running v19.1.1 or later, there is NO database upgrade.

Enhancements:

• Added new lookup mechanisms to External Database Lookup. SysAdmins can now search for users based on email, username alias, or username with a username alias backup. [PC-15557]
• Mac client-local-install now supports 64 bit architecture. [PC-13922]
• When PaperCut NG is installed on a Mac server, the default for iOS printing has changed so that it now needs to be manually enabled. [PC-16471]

Fixes:

• EPSON SC-P6000/7000/8000/9000, PX-H7000/9000 Series printer driver: Fixed an issue that caused the following problems:

  • incorrect number of pages and copies
  • page size was incorrectly detected as A4 or Letter if printed on some page sizes that wide-format plotter supports [PC-16397]

• Canon imagePROGRAF printer driver:

  • Fixed an issue that caused number of pages and page size to be tracked incorrectly when printing to a page size other than A4.

    Limitation:

    • The charging type “by paper area” doesn’t work with this driver since we cannot identify the paper width.
    • The page size is still identified as A4 if printing from Google Chrome’s print menu (rather than the system dialog) to a page size not used by a general office-use printer such as A0 and B1. This is a limitation of the Google Chrome and printer driver combination. [PC-16416]

  • PRO-4000 series XPS printer driver: Fixed an issue that could cause an incorrect number of color pages to be counted. [PC-16587]

• Print Provider:

  • Fixed an issue that occasionally caused garbled characters to be output to the debug logs. [PC-16495]
  • Fixed an issue that caused the Print Provider to crash if printed with a Sharp PostScript printer driver on macOS. [PC-16533]

• Print Provider on Windows:

  • Fixed an issue that might cause a job printed from Windows Apps to be recorded twice when printing to a shared printer with server side rendering. [PC-15913]
  • Fixed a rare issue that can cause some print jobs to disappear from the Jobs Pending Release screen or fail to print after releasing in high print load environments. [PC-15767]
  • Fixed an issue that occasionally caused print jobs to be lost when a Find-Me queue was used in very high load environments. [PC-15573]

• Added support for Windows Mandatory Profile to the User Client. [PC-16512]

• Added additional RemoveHostnameAndDomainName option in PaperCut LPD service config file pc-lpd.config. When it is set to true, the PaperCut LPD service will remove hostname and domain name from the job owner’s name. [PC-16384]

• Added a config key to manually override any group memberships when using LDAP as primary sync source, by defining them in an external file /data/conf/additional-groups.txt (user-source.group-list-override-file=Y) [PC-16087]

• Changed the label on the PaperCut Port dialog for port creation and configuration to refer to “Printer Hostname” instead of “Printer name”. [PC-16040]

• Mobility Print, Windows Server: Chromebook, Android, macOS and iOS clients will be able to see more non standard paper sizes supported by printer drivers. [PC-16407]

• Fixed an issue that could cause color and greyscale pages to be counted incorrectly when using Hardware Page Count with Ricoh devices. [PC-16402]

Other Notes:

• If you are running v19.1.1, there is NO database upgrade.

Fixes:

• Fixed a bug that caused color of username and password field labels on the web Release Station to follow the custom color settings in the config.properties file. [PC-16414]

• Fixed a problem with the Dashboard that caused Y-axis labels to repeat when maximum pages printed during last 30 days was less than 10. [PC-16377]

• Fixed an issue that caused the Web Services call for generating AdHoc reports to crash whenever list objects were passed to it. [PC-16369]

• Fixed an issue that prevented a user client account selection popup that was open prior to an upgrade from pre 19.0.2 to 19.0.2 or greater from being able to save an account selected post upgrade. [PC-16301]

• Canon LIPS LX printer driver on Linux: Fixed an issue that might cause an incorrect number of pages to be counted when printing from LibreOffice on Linux [PC-16210]

• Oki PostScript printer driver for macOS: Fixed an issue that caused an incorrect page count when printing multiple pages on a single sheet of paper (n-up printing). [PC-16335]

• Oce wide format printer driver 2: Fixed an issue that caused an incorrect paper size and an incorrect number of color pages to be set when scaling was turned on. [PC-16208]

• Print Provider:

  • Performance improvement: Fixed an issue where PostScript jobs were taking a long time to print by reducing the time required to analyze PostScript data by an average of 11% and up to 97%. [PC-15486]
  • Fixed an issue that caused an incorrect number of pages when printing from Paris Transaction Document Composition Solution [PC-16343]
  • Fixed an issue that might cause color pages to be detected when printing a grayscale image [PC-16327]
  • Fixed an issue that caused incorrect color page detection if PostScript data contained an image represented with an indexed color [PC-16098]

• PaperCut Global PostScript printer driver: Fixed an issue that occasionally caused an incorrect number of color pages to be detected when printing a color image with the “Black & White” output mode [PC-16167]

• Sharp PCL6 printer driver: Fixed an issue that caused an incorrect number of color pages to be detected when printing a grayscale image. [PC-16101]

• Sharp PostScript printer driver: Fixed an issue that caused grayscale conversion to not work properly when “Color Mode” on the Printing Preferences dialog was set to “Color” and ‘Convert to Grayscale’ setting was enabled within PaperCut > Printers > Filter & Restrictions. [PC-15722]

Other Notes:

• If you are running v19.1.1, there is NO database upgrade.

Fix:

• Fixed an issue that may occur on sites that have enabled the LPD service on Windows Servers and are actively printing via it (e.g. Printing from UNIX systems). The username associated with the print job would incorrectly include the IP address of the client, and this may stop users from being able to print, or incorrectly log these jobs. [PC-16458]

New Features:

• Print Deploy

  Get the right print driver and right print queue to the right person in the right location, automatically. With Print Deploy:

  • Print queues are dynamically deployed as mobile staff move between branches, stores, or campuses.
  • Native drivers are installed along with default settings (grayscale, duplex etc.) and capabilities (stapling, hole punching etc).
  • It doesn’t matter whether printing to a server or printing directly to a printer in a print-serverless environment.
  • Mac and Windows computers are supported (with Linux and Chromebooks to come shortly).
  • Support for computers that are not joined to a local domain (for example, G Suite or Microsoft Azure AD).

• Custom Reports:

  • You can now manage and run your own custom reports built in JasperSoft Studio. [PC-15694]

Enhancements:

• PaperCut NG/MF manual: We have revamped the look of the PaperCut NG/MF manual (now called the PaperCut NG/MF Help Center). This new design offers a fresh look as well as easier navigation. [PC-16408]
• Refreshed the design of 10 of the most commonly used reports. [PC-15280]
• Improved Application Server scalability to support large numbers (20,000+) of user clients. [PC-15213]
• RBS WorldPay payment gateway: Improved security by allowing an MD5 secret configuration [PC-15203]
• Server command and web services API:

  • Added a new web services API method (generateSheduledReport()) that allows the automation of ad hoc reports. [PC-11947]

  • Added a new server command to configure advanced popup settings for a given user (set-user-account-selection-advanced-popup). This allows administrators to automate the creation and management of advanced users. [PC-6803]

  • Added a new server command (and API call) to get/set a list of printer properties, instead of making separate calls for each property. [PC-15757]

  • Added a new server command that initiates an update to the device of any outstanding configuration changes. [PC-15434]

  • Added a new user property “last-user-activity” that allows SysAdmins to see the last time a given user was active in PaperCut NG/MF. [PC-14485]

  • Delegated print release users and/or groups can now be managed via the set and set user property commands and API calls. [PC-4507]

  • The cost model used by a printer can now be selected by changing the cost-model attribute via ‘set-printer-property’. [PC-14314]

  • Listing all usernames in a group can now be done through ‘get-group-members’ server command or API. [PC-6006]

  • Added new server commands that allow users to look up PaperCut NG/MF usernames by other descriptors such as email, full name, and user alias:

    • look-up-user-name-by-email
    • look-up-user-name-by-secondary-user-name
    • look-up-user-name-by-full-name <“full name”> [PC-13666]

  • Web services API: Managing API application security is now even easier with the ability to assign different authentication tokens to different applications. [PC-14117]

Fixes:

• Fixed an issue that caused some error error messages to not display properly on HP small-screen devices. [PC-16300]
• Updated 3 rd party libraries that include security fixes for the Admin web interface, Mobility Print, Email to Print, and Google Cloud Print. [PC-15893][PC-15909]
• Fixed an issue that could cause held print jobs to disappear when upgrading from a version prior to 19.0.4 (since 19.0.4). [PC-16238]
• Fixed an issue in the Admin web interface and the User web interface causing some non-Latin characters to render incorrectly. [PC-15928]
• Fixed an issue that caused print jobs to fail when “Automatically charge to personal account” was changed to “Show the standard account selection popup” for a user while the user had print jobs held in a hold/release queue. [PC-15733]
• Microsoft SQL Server with Microsoft JDBC driver: Fixed performance and stability issues when PaperCut MF is configured to use this. [PC-16244]

Other Notes:

• This release includes a database upgrade.

Fixes:

• Large print serverless environments (Direct Print): Added new configuration parameters to print-provider.conf, print-provider.conf.template, and direct-print-monitor.conf to reduce server load spikes. For more information, see Environments with large numbers of Direct Print Monitors. . [PC-15896]
• PDL Transforms: Fixed an issue that caused the Print Provider to crash if the FIND or FIND-REPLACE command with LAST option is used. [PC-16051]
• HP Universal print driver (PCL, PostScript) or HP model-specific driver: Fixed an issue that caused an incorrect color page count when printing with a color selection of “High Quality CMYK Grayscale”. [PC-15990]
• Fuji Xerox Linux printer driver: Fixed an issue that caused an incorrect page count when printing multiple pages on a single sheet of paper (n-up printing). [PC-15933]
• Canon UFR II/UFRII LT/LIPSLX Printer driver: Fixed issues that caused the following errors when printing from some applications on a macOS or Linux computer to a Windows server:
  • An incorrect page count
  • An incorrect color page count
  • Failed to perform grayscale conversion [PC-13670]
• Fixed a minor security issue that could be used to cause performance degradation in the Application Server. [PC-16079]

Other Notes:

• If you are running v19.0.1, there is NO database upgrade.

Enhancements:

• Improved password protection within the Admin web interface. [PC-15822]
• User Client: Improved the appearance of the User Client on retina displays. [PC-11836]

Fixes:

• Web Print on Windows: Fixed an issue that caused Web Print jobs with a combination of different multibyte characters in the file name to get stuck in rendering state and eventually time out. [PC-15912]

• Google Cloud Print:

  • Fixed an issue where users color selection was ignored when printing using the following drivers:
    • Fuji Xerox DocuPrint C2450
    • Fuji Xerox DocuPrint C3450 d
    • RISO ORPHIS FW5230
    • RISO ORPHIS FW5230 PS [PC-15865]
  • Fixed an issue that caused an occasional print job to be lost when the ‘hide document name’ was enabled on Windows print servers. [PC-15799]

• Email to Print: Fixed an issue that caused an occasional print job to be lost when the ‘hide document name’ was enabled on Windows print servers. [PC-15799]

• Fixed an issue that caused uploading a document for OCR as part of a Scan Action to not retry if a network failure occurred (since 19.0.0). [PC-15907]

• Brother PCL5 printer driver together with printers without an internal hard drive: Fixed an issue that caused an incorrect page count and an incorrect number of copies when printing multiple collated copies to a printer without an internal hard drive. [PC-15823]

• Canon LIPS LX model-specific printer driver: Fixed an issue that caused an incorrect page count when printing:

  • a page size other than A4
  • multiple collated copies. [PC-15872]

• Canon LIPS LX model-specific printer driver on Windows 10: Fixed an issue that caused an incorrect page count when a PDF file was printed using Microsoft Word from Windows 10. [PC-15274]

• HP Printers: Fixed an issue on the PaperCut NG Admin web interface that caused toner retrieval information to not display in the printer’s Toner Status . [PC-15763]

• Fixed an issue in environments with Hold/Release queue managers that incorrectly charged jobs to a user’s personal account when Users > Account Selection > When shared account is selected > Charge personal account (and allocate to shared account for reporting) was configured, instead of the account selected by the release manager (since 18.2.0). [PC-15134]

Other Notes:

• If you are running v19.0.1, there is NO database upgrade.

Fixes:

• Web Print on Windows: Fixed an issue that failed to print PDFs, when the Web Print server either:
  • didn’t have Adobe Reader installed, or
  • had Adobe Reader installed with the web-print.conf file parameter “options.pdf” set to “xpdf”. [PC-15889]

Other Notes:

• If you are running v19.0.1, there is NO database upgrade.

Enhancements:

• PaperCut NG now supports the Heartland TouchNet OneCard VIP payment to provide support for on-demand or manual top-up of user accounts. [PC-14361]
• User Client: Improved performance in Unauthenticated Printing environments where there are many public workstations that all use a generic user login. [PC-15517]

Fixes:

• Security: Security improvements to address a potential remote code execution vulnerability within the PaperCut NG Application Server (CVE-2019-12135). This was identified by an external security review team. This fix also addresses several other related security issues that were identified by the PaperCut security team. Virtual pat on the back to the security team at Adevinta who are now listed in our hall of fame [PC-15728]
• Integrated Scanning:
  • Added the following languages for OCR (Optical Character Recognition):
    • cos - Corsican
    • div - Dhivehi, Divehi, Maldivian
    • fao - Faroese
    • fil - Filipino, Pilipino
    • fry - Western Frisian
    • gla - Gaelic, Scottish Gaelic
    • hye - Armenian
    • kmr - Northern Kurdish
    • sun - Sundanese [PC-15743]
• User Client on Windows:
  • Fixed an issue that caused slow User Client performance in environments with slow networks, as well as the error ‘Unable to create the local cache in ‘C: \Cache’ errors on shared devices (since 19.0.0). [PC-15713]
  • Fixed an issue that prevented User Client prompts to be forced to the top. This could have resulted in users not seeing the prompts because they were hidden behind other applications (since 19.0.0). [PC-15764]
• HP Universal print driver (PCL, PostScript) or HP model-specific driver: Documents printed with a color selection of “High Quality CMYK Grayscale” are now counted as color jobs instead of grayscale. This change aligns with HP’s change in firmware version 4.6.4 and above where these jobs are now counted as color in device meter counts. This behavior can be reversed by setting CompositeIsGrayscale in the print-provider.conf file to “True”. [PC-15702]
• Canon OcéPlotWave series PostScript printer driver: Fixed an issue that caused custom paper sizes to be detected incorrectly. [PC-15770]
• On Demand Payment Gateway: Added a global config key to calculate the job quota for users with negative internal credit (payments-quota-includes-negative-user-balance). [PC-15535]
• Spanish Schedule / Email Reports: Fixed an issue that incorrectly prefixed some fields with a “t” (for example, “tTitulo:”, “tFormato:”). [PC-15781]
• Updated a Secondary Print Server library, which included security improvements. [PC-15717]

Other Notes:

• If you are running v19.0.1, there is NO database upgrade.

Enhancements:

• Customers using the CBORD DX payment gateway can now configure an option to record the CBORD transaction ID in the Admin web interface Users > Transaction History. This helps to cross reference transactions between the two systems. [PC-15165]
• Improved the Application Server Log messages for SNMPv3 misconfigurations. [PC-15497]

Fixes:

• Fixed an issue that caused the Application Server to experience higher than usual CPU usage when the User Client was configured to hide the user balance. [PC-15736]
• Fixed an issue that prevented toner levels from being displayed on the Admin web interface > Device Details page. [PC-15623]
• Canon imagePROGRAF PRO series printer driver: Fixed an issue that caused an incorrect page size to be detected. [PC-15536]
• Canon Generic Plus PS3 Printer Driver: Fixed an issue that, for some applications, caused an incorrect page count when printing an even page document in duplex. [PC-15629]
• Fuji Xerox ART EX printer driver: Fixed an issue that caused an incorrect color page count when the last page of a document printed in multiple collated copies, was grayscale. [PC-15476]
• Konica Minolta Universal PostScript printer driver: When used by the PaperCut Global Print Driver for stapling, fixed an issue with Find-Me printing that caused an incorrect staple position when printing a document with a ’top right’ staple. [PC-15548]
• Konica Minolta Universal PCL6 printer driver: Fixed an issue that caused an incorrect page count when printing in duplex, with multiple collated copies of a document, and an odd number of pages. [PC-14078]
• HP DesignJet Z-Series PostScript printer driver: Fixed an issue that caused an incorrect page size to be detected after the user had selected a custom paper size from an Adobe application such as Acrobat. [PC-15477]
• Print Provider: Fixed an issue that caused the Print Provider to crash while analyzing a corrupt PCL6 spool file. [PC-15418]
• Sharp PCL6 printer driver: Fixed an issue that caused an incorrect page count if the printed document contained blank pages and was printed in duplex. [PC-15260]
• Toshiba Universal PostScript printer driver: Fixed an issue that caused a page to be incorrectly detected as color when the output color was set to “Black and White” for “Twin Color”. [PC-15398]
• Fixed an issue with Active Directory syncing that prevented the ‘Primary Number’ field from being set to “Do Not Sync” unless the secondary number field was also set to “Do Not Sync” (since 19.0.1). [PC-15712]
• Updated the cups-api-helper binary for the Mac print provider to 64-bit. This addressed the ‘cups.api.helper needs to be updated’ message that was displaying for macOS 10.14.4 and above. [PC-15617]

Other Notes:

• If you are running v19.0.1, there is NO database upgrade.

Note: This release does not support 32-bit workstations. If you have users launching the User Client or Release Station on a 32-bit workstation, see End-of-life for 32-bit Operating Systems . [PC-15503]

Fix:

• Fixed an issue introduced in 19.0.1 that prevented the release of print jobs that were in the hold/release queue at the time of upgrading.

  If you have a version earlier than 19.0.1, you can upgrade at any time and your print jobs will be retained and releasable.

  If you have installed 19.0.1, we recommend upgrading outside of business hours to minimize the impact of lost jobs.

Note: This release no longer supports 32-bit workstations. If you have users launching the User Client or Release Station on a 32-bit workstation, see this Knowledge Base article for more information. [PC-15503]

New Features:

• Print Scripting: Added a new print script function to determine whether or not a print job originated from the PaperCut Mobility Print application (inputs.job.isMobilityPrintJob). [MAC-5327]

Enhancements:

• Application Server:

  • Improved Application Server performance by changing the maximum number of concurrent connections allowed from 8 K to 16 K per port (configurable in server.properties). [PC-11001]
  • Improved performance when under heavy load by adding a new connector for SQL Server 2016 to reduced database connection times. If you’re using SQL Server 2016+ and upgrading to PaperCut MF 19.0, switch to the new connector. [PC-14525]

• Introduced the ability to select an account for a print job at the device, for client billing or cost allocation purposes. [MAC-5262]

• SNMPv3 can now be used for:

  • receiving toner notifications
  • retrieving toner level information (for supported printers) [PC-14922]

Fixes:

• macOS:

  • Improved performance by increasing the default number of concurrent connections allowed on 64-bit macOS servers. [PC-14869]
  • System default users are now excluded from the User List in the Admin web interface. [PC-14810]

• Google Cloud Print: Improved performance by increasing the default value of gcp.http-timeout-seconds to 240. [PC-15197]

• Email to Print: Fixed an issue that caused MS Word comments to not be printed. [PC-15377]

• Azure AD: Fixed an issue on the User/Group Sync page that caused the “Accept self-signed certificate” option to be unavailable for Azure AD Secure LDAP (since 18.3.0). [PC-14859]

• HP DesignJet Z-Series PostScript printer driver: Fixed an issue that caused the incorrect page size to be detected after the user had selected a custom paper size. [PC-15387]

• Print Provider:

  • The Print Provider now has its own new release versioning. For this release it’s 100.5.0.540. It’s also included as part of this release. [PC-15483]
  • Fixed an issue that caused Print Provider to restart when analyzing PCL5 spool files generated by some printer drivers. [PC-15524]

• In the Admin web interface, changed the MF/NG About page to show a link to the Support web form instead of the Support email. If an ASC or reseller overrides the support email, then their email stays displayed. [PC-15267]

• Fixed an issue that caused the Fiery tool to not retrieve jobs. Also added extra logging to show raw Fiery Box replies and to log when jobs are skipped due to zero printed pages. [PC-15261]

• Fixed an issue that prevented the PaperCut NG/MF logs from indicating the reason for a failure when a notification message failed to send. [PC-15042]

• Fixed an issue in Print Scripting that caused the “defaultChoice” option in dialogs to not accept values that were concatenated (e.g. 12 + ' Monkeys') (since 18.3.0). [PC-15040]

• Fixed an issue where using the server.listen-interface in server.properties prevented server-command from working. [PC-14778]

• Fixed an issue that caused certain printer drivers to print on the default paper size when Tabloid (11x17) paper size was selected. [PC-14690]

• Fixed a problem that sometimes caused incorrect print outs, for example printing in color instead of grayscale, when using Google Cloud Print, Email to Print, or Web Print with some printer drivers. [PC-15299]

• Database Schema for SQL server: Updated the database so SQL server can accept and store special characters from character sets other than Latin (for example, characters with umlauts or accents, .Arabic characters etc.). A database update is required.

  Important: SQL Server Express has a maximum database size limit of 10 GB and upgrading requires some free memory. So when you upgrade to Release 19.0, make sure the data in the PaperCut NG/MF database is less than 8 GB or the upgrade will fail. If the database is larger than 8 GB, contact us. [PC-14602]

• Added an option in the Admin web interface on the Options > General page to display real-time activity warnings when the User Client is unavailable and requires user input. [MAC-5385]

Other Notes:

• This release includes a database upgrade.

This is a Maintenance Release for 18.3 and contains the following changes:

Fixes:

• Print Provider: Fixed an issue that caused Print Provider to restart when analyzing PCL5 spool files generated by some printer drivers. [PC-15524]

Other Notes:

• If you are running v18.3.3, there is NO database upgrade.

This is a Maintenance Release for 18.3 and contains the following changes:

Enhancements:

• Job Ticketing administrator access now needs to be explicitly granted in PaperCut MF with the new Job Ticketing Administrator role. [PC-15248]

Fixes:

• Authorize.Net Payment Gateway: Added an option in the ext-payment-gateway-authorize-net.properties file to allow the use of the SHA-2 encryption method (authorize-net.sha2-hash-value).** [PC-15179]
• TouchNet Payment Gateway: Added an option in the ext-payment-gateway-touchnet.properties file to ensure that user balances are updated and users receive appropriate transaction completion notifications in environments that have SSO Authentication enabled (touchnet.use-configured-links=Y). [PC-14847]
• HP PageWide XL series PostScript printer driver: Fixed an issue that caused the incorrect detection of page size after the user had selected a custom paper size. [PC-15305]
• Fixed an issue that sometimes caused low toner notification emails to include printers that did not have low toner levels. [PC-9293]
• Fixed an issue that caused incorrect refunding of printed documents with a cancelled status, when conversions were applied to the original document (for example, watermarking, and force duplex). [PC-14851]]
• For environments using PaperCut Port Monitor, improved the detection of completed printed jobs. [PC-14851]
• Removed a limitation that blocked very long print scripts from being saved. [PC-15200]
• Fixed an issue that caused the ‘server-command’ to hang for five seconds, preventing any other commands from being executed. [PC-15206]

Other Notes:

• If you are running v18.3.3, there is NO database upgrade.
• **You may continue to use the existing MD5 encryption method only until the Authorize.Net Merchant Interface supports MD5; after which, you must use the SHA-2 encryption method (via the new option, authorize-net.sha2-hash-value). For more information, see Known Issues .

This is a Maintenance Release for 18.3 and contains the following changes:

Enhancements:

• CUPS Print Provider: Improved CPU usage on Linux and macOS print servers especially when a large number of print queues are installed. [PC-14806]

Fixes:

• macOS client printing to a shared LPD printer on a Windows print server using Konica Minolta PostScript printer driver:

  • Fixed an issue that caused pages with a color image to be detected as grayscale. [PC-14806]
  • Fixed an issue that caused an incorrect page count when printing multiple pages on a single sheet of paper (n-up printing). [PC-14970]
  • Fixed an issue that caused an incorrect page count when printing a booklet. [PC-14966]

• Fixed an issue that caused users to not be able to perform a transaction that would result in a zero balance. [PC-14704]

• Fixed an issue that prevented the server from starting up. [PC-13923]

• Changed default settings to throttle device registration and Print Provider requests when the Application Server is under heavy load. [PC-13400]

• Fixed a script injection vulnerability in the user interface. [PC-15163]

• Windows: Fixed a rare issue that caused a memory leak in the Application Server. [PC-14761]

• Windows Print Provider: Fixed a rare issue that caused an occasional print job to be lost when the Windows spooler was in error. [PC-15039]

• Page analysis and conversion:

  • Page analysis: Fixed an issue that, when a color page was so close to gray, caused the Print Provider to register a page as a color page instead of grayscale. [PC-15077]

  • Stapling with PaperCut Global Print Driver: Fixed an issue with Find-Me printing that caused a syntax error, but only when the target print queue was a KM Universal PostScript printer driver printing a document with a ’top left’ staple. [PC-15111]

  • Canon:

    • LIPS LX printer driver on MacOS: Fixed an issue that caused an incorrect page count when printing from Adobe Acrobat. [PC-15178]
    • ImagePass-B1 PostScript printer driver: Fixed an issue that caused an incorrect page count and incorrect page size detection when printed with booklet or gang-up output options. [PC-15074]
    • UFR drivers: Fixed an issue that caused the Print Provider to crash if the spool file was corrupted [PC-14998]

  • Epson printer driver: Fixed an issue that caused an incorrect color page count when the color detection mode was set to standard detection in the Application Server. [PC-15153]

  • Fuji Xerox ART EX printer driver: Fixed an issue that caused an incorrect color page count when printing multiple collated copies. [PC-15059]

  • Konica Minolta Image Controller IC-603 PostScript plug-in printer driver: Fixed an issue that caused an incorrect page count and page size when a layout is set to 2-in-1, 4-in-1, Repeat, or Adhesive binding. [PC-15031]

  • OKI:

    • PCL5 printer driver: Fixed an issue that caused an incorrect page count when a document with an odd number of pages was printed in duplex. [PC-15084]
    • PostScript printer driver: Fixed an issue that caused an incorrect page count when multiple pages were printed on a single sheet of paper (n-up printing). [PC-15083]

  • Ricoh:

    • SP C740 XPS printer driver: Fixed an issue that caused an incorrect paper size to be reported when printing to a paper size that is different from the original (Fit to Paper printing). [PC-15117]
    • SP C740 PCL printer driver: Fixed a rare issue that caused an incorrect page count when the text was a particular size and in a particular position in a PowerPoint slide. [PC-15087]
    • PCL6 printer driver: Fixed an issue that caused a page with black or gray text and a color image to be detected as grayscale for documents printed from some applications. This issue also caused grayscale conversion to fail. [PC-15021]

Other Notes:

• If you are running v18.3.3, there is NO database upgrade.

This is a Maintenance Release for 18.3 and contains the following changes:

Fixes:

• Fixed an issue that on rare occasions caused the Print Provider to restart when analyzing corrupted spool files. [PC-13646]

Other Notes:

• If you are running v18.3.3, there is NO database upgrade.

This is a Maintenance Release for 18.3 and contains the following changes:

Fixes:

• Fuji Xerox NEC ART EX printer driver:
  • Fixed an issue that caused custom page size to be incorrectly detected as A4. [PC-14816]
  • The spool file now includes the print job’s document name. [PC-14816]

Other Notes:

• If you are running v18.3.3, there is NO database upgrade.

This is a Maintenance Release for 18.3 and contains the following changes:

Enhancements:

• Stapling: Find-Me environments that use the PaperCut Global Print Driver now support stapling for the following brands:

  • Ricoh
  • Konica Minolta
  • Xerox
  • Kyocera
  • Riso
  • Lexmark
  • Sharp
  • Toshiba To help us add your brand, follow this guide.

• QR codes: Added a new server command ‘generate-printer-qr-code’ to generate QR codes for printers, which will direct users to the Mobile Print Release page for each printer.

• Security: Rate limiting protection is now provided for all PaperCut NG/MF internal user and admin accounts.

• Added individual timestamps to the entries associated with Email to Print and Google Cloud Print print events in the print-provider.log.

Fixes:

• Google Cloud Directory: Fixed an issue that, in certain circumstances, caused an error when switching the user/group sync source from Mac Standard to Google Cloud Directory or Windows Standard to Google Cloud Directory.

• Google Cloud Print:

  • Fixed an issue where users’ color selection was ignored when printing using the following drivers:

    • RISO ComColor FW5230 PS
    • RISO ComColor FW5230
    • FX ApeosPort-VI C5571 PCL 6
    • Kyocera TASKalfa 5052ci KX

  • For Windows, added a config file enabling SysAdmins to configure printing without having to update the Print Provider. For use only when directed by PaperCut Support.

• Page analysis and conversion:

  • Canon UFR II printer driver: Fixed an issue that caused grayscale conversions to not be applied when printing via Google Cloud Print.
  • Konica Minolta bizhub C554e Series PostScript printer driver: Fixed an issue that caused an incorrect color page count when printing both color and grayscale pages in booklet output mode.
  • Konica Minolta PostScript printer driver: Fixed an issue that occasionally caused an incorrect page count when multiple pages were printed on a single sheet of paper (n-up printing).
  • OKI PCL6 printer driver: Fixed an issue that caused an incorrect page count when multiple pages were printed on a single sheet of paper (n-up printing).
  • RISO PostScript printer driver:
    • Fixed an issue that caused an incorrect page count when multiple pages were printed on a single sheet of paper (n-up printing) on some RISO PostScript drivers.
    • Fixed an issue that caused an incorrect page count when printing in booklet output mode on some RISO PostScript drivers.

• Email to Print:

  • Fixed an issue that caused Email to Print jobs to not respect the print queue’s default settings.
  • Fixed a rare issue that caused some print jobs to either print a “rangecheck” error page or not print a page at all.

• macOS/Linux (CUPS): The configure-cups command now displays a notification when printers are automatically being imported for monitoring (EnablePrinterAutoImport is set to “on”). The notification also asks if you want to switch to manually managing printer monitoring.

• Watermarking (PostScript, PCL5 and PCL6): Added multi-byte watermarking support for languages such as Japanese, Chinese, and Korean. The Unicode font ‘Andale Mono WT’ must be installed on the printer.

• Security:

  • Increased security around the upload of documents to the Application Server.
  • Updated the bundled Java SE Runtime Environment to version 8 update 191, to incorporate the latest security fixes from Oracle.

• EPSON PX-M5080F printer driver: Fixed an issue that caused non-printable duplicate jobs to appear in the release queue in mixed Mac and Windows environments.

• Fixed an issue that on rare occasions caused the Print Provider to restart when analyzing corrupted spool files.

• Fixed an issue that caused a long delay or, in some cases, incorrect behavior when loading the Admin web interface page without an internet connection.

• Fixed an issue in the User Client, where incorrect account names were displayed in the Preferred Accounts list.**

• Improved user authentication performance for LDAP user sources and G Suite Cloud Directory.

• Realex Realauth Redirect Payment Gateway: Fixed an issue that produced invalid errors in the Realex system.

Other Notes:

• This release includes a database upgrade.

For a snapshot view of 18.3 features, see what’s New and Noteworthy .

New Features

• Google Cloud Directory (G Suite and Google Cloud Identity):

  • Sync users from Google Cloud Directory, which supports both G Suite and Google Cloud Identity.
  • Users can now authenticate using their Google credentials on all PaperCut interfaces.
  • Google Cloud Directory can be configured as either a primary or secondary sync source, and is fully compatible to run alongside another sync source such as Active Directory, giving administrators a flexible migration path.
  • You can now configure a ‘Sign in with Google’ button to display on the User web interface, Admin web interface and Mobility Print on Chromebooks. This lets users sign in to PaperCut NG without retyping their credentials.

• Mobility Print on Chromebooks: Users can now click a ‘Sign in with Google’ button instead of typing their credentials.

Enhancements

• Installation: When installing PaperCut NG, you can now skip the step to select a user/group sync source and configure that separately later. This speeds up the installation.

• Security:

  • Port 80: Tightened security on port 80 when used for payment gateways to ensure unnecessary information is not included in the http header.
  • Site Server: You can now specify a list of IP addresses or subnets that are allowed to submit information to the PaperCut NG Application Server. This is configured in Options > Advanced > Security section (or using the auth.site.allowed-addresses config key).

• Admin web interface: In ‘Options’ there is now a ‘Tools’ tab. The Tools page lists all of the third-party systems that PaperCut NG directly integrates with.

• Web services API:

  • getPrinterProperty() now supports a ‘printer-id’ option, which is also available via the server-command utility. This option improves the usefulness of the health monitoring API.
  • getSharedAccountProperty() now supports an ‘account-id’ option, which is also available via the server-command utility. This option is useful when setting the printer property advanced-config.override-no-popup-charge-shared-id using setPrinterPropertyMethod().

Fixes

• Security:

  • It is no longer possible to log in to the Site Server using the locally defined Admin credentials. Admin credentials from the PaperCut MF Application Server must be used.
  • Passwords are now redacted or removed (as appropriate) from the diagnostics zip file.
  • Unsupported HTTP requests are now actively rejected.
  • Mac and Linux with CUPS: Fixed an issue that could cause authentication information to show in the CUPS printer URI.

• Find Me printing: Simplified the workflow for setting up Find Me printing.

  • When creating a new device (Devices > Create Device), selecting “Enable print release” now also displays the “Enable find me printing support” option.
  • When creating a new device (Devices > Create Device) or when editing an existing device (Device > External Device List > Device Details > Print Release), selecting “Enable print release > Virtual with Hold/Release” now also selects the “Enable find me printing support” option.

• Load balancing: Fixed an issue that prevented load balancing from consistently printing to the least busy printer.

• Windows Print Provider: Added ‘Remote Desktop Easy Print’, ‘PDF Architect’, and ’eDocPrintPro’ to the list of ignored virtual printers.

• PaperCut Print Provider: On a Mac OS of High Sierra or later (using PaperCut CUPS filter) caused printing to fail for Canon and Epson printers.

• iPrint: Fixed an issue with iPrint where it would run only on OES 2018. It now runs on iPrint Appliances and other OES versions.

• macOS Mojave (CUPS): Fixed an issue in macOS Mojave causing a short delay in the display and monitoring of printers after installation, and when a new printer is subsequently added.

• macOS and Linux: Fixed an issue that caused Google Cloud Print and Email to Print to fail, and occasionally Find-Me printing to fail.

• Moneris eSELECT Plus Payment Gateway: Added an option to set the locale to English or French via the ext-payment-gateway-moneris.properties file (moneris.lang=).

• Heartland Payment Gateway: Added an option in the ext-payment-gateway-heartland.properties file to improve performance in large environments using Load Balancers, where Heartland on Demand Transfer is enabled (heartland.server.load-balancer).

• Global Print Driver (version 100.2.0.0): Released the latest version of Microsoft WHQL certified PaperCut Global PostScript driver. Included a minor fix so users cannot select to print duplex on a device that has no duplex unit installed.

• Ricoh PostScript printer driver: Fixed an issue that caused an incorrect page size to be reported when users selected some standard paper sizes, such as JIS B5, or a custom paper size.

• Canon UFR II printer driver: Fixed an issue that caused grayscale conversions to not be applied when printing via Google Cloud Print.

Other Notes

• This release includes a database upgrade.
• Updated the End User License Agreement (EULA).

This is a Maintenance Release for 18.2 and contains the following changes:

Fixes:

• Fixed a translation issue that caused extra single apostrophes to display in the Admin and User web interfaces and various device interfaces.
• Fixed an issue that caused Web Single Sign-On (SSO) to fail when users attempt to sign in using Internet Explorer or Google Chrome when the PaperCut service is being run as a Domain User Account and the server is using IIS 7.0+.
• Canon with PaperCut Global Print Driver: Added a new PDL transform to fix an issue that caused jobs to print to an output tray that was different to the user’s selection.
• Lexmark with PaperCut Global Print Driver: Added a new PDL transform to fix an issue that caused jobs to print to an output tray that was different to the user’s selection.
• Epson ESC/P driver: Fixed an issue that caused an incorrect color page count when page-level detection was enabled.
• RISO ComColor 7050 GDI Driver: Fixed an issue that incorrectly detected a grayscale, duplex, odd page count print job as a color print job.
• iPrint performance improvement: Added two new properties (Redirect9100Command and UseRedirect9100Command) into the print-provider.conf file to improve the speed of printer redirection.
• 10squareduk: Fixed an issue that prevented value loaders from registering with PaperCut NG.

Other Notes:

• This release includes a database upgrade.

This is a Maintenance Release for 18.2 and contains the following changes:

Fixes:

• Windows Print Provider: Fixed an issue that could cause the Print Provider to crash when Hardware Checks are enabled (since 18.2.4).

This is a Maintenance Release for 18.2 and contains the following changes:

Enhancements:

• PaperCut NG Windows installer: An installation log file ( [users-home-directory]/AppData/Local/Temp/Setup Log [timestamp] #[filenumber].txt ) is now created by default.
• When a PaperCut NG upgrade cannot proceed because older versions are detected and cannot be deleted, a detailed error message with resolution options is now displayed.

Fixes:

• Windows hardware page count with PaperCut Port Monitor: Fixed an issue that caused the page count to be incorrectly reported in some cases when the print job is deleted.
• Epson large format PostScript printer drivers: Fixed an issue that caused the page size to be incorrectly detected when using roll paper sizes larger than A4.
• NEC PostScript drivers: Fixed an issue that caused an incorrect page count when multiple pages were printed on a single sheet of paper (n-up printing).
• Windows Print Provider: Fixed an issue in very high print volume environments that sometimes caused a held print job to be lost.
• Page analysis: Fixed an issue that caused print jobs to fail when the paper size field had garbled characters.
• Web Print: Fixed an issue that stopped the status of Web Print jobs changing from “Processing” to “Cancelled” when a print script cancelled the jobs.
• iPrint: Fixed an issue that occasionally prevented jobs from being released in a Find Me environment.
• Reports: Fixed an issue that caused the “Department printing - summary” and “Office printing - summary” reports to take a long time to generate.
• Secure LDAP: Fixed an issue that sometimes caused sync failures when using wildcard certificates (since 18.2.3).
• Fixed an issue where new internal users were not being synced into groups.
• Security: Fixed an issue that incorrectly included sensitive configuration information in debug logs.

Other Notes:

• If you are running v18.1.1 or later, there is NO database upgrade.

This is a Maintenance Release for 18.2 and contains the following changes:

Fixes:

• PostScript drivers:

  • Fixed an issue for landscape PDF files printed from Adobe Acrobat Reader that caused a watermark to be placed in an incorrect position.
  • Fixed an issue that caused watermarks to either not be applied or applied to the wrong position for some n-up setups and for Adobe Acrobat Reader on Windows.
  • Google Cloud Print: Reduced the size of color print job spool files.
  • Email to Print: Reduced the size of color print job spool files.
  • HPLip driver: Fixed an issue causing an incorrect color page count.
  • Fuji Xerox DocuPrint CP400 d and DocuPrint CP405 d PCL6 drivers: Fixed an issue causing an incorrect color page count.
  • Fixed an issue where PostScript comments could, on rare occasions, cause an incorrect page count to be reported.
  • Fixed an issue where watermarks were not added to print jobs generated from the application ‘KWS (UZ Leuven)’.

• Kyocera KX driver: Fixed an issue that caused an incorrect number of copies to be reported when the user selected KPDL as the PDL from the Print Properties dialog.

• Google Cloud Print: Fixed a rare issue that caused an error message due to an unexpected HTTP Status Code response during Google Cloud Print configuration.

• Email to Print: Fixed a rare issue that prevented the set up of Email to Print with guest printing.

• Standard Release Station: Added more detail and clarity to the error message displayed when a job is prevented from being released because its settings contravene the printer’s filters and restrictions.

• Print Provider: Fixed an issue that on rare occasions stopped jobs being sent to the printer.

• Windows Print Provider:

  • Fixed an issue that could cause the Windows Print Provider log (print-provider.log) rotation to fail.
  • Fixed an issue that occasionally caused some print jobs to be deleted in a very high print volume environment.

• CUPS Print Provider with Mobility Print: Fixed an issue where some print jobs from iOS clients with IPv6 addresses were not tracked.

• PaperCut LPD Service: Added an option in the pc-lpd.config file to enable the host address to be removed from the job owner’s name (RemoveHostAddress = true).

• Active Directory: Fixed an issue in multi-domain environments that imported user details from only the first domain when an on demand user is created.

• Fixed an issue that prevented the secondary card ID number from being generated during on-demand user creation.

• Fixed an issue that prevented the secondary card ID from synchronising from a secondary sync source.

• Site Server: Fixed an issue that caused authentication to fail for an on-demand user when they attempted to log in before the Site Server had synced with the Application Server.

• Security:

  • Added CSRF origin checks to the Mobile Print Release interface.
  • Updated the bundled Java SE Runtime Environment to version 8 update 181, to incorporate the latest security fixes from Oracle.

• iPrint: Added details about print data timing into the debug log (print-provider.log) to improve performance diagnosis.

For Integrators:

• Release Station API: Added a JobReleaseStatus (FilterRestriction) to releaseJob and releaseJobs, to prevent users from releasing jobs that contravene the printer’s filter and restrictions.

Mobility Print:

For more information about changes to Mobility Print, see the Mobility Print Release Notes page.

Other Notes:

• If you are running v18.1.1, there is NO database upgrade.

This is a Maintenance Release for 18.2 and contains the following changes:

Fixes:

• Pay Station: Fixed an issue preventing the following pay stations from starting:
  • Apex 5000
  • Microcoin
  • SEM-ACS 9500Ss
  • Boscop Coin Op. This issue also displayed an “ApplicationException: Unknown vendor” error in the server log. For more information, see Known Issues

For a snapshot view of 18.2 features, see what’s New and Noteworthy .

Enhancements

• Active Directory synchronization is now included in the system debug logs when system debug logging is enabled.
• On the Printer Copy Settings page, you can now _select all_common or_select all_printer settings.
• Print Release: IPPS print queues are now included in the list of suggested Find Me destination queues on the Device Details page, when the network address matches the destination address of the MFD.
• Language support: Welsh is now available.
• Toner levels are now reported on IPPS print queues.

Fixes

• Security:

  • Fixed an issue that allowed an Admin with partial admin rights to gain additional admin rights in the Admin web interface.
  • Site Server: Fixed an issue that incorrectly included sensitive authentication information in debug logs.
  • Continuing security improvements on the PaperCut NG Admin and User web interfaces, to reduce vulnerability to deserialization attacks.

• Fixed an issue that caused web interface logins to fail when the proxy setup added an X-Forwarded-For header that included a port. This enables sites to use Mobility and Web Client logins with this proxy setup.

• Standard Release Station: Fixed a layout issue that caused the Print All and Cancel All buttons to be inaccessible when using an onscreen keyboard on some screens.

• Fixed an issue that caused a “Could not find message for key” error message for some Release Station job cancellation messages.

• Mac User Client: Fixed an issue preventing Mac User Clients from connecting to the Application Server over IPv6.

• Admin Web Interface: Fixed an issue that caused long printer/device group names to flow outside the Printer/Device group dropdown box on some screens.

• CBORD payment gateway:

  • Improved some error messages, and removed some confusing messages that displayed when the balance was low.
  • Improved security support for legacy CBORD users.

• MacOS generic PCL driver: Fixed an issue that prevented:

  • simplex to duplex conversion
  • changing the number of copies.

• OKI PostScript drivers: Fixed an issue that in some cases caused an incorrect page count when multiple pages were printed on a single sheet of paper (n-up printing).

• Xerox PCL6 drivers: Fixed a rare issue that caused changing the number of copies to fail.

• Print Provider:

  • Fixed an issue that occasionally printed garbled characters in the debug logs.
  • Changed a setting so the Print Provider communicates correctly with the PaperCut NG Application Server and Site Server when a content filter service is used. For details, refer to SonicWall with Content Filter Service .

For Integrators

• If the user’s home folder is set in User Details, developers using the SSO Device API can now discover it.
• 3rd party hardware or payment gateway APIs: Added a work around to re-enable some failed API integrations. For more information, see Known Issue 14161 .

Mobility Print

For more information about changes to Mobility Print, see the Mobility Print Release Notes page.

Other Notes

• If you are running v18.1.1, there is NO database upgrade.
• The End User License Agreement (EULA) has been updated.

This is a Maintenance Release for 18.1 and contains the following changes:

Enhancement:

• The PaperCut MF manual is now available on the PaperCut website providing more information about PaperCut NG functionality, such as Scan to Cloud. You can find it here .

Fixes:

• Integrated Scanning: Fixed an issue that would have required a user to re-register Scan to Cloud Storage by November 2018.
• Fixed an issue that prevented the PaperCut Save Paper Desktop Widget from being installed.
• Print Provider: Improved the Windows error logging in print-provider.log.
• Ricoh: Fixed an issue where the toner details were incorrectly reported for some colors.
• Sharp PostScript driver: Fixed an issue that occurred when printing both color and grayscale pages in a booklet output that caused an incorrect total page count and an incorrect color page count.
• Canon UFR II printer driver: Fixed an issue that prevented color to grayscale conversion.
• MAC/Linux (CUPS): For new installations and upgrades of PaperCut NG, the default setting _EnablePrinterAutoImport_is now set to “on”. PaperCut NG will now automatically import newly added printers. This setting does not override existing installations.
• Generic PostScript printer driver on macOS: Fixed an issue causing an incorrect page count when duplex printing an odd number of pages.

Other Notes:

• This release does NOT contain a database upgrade.

This is a Maintenance Release for 18.1 and contains the following changes:

Fixes:

• Mobility Print: On Linux and macOS servers, fixed an issue preventing the account selection popup from being displayed when enabled.

• Azure AD Secure LDAP synchronization: The user/group synchronization option in the Configuration Wizard and the Options > User/Group Sync page has been changed from Azure AD to Azure AD Secure LDAP.

• Google Cloud Print: Fixed an issue that occasionally prevented PaperCut NG from connecting to the Google Cloud Print service to publish printers and print documents.

• Linux/Mac: Improved handling of “Printer Command Jobs” to prevent erroneous charges and unnecessary Account Selection Popups.

• The login button to the PaperCut Pay Station is now disabled while the user is being authenticated. This addresses an issue that could result in funds not being correctly associated with the user’s account.

• Enhanced the Windows Print Provider when using SNMP to detect printer errors. Windows queue status is now updated with the correct printer error state.

• Fixed an issue in the external account API that caused canceled jobs charged to shared accounts to be be refunded incorrectly.

• Batch user and shared account import: Fixed an issue that allowed unsupported file types to be uploaded.

• User Client: Fixed an issue causing toast messages to be incorrectly displayed when they are disabled.

• Fixed a broken link in Programs > PaperCut NG to “Top-Ten Hidden Features”.

• For free licenses (five or less users), the License expiry warning message has been replaced by a message indicating that the installation allows only five users.

• Fixed a rare issue that caused an “Unable to resolve” error to be displayed on the Job Log page when Hardware Check was enabled.

• Print Archiving: Fixed a rare issue that caused print archiving to fail, especially when printing via Mobility Print.

• Print Provider:

  • Improved the time to release print jobs, especially in environments with a high number of held print jobs.**
  • Fixed an issue that caused “Unable to get print job info” entries in the Print Provider log for print jobs that had already been printed.**
  • Provided an option to fix an issue when Sonicwall Firewall Content Filtering System (CFS) is used that prevented secondary servers and Direct Print Monitors from accessing the Application Server and Site Servers. For details on how to set this option, see SonicWall with Content Filter Service .**
  • Windows: PaperCut NG takes the Windows Job Status into consideration when canceling a print job. In addition to the Job Status of Error, the Windows Print Provider now also recognizes Offline, Paper Out, and User Intervention as potential errors.**

• PostScript drivers:

  • Fixed an issue causing incorrect page counts of print jobs generated from KWS (UZ Leuven).
  • Fixed a rare issue with some PostScript drivers that caused a color page to be incorrectly detected as grayscale.

• OKI PostScript drivers: Fixed an issue that, when multiple pages were printed on a single sheet of paper (n-up printing), caused an incorrect page count to be recorded in PaperCut NG logs.

• OKI C711: Fixed an issue that caused hardware page validation checks to fail.

• Epson: Fixed an issue causing color jobs to be charged as grayscale on some recent devices.

• Linux with pdftocairo: Fixed an issue that caused color jobs to be charged as grayscale.

Mobility Print:

• For more information about changes to Mobility Print, see the Mobility Print Release Notes page.

Job Ticketing:

• For more information about changes to Job Ticketing , see the Release Notes within the product.

Other Notes:

• If you are running v18.1.1, there is NO database upgrade.
• Fixes and enhancements marked with ** require a Print Provider upgrade.

This is a Maintenance Release for 18.1 and contains the following changes:

Fixes:

• Fixed an issue that displayed garbled characters in translated messages on all web interfaces (since 18.1.1).

Other Notes:

• If you are running v18.1.1, there is NO database upgrade.

For a snapshot view of 18.1 features, see what’s New and Noteworthy .

New Features

• Azure AD user and group sync: Added support for Azure AD Secure LDAP as a new Sync Source option in the Options > User/Group Sync page, when Azure AD Domain Services is enabled.

Enhancements

• GDPR print management, data privacy, and security compliance: To assist with with Europe’s General Data Protection Regulation “Right to be Forgotten”:

  • The Privacy Option (“Remove document information from the Job Log after”) to redact potentially sensitive data elements from the Job Logs page, has been enhanced to redact additional attributes of the print jobs (file size, user client details, comments, watermarks, and digital signature). Additionally, the timestamp can also be redacted.
  • The server command “permanently-redact-user-data” has been enhanced to redact the file size, user client details, comments, watermarks, and digital signature of print jobs from the Job Logs page.

• Global Print Driver (version 100.1.0): The driver’s page output order is now “front to back”. **

• PaperCut NG User web interface: The temporary option to revert to the pre-17.2 User web interface branding is no longer available.

• PaperCut Views: PaperCut Views and PaperCut NG can now be installed on the same server.

• Security:

  • When a print server is detected as being offline, the following now occurs:
    • held print jobs (pending release) are now hidden by default until the print server is back online, to prevent them from being automatically released after the outage.
    • print jobs queued for printing (released) are placed back on hold by default, to prevent them from being automatically printed when the print server comes back online.
  • The command line option “CreateSSLKeystore” now has the option to generate and import self-signed certificates that have custom keystore and keystore key passwords.
  • Continuing security improvements on the PaperCut NG Admin and User web interfaces, including cookie security and library dependencies, to reduce vulnerability to scripting attacks.

Fixes

• Fixed an issue that prevented Print Archive spool files from being viewed or downloaded (since 18.1.0).
• User web interface: Internet Explorer 11 in compatibility mode is now forced into a higher document standard to ensure pages are rendered correctly.
• Fixed an issue to ensure that Low Balance email notifications are triggered for copy and scan jobs.
• Web Print: Fixed an issue that displayed a JavaScript error in the browser’s console when clicking the file “drop zone” in the User web interface.
• Reports: Fixed an issue to ensure that access to the “User printing - summary” report (Users), the “Group print summary” report (Groups), and the “Account print summary” report (Accounts), is restricted to PaperCut NG Administrators with “Access reports section” enabled (Options > Admin Rights).
• Site Servers: Fixed an issue that incorrectly caused Site Servers to intermittently switch between online and offline modes.
• macOS and Linux: Fixed an issue that caused the Print Provider to log to old rotated log files.

For Integrators

• Web Services API: Modified the setUserAccountSelectionAutoChargePersonal method in the Web Services API to enable popup notifications for personal accounts.

Mobility Print

• For more information about changes to Mobility Print, see the Mobility Print Release Notes page .

Other Notes

• Windows 2008 (non R2) and 32-bit: As per our End Of Life Policy announcement , the PaperCut NG Application Server can no longer be installed on Windows 2008 (non R2) and 32-bit environments.
• **Requires an upgrade of the PaperCut Global Print Driver.
• This release includes a database upgrade.

This is a Maintenance Release for 18.0 and contains the following changes:

Enhancements:

• Tuned Java parameters to improve Application Server performance on large sites.
• Pay Station: When a Pay Station fails to connect to the Application Server to update a user’s balance, the Pay Station now displays an error message and prints a transaction error report (if an acknowledgement printer is attached), so the user has proof that the transaction did not succeed.

Fixes:

• Added a new Admin Right to control access to the Sites tab in the Admin interface.

• Reduced the CreateSSLKeystore default certificate validity duration to not exceed 2038, to safeguard older devices running into a 2038 date rollover issue.

• macOS High Sierra (CUPS): Reduced the time it takes for a printer to be available in the Control Printer Monitoring.command script.

• Standard Release station via Site Server: Fixed an issue that caused an empty print release list for Hold/Release queue managers.

• User Client:

  • Fixed an issue that prevented the User Client from launching when the User Client icon was double-clicked in the Windows task tray.
  • Fixed an issue that caused high memory usage, especially when a high number of shared accounts are used.

  **Note: User Clients require an upgrade.

• Web Print:

  • Fixed an issue that caused the “Maximum document/file upload size” value to be ignored and set to 256MB instead.
  • Sandbox mode: Fixed an issue that caused multiple print jobs to be generated for each Web Print job in some virtual environments.

  ***Note: Web Print sandbox servers require an upgrade.

• Google Cloud Print:

  • Fixed a rare issue that caused a Google Cloud Print job to be printed multiple times.

• Printer compatibility improvements:

  • RISO ComColor with PaperCut Global Print Driver: Added a new PDL transform to fix an issue that caused the printed output to have incorrect settings when printing in duplex, color, or selecting specific tray settings.
  • Canon printers on Linux and MacOS: Fixed an issue that caused an incorrect number of copies and pages to be reported for some Canon devices when using CUPS printing.
  • Epson printers: Fixed an issue that caused an incorrect number of copies and pages to be reported for some Epson printers.

  ****Note: Secondary servers require a Print Provider upgrade.

For Integrators:

• On demand Payment Gateway API: Extended the API to support external lookup on different user properties, for example card ID or alias.

Other Notes:

• If you are running v17.2.1 or later, there is NO database upgrade.
• Fixes and enhancements marked with:
  • ** require a User Client upgrade.
  • *** require a Web Print server upgrade.
  • **** require a Print Provider upgrade.

For a snapshot view of 18.0 features, see what’s New and Noteworthy .

Enhancements

• GDPR print management, data privacy and security compliance: To comply with Europe’s General Data Protection Regulation “Right to be Forgotten”:

  • a new Privacy Option has been added to configure the time period after which potentially sensitive data elements of print jobs are permanently redacted from the Job Logs page. This includes Document Names of print jobs and thumbnail previews and spool files of archived print jobs.
  • the server command permanently-redact-user-data has been enhanced to redact the Document Names of cancelled or expired print jobs on the Job Logs page.

• Security: When a print server is detected as being offline, all its held print jobs (pending release) can now be hidden, to prevent them from being released during the outage. For more information about this feature and how to enable it, contact PaperCut Support.

• Linux and macOS (CUPS): Added more options to the configure-cups script when run from the terminal (list all available printers, add or remove individual printers).**

Fixes

• Google Cloud Print: Fixed an issue on the Application Log page that displayed an incorrect line of text (!GoogleCloudPrintManager.printer-unpublished!), instead of the relevant message.
• HP drivers: Fixed an issue with some drivers that caused duplex print jobs to be detected as simplex (since 17.4.3).**
• Fuji Xerox PostScript drivers: Fixed an issue with some drivers that caused an incorrect page count when multiple pages were printed on a single sheet of paper (n-up printing).**
• PostScript drivers: Fixed an issue in the print-provider.log file that sometimes incorrectly logged an “Unsupported image compression” error.**
• Fixed an issue that caused some discrepancies in the Environmental Dashboard’s “Usage This Month” graph when including December 2017 Job Logs that were edited in January 2018.
• Site Servers: Fixed an issue that caused Site Servers with low system resources or running many embedded devices to frequently switch to offline mode even when the connection to the Application Server was available.

Other Notes

• If you are running v17.2.1 or later, there is NO database upgrade.
• Fixes and enhancements marked with ** require a Print Provider upgrade.

This is a Maintenance Release for 18.0 and contains the following changes:

Fixes:

• Site Server: Added an option to activate device registration throttling, to resolve an issue that occasionally caused the Application Server to stop responding when a high number of devices were registered via a Site Server.
• db-tools with an internal database: Fixed an issue that sometimes caused an OutOfMemory exception when executing an incorrect query (since 17.2.1).
• Find Me printing: Fixed an issue that caused an occasional print job to be lost when in a high print volume environment.
• 3rd party hardware payments: Added the ability to print the amount to be credited to the user on error receipts (via the %credit% variable).

Other Notes:

• If you are running v17.2.1 or later, there is NO database upgrade.