PaperCut MF 23.0 release history

Fixes:

• Fixed an issue that prevented the application server from starting in some Linux environments. [PO-2119]

Security: 

• Various security fixes. See PaperCut NG/MF Security Bulletin (March 2024) for more information. [CDSS-3505], [CDSS-3325], [PO-2080], [PIE-708], [PO-2030]
• This release also includes several pre-emptive security improvements and additions to layers of defense. These improvements were made as a result of code audits, pen tests and security reviews. Changes were made in line with our security uplift initiative.

Fixes:

• macOS: Fixed an issue that, in some cases, when deploying Mobility Print or IPPS print queues via Print Deploy, the Print Deploy client caused the CUPS IPP backend to fail, resulting in any IPP/IPPS/HTTP/HTTPS print jobs failing. This fix will also restore a user’s CUPS IPP backend if Print Deploy previously broke it. See known issue for more information. [PD-1892]

Copier / Device Integration:

• Xerox: Fixed an issue impacting Xerox EIP 1.5+ devices with 2nd Gen EIP browsers where the Print Release screen didn’t properly display print job information. [CDSS-3375]

Fixes:

• Email to Print: Improvement to the efficiency of bulk folder operations when using the IMAP protocol. [PO-1735]
• User/Group Sync Source: Added the ability to configure an alternative email address for UPN users with the Standard Azure sync. [PO-949]
• Integrated Scanning: In the DB, we now record a Unique ID in the printer usage logs for all integrated scanning jobs. [PO-1876]
• Print Deploy: Allows admins to downgrade the execution privileges of the Print Deploy server. Note that this is applied by default in a fresh installation of 23.0.5, but will need manually applying (if required) for upgrades. See How to downgrade the execution privilege of the Print Deploy server on Linux and macOS for more information. [PD-1690]

Copier / Device Integration:

• Sharp OSA 3.0+: Fixed auto embedding issue for Sharp embedded app. [CDSS-3011]
• HP OXP: Improved performance of swipe card login for HP Embedded app. [CDSS-2866]
• Toshiba V3+:
  • Fixed account balance format to support a large number [CDSS-3192]
  • Improved the login process on some Toshiba EBN devices [CDSS-3106]
• Xerox:
  • Improved touch screen responsiveness on Xerox AltaLink C81XX series devices (Xerox EIP 1.5+) running firmware version 114+ and using the 3rd Gen web browser. [CDSS-2907]
  • Added the ability to use Xerox EIP 1.5+ devices behind a proxy or network load balancer. [CDSS-3142]
  • Fixed an issue that caused Xerox devices to not have HTTPS enabled for the Job Limits function. [CDSS-3189]

Fixes:

• Fixed an issue where client authentication and unauthenticated printers are not working correctly with the 23.0.3 version user client. [PO-1853], [PO-1845]
• PostgreSQL - Fixed an issue that was introduced in 23.0.3 that caused database imports to fail when using postgresSQL. [PO-1855]

Copier / Device Integration:

• Fujifilm BI: Removed the “Log in as Admin” functionality from the ID/PIN login screens due to an incompatibility with expected device settings on Fujifilm devices. [CDSS-3200]

New Features:

• Added support for users logging in to the PaperCut NG/MF User Client with Azure credentials & authenticating with Microsoft MFA flow (requires user clients to be upgraded). Find out what’s supported [PO-1643],[PO-1637]
• PaperCut username field now supports up to 255 characters (increased from 50 to 255 characters) to allow better support for customers using UPNs as usernames. [PO-1034]

Security:

• For new installations only, we are changing the default configuration for “Allowed remote provider IP addresses (e.g. secondary print servers)” under Options->Advanced->Security to only allow connections from local IP ranges by default. More details can be found here [PO-1649]
• Introduced the ability for Admins to update their company contact details in the About Page in MF/NG to be alerted in the event of a critical security incident. For more regular PaperCut security notifications please subscribe to security notifications [PO-1670]

Fixes:

• Updates to color contrast of text and elements for enhanced accessibility compliance on MF/NG Admin and User PaperCut web interfaces. [PO-1778]
• Fixed a bug with Email to Print when configured with Gmail over OAuth, which caused email to print to stop working until an Application Server restart. [PO-1672]
• Improved email sending behavior when using Outlook or Gmail connections with OAuth. This should reduce Scan to Email notification failures. [PO-1671]
• Addressed an issue that could cause Windows AD users to lose association with groups following a user sync failure. [PO-648]

Print Provider:

• Windows, Linux: Fixed an issue that caused Hardware Page Count to fail if HTTPS communication was enabled in the Print Provider. See known issues for macOS. [PO-1786]

Copier / Device Integration:

• Brother: Added a config key ext-device.brother.allow-webapp-access to toggle access to web applications on Brother devices. [CDSS-1697]
• Fujifilm:
  • Updated the Fujifilm embedded device type to “Fujifilm BI 7+”, removing the term “AIP” from the name and updated associated documentation. [CDSS-1817]
  • Added the ability to login as device admin from the device login screen on Fujifilm devices. [CDSS-2446]
• Kyocera: Resolved an issue that sometimes caused an error to be displayed on Kyocera devices when releasing all print jobs from the Print Release screen. [CDSS-2656]
• Konica-Minolta i-Option: Allow user to get an A5 portrait scan output by placing A5 pages short-edge-first (landscape) on the doc feeder or glass for KM’s A4 devices [CDSS-2669]
• Ricoh (SmartSDK): Resolved an issue where Ricoh Remote Operation Client couldn’t run from command line if the installation is in a non default location. [CDSS-2824]
• Toshiba V3+: Fixed the bug on Toshiba SING20+ devices where the Job Status button was disappearing from MFD screens. [CDSS-3015]
• Xerox : Resolved an issue that caused scan jobs to have document content close to page margins erased on Xerox devices. [CDSS-2416]

Other notes:

• Devices marked with * require installing an updated version of the embedded software to access new features and fixes.
• A DB upgrade occurs when upgrading to this version.

Copier / Device Integration:

• Konica Minolta: PaperCut MF is now bEST certified by Konica Minolta USA. The certified connector version is 4.4.0

New Features:

• Added the ability for customers with Azure user/group sync to enable multi factor authentication (MFA) on their tenancy under certain circumstances. This enables MFA login flow across all web based authentication, however does not support the MF User Client or MFD (embedded device) logins. See Overview of synchronizing user and group details with Entra ID (Azure AD) for more information. [PO-1593], [PO-1171], [PO-1275]
• Security communications enhancement to allow PaperCut to publish a banner to the Admin web interface to alert customers of any critical security incidents that may arise and guide them to take action to mitigate the issue. [PO-1448]
• Added the United Kingdom as a region in the dropdown menu for cloud services regions, under PaperCut MF admin console > Options > Advanced > Cloud Services. This dropdown menu also appears in the prompt when the admin sets up a scan action to a cloud storage for the first time. [SC-1975]

Security:

• Fixed a potential privilege escalation vulnerability when using the Print Archiving feature (CVE-2023-6006). See our Security bulletin (November 2023) for more information. [PIE-547]
• Security enhancement requiring Admins to re-authenticate their session before updating or assigning the admin rights or admin password. [PO-1558], [PO-1557]
• Security enhancement to comply with GDPR guidelines to redact personably identifiable information in Worldpay (RBS) Payment Gateway logs. [PO-1166]
• Updated several third party libraries. [PIE-625], [PO-30], [PO-858], [PO-859], [PO-862], [PO-947], [PO-963]
• Security enhancement to ensure that server.properties password fields within the configuration files are encrypted. These values will then be encrypted automatically after restarting the Application Server service. [PO-1130]

Fixes:

• Fixed a bug that prevented the editing of scheduled reports where the report contained invalid email addresses. [PO-1231]
• Fixed an issue that prevented scheduled reports being sent if any recipient contained an invalid email address. [PO-910]

Print Deploy:

• Print Deploy now supports desktop virtualization server platforms from Citrix, VMware and Microsoft. Virtual desktop users now get the right printers based on their physical location, even when their desktop session is virtual, no matter their device. This includes users on Chromebooks, tablets, mobiles and even macOS devices when they connect to a Windows virtual desktop. Note, an additional license is required and this client is only available to PaperCut MF customers. [PD-1728]
• Added Sign-in with Microsoft as an authentication method, which also supports Multifactor Authentication (MFA) [PD-1171]
• Direct Print Monitor: Added options to configure the HTTPS/TLS communication port, TLS version and whether self-signed certificates should be accepted. [PIE-47], [PD-1772]
• Fixed an issue that caused the print queue connection value to be blank when importing Mobility Print queues via CSV. [PD-1753]
• Fixed a rare issue where Mobility Print queues may fail to install after cloning [PD-1814]
• Fixed an issue where the Print Deploy Server was not correctly detecting the ACTIVE PaperCut NF/MF Application Server when configured for High Availability. [PD-1781]

Print Provider:

• Print Provider: Added options to configure the HTTPS/TLS communication port, cipher suite, TLS version and whether self-signed certificates should be accepted. [PIE-47]
• Print Analysis: Fixed an issue that caused page color to be detected as grayscale when using the Fujifilm Apeos series PCL6 printer driver to print booklets. [PIE-537]
• Email to Print and Web Print: Fixed an issue that caused printing to fail for some drivers when Tabloid page size is used. [PIE-616]

Copier / Device Integration:

• Epson: Fixed an issue for Epson Open Platform Solution that fails to release print job if the user id has unicode/utf-8 character. [CDSS-2490]
• Fujifilm:
  • Renamed Fujifilm device plugins to be in line with Fujifilm preferred naming conventions. [CDSS-1790]
  • Fixed an issue that caused the Fujifilm Embedded Application to not display in full screen on DMP 14 devices. [CDSS-1987]
  • Fixed an issue that caused backspace on PaperCut input fields to delete rightmost character instead of character behind the cursor on Fujifilm devices. [CDSS-2322]
• HP OXP: Fixed a bug where a blank screen was shown when a restricted user tried to release a print job with zero credit by adding the popup prompting the user that they do not have sufficient balance. [CDSS-2837]
• Konica-Minolta i-Option:
  • Fixed an issue where the Integrated Scanning failed on AccurioPrint devices. [CDSS-2840]
• Kyocera v3.2.6*:
  • Fixed an issue on Kyocera devices configured as “Inch” models that prevented mixed size scanning from working as expected. [CDSS-1865]
  • Removed the Task bar shown at the top of the screen on Kyocera devices [CDSS-2169]
• Lexmark (eSF), OKI (eSF), Toshiba (eSF), Dell (eSF), Xerox (eSF) and Fujifilm BI (eSF) v3.1.9 *:
  • Added support for new Fujifilm BI (LeS) devices. Known new models that will be supported by Fujifilm BI LeS binary are as follows: [CDSS-2740]
    • ApeosPort Print C3830SD
    • ApeosPort C3830SD
    • ApeosPort C3320SD
    • ApeosPort 4730SD
• Sharp OSA (HTML Browser n2.0+):
  • Fixed an issue on Sharp OSA n2 Device where the user can’t do the second scan job if the first scan job has an error. [CDSS-2746]
  • Fixed a bug where a blank screen was shown when a restricted user tried to release a print job with zero credit by adding the popup prompting the user that they do not have sufficient balance. [CDSS-2837]
• Toshiba V3+: Added support for Toshiba v3 devices for native device OCR 100 DPI scan by changing the default PDF format from searchable-pdf to pdf. [CDSS-2451]

Other notes:

• Devices marked with * require installing an updated version of the embedded software to access new features and fixes.
• If you are running v22.1.3 or later, there is NO database upgrade.