PaperCut MF 23.0 release history

Fixes:

• Fixed an issue that could prevent users that have multiple email addresses from syncing. [PO-2144]
• Web Print: Fixed an issue where the color scheme was not loading in the Web Print user interface. [PO-1974]
• Fixed the UI text layout in PaperCut MF Admin Portal > Options > Advanced tab - Security section, to better match the input field order. [PO-1977]
• Logging: Changed a log ERROR message to WARN in Email to Print as we now better support network connection issues. [PO-2004]
• Logging: Fixed the grammar in a scan Error message regarding attached file. [PO-2035]
• Added the ability to delete Google Cloud Directory (GCD) certificate from the administrator UI User/Group Sync page when Google Cloud Directory is the sync source. [PO-2142]
• Fixed an in product documentation link for configuring Single Sign on with Google. [PO-1943]
• Widows Active Directory: Fixed user card PINs being omitted from group user imports. [PO-2188]
• Payment Gateway: Fixed an issue where Payment Gateway postback fails. KB, manual. [PO-1879]
• Microsoft Entra ID: Added support for swipe card self association when the user has MFA enforced on their account. The user will receive an email to complete the card association. Note - non web service based devices will display an error message on the screen - see Considerations when using Microsoft Entra ID with MFA . [PO-1900]

Print Provider:

• Windows Direct Print Monitor: Fixed an issue that caused Print Deploy to overwrite manually configured settings in print-provider.conf, for example debug=on/off. [PIE-689]
• Windows Print Provider: Fixed an issue where the Print Provider in rare cases would crash during startup. [PIE-698]
• macOS Print Provider: Fixed an issue that the Print Provider and Direct Print Monitor running on macOS Sonoma 14.4 could not track print jobs on newly added printers. [PIE-720], [PIE-722]
• Use new code signing certificate for all Print Provider executables [PIE-713]
• Print Provider: macOS 10.15 Mojave and earlier are no longer supported. macOS 11 Big Sur or later is required to run. [PIE-654]
• PDL transform: Fixed an issue that caused stapling to fail on Xerox printers when using non-envelope paper sizes. [PIE-636]
• CUPS: Fixed an issue that caused print jobs to be logged as successful when printers did not respond for 10 minutes. [PIE-628]
• CUPS: Fixed an issue where a printer called PaperCut was incorrectly listed under available printers to install. [PIE-702]
• Print analysis: Fixed an issue on large format Canon printers that caused the wrong page size dimensions to be detected. [PIE-638]
• Print analysis: Fixed an issue that caused grayscale printing to be detected as color when using Fujifilm PostScript printer drivers. [PIE-650]
• Hardware Page Count on macOS: Fixed an issue that caused Hardware Page Count to fail when HTTPS is enabled. [PIE-655]
• Hardware Page Count: Added support for printers Kyocera ECOSYS P3055dn, P3051dn, and P5026. [PIE-683]

Web Print and Email to Print:

• Web Print, Email to Print, when using SHARP MX-4070N PCL6 or SHARP MX-4070N PS drivers. Fixed an issue that caused 11x17 inch page size documents to be printed as A4 or Letter size. [PIE-651]
• Web Print, Email to Print: Updated a dependent library that improves security. [PIE-559]
• Web Print, Email to Print: Fixed an issue that in some cases would cause Letter and 11x17 inch documents to be printed in A4 instead. [PIE-662]
• Web Print (Windows): Fixed an issue that caused PDF documents to fail to print when the Web Print service is run as a Group Managed Service Account. [PIE-643]

Copier / Device Integration:

• Fujifilm:

  • Introduced Advanced Scan to Fax action support (which includes fax provider API and phonebook support). [CDSS-3377]

• Konica-Minolta i-Option:

  • Fixed an issue when a long-running login process on one printer blocks logins on other printers. [CDSS-3368]

• Kyocera v3.2.8*:

  • Added an Integrated Scanning config key ext-device.kyocera-mita.scan.mixed-rotate-all to rotate scanned content. Applicable only when scanning mixed-size originals with paper orientation set to landscape, and when the page is placed short edge first into the feeder. This key creates a portrait digital image. [CDSS-3197]

  • Due to a device limitation that caused the Kyocera reset button to conflict with the PaperCut job list scroll bar, we have reversed a recent change (v3.2.7) where the Embedded Application would fill the whole screen.

    The new version (v3.2.8) does not fill the whole screen, and also allows users to access the kyocera on-screen buttons. [CDSS-3210]

• Lexmark (eSF), OKI (eSF), Toshiba (eSF), Dell (eSF), Xerox (eSF) and Fujifilm BI (eSF) v3.1.10 *:

  • Added a way for administrators to log in to the printer for maintenance using printer admin credentials while PaperCut is still installed. [CDSS-3288]
  • Fixed native app icon texts for languages other than English (firmware version 230.026+). [CDSS-3195]
  • For Integrated Scanning, added support for auto color detection for scan and copy. [CDSS-3255]

• Ricoh SmartSDK v3.2.5*:

  • Fixed an issue on the Ricoh SmartSDK embedded where customized color scheme does not apply to some screens. [CDSS-3079]

• Sharp OSA (HTML Browser n2.0+):

  • Fixed a display issue for users that have empty full name field. If the Display name is empty, it will now show the Username of the person logged in on the device’s native screens. [CDSS-3296]

• Toshiba:

  • Fixed scanning issue where if “restricted” user tries to scan and gets “Unexpected Temporary Error” on MFD screen. [CDSS-3478]
  • Fixed an issue where native OCR was not working. The new default value for ext-device.toshiba.disable-ocr is Y so native OCR is disabled by default. [CDSS-3273]

• Xerox

  • Added support for HTTPS on Xerox EIP 1.5 devices x-configui soap calls. [CDSS-3408]
  • Increased touch screen response tolerances where possible on Xerox EIP 1.5+ devices with 2nd and 3rd Generation EIP browsers. [CDSS-3596]

Security:

• Enhanced the UI for the user and admin login screens to optimize the SSO sign-in experience when enabled. [PO-1965]
• Various 3rd party dependency upgrades. [PO-2170][PO-2168][PO-2166][PO-2130][PO-1886]
• Various security enhancements to improve the overall security of the product.

Other notes:

• Devices marked with * require installing an updated version of the embedded software to access new features and fixes.

Fixes:

• Fixed an issue that prevented the application server from starting in some Linux environments. [PO-2119]

Security: 

• Various security fixes. See PaperCut NG/MF Security Bulletin (March 2024) for more information. [CDSS-3505], [CDSS-3325], [PO-2080], [PIE-708], [PO-2030]
• This release also includes several pre-emptive security improvements and additions to layers of defense. These improvements were made as a result of code audits, pen tests and security reviews. Changes were made in line with our security uplift initiative.

Fixes:

• macOS: Fixed an issue that, in some cases, when deploying Mobility Print or IPPS print queues via Print Deploy, the Print Deploy client caused the CUPS IPP backend to fail, resulting in any IPP/IPPS/HTTP/HTTPS print jobs failing. This fix will also restore a user’s CUPS IPP backend if Print Deploy previously broke it. See known issue for more information. [PD-1892]

Copier / Device Integration:

• Xerox: Fixed an issue impacting Xerox EIP 1.5+ devices with 2nd Gen EIP browsers where the Print Release screen didn’t properly display print job information. [CDSS-3375]

Fixes:

• Email to Print: Improvement to the efficiency of bulk folder operations when using the IMAP protocol. [PO-1735]
• User/Group Sync Source: Added the ability to configure an alternative email address for UPN users with the Standard Azure sync. [PO-949]
• Integrated Scanning: In the DB, we now record a Unique ID in the printer usage logs for all integrated scanning jobs. [PO-1876]
• Print Deploy: Allows admins to downgrade the execution privileges of the Print Deploy server. Note that this is applied by default in a fresh installation of 23.0.5, but will need manually applying (if required) for upgrades. See How to downgrade the execution privilege of the Print Deploy server on Linux and macOS for more information. [PD-1690]

Copier / Device Integration:

• Sharp OSA 3.0+: Fixed auto embedding issue for Sharp embedded app. [CDSS-3011]
• HP OXP: Improved performance of swipe card login for HP Embedded app. [CDSS-2866]
• Toshiba V3+:
  • Fixed account balance format to support a large number [CDSS-3192]
  • Improved the login process on some Toshiba EBN devices [CDSS-3106]
• Xerox:
  • Improved touch screen responsiveness on Xerox AltaLink C81XX series devices (Xerox EIP 1.5+) running firmware version 114+ and using the 3rd Gen web browser. [CDSS-2907]
  • Added the ability to use Xerox EIP 1.5+ devices behind a proxy or network load balancer. [CDSS-3142]
  • Fixed an issue that caused Xerox devices to not have HTTPS enabled for the Job Limits function. [CDSS-3189]

Fixes:

• Fixed an issue where client authentication and unauthenticated printers are not working correctly with the 23.0.3 version user client. [PO-1853], [PO-1845]
• PostgreSQL - Fixed an issue that was introduced in 23.0.3 that caused database imports to fail when using postgresSQL. [PO-1855]

Copier / Device Integration:

• Fujifilm BI: Removed the “Log in as Admin” functionality from the ID/PIN login screens due to an incompatibility with expected device settings on Fujifilm devices. [CDSS-3200]

New Features:

• Added support for users logging in to the PaperCut NG/MF User Client with Azure credentials & authenticating with Microsoft MFA flow (requires user clients to be upgraded). Find out what’s supported [PO-1643],[PO-1637]
• PaperCut username field now supports up to 255 characters (increased from 50 to 255 characters) to allow better support for customers using UPNs as usernames. [PO-1034]

Security:

• For new installations only, we are changing the default configuration for “Allowed remote provider IP addresses (e.g. secondary print servers)” under Options->Advanced->Security to only allow connections from local IP ranges by default. More details can be found here [PO-1649]
• Introduced the ability for Admins to update their company contact details in the About Page in MF/NG to be alerted in the event of a critical security incident. For more regular PaperCut security notifications please subscribe to security notifications [PO-1670]

Fixes:

• Updates to color contrast of text and elements for enhanced accessibility compliance on MF/NG Admin and User PaperCut web interfaces. [PO-1778]
• Fixed a bug with Email to Print when configured with Gmail over OAuth, which caused email to print to stop working until an Application Server restart. [PO-1672]
• Improved email sending behavior when using Outlook or Gmail connections with OAuth. This should reduce Scan to Email notification failures. [PO-1671]
• Addressed an issue that could cause Windows AD users to lose association with groups following a user sync failure. [PO-648]

Print Provider:

• Windows, Linux: Fixed an issue that caused Hardware Page Count to fail if HTTPS communication was enabled in the Print Provider. See known issues for macOS. [PO-1786]

Copier / Device Integration:

• Brother: Added a config key ext-device.brother.allow-webapp-access to toggle access to web applications on Brother devices. [CDSS-1697]
• Fujifilm:
  • Updated the Fujifilm embedded device type to “Fujifilm BI 7+”, removing the term “AIP” from the name and updated associated documentation. [CDSS-1817]
  • Added the ability to login as device admin from the device login screen on Fujifilm devices. [CDSS-2446]
• Kyocera: Resolved an issue that sometimes caused an error to be displayed on Kyocera devices when releasing all print jobs from the Print Release screen. [CDSS-2656]
• Konica-Minolta i-Option: Allow user to get an A5 portrait scan output by placing A5 pages short-edge-first (landscape) on the doc feeder or glass for KM’s A4 devices [CDSS-2669]
• Ricoh (SmartSDK): Resolved an issue where Ricoh Remote Operation Client couldn’t run from command line if the installation is in a non default location. [CDSS-2824]
• Toshiba V3+: Fixed the bug on Toshiba SING20+ devices where the Job Status button was disappearing from MFD screens. [CDSS-3015]
• Xerox : Resolved an issue that caused scan jobs to have document content close to page margins erased on Xerox devices. [CDSS-2416]

Other notes:

• Devices marked with * require installing an updated version of the embedded software to access new features and fixes.
• A DB upgrade occurs when upgrading to this version.

Copier / Device Integration:

• Konica Minolta: PaperCut MF is now bEST certified by Konica Minolta USA. The certified connector version is 4.4.0

New Features:

• Added the ability for customers with Azure user/group sync to enable multi factor authentication (MFA) on their tenancy under certain circumstances. This enables MFA login flow across all web based authentication, however does not support the MF User Client or MFD (embedded device) logins. See Overview of synchronizing user and group details with Entra ID (Azure AD) for more information. [PO-1593], [PO-1171], [PO-1275]
• Security communications enhancement to allow PaperCut to publish a banner to the Admin web interface to alert customers of any critical security incidents that may arise and guide them to take action to mitigate the issue. [PO-1448]
• Added the United Kingdom as a region in the dropdown menu for cloud services regions, under PaperCut MF admin console > Options > Advanced > Cloud Services. This dropdown menu also appears in the prompt when the admin sets up a scan action to a cloud storage for the first time. [SC-1975]

Security:

• Fixed a potential privilege escalation vulnerability when using the Print Archiving feature (CVE-2023-6006). See our Security bulletin (November 2023) for more information. [PIE-547]
• Security enhancement requiring Admins to re-authenticate their session before updating or assigning the admin rights or admin password. [PO-1558], [PO-1557]
• Security enhancement to comply with GDPR guidelines to redact personably identifiable information in Worldpay (RBS) Payment Gateway logs. [PO-1166]
• Updated several third party libraries. [PIE-625], [PO-30], [PO-858], [PO-859], [PO-862], [PO-947], [PO-963]
• Security enhancement to ensure that server.properties password fields within the configuration files are encrypted. These values will then be encrypted automatically after restarting the Application Server service. [PO-1130]

Fixes:

• Fixed a bug that prevented the editing of scheduled reports where the report contained invalid email addresses. [PO-1231]
• Fixed an issue that prevented scheduled reports being sent if any recipient contained an invalid email address. [PO-910]

Print Deploy:

• Print Deploy now supports desktop virtualization server platforms from Citrix, VMware and Microsoft. Virtual desktop users now get the right printers based on their physical location, even when their desktop session is virtual, no matter their device. This includes users on Chromebooks, tablets, mobiles and even macOS devices when they connect to a Windows virtual desktop. Note, an additional license is required and this client is only available to PaperCut MF customers. [PD-1728]
• Added Sign-in with Microsoft as an authentication method, which also supports Multifactor Authentication (MFA) [PD-1171]
• Direct Print Monitor: Added options to configure the HTTPS/TLS communication port, TLS version and whether self-signed certificates should be accepted. [PIE-47], [PD-1772]
• Fixed an issue that caused the print queue connection value to be blank when importing Mobility Print queues via CSV. [PD-1753]
• Fixed a rare issue where Mobility Print queues may fail to install after cloning [PD-1814]
• Fixed an issue where the Print Deploy Server was not correctly detecting the ACTIVE PaperCut NF/MF Application Server when configured for High Availability. [PD-1781]

Print Provider:

• Print Provider: Added options to configure the HTTPS/TLS communication port, cipher suite, TLS version and whether self-signed certificates should be accepted. [PIE-47]
• Print Analysis: Fixed an issue that caused page color to be detected as grayscale when using the Fujifilm Apeos series PCL6 printer driver to print booklets. [PIE-537]
• Email to Print and Web Print: Fixed an issue that caused printing to fail for some drivers when Tabloid page size is used. [PIE-616]

Copier / Device Integration:

• Epson: Fixed an issue for Epson Open Platform Solution that fails to release print job if the user id has unicode/utf-8 character. [CDSS-2490]
• Fujifilm:
  • Renamed Fujifilm device plugins to be in line with Fujifilm preferred naming conventions. [CDSS-1790]
  • Fixed an issue that caused the Fujifilm Embedded Application to not display in full screen on DMP 14 devices. [CDSS-1987]
  • Fixed an issue that caused backspace on PaperCut input fields to delete rightmost character instead of character behind the cursor on Fujifilm devices. [CDSS-2322]
• HP OXP: Fixed a bug where a blank screen was shown when a restricted user tried to release a print job with zero credit by adding the popup prompting the user that they do not have sufficient balance. [CDSS-2837]
• Konica-Minolta i-Option:
  • Fixed an issue where the Integrated Scanning failed on AccurioPrint devices. [CDSS-2840]
• Kyocera v3.2.6*:
  • Fixed an issue on Kyocera devices configured as “Inch” models that prevented mixed size scanning from working as expected. [CDSS-1865]
  • Removed the Task bar shown at the top of the screen on Kyocera devices [CDSS-2169]
• Lexmark (eSF), OKI (eSF), Toshiba (eSF), Dell (eSF), Xerox (eSF) and Fujifilm BI (eSF) v3.1.9 *:
  • Added support for new Fujifilm BI (LeS) devices. Known new models that will be supported by Fujifilm BI LeS binary are as follows: [CDSS-2740]
    • ApeosPort Print C3830SD
    • ApeosPort C3830SD
    • ApeosPort C3320SD
    • ApeosPort 4730SD
• Sharp OSA (HTML Browser n2.0+):
  • Fixed an issue on Sharp OSA n2 Device where the user can’t do the second scan job if the first scan job has an error. [CDSS-2746]
  • Fixed a bug where a blank screen was shown when a restricted user tried to release a print job with zero credit by adding the popup prompting the user that they do not have sufficient balance. [CDSS-2837]
• Toshiba V3+: Added support for Toshiba v3 devices for native device OCR 100 DPI scan by changing the default PDF format from searchable-pdf to pdf. [CDSS-2451]

Other notes:

• Devices marked with * require installing an updated version of the embedded software to access new features and fixes.
• If you are running v22.1.3 or later, there is NO database upgrade.