[Foomatic] ANNOUNCEMENT: Foomatic 3.0.2 released!

Till Kamppeter till.kamppeter at gmx.net
Tue Sep 14 16:26:43 PDT 2004


Oi,

this is Foomatic 3.0.2, the third stable release in the Foomatic 3.0.x
series.

This is a bug fix release, especially to fix a security problem in 
foomatic-rip.

It was possible to make foomatic-rip executing arbitrary commands as the 
user "lp" (or however the spooler's special user is called) on the print
server. The securoty advisory ID of this problem is CAN-2004-0801.

Other fixes are: Workaround for PostScript generation bug in all 
OpenOffice.org 1.1.x versions, compatibility fix of manufacturer names 
in the the generated PPDs with the Adobe specs, usage of "Gimp-Print" 
instead of "GIMP-Print", and more.

Give your comments and suggestions for the further development on the
Foomatic Development List/Newsgroup on linuxprinting.org.

See details and how to proceed below.

Happy printing!

     Till


Changes
-------

  - Some fixes to make foomatic-rip more robust against weird input via
    the command line or environment variables are done. This solves the
    problem of an attacker being able to run arbitrary commands as "lp"
    (or however the spooler's special user is named) on the print
    server (Security Advisory CAN-2004-0801).

  - Workaround for PostScript generation bug in all OpenOffice.org
    1.1.x versions.

  - Let the PPD generator use the manufacturer as defined in the
    Foomatic database and not the one from the IEEE-1284 auto-detection
    ID string for the "*Manufacturer: ..." tag of the PPD files, as in
    the IDs the manufacturer names often do not comply with the Adobe
    specs (as "Hewlett-Packard", "HP" has to be used.

  - Replaced "GIMP-Print" by "Gimp-Print" in all texts in the Foomatic
    database, the software and the linuxprinting.org web site.

  - Compatibility fixes for newest gcc.

  - Read paper size with unit out of the driverval (needed for Omni),
    restrict paper sizes in the PPD to 2 digits after the decimal point.

  - Let options for red and blue ink settings (of Gimp-Print) be
    correctly sorted in in the PPD files.


Packages
--------

The release consists of two packages:

http://www.linuxprinting.org/download/foomatic/foomatic-filters-3.0.2.tar.gz
http://www.linuxprinting.org/download/foomatic/foomatic-db-engine-3.0.2.tar.gz

It is recommended to also update foomatic-db and foomatic-db-hpijs from
the CVS or from http://www.linuxprinting.org/download/foomatic/ (daily
snapshots look for the "-current" files). As the database is regularly
updated for new printers and drivers, there are no special releases for
it, please use the last daily snapshot for distributions (the date can
be considered as version number). foomatic-db-hpijs releases are coupled
with releases of HPIJS (http://hpinkjet.sf.net/).

The packages should be installed in the following order:

    1. foomatic-filters
    2. foomatic-db
    3. foomatic-db-hpijs
    4. foomatic-db-engine


Please read the USAGE files to know how to install and use these
packages. You do not necessarily need to install foomatic-db-hpijs, you
only need it when you want to use a printer with the HPIJS driver.

Uninstall any old version of Foomatic before you install these packages.

To set up print queues for any supported spooler (CUPS, LPRng, LPD,
GNUlpr, PPR, PDQ, CPS, no spooler) use "foomatic-configure" as described
in the USAGE file of foomatic-db-engine. You can set up printer queues
based on the Foomatic database, with PPD files for PostScript printers,
with CUPS raster drivers, or raw queues. This is possible for all
spoolers. You can also print a wide range of file types with every
spooler (when you use LPRng, LPD, GNUlpr, PDQ, CPS, or no spooler you
need "a2ps" on your machine).

If you want to know how all this works, see the README files of both the
foomatic-db-engine and foomatic-filters packages.


Web site
--------

Alternatively you can download all what you need for setting up a print
queue from the web. Go simply to the usual site:

        http://www.linuxprinting.org/








More information about the Printing-foomatic mailing list