Oi,

this is Foomatic 3.0.2, the third stable release in the Foomatic 3.0.x
series.

This is a bug fix release, especially to fix a security problem in foomatic-rip.

It was possible to make foomatic-rip executing arbitrary commands as the user "lp" (or however the spooler's special user is called) on the print
server. The securoty advisory ID of this problem is CAN-2004-0801.


Other fixes are: Workaround for PostScript generation bug in all OpenOffice.org 1.1.x versions, compatibility fix of manufacturer names in the the generated PPDs with the Adobe specs, usage of "Gimp-Print" instead of "GIMP-Print", and more.

Give your comments and suggestions for the further development on the
Foomatic Development List/Newsgroup on linuxprinting.org.

See details and how to proceed below.

Happy printing!

    Till


Changes -------

 - Some fixes to make foomatic-rip more robust against weird input via
   the command line or environment variables are done. This solves the
   problem of an attacker being able to run arbitrary commands as "lp"
   (or however the spooler's special user is named) on the print
   server (Security Advisory CAN-2004-0801).

 - Workaround for PostScript generation bug in all OpenOffice.org
   1.1.x versions.

 - Let the PPD generator use the manufacturer as defined in the
   Foomatic database and not the one from the IEEE-1284 auto-detection
   ID string for the "*Manufacturer: ..." tag of the PPD files, as in
   the IDs the manufacturer names often do not comply with the Adobe
   specs (as "Hewlett-Packard", "HP" has to be used.

 - Replaced "GIMP-Print" by "Gimp-Print" in all texts in the Foomatic
   database, the software and the linuxprinting.org web site.

 - Compatibility fixes for newest gcc.

 - Read paper size with unit out of the driverval (needed for Omni),
   restrict paper sizes in the PPD to 2 digits after the decimal point.

 - Let options for red and blue ink settings (of Gimp-Print) be
   correctly sorted in in the PPD files.


Packages --------

The release consists of two packages:

http://www.linuxprinting.org/download/foomatic/foomatic-filters-3.0.2.tar.gz
http://www.linuxprinting.org/download/foomatic/foomatic-db-engine-3.0.2.tar.gz

It is recommended to also update foomatic-db and foomatic-db-hpijs from
the CVS or from http://www.linuxprinting.org/download/foomatic/ (daily
snapshots look for the "-current" files). As the database is regularly
updated for new printers and drivers, there are no special releases for
it, please use the last daily snapshot for distributions (the date can
be considered as version number). foomatic-db-hpijs releases are coupled
with releases of HPIJS (http://hpinkjet.sf.net/).

The packages should be installed in the following order:

   1. foomatic-filters
   2. foomatic-db
   3. foomatic-db-hpijs
   4. foomatic-db-engine


Please read the USAGE files to know how to install and use these packages. You do not necessarily need to install foomatic-db-hpijs, you only need it when you want to use a printer with the HPIJS driver.

Uninstall any old version of Foomatic before you install these packages.

To set up print queues for any supported spooler (CUPS, LPRng, LPD,
GNUlpr, PPR, PDQ, CPS, no spooler) use "foomatic-configure" as described
in the USAGE file of foomatic-db-engine. You can set up printer queues
based on the Foomatic database, with PPD files for PostScript printers,
with CUPS raster drivers, or raw queues. This is possible for all
spoolers. You can also print a wide range of file types with every
spooler (when you use LPRng, LPD, GNUlpr, PDQ, CPS, or no spooler you
need "a2ps" on your machine).

If you want to know how all this works, see the README files of both the
foomatic-db-engine and foomatic-filters packages.


Web site --------

Alternatively you can download all what you need for setting up a print
queue from the web. Go simply to the usual site:

       http://www.linuxprinting.org/







-----------------------------------------------------------------------------
YOU MUST BE A LIST MEMBER IN ORDER TO POST TO THE LPRng MAILING LIST
The address you post from or your Reply-To address MUST be your
subscription address

If you need help, send email to [EMAIL PROTECTED] (or lprng-requests
or lprng-digest-requests) with the word 'help' in the body.
To subscribe to a list with name LIST,  send mail to [EMAIL PROTECTED]
with:                           | example:
subscribe LIST <mailaddr>       |  subscribe lprng-digest [EMAIL PROTECTED]
unsubscribe LIST <mailaddr>     |  unsubscribe lprng [EMAIL PROTECTED]

If you have major problems,  call Patrick Powell or one of the friendly
staff at Astart Technologies for help.  Astart also does support for LPRng.
Also, check the Web Page at: http://www.lprng.com for any announcements.
Astart Technologies  (LPRng - Print Spooler http://www.lprng.com)
6741 Convoy Court
San Diego, CA 92111
858-874-6543 FAX 858-751-2435
-----------------------------------------------------------------------------

Reply via email to