pappl-retrofit 1.0b3

[tillkamppeter]

This is the third beta release of the upcoming pappl-retrofit 1.0.0. It adds support for use in CUPS 3.x environments (libcups3, PAPPL 2.x), Gets a full CI testing suite with static analysis and build/unit testing on 4 architectures with CUPS 2.x, 2.5.x, and 3.x, and PAPPL 1.4.x and 2.x, conformance testing of uploaded PPDs, raw printing, and more. Also there are many bug fixes, especially for the security vulnerability CVE-2026-123747, which allowed overwriting and removing files in the whole file system.

• Support for building with libcups3 and PAPPL 2.x
  • Printer Applications are principally for CUPS 3.x environments. So we make sure we can build there without needing any parts of CUPS 2.x (to support PPD files we had created libppd earlier)
  • Code is now done based on libcups3 and PAPPL 2.x APIs and for libcups2/PAPPL 1.4.x builds conversions are defined in libcups2-private.h and pappl1-private.h
  • Thanks to Biswadeep Purkayastha for adding libcups3 support initially and to Rohit Kumar for updating it and adding support for PAPPL 2.x
  • Pull requests Allow use of libcups3 as well as libcups2 #15, Build and test against CUPS 2.4/2.5/3.x with paired PAPPL (multi-arch CI) #50
• Run uploaded PPD files through tests
  • When uploading a PPD file, it gets tested for conformity with the PPD specifications by the ppdTest() function of libppd, which is derived from the cupstestppd utility of CUPS 2.x.
  • Pull request Issue Bad PPD warnings and errors when uploading of such a PPD in ps-printer-app #9
• Use PAPPL configuration options from file
  • Let legacy-printer-app use PAPPL configuration options via file or command line, so that legacy-printer-app and LPrint can use the same way of configuration
  • Pull request Use PAPPL configuration options from file #27
• Raw printing support
  • Implemented prPrintFile() for raw printing
  • Pull request Implement prPrintFile() for raw printing #58
• CI testing workflow for different architectures and CUPS versions
  • Static analysis with cppcheck and CodeQL
  • Build tests and unit tests on 4 architectures (x86 64-bit, ARM 32/64-bit, RISC-V 64-bit) and on CUPS 2.x/2.5.x with PAPPL 1.4.x and CUPS 3.x with PAPPL 2.x (12 combinations)
  • Use emulations for ARM 32-bit and RISC-V
  • C unit testing suite
  • Pull requests Add GitHub Actions workflow for automated builds #43, Add make check test for legacy-printer-app #44, Add codeql workflow #45, Establish hermetic C unit testing suite and update CI workflow #47, ci: expand build.yml to 4-arch matrix (amd64, arm64, armhf, riscv64) #48, Add install-time autopkgtest coverage and fix pkg-config metadata #49, Build and test against CUPS 2.4/2.5/3.x with paired PAPPL (multi-arch CI) #50, Document CodeQL static-analysis setup in README #54, Fix cppcheck findings in cups-backends, pappl-retrofit and print-job #55, Add cppcheck static-analysis CI #56
• Man page for the Legacy Printer Application (legacy-printer-app)
  • As the Legacy Printer Application is a useful utility for end users, allowing them to continue using proprietary CUPS drivers for their legacy printers after updating to CUPS 3.x or to the CUPS Snap, we add a man page for it now, as we have already man pages for the other Printer Applications: PostScript, Ghostscript, HPLIP, and Gutenprint Printer Application.
  • When we install legacy-printer-app as a daemon, the man page will get installed in section 8.
• Fixed bugs found in security audit by 7ASecurity
  • SECURITY: Reject PPD names that leave the upload directory, for both add and delete operations
    (CVE-2026-123747, GHSA-wxj6-x3wg-4vmc, OCU-01-020, pull request Reject PPD names that leave the upload directory (OCU-01-020) #66)
  • Don't crash on a check box form field with no choice
    (OCU-01-022, pull request Don't crash on a check box form field with no choice (OCU-01-022) #70)
  • Thanks to Dhirender Choudhary for posting the pull requests and implementing the fixes
• Don't pin whitespace collapsing in the device compare test
  (Pull request Don't pin whitespace collapsing in the device compare test #68)
• Fix crash on error when uploading a PPD file
  (Pull request Fix crash when uploading PPD file fails #60)
• Give the sidechannel and the backchannel its own file descriptor
  (Issue legacy-printer-app server repeatedly issues messages - Unable to accept client connection: Bad file descriptor #32, pull request Give sidechannel and backchannel its own fd #51)
• Fix pthread rwlock deadlock in _prStatus callback
  (Pull request Fix pthread rwlock deadlock in _prStatus callback #52)
• Fix crash when filter chain is NULL
  (Issue legacy-printer-app segfaults when trying to print unsupported document format #30, pull request Fix crash when filter chain is NULL #42)
• Fix bug where O_NONBLOCK flag is set with the wrong fcntl
  (Pull request BUG: Fix bug where O_NONBLOCK flag is set with the wrong fcntl #39)
• Fix memory leaks from compiled_re_list
  (Pull request Fix memory leaks from compiled_re_list #31)
• Fix issues reported by OpenScanHub
  • Fix potential memory leaks
  • Protect _prASCII() from negative lengths
  • cups-backends.c: Ensure read string is NULL-terminated
  • Fix possible unterminated string
  • Pull request Fix issues reported by OpenScanHub #28
• Modify path of legacy printer app in Makefile.am
  (Pull request Fix /usr/lib/legacy-printer-app/backend : No such file or directory #13)
• Changed new files for back and side channel to // comment format
• Spell checked comments, log output, and README.md with CSpell
  (Pull request Spell checked with CSpell #12)
• Typo in URL in README.md
  (Pull request Typo in URL in README.md #33)
• Introduced CHANGES.md file

---

This discussion was created from the release pappl-retrofit 1.0b3.