Headline
CVE-2023-2508: Mobility Print release history | PaperCut
The PaperCutNG Mobility Print
version 1.0.3512 application allows an
unauthenticated attacker to perform a CSRF attack on an instance
administrator to configure the clients host (in the "configure printer
discovery" section). This is possible because the application has no
protections against CSRF attacks, like Anti-CSRF tokens, header origin
validation, samesite cookies, etc.
- IN THIS PAGE
PRODUCT MANUALS
Mobility Print manual
PRODUCTS FEATURED
Mobility Print Server****Current version****1.0.3617 (12 Sep 2023)
- Updated printer discovery popup in the admin UI. [MOB-2944]
- Server runtime security and performance updates. [MOB-2741]
Past versions****1.0.3582 (17 Aug 2023)
- Improved admin UI against CSRF attacks [MOB-2919] - CVE-2023-2508
- Added same-site cookie support to admin UI to adhere to best-practice and additional CSRF hardening [MOB-2955]
- Improvements to connection management for Cloud Print notification service [MOB-2953]
1.0.3553 (25 Jul 2023)
- Improved connection management from the server to the Cloud Print notification service.
1.0.3552 (19 Jul 2023)
- Switch notifications for Cloud Print connections to use mqtt.notifications.cloud.papercut.com[:443] [MOB-2929]
1.0.3541 (29 Jun 2023)
- Fixed a rare grayscale conversion issue with documents containing barcodes. [MOB-2901]
- Minor UI improvements in client setup pages. [MOB-2858]
1.0.3512 (02 Nov 2022)
- Updated PDF rendering engine to bring in performance, PDF quality and reliability improvements to memory use and fixes to occasional crashes during grayscale conversions. [MOB-2849],[MOB-1990],[MOB-1223]
- Switch admin UI to use online help pages consistently, updated remaining help centre links to point to up to date sections in the online help center. [MOB-2604]
1.0.3496 (19 Sep 2022)
- Fixed an issue where some print jobs could not be authenticated using UPN usernames when a vendor-specific printer driver was used. [MOB-2885]
1.0.3493 (15 Sep 2022)
- All users can now access improved client setup pages for mDNS/DNS-SD printer discovery. [MOB-2837],[MOB-2823]
- Fixed an issue causing “page not found” error when accessing client setup pages for Chinese based locales. [MOB-2285]
- Improved print job processing to ensure client IP address is consistently passed in to PaperCut MF. [MOB-2848]
1.0.3476 (3 Aug 2022)
- Improved client setup pages for mDNS/DNS-SD behind a feature toggle to enable PaperCut partners to update translations. [MOB-2823]
1.0.3461 (13 Jul 2022)
- Mobility Print sever is now installed with 64-bit GhostTrap by default. Allow use of 64bit GhostTrap for existing installs. [MOB-2156]
- Fixed a potential print failure for Chrome based local network printing when job authentication is used. [MOB-2832]
- Fixed a rare server start-up failure on some Windows systems where cmd was not accessible. [MOB-2843]
- Prevent DNS config wizard from over-flowing with some configurations. [MOB-2820]
1.0.3445 (2 Jun 2022)
- Prevent inconsistent print job submission when IPP printing using CUPS based clients (macOS, Linux, iOS) [MOB-2744]
1.0.3437 (7 May 2022)
- Fixed a potential server crash when “remember me” tokens were in use to print using Cloud Print. [MOB-2793]
1.0.3436 (28 Apr 2022)
- Improved media size processing when PCL printer sends a job to CUPS-based Mobility Print server. [MOB-2731]
- Improved diagnostic logging around PaperCUt MF connections in Mobility Print server logs. [MOB-2733]
1.0.3416 (8 Mar 2022)
- macOS: Fixed issue where secure AirPrint driver was unavailable to be selected for local mobility printers. [MOB-2680]
- Trim long document titles to prevent job submission failures. [MOB-2633]
- General cosmetic improvements on admin page, CloudPrint and DNS wizard. [MOB-2672] [MOB-2622]
1.0.3400 (27 Jan 2022)
- macOS: Fixed an issue that may cause printing and discovery to fail on macOS servers where GhostScript is not installed (since 1.0.3331) [MOB-2693]
- Added support for load balancers, proxies, SSL termination services, etc. by giving admins the ability to configure accessible ports for clients to connect to. [MOB-2667]
- Improved displayed date formatting when editing Cloud Print links. [MOB-2686]
1.0.3383 (9 Dec 2021)
- PaperCut NG and PaperCut MF customers can now select specific printers to share per Cloud Print invite link. [MOB-2534]
1.0.3376 (1 Dec 2021)
- Updated printer discovery tool to support more performant way to get printers from CUPS (Linux and macOS). [MOB-2660]
- Bulk queue deployment support for Print Deploy Client [MOB-2674]
1.0.3356 (17 Nov 2021)
- Fixed an issue displaying DNS discovery in use incorrectly when using Internet Explorer 11. [MOB-2665]
- Preparatory work for upcoming Cloud Print UX improvements. [MOB-2534]
1.0.3331 (28 Oct 2021)
- Security improvement to increase sandboxing protections for GhostScript on Windows servers to protect against future vulnerabilities. [MOB-2651]
- Added Danish language support for admin UI and Known Host setup pages. [MOB-2644]
1.0.3305 (4 Oct 2021)
- Improved user rate limit error handling when triggered if authenticating against PaperCut MF/NG with Print Deploy. [MOB-2646]
- Improved log collection feature to include configuration files to aid diagnostics. [MOB-2631]
1.0.3260 (31 Aug 2021)
- Fixed an issue when using certain Konica Minolta PCL6 printer drivers, printing on Tabloid (11x17) paper size. [MOB-2526]
1.0.3242 (18 Aug 2021)
- Manage Cloud Print page includes shared printer count for each link. [MOB-2540]
- Linux Server only: Fixed print provider version detection for PaperCut MF/NG for 19.0 or greater. [MOB-2612]
1.0.3217 (29 Jul 2021)
- Updated PaperCut Logos in UI. [MOB-2410]
- Extended Cloud Print Link definitions for future enhancements. [MOB-2595]
1.0.3212 (22 Jul 2021)
Updated user messages in UI.
1.0.3210 (20 Jul 2021)
Updated third-party libraries to include security updates. [MOB-2591, MOB-2592]
1.0.3202 (07 Jul 2021)
Simplified steps to disable auto-update via command line tool. [MOB-2497]
1.0.3201 (29 Jun 2021)
- Capture customer industry when not using PaperCut NG/MF to provide more targeted help on getting set up. [MOB-2496]
- Fixed issue where server would not handle empty domain search suffix in registry when configured to use DNS-SD. [MOB-2531]
1.0.3185 (9 Jun 2021)
- Released Windows and macOS Cloud Print out of beta. [MOB-2517, MOB-2518]
- Updated translations for Cloud Print section of Admin UI. [MOB-2519]
- Limit cloud print connection retry on error to 7 days. [MOB-2503]
- Added a check to disable Cloud Print after 30 days only if Cloud Print has NEVER been used. [MOB-2504]
1.0.3159 (11 May 2021)
Improve authentication for Windows clients on local network. [MOB-2505]
1.0.3150 (5 May 2021)
Capture user emails for new installs, this is only to send users important operational emails i.e. change of terms and conditions, or a product change that will impact your printing environment. [MOB-2189]
1.0.3138 (21 Apr 2021)
Improved efficiency of network traffic for servers using Cloud Print. [MOB-2417]
1.0.3137 (19 Apr 2021)
Fixed an issue connecting to PaperCut NG/MF if TLS ciphers have been customized on the MF/NG server. [MOB-2469]
1.0.3114 (14 Apr 2021)
Fixed an issue where Papercut MF job log showed intermediary Cloud Print origin host/domain as client location. [MOB-2418]
1.0.3112 (17 Mar 2021)
Fixed an issue that caused occasional server deadlocks to occur when a print job from IOS, Windows, or macOS failed (since 1.0.3103). [MOB-2467]
1.0.3108 (26 Feb 2021)
Fixed issue with Windows Mobility Print queues when using per-job authentication (since 1.0.3103). [MOB-2440]
1.0.3107 (25 Feb 2021)
Fixed incompatibility with Print Deploy desktop clients using Sign in with Google on Mobility Print queues (introduced in 1.0.3103). [MOB-2438]
1.0.3103 (23 Feb 2021)
- Added ‘Sign in with Google’ support for Android (requires app version 1.2.0 or greater). [MOB-2338]
- Added support for ECDSA (Elliptic Curve) type custom TLS certificates. [MOB-2233]
1.0.3079 (1 Feb 2021)
Added Cloud Print support for native printing on macOS devices.
1.0.3067 (11 Jan 2021)
Fixed an issue that caused incorrect setup page redirection for macOS 11 (Big Sur) when using the Chrome browser [MOB-2359]
1.0.3065 (22 Dec 2020)
- Fixed an issue that occasionally caused the Mobility Print server’s Cloud Print connection to be lost, resulting in clients not being able to print or retrieve new printers. [MOB-2381]
- Added limited Cloud Print support for MacOS devices, allowing users to print from their Chrome browsers. Native printing from any application is coming soon.
1.0.3053 (16 Dec 2020)
- Upgraded jQuery to 3.5.1 [MOB-2350]
- Improved server security by ensuring GhostTrap is always launched direct from its installation directory when processing jobs requiring PostScript to PDF conversion. [MOB-2334]
- Fixed an issue where some Konica Minolta printer drivers would print documents with Tabloid page size as Letter page size [MOB-2341]
- Improved logging for Cloud Print feature
1.0.3020 (12 Nov 2020)
Added Cloud Print support for Windows devices.
1.0.3001 (26 Oct 2020)
Added Cloud Print support for BYOD Chromebooks.
1.0.2984 (06 Oct 2020)
- Updated third party libraries and dependencies.
- Added stack tracing to the server logs to improve issue diagnosis.
1.0.2947 (25 Aug 2020)
Fixed an issue that caused Cloud Print printers to disappear when the Mobility server disconnected and reconnected to the internet. [MOB-2262]
1.0.2926 (03 Aug 2020)
Fixed an issue that caused Mobility Print Server to drop Cloud Print connection intermittently [MOB-2239]
1.0.2911 (21 Jul 2020)
Fixed an issue that caused the authentication pop-up to not display for each print job on iOS 13.4+ devices when “Authenticate-per-job” was turned on for Mobility Print queues. [MOB-2022]
1.0.2906 (20 Jul 2020)
- Added the ability to customize TLS settings for the Mobility Print server. [MOB-1192]
- Added the option to cancel connecting Cloud Print when it cannot connect, and improved the feedback on potential causes of connection issues, such as a firewall rules problem. [MOB-2199]
1.0.2888 (9 Jul 2020)
- Cloud Print feature now available for Public Beta. Chromebook users can now submit print jobs securely over the internet. MacOS and Windows support coming soon.
- Updated the End User License Agreement (EULA). [MOB-1784]
1.0.2860 (1 Jul 2020)
Fixed an issue that caused the Mobility Print server to not always resume connecting to the Cloud Print service after a network outage. [MOB-2196]
1.0.2855 (30 Jun 2020)
Added automatic retry in case server Cloud Print registration fails. [MOB-2107]
1.0.2841 (23 Jun 2020)
- Updated Cloud Print invite links to deactivate when expired. [MOB-2115]
- Fixed a rare issue that sometimes caused the Mobility Print server to stop accepting macOS print jobs until a server restart.
- MacOS server only: Added support for printing landscape documents from iOS devices. [MOB-1131]
- Updated ‘Sign in with Google’ API.
1.0.2828 (16 Jun 2020)
- Windows Client only: Updated PaperCut Global PS Driver, adding configurable Stapling Support for Windows devices if server queue is using matching driver. [MOB-2025]
- Internet Explorer 11 and Safari browsers: Fixed an issue in Cloud Print that stopped the date pickers working for the ‘Invite link expiry date’ and ‘Printing expiry date’. [MOB-2192]
1.0.2817 (10 Jun 2020)
Added a new Cloud Print feature that allows Chromebook users who are not connected to the local network to submit print jobs securely over the internet. Initially this feature is behind a feature toggle for limited early access but the public beta is coming soon.
1.0.2657 (8 Apr 2020)
MacOS Server only: Fix issue where job orientation from Chromebooks was ignored. [MOB-1873]
1.0.2623 (10 Mar 2020)
Windows Server only: Upgraded third party library to resolve intermittent memory issues. [MOB-1896]
1.0.2618 (2 Mar 2020)
Linux and MacOS Server only: Update to MacOS server libraries to meet new MacOS Catalina signing and notarization requirements. Installing MacOS server no longer has unidentified developer warnings. [MOB-2003] [MOB-2008]
1.0.2610 (25 Feb 2020)
Linux and MacOS Server only:
- A warning is now displayed if Mobility Print Server is installed on a machine without printers. [MOB-1947]
- Minor text changes on registration page when Mobility Print server is used without PaperCut NG/MF. [MOB-1946]
- Upgraded third party library to resolve intermittent memory issues. [MOB-1896]
- Improved log collection for Mobility Print Server when used without PaperCut NG/MF. [MOB-1974]
1.0.2594 (22 Jan 2020)
Improved server error handling and reporting to enable quicker feedback and support for critical customer issues. [MOB-1975]
1.0.2551 (22 Nov 2019)
Fixed broken links on some setting up device pages.
1.0.2548 (20 Nov 2019)
- Translations: Known Host Client setup pages and Admin pages translated for Simplified Chinese. [MOB-1904]
- Fixed an issue with large Japanese language print jobs in high-volume environments that occasionally caused some pages from a concurrent job to print in the wrong job. [MOB-1902]
1.0.2463 (4 Oct 2019)
- Translations: Known Host Client setup pages translated for Catalan, French, German, Hungarian, Hong Kong Chinese, Japanese, Portuguese, Portuguese Brazilian, and Spanish. [MOB-1761]
- macOS Client & Server: Notarized macOS installers in preparation for macOS Catalina coming out of beta. [MOB-1767] [MOB-1800]
- Documentation updates.
1.0.2438 (10 Sep 2019)
- Documentation: Update iOS minimum version requirements
- Windows Server: Rolled back a library update that was causing the Mobility Print server to crash occasionally.
1.0.2430 (20 Aug 2019)
- Windows Server: Chromebook, Android, macOS and iOS Mobility Print clients will be able to see more non standard paper sizes supported by printer drivers [MOB-1747]
- Windows Server: Fixed an issue with RISO ORPHIS FW5230 and RISO ORPHIS FW5230 PS drivers where the user’s color selection was ignored and the driver’s default setting was applied instead. [MOB-1553]
1.0.2425 (07 Aug 2019)
Minor documentation updates.
1.0.2420 (31 July 2019)
- Fixed an issue that caused checkboxes to be rendered incorrectly when printing in grayscale on macOS and Chromebooks. [MOB-1612]
- Windows client: Fixed an issue that caused the installer to crash when the user’s password had one or more spaces in it. [MOB-1470]
1.0.2406 (30 May 2019)
- Added a new option that enables Mobility Print clients to discover printers from a specified Mobility Print server. The server’s known host name or IP address is entered in the Mobility Print Admin interface. This option is ideal for multi subnet networks where a DNS server cannot be configured. Click here for more information. [MOB-1385]
- Updated a third-party library that includes security updates. [MOB-1557]
- Windows server: Fixed an issue that caused poor print quality for some print queues. The rendering library now uses a queue-specific DPI value optimised for speed and quality. [MOB-1113]
Mobility Print Android App****Current version****v1.2.9 (15 Jun 2022)
- Added Thai to supported languages, updated translations. [MOB-2808]
Past versions****v1.2.8 (18 May 2022)
- Fixed an issue with known host setup where deep links were not working correctly on Android 12. [MOB-2713]
v1.2.7 (7 Feb 2022)
- Improved support for load balancers, proxies, SSL termination services, etc. by giving admins the ability to configure accessible port when using known host configuration with BYOD devices. [MOB-2666]
- Fix an issue that causes duplicate printers to be listed when using known host configuration with hostname case variations. [MOB-2676]
v1.2.6 (17 Aug 2021)
- Improvements to stale network connection handling in some load balancing scenarios [MOB-2575].
- Added support for connection pooling settings in Google Workspace managed configurations [MOB-2575].
v1.2.5 (24 May 2021)
- Fixed and issue where duplicate printers would appear when using known host printer discovery method. [MOB-2514]
v1.2.4 (12 May 2021)
- Fixed an issue where app may crash during printer discovery.
- Improve logging for troubleshooting connection issues.
- Updated translations.
v1.2.3 (8 Apr 2021)
- Fixed issue where expired “remember me” tokens were being used and printing would stop after 30 days
v1.2.2 (2 March 2021)
- Fixed issue finding printers when Mobility Print was used without PaperCut NG/MF.
- Fixed crash when the Mobility Print server was not reachable.
v1.2.1 (24 February 2021)
For users:
- Improved reliability and speed of printer discovery (mDNS).
For administrators:
- Added Sign in with Google support (when used with and enabled on PaperCut NG or MF).
v1.1.0 (6 Jan 2021)
- Added support for Google Workspace managed configurations (advanced mobile management).
- Fixed printers sometimes not appearing if opening the printer list twice in quick succession.
v1.0.298 (14 Sep 2020)
- Fixed issue where Known Host configuration was not being applied upon install.
- Updated localization
Mobility Print Chrome App****Current version****v1.3.4 (11 Apr 2022)
- Fixed an issue preventing print jobs from being available for submission in some circumstances when a large number of printers are discovered using Cloud Print. [MOB-2714]
- Fixed an issue that may result in slow printer retrieval or no printers being shown for selection when a large number of printers are discovered using Cloud Print. [MOB-2714]
Past versions****v1.3.3 (14 Feb 2022)
- Use simplified printer discovery without fetching printer capabilities when using local network. [MOB-2685]
- Fix several issues that may occasionally trigger login dialog to be shown without Google Sign in button [MOB-2655].
- Fix an issue where local storage clean-up may sometimes fail to complete.
v1.3.2 (18 Oct 2021)
- Fixed an issue that may cause a failing local network call to be made when using Cloud Print. [MOB-2639]
v1.3.1 (4 Aug 2021)
- Fixed an issue that would cause printer discovery to fail when large number of printers would fill app storage. [MOB-2524]
v1.3.0 (17 May 2021)
- Added “Sign in with Google” when using Cloud Print. [MOB-2224]
- Mobility Print and Print Deploy printers are now sorted by name. [MOB-2484]
v1.2.3 (8 April 2021)
Added “Sign in with Google” authentication for PaperCut Print Deploy. [PD-604]
v1.1.5 (21 Oct 2020)
Added ability to set up Cloud Print using invite links on BYOD Chromebooks [MOB-2241]
v1.1.4 (21 Sep 2020)
- Fixed an issue where invalid credentials error message was shown when printer access is restricted by group access setting. [MOB-1184]
- Fixed an issue where enter key on login screen incorrectly failed first login attempt. [MOB-2020]
v1.1.2 (09 Jul 2020)
Improved handling of Cloud Print link expiration and propagation by admin policy [MOB-2198]
v1.1.1 (22 Jun 2020)
Reduced the length of the Cloud Print invite link URL. [MOB-2179]
v1.1.0 (9 Jun 2020)
Added a new Cloud Print feature that allows Chromebook users who are not connected to the local network to submit print jobs securely over the internet. Initially this feature is behind a feature toggle for limited early access but the public beta is coming soon.
v1.0.250 (19 Mar 2020)
Internal improvements
1.0.249 (27 Feb 2020)
Simplified requirements for sysadmins when deploying of managed Chromebooks through G Suite using known host. Configuration policy will no longer require a protocol or port number [MOB-1942]
1.0.241 (6 Nov 2019)
- Added Chromebook support for Print Deploy. You can now connect Mobility Print queues to zones and deploy the print queues to managed Chromebooks. Chromebooks must be running ChromeOS version 42 or higher and have the PaperCut Mobility Print app installed. [PD-315]
- Chromebooks can now connect to the Print Deploy server if the server doesn’t have a configured SSL certificate. [PD-479]
Mobility Print macOS Client (Cloud Print)****Current version****v1.0.397 (21 June 2022)
- Allow large numbers of printers to be discovered through the client when using Cloud Print [MOB-2794]
- Improve disconnection handling when using Cloud Print [MOB-2794]
Past versions****v1.0.389 (20 April 2022)
- Fixed an issue where error messages don’t dismiss properly for failed cloud print jobs.
v1.0.381 (23 March 2022)
- Fixed an issue with some Spanish based locales causing an empty screen in the sign-in dialog and ensure fall-back to English is present on failure.
v1.0.311 (16 June 2021)
Added translations for:
- Catalan
- German
- Spanish
- French
- Hungarian
- Italian
- Japanese
- Portuguese
- Portuguese (Brazil)
- Russian
- Chinese (Simplified)
- Chinese (Hong Kong)
v1.0.269 (29 April 2021)
- Fixed issue where old user remember me tokens were not being cleared when triggering auth popup. [MOB-2481]
- Fixed an issue where printing would not work after restart. [MOB-2481]
- Fixed issue where printers with comma in name would not work. [MOB-2481]
- Improved error messages and provide specific notifications if share link has expired. [MOB-2390]
Mobility Print Windows Client****Current version****v1.0.250 (16 June 2020)
Updated PaperCut Global PS Driver version 100.2.0
Mobility Print Windows Client (Cloud Print)****Current version****v1.0.650 (21 June 2022)
- Allow large numbers of printers to be discovered through the client when using Cloud Print [MOB-2794]
- Improve disconnection handling when using Cloud Print [MOB-2794]
Past versions****v1.0.642 (20 April 2022)
- Fixed an issue where error messages don’t dismiss properly for failed cloud print jobs.
v1.0.634 (23 March 2022)
- Fixed an issue with some Spanish based locales causing an empty screen in the sign-in dialog and ensure fall-back to English is present on failure.
v1.0.596 (16 June 2021)
Added translations for:
- Catalan
- German
- Spanish
- French
- Hungarian
- Italian
- Japanese
- Portuguese
- Portuguese (Brazil)
- Russian
- Chinese (Simplified)
- Chinese (Hong Kong)
v1.0.564 (29 April 2021)
- Improved error messages and provide specific notifications if share link has expired. [MOB-2390]
- Fixed issue where old user remember me tokens were not being cleared when triggering auth popup. [MOB-2481]
1.0.489 (5 February 2021)
- Fixed an issue where printers could not be installed when location field contains invalid printer name characters [MOB-2335]
- Fixed an issue where printing would stop on share link expiration rather than printing expiration of invite link [MOB-2407]