OP Monthly Minutes - 11 July 2023

OP Monthly Minutes - 11 July 2023

Meeting called to order by Ira McDonald at 11am US Eastern. Minutes taken by Ira McDonald.

Note: GoToMeeting was used for this meeting.

Attendees

Aveek Basu (OpenPrinting) - GSoC Guru
Danny Brennan (Kyndryl) - Open Printing Guru
Till Kamppeter (Canonical) - Open Printing Manager
Ira McDonald (High North) - OpenPrinting Chair, GSoC Mentor

Agenda

(0) GUADEC 2023 in Riga, Latvia
https://events.gnome.org/event/101/overview (GUADEC 2023)
https://foundation.gnome.org/2023/05/25/guadec-2023-call-for-bofs/
https://events.gnome.org/event/101/page/168-the-city (Riga, Latvia)
https://events.gnome.org/event/101/abstracts/
https://events.gnome.org/event/101/timetable/#all
https://openprinting.github.io/OpenPrinting-News-June-2023

- Progress report
- From Till's June OP news - GUADEC 2023 has now happened in late July.

- The contributions from the second Call for Proposals for extra workshops and BoFs have been
selected and Till's proposal of a GNOME/GTK Printing BoF has been accepted! It seems that
they got an extra room in the venue for the workshops and BoFs on Saturday and Sunday. So
there are 3 extra 2-hour sessions on Saturday and 2 extra 2-hour sessions on Sunday. See
the updated, final schedules.

- Please also keep an eye on Mastodon for updates: #GUADEC2023, #GUADEC

- So Till will be speaker/host of the following sessions:

* The New Printing GUIs: GNOME Control Center and Common Print Dialog Backends
Wednesday 26 July 2023 at 10:00 EEST in room 2

Right on the first day, Till will talk about the state of the art of the printing GUIs for
the New Architecture, the “Printers” part of the GNOME Control Center and the Common Print
Dialog Backends (CPDB) support in the print dialogs and will also demo the GUIs.

* Your app everywhere, just in a Snap! (Workshop)
Update: Saturday 29 July 2023 at 14:15 EEST in room 1

This GUADEC will get snappy! In this 2-hour interactive workshop you will learn how to snap
(i.e., package as a Snap) your favourite applications! You will snap a simple GNOME
application on your own laptop and after that we (me and Jesús Soto) will also help you to
snap your applications.

- See details in June OP News.

(0) GNOME/GTK Printing BoF (Till)
https://events.gnome.org/event/101/contributions/535/

- Progress report
  - Sun, 30 July 2023 at 12:30 EEST in room 3

  - During Till's work on the New Architecture for printing and a recent discussion with GNOME 
    developers and designers, Till has 2 subjects that he wants to discuss in-person:

  * UI Design for the GNOME Control Center "Printers" module with support for the New Architecture

  * Separation of GTK printing API into its own project

    Main participants of the discussion are Till, Matthias Clasen, and Jakub Steiner. Anyone is 
    invited to participate.

    Remote participation is possible and Till expects that Mohit Verma, GSoC contributor on the 
    "Printers" module of G-C-C, and Gourav Guleria, GSoC contributor (2022) and mentor (2023) on 
    CPDB support in print dialogs will connect.

  * Canonical/Ubuntu Booth (Wednesday to Friday)

    Till will also be at the booth for some time and will be able to demo recent work on printing 
    and scanning, and also help you preparing your laptop for the Snap workshop.

(0) Ubuntu Summit 2023 in Riga, Latvia (Till)
https://events.canonical.com/event/31/ (Ubuntu Summit 2023)
https://events.canonical.com/event/31/abstracts/

- Progress report
  - Preparations for another great Ubuntu Summit are running. Weekly organization team video 
    meetings have started again and the Call for Proposals is open.

  - We got more than 70 submissions already! And we are still waiting for your amazing 
    contribution to the conference. We have extended the Call for Proposals, so take your time 
    to create something awesome. The deadline is now on 21 July 2023 20:59 UTC (23:59 in Riga).

(0) Google Summer of Code 2023 (Till)
https://developers.google.com/open-source/gsoc/timeline
https://openprinting.github.io/OpenPrinting-News-June-2023/

- Progress report
  - Our 6 contributors (plus 1 volunteer) are continuing on their projects and doing awesome 
    work! All of them have posted a little summary in our OpenPrinting team channel on Telegram.

  * OpenPrinting: CPDB support for application's print dialogs: Firefox, Chromium, LibreOffice
    Contributor: Kushagra Sharma
    Mentors: Till Kamppeter, Gaurav Guleria, Shivam Mishra, Rithvik Patibandla, Ira McDonald

  * Sand-Boxed Scanner Application Framework
    Contributor: Akarshan Kapoor
    Mentors: Till Kamppeter, Rishabh Maheshwari, Deepak Patankar, Ira McDonald

  * GNOME Control Center: List and handle IPP print services for the New Architecture
    Contributor: Mohit Verma
    Mentors: Till Kamppeter, Marek Kašík, Zdenek Dohnal, Rithvik Patibandla, Ira McDonald

  * Continuous Integration: Test Programs for libcupsfilters, libpappl-retrofit, libppd, CPDB, 
    CPDB Libs
    Contributor: Pratyush Ranjan
    Mentors: Till Kamppeter, Deepak Patankar, Zdenek Dohnal, Ira McDonald

  * Adding support for the new functionality of IPP Everywhere 2.x to libcupsfilters and CPDB
    Contributor: Gayatri Kapse
    Mentors: Till Kamppeter, Rishabh Maheshwari, Zdenek Dohnal, Ira McDonald

  * Native gutenprint Printer Application
    Contributor: Yuvraj Aseri
    Mentors: Till Kamppeter, Solomon Peachy, Rishabh Maheshwari, Chandresh Soni, Ira McDonald

  * Preset management web interface for PAPPL-based Printer Applications
    Volunteer contributor: Ankit Pal Singh

  - See details in June OP News.

(0) Approaching final release of cups-filters 2.0.0 (Till)
https://github.com/OpenPrinting/cups-filters/releases/tag/2.0rc1

- Progress report
  - Good News! All the bugs Till mentioned here last month are fixed now and appropriate Stable 
    Release Updates (SRUs) are released to Ubuntu 23.04 Lunar Lobster.

  - Also a fix resulting from testing the fully updated CUPS Snap are included, and the fix for 
    our first security vulnerability report.

  - But Till did not yet do the final release and did a second release candidate first, as I have 
    synced the libppd code with the PPD file support code of current CUPS. The PPD support code of 
    CUPS got spun out for starting libppd three years ago and after that there happened many 
    changes not being synced during all this time, and therefore there should be a little more 
    time for testing.

  - Here are some highlights of the work on our second release candidate:

    cups-browsed 100% CPU!
    The Unsupported Resolution Attack!!
    All-Snap Ubuntu Desktop
    libppd sync-up with CUPS
    First Vulnerability Report

  - If nothing severe happens, Till will release cups-filters 2.0.0 final soon.

(0) Snap Updates (Till)

- Progress report
  - Ubuntu 23.10 with the CUPS Snap as its printing system approaching, everyone talking about 
    immutable distros, not having given much love to our Snaps in the last months concentrating 
    on landing cups-filters 2.0.0...Now we really need to look after our 6 Snaps again...

  - First, Till updated the upstream versions of all the Snap's components:

    CUPS 2.4.6 (in Printer Applications from GIT Master)
    cups-filters (libcupsfilters, libppd, cups-filters, cups-browsed) 2.0rc2 (from GIT Master)
    PAPPL 1.3.2 + Avahi registration fix (from GIT Master)
    pappl-retrofit 1.0b1 (from GIT Master)
    Ghostscript 10.01.1
    QPDF 11.4.0
    HPLIP 3.22.10
    foomatic-db 20230701 (from GIT Master)

  - Till also fixed several build failures, switched to the cmake plugin for QPDF, and added 
    source-depth: 1 for all parts taken from GIT repositories (loads faster, needed for 
    automation scripting, thanks Heather Ellsworth!).

  - But most importantly, Till migrated the Snaps from core20 to core22, to get to the newest 
    core Snap and so reduced the number of different core Snaps to install in a distribution,
    independent of whether it is a classic one with some Snaps or an all-Snap immutable one. For 
    this, Till simply needed to follow the instructions of the documentation for general core 
    Snap migration and for migration to core22.

(0) Common Print Dialog Backends (Till)
https://openprinting.github.io/Common-Print-Dialog-Backends-Second-Generation-Fifth-Beta-Release/

- Progress report
- We have now released the fifth beta of the second generation of the Common Print Dialog
Backends (CPDB).

- Main change is the removal of the backend info files, in a standard installation in the
/usr/share/print-backends/ directory. They are not actually needed, all containing the D-Bus
object path, which we can simply hard-code, and we also cannot use the files to determine
which backends are there, as both the frontend and the backends can be provided in a sandboxed
package, like a Snap or an OCI container (podman, Docker, ...), and so cannot read each
other's file systems.

- So frontends communicate with backends purely by D-Bus, not any more by the file system.

- In addition, we have fixed several bugs, especially security vulnerability CVE-2023-34095,
a buffer overflow due to unlimited scanning of input strings by scanf() and fscanf() calls,
some crashers, and a bug breaking make install.

- The components we are currently maintaining got all updated and released as version 2.0b5.
The following changes have been done:

* General

- Removed browsing for backends via file system The frontend should only shout into the D-Bus
to find out which backends are available and to communicate with them. Depending on the way
how the frontend and backand are installed (for example sandboxed packaging, like Snap) the
frontend cannot access the host’s or the backend’s file systems. Therefore we cannot
determine the presence of the backends by their info files. We have also removed the now
unnecessary info files from the backends (PR #27).

- Build system: Removed unnecessary lines in tools/Makefile.am Removed the TESTdir and
TEST_SCRIPTS entries in tools/Makefile.am. They are not needed and let make install try to
install run-tests.sh in the source directory, where it already is, causing an error.

* CPDB Libraries

- Limit scanned string length in scanf()/fscanf() functions cpdb-libs uses the fscanf() and
scanf() functions to parse command lines and configuration files, dropping the read string
components into fixed-length buffers, but does not limit the length of the strings to be
read by fscanf() and scanf() causing buffer overflows when a string is longer than 1023
characters (CVE-2023-34095).

- Fixed memory bugs leading to leaks and crashes (PR #26)

* CUPS Backend

- get_all_media(): Do not crash on custom page size range entries The media-col-database IPP
attribute contains one entry for each valid combination of page size dimensions, margins,
and in some cases also media source and media type. Entries for custom page sizes contain
ranges instead of single values. get_all_media() crashed on these. Now we let the function
simply skip them.

* The new versions of the CPDB components:

- cpdb-libs: More Details and Download, Discussion

- cpdb-backend-cups: More Details and Download, Discussion

- cpdb-backend-file: More Details and Download, Discussion

(0) Common Print Dialog Backends getting into the dialogs (Till)
https://codereview.qt-project.org/c/qt/qtbase/+/437301 (QT merge request)
https://openprinting.github.io/OpenPrinting-News-February-2023/#common-print-dialog-backends-support-accepted-into-gtk
```
- Progress report
  - See GSoC 2023 project reports
```
(0) pappl-retrofit (Till)
```
- Progress report
  - No update
```

(1) IPP Everywhere Certified Printers: (Till, Ira)
https://www.pwg.org/printers/

- Progress report
  - Certified Printers from Canon, DCC, HP, Lexmark, Okidata, Ricoh, Samsung

  - 625 printers certified for IPP Everywhere v1.0 

  - 357 printers certified for IPP Everywhere v1.1

(2) OpenPrinting Website (Till)
```
- Progress report
  - No update
```
(3) ipp-usb SNAP (Till)
```
- Progress report
  - No update
```
(4) Driverless Printing News (Till)
```
- Progress report
  - No update
```
(5) Printer Application: PAPPL (Mike Sweet)
```
- Progress report
  - No update
```
(6) IPP Scan in PAPPL (Till)
```
- Progress report
  - No update
```
(7) CUPS-driver-retro-fitting Printer Applications (Till)
```
- Progress report
  - No update
```
(8) Gutenprint Printer Application
```
- Progress report
  - No update
```
(9) HPLIP Printer Application
```
- Progress report
  - No update
```
(10) Ghostscript Printer Application
```
- Progress report
  - No update
```
(11) PostScript Printer Application
```
- Progress report
  - No update
```
(12) CUPS Snap (Printing Stack Snap) (Till)
```
- Progress report
  - No update
```
(13) LPrint (Mike)
```
- Progress report
  - No update
```
(14) PDFio (Mike)
```
- Project report
  - No update
```

(15) CUPS and CUPS Filters (Till, Mike)
https://openprinting.github.io/OpenPrinting-News-June-2023/
https://openprinting.github.io/libcups-3.0b1/
https://github.com/OpenPrinting/cups/releases/tag/v2.4.6
https://github.com/OpenPrinting/cups-filters/releases/tag/1.28.17
https://openprinting.github.io/cups-filters-Second-Generation-Release-Candidate/

- CUPS (Mike and Zdenek)
- Current v2.x stable release is OP CUPS v2.4.6 on 22 June 2023.

- Long ago ... we had the release of CUPS v2.4.2, around one year ago now!

- But finally, we had a new release. One? No, even 4 in quick sequence, as probably during the
enthusiasm of releasing again, some glitches got overlooked and in addition, another security
bug got reported.

- So we are at CUPS v2.4.6 now, providing us with tons of bug fixes and among them also two
security fixes, and both handled with GitHubs security vulnerability report functionality.

- Highlights of CUPS v2.4.3 were Till's pull request for polling the media-col-database IPP
attribute separately (if needed when doing a get-printer-attributes IPP request to get the
printer's capabilities) and the fix for security vulnerability CVE-2023-32324, a possible
heap buffer overflow in _cups_strlcpy().

- In addition, there is a year of bug fixes, especially identification of fax queues in the
get-printer-attributes IPP response (Issue #459), not dropping media types from the PPD due
to not having unique IPP names (Issue #688), and color printers not defaulting to color
output (Issues #451 and #500).

- CUPS v2.4.4 and CUPS v2.4.5 fix regressions discovered soon after CUPS v2.4.3 release, the
former a chrasher bug introduced when fixing a bug of not being able to see a remote printer
as default (Issue #719 and the latter certificates downloaded from printers not being
correctly saved and reloaded, making all jobs after the first job being denied (Pull request
#727, discovered during tests of the CUPS Snap by Till's colleagues).

- And shortly after 2.4.5 the fix for security vulnerability CVE-2023-34241, a use-after-free
in the cupsdAcceptClient() function, got published, leading us to the third hotfix release,
CUPS v2.4.6. And this one also fixes printing multiple files to IPP printers, which did not
work on some printers (Issue #643).

- Thanks, Zdenek Dohnal, for your excellent work as release manager for the CUPS 2.4.x series!

- We hope we will be able to return to more healthy bug fix release intervals now.

- CUPS Filters (Till)
- Current v1.x stable release is v1.28.17 on 24 January 2023

- Till has released the release candidates (v2.0rc1) on 12 April 2023 of the 4 components:
libcupsfilters, libppd, cups-filters, and cups-browsed and updated the Ubuntu 23.04 (Lunar
Lobster) packages in time for the Final Freeze.

(16) PWG News (Ira)
http://www.pwg.org

- PWG Virtual F2F - 8-10 August 2023 - Ira to attend
  - https://www.pwg.org/chair/meeting-info/meetings.html

- Status of AMSC and ISO liaisons w/ PWG (Paul Tykodi)
  - http://ftp.pwg.org/pub/pwg/general/sc/pwg-sc-call-minutes-20230717.htm
  - http://ftp.pwg.org/pub/pwg/general/sc/pwg-sc-call-minutes-20230724.htm
  - http://ftp.pwg.org/pub/pwg/general/sc/pwg-sc-call-minutes-20230731.htm
    - see PWG Steering Committee minutes from 07/17/23, 07/24/23, 07/31/23

- IPP Everywhere v1.1 Printer Self-Certification Tools Update 4 (Mike)
  - https://www.pwg.org/archives/ipp/2022/021227.html
    - v1.1 Tools Update 4 final last call started 19 August 2022
    - Approved and Released on 2 September 2022

- IPP Workgroup Charter (Ira) - PWG Approved
  - http://ftp.pwg.org/pub/pwg/ipp/charter/ch-ipp-charter-20210409.pdf
    - updated for new IPP WG projects
    - PWG Approved on 9 April 2021
    - to be updated for more recent IPP WG projects in 2023

- IPP Production Printing Ext v2.0 (Mike) - PWG Approved
  - https://ftp.pwg.org/pub/pwg/candidates/cs-ippppx20-20230131-5100.3.pdf
    - for a Candidate Standard
    - major update of PWG 5100.3-2001
    - Schedule - PWG Candidate Standard 5100.3-2023 published

- IPP Job Extensions v2.1 (Mike) - PWG Approved
  - https://ftp.pwg.org/pub/pwg/candidates/cs-ippjobext21-20230210-5100.7.pdf
    - for a Candidate Standard
    - minor update of PWG 5100.7-2019
    - Schedule - PWG Candidate Standard 5100.7-2023 published

- IPP Driver Replacement Extensions v2.0 (Smith) - PWG Approved
  - https://ftp.pwg.org/pub/pwg/candidates/cs-ippnodriver20-20230301-5100.13.pdf
    - for a Candidate Standard
    - major update of PWG 5100.13-2012
    - Schedule - PWG Candidate Standard 5100.13-2023 published

- PWG Media Standardized Names v2.1 (Mike) - Stable draft
  - https://ftp.pwg.org/pub/pwg/ipp/wd/wd-pwgmsn21-20230724.pdf
    - for a Candidate Standard
    - minor update of PWG 5101.1-2013 for Errata and vendor registrations since v2.0
    - PWG review at PWG/OPS F2F on 05/17/23
    - IPP WG review on 07/20/23
    - IPP WG Last Call started 07/24/23 ends 08/08/23
    - Schedule - PWG Call for Objec􀀂ons in Q3 2023

- IPP IPP OAuth Extensions v1.0 (Mike) - Interim draft
  - https://ftp.pwg.org/pub/pwg/ipp/wd/wd-ippoauth10-20230725-rev.pdf
    - for a Candidate Standard
    - PWG review at PWG/OPS Virtual F2F on 17 May 2023
    - IPP WG review on 06/01/23
    - Schedule - Prototype draft in Q3/Q4 2023

- IPP Enterprise Printing Ext v2.0 (Smith) - Prototype draft
  - https://ftp.pwg.org/pub/pwg/ipp/wd/wd-ippepx20-20230208-rev.pdf
    - for a Candidate Standard
    - major update of PWG 5100.11-2019
    - PWG status at PWG/OPS Virtual F2F on 17 May 2023 - waiting for prototyping
    - IPP WG discussion on 07/20/23 - prototyping complete except for Job Release!
    - Schedule - Stable draft in Q3/Q4 2023

- IPP Encrypted Jobs and Documents (Mike/Smith) - Prototype draft 
  - https://ftp.pwg.org/pub/pwg/ipp/wd/wd-ipptrustnoone10-20210519-rev.pdf
    - for a Candidate Standard
    - PWG status at PWG/OPS Virtual F2F on 17 May 2023 - waiting for prototyping
    - Schedule - Stable draft in Q1 2024

- IPP 2.x (Mike/Ira) - Interim draft
  - https://ftp.pwg.org/pub/pwg/ipp/wd/wd-ippbase23-20220809.pdf
    - major update of PWG 5100.12-2015
    - PWG discussion at PWG Virtual F2F on 17 May 2023
    - Schedule - Prototype draft in Q3/Q4 2022

- IPP Everywhere v2.0 (Mike/Ira) - Prototype draft
  - https://ftp.pwg.org/pub/pwg/ipp/wd/wd-ippeve20-20221107-rev.pdf
    - major update - for a Candidate Standard
    - PWG discussion at PWG Virtual F2F on 17 May 2023
    - Schedule - Stable draft in Q3/Q4 2023

(17) Upcoming Standards Conferences (Ira)

- PWG Virtual F2F - 9-10 August 2023 - Ira to attend
  - https://www.pwg.org/chair/meeting-info/meetings.html

- ISO/SAE PWI 8477 (V&V) Hybrid F2F (Munich) - 6-8 September 2023 - Ira to attend
  - https://genorma.com/en/project/show/iso:proj:83188

- ISO/SAE PWI 8475 (CAL/TAG) Hybrid F2F (Munich) - 6-8 September 2023 - Ira to attend
  - https://www.iso.org/standard/83187.html

- IEEE 1609 Virtual F2F - 3 October 2023 – Ira to attend
  - https://standards.ieee.org/ieee/1609.2/10258/

- ISO/SAE TC20/SC32/WG11 JWG Hybrid F2F (Seoul, Korea) - 10-13 October 2023 - Ira to attend
  - https://www.iso.org/committee/5383636.html
  - https://www.iso.org/standard/70918.html

- ISO TC204 Plenary Hybrid F2F (Singapore) - 23-27 October 2023 - Ira to attend
  - https://www.iso.org/committee/54706.html

- ISO TC20/SC32/WG12 Hybrid (Gothenburg, Sweden) - 31 October to 2 November 2023 - Ira to attend
  - https://www.iso.org/committee/5383636.html
  - https://www.iso.org/standard/77796.html

- IETF 118 Hybrid F2F (Prague, Czech Republic) 6-10 November 2023 – Ira to attend
  - https://www.ietf.org/how/meetings/118/

- PWG Virtual F2F - 15-16 November 2023 - Ira to attend
  - https://www.pwg.org/chair/meeting-info/meetings.html

Open Action Items

See 'ACTION' above

Next OP US/Europe/Brazil/India Conference Calls

Note: OP monthly calls permanently shifted two hours *earlier* starting in December 2022
Note: Reliable local time, time zones, datelines, daylight savings at:
http://www.timeanddate.com/worldclock/
Note: EU voted (26 March 2019) to permanently end daylight savings time in 2021,
However, EU member nations have not adopted ending daylight savings time so far.
https://www.timeanddate.com/news/time/eu-votes-scrap-dst.html
Note: Brazil permanently ended daylight savings time on 17 February 2019
https://www.timeanddate.com/time/change/brazil/belo-horizonte

(1) August - US/Europe/Brazil/India - OP Monthly Meeting

    - Tuesday 22 August 2023, Daytime
      - Note - PWG Virtual F2F - 9-10 August 2023
      - US
        8am in San Francisco - US PDT (Pacific Daylight Time)
        9am in Colorado - US MDT (Mountain Daylight Time)
        10am in Chicago - US CDT (Central Daylight Time)
        11am in New York - US EDT (Eastern Daylight Time)
      - Europe
        5pm in Berlin - CEST (Central Europe Summer Time)
      - Brazil
        2pm in Belo Horizonte - BRT (Brasilia Time)
      - India
        8:30pm in New Delhi - IST (India Standard Time)

(2) September - US/Europe/Brazil/India - OP Monthly Meeting (tentative)

    - Tuesday 19 September 2023, Daytime
      - Note - ISO/SAE PWI 8477 (V&V) Hybrid F2F (Munich) - 6-8 September 2023
      - Note - ISO/SAE PWI 8475 (CAL/TAG) Hybrid F2F (Munich) - 6-8 September 2023
      - US
        8am in San Francisco - US PDT (Pacific Daylight Time)
        9am in Colorado - US MDT (Mountain Daylight Time)
        10am in Chicago - US CDT (Central Daylight Time)
        11am in New York - US EDT (Eastern Daylight Time)
      - Europe
        5pm in Berlin - CEST (Central Europe Summer Time)
      - Brazil
        2pm in Belo Horizonte - BRT (Brasilia Time)
      - India
        8:30pm in New Delhi - IST (India Standard Time)

(3) October - US/Europe/Brazil/India - OP Monthly Meeting (tentative)

    - Tuesday 17 October 2023, Daytime
      - Note - IEEE 1609 Virtual F2F - 3 October 2023
      - Note - ISO/SAE TC20/SC32/WG11 JWG Hybrid F2F (Seoul, Korea) - 10-13 October 2023
      - Note - ISO TC20/SC32/WG12 Hybrid (Gothenburg, Sweden) - 31 October to 2 November 2023
      - Note - EU Summer Time ends 29 October 2023
      - Note - US Daylight Savings Time ends 5 November 2023
      - US
        8am in San Francisco - US PDT (Pacific Daylight Time)
        9am in Colorado - US MDT (Mountain Daylight Time)
        10am in Chicago - US CDT (Central Daylight Time)
        11am in New York - US EDT (Eastern Daylight Time)
      - Europe
        5pm in Berlin - CEST (Central Europe Summer Time)
      - Brazil
        2pm in Belo Horizonte - BRT (Brasilia Time)
      - India
        8:30pm in New Delhi - IST (India Standard Time)