Vasion Automate Fed Release Notes

June 29th, 2026

New Features and Enhancements

• Multi-Badge Management: Allows a single user to have multiple badge IDs assigned and managed through SCIM, automatically reconciling badge arrays to add, retain, or remove assignments without manual intervention.
• Internet Printing Protocol (IPP) (macOS / Linux): Adds native IPP support to the macOS and Linux Agents, enabling driverless printer deployment without requiring manufacturer-specific drivers.
• Internet Printing Protocol (IPP) (Windows) & Protected Print (WPP): Adds IPP support for Windows Agents, enabling driverless printer deployment without requiring a manufacturer-specific driver. Also supports Windows Protected Print (WPP) mode, which restricts printing to IPP-class printers and is required for devices running in WPP-only environments.
• Windows ARM Support: The Windows Agent now runs natively on ARM-based Windows devices. IPP printers are fully supported on ARM; driver-based printing has limited coverage on ARM hardware.
• Bring Your Own SMTP (BYO SMTP) : Strengthens Scan to Email security with two encryption options: Encryption at Rest, which applies AES encryption at the file level, and S/MIME, which adds certificate-based end-to-end payload encryption.
• Users Page: Added user search capabilities to the Tools Users page.
• Continuous Scan: Batch scan with the automatic document feeder (ADF), the glass, or both and receive one combined PDF instead of separate documents
• PrinterLogic Output: New advanced settings on Tools Settings Output control how long the service retains print jobs before removal and how the system triggers cleanup of those eligible jobs.

For more details refer to What's New in the Vasion Platform.

General

• Corrected a behavior where changes to Portal Security user and group assignments saved automatically rather than requiring the user to click Save. PI-14110
• Corrected a stored procedure that caused performance issues on large printer lists, improving response times for high-volume environments. PI-73883
• Improved endpoint IP address detection for terminal services sessions connecting through a Microsoft Remote Desktop Gateway. PI-76902
• Added a descendant count to tree node confirmation dialogs so administrators can see how many objects will be affected before deleting a branch. PI-65913
• Fixed a double redirect that occurred when a user with unified login navigated to the Self-service Portal. PI-72881
• Corrected inconsistencies in SNMP v3 reported values. PI-75129
• Resolved an issue where virtual network adapters from VPN or virtualization software caused device identification conflicts, preventing proper operation of secure release and pull printing features. PI-75692

Identities

• Resolved an issue preventing the deletion of an identity provider when no data had been provisioned. PI-63923
• Corrected an issue where converting a Full Administrator account to a limited-rights administrator while simultaneously adding folder rights failed to save correctly. PI-76361
• Corrected an issue where profile settings were reset when a recently created or modified profile was reopened before the prior changes were fully saved. PI-80156
• Resolved an issue preventing inactive users from being reactivated from the Users page. PI-78910
• Updated the Users page to correctly include external users in the inactive tab. PI-78911 / PI-78928 / PI-79308
• Fixed an inaccurate inactive user count on the admin Users table. PI-78156
• Updated the Active and Inactive tab counts to refresh immediately after deactivating or reactivating a user. PI-79410
• Corrected an issue where searching for an IdP group to add to Deployments or Portal Security returned no results due to an unstable stored procedure. PI-77535
• Resolved an issue where inherited group roles were not visible on the user details page until a direct role was also assigned. PI-72711
• Added an Inactive Users tab to the Admin Console Users page, including a count of inactive users. PI-74863
• Updated the Admin Console User Management search to support filtering and significantly improved performance for large user bases. PI-73033
• Updated the User Details page to display additional supported user attributes and badge information. PI-74822 / PI-74845
• Added the ability to edit badge assignments from the User Details page, including adding and removing badge chips. PI-76799 / PI-76800 / PI-76819
• Added the ability to edit local user usernames from the user details interface. PI-71767
• Resolved an issue where user attributes exceeding 100 characters caused failures in the n-gram search table. Affected values are now trimmed to 100 characters before insertion. PI-79892
• Corrected an issue where the manager attribute displayed incorrectly on the identity management page. PI-72589 / PI-72056
• Updated identity deletion behavior so that removing a user from the identity service also removes that user from Vasion Print. PI-69620
• Fixed an OAuth exchange flow failure affecting users without an RBAC record. PI-75368
• Resolved an issue where a SCIM PATCH operation incorrectly overwrote identity fields on users and groups during partial updates. PI-78914 / PI-79056
• Added support for searching users and groups by external ID. PI-71013 / PI-71015 / PI-71017 / PI-71139
• Added numerical badge ordering support. PI-71592
• Updated the badge sync service to handle multi-valued attributes for badge fields. PI-74441
• Added a warning message when Google Identity Sync is not enabled but Google is configured as an identity provider. PI-72587 / PI-73627
• Updated pagination behavior on the Badge Management user search to return results correctly when navigating pages. PI-76026
• Resolved an issue where enabling an IdP connection through Admin > Authorization did not propagate the change to the client or Self Service Portal. PI-71260
• Resolved an issue where IdP configuration settings were deleted when a separate SSO login with the same IdP type was present on the same instance. PI-75197
• Updated the SCIM Group endpoint to exclude the group membership field from responses to prevent Okta from returning incorrectly capped member lists. PI-72948
• Resolved a SCIM group provisioning failure in PingOne caused by an incorrect date format in stored procedure responses. PI-71200
• Resolved an issue where the Authn service improperly cleaned up single-use tokens, breaking the token resend flow. PI-80679
• Added cleanup cron job support for expired sessions and tokens. PI-68074
• Resolved an issue where OIDC repeatedly prompted for admin consent even when the app registration already had the required permissions. PI-71322

Off-Network Print

• Resolved an issue where print jobs were delayed when the first-Internal Routing Service (IRS) was unavailable. PI-69282
• Resolved a duplicate print job issue that occurred when one IRS was returning online during active printing. PI-71864
• Resolved an issue where the IRS status indicator light was not functioning reliably. PI-74202
• Added logs and metrics for tracking job completion time in the Off-Network gateway. PI-77727

PrinterLogic Output

• Updated PrinterLogic Output job retry behavior to time out and transition to a failed state based on the configured timeout value. PI-69417
• Added logic to pause job retry processing when a job is in a paused or redirected state. PI-66504
• Updated PrinterLogic Output to check the print queue on every retry cycle and cancel jobs that have been redirected or canceled in the queue. PI-68671 / PI-68673 / PI-68674 / PI-68675 / PI-68695
• Resolved an issue where OACC batch print jobs did not complete after batch close. PI-67859
• Resolved an issue that caused duplicate PrinterLogic Output jobs to be created. PI-68007
• Fixed workstation job cancellation not completing correctly. PI-67042
• Resolved an issue preventing tray settings from saving on the printer port tab. PI-67802
• Updated PrinterLogic Output to log when a job lease expires, with the event visible in the Output Console. PI-74472
• Resolved an issue where PrinterLogic Output spammed the printer lookup stored procedure during job processing. PI-78572
• Added a single batch retrieval endpoint to the Agent Gateway for lookup of a specific batch by UUID. PI-79411
• Added batch naming support across PrinterLogic Output, the Agent Gateway, and the external gateway. PI-72854 / PI-72855 / PI-70507 / PI-75083
• Improved PrinterLogic Output performance by removing redundant document parsing and running stats and status reporting concurrently. PI-78521
• Updated the Output Console to display the printer name in the "Print Job Redirected" history message. PI-79009
• Resolved an issue where secure release batch jobs failed on initial release before succeeding on retry. PI-81134
• Resolved an issue where ZPL printing through the Off-Network gateway was broken. PI-79909
• Fixed an issue where retrying or redirecting a batch caused the release button to spin indefinitely in the Output Console. PI-78154
• Resolved an issue where print jobs printed out of order in PrinterLogic Output. PI-69009 / PI-72021
• Added search support for custom print job fields on the batch tabs page. PI-71265
• Added a flat custom fields list endpoint and custom field display to the Output Console printers page. PI-72172 / PI-72173 / PI-69612
• Added TIFF file processing support to the PrinterLogic Output service. PI-70250
• Improved ZPL multi-copy support. PI-71474
• Fixed inconsistent duplex and paper source behavior between PDL formats in Mako. PI-70680
• Improved resiliency and atomicity of client message retrieval by wrapping the operation in an explicit database transaction with rollback-on-error handling. PI-73267
• Updated the jobs list so that a limit of 1,000, 0, or any negative value is treated as unlimited, preventing the Output Console from breaking when pagination is disabled. PI-75817
• Resolved a duplicate entry error caused by missing coverage of the job_type column in the jobs table index. PI-75663 / PI-75820
• Fixed a defect in job release ordering when held jobs include a mix of Pull Print and Secure Release destinations, ensuring jobs release in the order they were held regardless of release type. PI-77719

Reports

• Resolved an issue where the operating system column filter did not function on the Workstation Report. PI-72767
• Updated Print Job Records report export logic to include all data displayed in the report UI. PI-71635

Security

• Updated cookie security settings to ensure SameSite, HttpOnly, and Secure attributes are correctly applied to all PHP and Laravel cookies. PI-69171
• Added Content Security Policy headers to static assets, audited cache control headers on Laravel routes, resolved a duplicate X-Frame-Options header, and enabled comprehensive CSP header coverage for the admin console. PI-74177 / PI-74178 / PI-74179 / PI-74180 / PI-72175 / PI-72869 / PI-72176
• Applied CIS Docker compliance fixes to the Off-Network app, addressing container user and health check configuration issues. PI-69176 / PI-77338
• Resolved a broken access control issue where JWT tokens did not expire for iOS clients. PI-66062
• Updated golang.org/x/crypto across multiple services to address known cryptography vulnerabilities. PI-74059 / PI-74559
• Remediated Trivy vulnerability scan findings across FedRAMP-specific service releases.
• Updated CI/CD workflows to use directory-based code signing and removed CIS Docker compliance gaps. PI-74291 / PI-74321 / PI-77338

Web Print

• Updated the Web Print release code email template to improve mobile rendering, spacing, and layout on small screens. PI-68886
• Resolved an issue where deleting a printer assigned to Web Print did not remove it from the Web Print selected printers list. PI-64615
• Updated the Web Print file preview and upload endpoint to attempt empty-password PDF decryption before returning a failure. PI-69213
• Updated the landscape CSV print rotation logic to correctly scale documents to fit the page. PI-69840

May 29th, 2026

• Remediated Trivy-identified vulnerabilities (including HIGH quinn-proto CVE-2026-31812, HIGH AWS-LC GHSA-hfpc-8r3f-gw53, and HIGH findings) in the cloud print internal router service by updating package versions and rebuilding affected containers. PI-77082 / PI-74525
• Remediated Trivy-identified vulnerabilities (including HIGH gnutls CVE-2026-33845, HIGH net/url CVE-2026-25679, HIGH Go crypto/tls CVE-2026-32283, and HIGH findings) across multiple Print platform service images by bumping package versions and rebuilding affected containers. PI-78946 / PI-78952 / PI-78953 / PI-79027 / PI-79325 / PI-79332 / PI-79333 / PI-79501
• Remediated Trivy-identified vulnerabilities (including HIGH fast-uri CVE-2026-6321, HIGH fast-uri CVE-2026-6322, and HIGH findings) in the event bus service by updating npm package versions and rebuilding affected containers. PI-79707
• Updated dependency versions in the authentication and SCIM services to address vulnerabilities identified by Trivy vulnerability scans. PI-77369 / PI-77378
• Updated the Windows binary signing process to use OIDC authentication, replacing the previous client secret authentication method. PI-70009

April 30th, 2026

• Remediated Trivy-identified vulnerabilities (including CRITICAL nodejs CVE-2025-55130, CRITICAL axios CVE-2025-62718, and HIGH findings) across multiple Vasion Automate Fed service images by bumping package versions and rebuilding affected containers.
• Remediated Trivy-identified vulnerabilities (including HIGH libpng CVE-2026-33416 and HIGH findings, HIGH zlib CVE-2026-22184, and HIGH libcrypto3 CVE-2026-28390) across multiple Vasion Automate Fed service images by bumping package versions and rebuilding affected containers.
• Remediated Trivy-identified vulnerabilities (including CRITICAL gRPC CVE-2026-33186 and HIGH stdlib CVE-2026-25679) across multiple Vasion Automate Fed service images by bumping package versions and rebuilding affected containers.
• Remediated Trivy-identified vulnerabilities (including CRITICAL Spring Security CVE-2026-22732 and HIGH Tomcat CVE-2026-24734) on a Vasion Automate Fed service image by bumping package versions and rebuilding the affected container.
• Corrected a behavior where multiple Offline Secure Release Print (OSRP) jobs released close together were not dispatched to printers in the order they were originally submitted.
• Corrected a behavior where the Mobile Scanning Settings section did not display; removed an unnecessary feature flag check that was suppressing the section.
• Upgraded OpenSSL in the offline-print and email services to address CVE-2025-15467, a critical remote code execution vulnerability.

March 27th, 2026

• Updated multiple service images to remediate Trivy-identified CVEs affecting the OpenTelemetry SDK (CVE-2026-24051) across Vasion Automate Fed environments, upgrading dependency versions to resolve HIGH-severity findings.
• Remediated Trivy-identified vulnerabilities (including CRITICAL zlib CVE-2026-22184 and HIGH/MEDIUM findings) across multiple Vasion Automate Fed service images by bumping package versions and rebuilding affected containers.
• Remediated Trivy-identified vulnerabilities (including CRITICAL gRPC CVE-2026-33186, HIGH stdlib CVE-2026-25679, and MEDIUM findings) across additional Vasion Automate Fed service images with package version bumps and container rebuilds.
• Resolved a bug in Quota Management where recurring time period configurations would stop after the "Future" period instead of continuing to recur, affecting all users in impacted organizations.
• Added predefined external gateway entries for the Vasion Automate Fed production environment (printercloud-fed.us and vasion-fed.us) to support secure, compliant gateway routing for government customers.