Security Bulletins for Xerox Products

Xerox Security Bulletin XRX16-017 V1.0 (PDF 219.3K)

Cumulative update for Common Criteria Certification . Affected products:

WorkCentre®
3655/3655i, 5845, 5855, 5865/5865i, 5875/5875i, 5890/5890i,
5945/5945i, 5955/5955i, 6655/6655i, 7220/7220i, 7225/7225i, 7830/7830i, 7835/7835i, 7845/7845i, 7855/7855i, 7970/7970i.

Xerox Security Bulletin XRX16-016 V1.0 (PDF 222.9K)

Patch that enables FIPS 140-2 certified encryption and hashing for the SNMPv3 protocol. NOTE this patch is for ConnectKey Technology with SIPRNet support only.

Supported products: WC 3655; WC 5845/5855; WC 5865/5875/5890; WC 5945/5955; WC 6655; WC 7220/7225; WC 7830/7835/7845/7855 ; WC 7970

Xerox Security Mini Bulletin XRX16P_V1.1 (PDF 112.9K)

Includes fix for:

CVE-2015-2808 Bar Mitzvah
ï‚· Muptiple CVEs that were associated with Logjam. The following CVEs are fixed in this release.
ï‚· CVE-2014-8176
ï‚· CVE-2015-1788
ï‚· CVE-2015-1789
ï‚· CVE-2015-1790
ï‚· CVE-2015-1791
ï‚· CVE-2015-1792

on WorkCentre 7525/7530/7535/7545/7556

Xerox Security Mini Bulletin XRX16O_V1.1 (PDF 113.9K)

Contains fix for CVE-2015-2808 Bar Mitzvah (RC4 removed) and CVE-2015-7547 glibc vulnerability on ColorQube 8700/8900 and 9301/9302/9303.

Xerox Security Bulletin XRX16-007 V1.3 (PDF 255K)

Patch fixes an error in authentication using cards could allow unauthorized access to user print jobs. This patch applies to ConnectKey devices.

Xerox Security Mini Bulletin XRX16M_V1.0 (PDF 196K)

This software contains fix for Poodle vulnerability and adds support for SHA-256 hash algorithm and 2048 bit digital certificates on Color 550/560/570.

Xerox Security Mini Bulletin XRX16L_V1.0 (PDF 128.8K)

This is valid for the following models:  WorkCentre 5845/5855/5865/5875/5890, WorkCentre 5865i/5875i/5890i,  WorkCentre 5945/5945i/5955/5955i, WorkCentre 7220/7220i/7225/7225i, WorkCentre 7830/7830i/7835/7835i, WorkCentre 7845/7845i/7855/7855i, WorkCentre 3655/3655i, WorkCentre 6655/6655i, WorkCentre 7970/7970i

Xerox Security Bulletin XRX16-003 V1.0 (PDF 273.6K)

This software contains fixes for many security vulnerabilities.

Note: Bulletin XRX16-002 is for media-based installation by a Xerox Service representative, bulletin XRX16-003 is for using Update Manager by customers internal IM staff or a Xerox Service representative.

Xerox Security Bulletin XRX16-002 V1.0 (PDF 352.4K)

This software contains fixes for many security vulnerabilities.

Note: Bulletin XRX16-002 is for media-based installation by a Xerox Service representative, bulletin XRX16-003 is for using Update Manager by customers internal IM staff or a Xerox Service representative.

Xerox Security Bulletin XRX16-001 V1.0 (PDF 153.2K)

The System Software Version and software patch listed below for the WorkCentre 7535/7556 contain cumulative updates that incorporate security vulnerability fixes up through 05 June 2015 as well as other non-security related defect fixes. This system software release with the software patch are Common Criteria certified.

Xerox Security Mini Bulletin XRX15BA_V1.0 (PDF 123.2K)

This software contains fix for Logjam, Freak and VxWorks TCP Sequence vulnerabilities on WorkCentre 3325. Also adds FIPS compatible SNMPv3.

Xerox Security Mini Bulletin XRX15AT_V1.0 (PDF 234.2K)

This software contains fix for OpenSSL MiTM (Man in the Middle) Vulnerability (CVE-2014-0224), upgrades to SSL options, and added Cross Frame Scripting protection.