Security Bulletins for Xerox Products

Xerox Security Mini Bulletin XRX16Q_V1.1 (PDF 213.6K)

Update with clarification of TLS 1.0 Disablement feature for WorkCentre 3655/3655i58XX/58XXi/59XX/59XXi/6655/6655i/72XX/72XXi/78XX/78XXi/ 7970/790i

Xerox Security Mini Bulletin XRX16AA_V1.0 (PDF 195.2K)

Contains fixes for many vulnerabilities on WorkCentre®
3655/3655i, 5845, 5855, 5865/5865i, 5875/5875i, 5890/5890i,
5945/5945i, 5955/5955i, 6655/6655i, 7220/7220i, 7225/7225i, 7830/7830i, 7835/7835i, 7845/7845i, 7855/7855i, 7970/7970i.

Xerox Security Bulletin XRX16-017 V1.0 (PDF 219.3K)

Cumulative update for Common Criteria Certification . Affected products:

WorkCentre®
3655/3655i, 5845, 5855, 5865/5865i, 5875/5875i, 5890/5890i,
5945/5945i, 5955/5955i, 6655/6655i, 7220/7220i, 7225/7225i, 7830/7830i, 7835/7835i, 7845/7845i, 7855/7855i, 7970/7970i.

Xerox Security Bulletin XRX16-016 V1.0 (PDF 222.9K)

Patch that enables FIPS 140-2 certified encryption and hashing for the SNMPv3 protocol. NOTE this patch is for ConnectKey Technology with SIPRNet support only.

Supported products: WC 3655; WC 5845/5855; WC 5865/5875/5890; WC 5945/5955; WC 6655; WC 7220/7225; WC 7830/7835/7845/7855 ; WC 7970

Xerox Security Mini Bulletin XRX16P_V1.1 (PDF 112.9K)

Includes fix for:

CVE-2015-2808 Bar Mitzvah
ï‚· Muptiple CVEs that were associated with Logjam. The following CVEs are fixed in this release.
ï‚· CVE-2014-8176
ï‚· CVE-2015-1788
ï‚· CVE-2015-1789
ï‚· CVE-2015-1790
ï‚· CVE-2015-1791
ï‚· CVE-2015-1792

on WorkCentre 7525/7530/7535/7545/7556

Xerox Security Mini Bulletin XRX16O_V1.1 (PDF 113.9K)

Contains fix for CVE-2015-2808 Bar Mitzvah (RC4 removed) and CVE-2015-7547 glibc vulnerability on ColorQube 8700/8900 and 9301/9302/9303.

Xerox Security Bulletin XRX16-007 V1.3 (PDF 255K)

Patch fixes an error in authentication using cards could allow unauthorized access to user print jobs. This patch applies to ConnectKey devices.

Xerox Security Mini Bulletin XRX16M_V1.0 (PDF 196K)

This software contains fix for Poodle vulnerability and adds support for SHA-256 hash algorithm and 2048 bit digital certificates on Color 550/560/570.

Xerox Security Mini Bulletin XRX16L_V1.0 (PDF 128.8K)

This is valid for the following models:  WorkCentre 5845/5855/5865/5875/5890, WorkCentre 5865i/5875i/5890i,  WorkCentre 5945/5945i/5955/5955i, WorkCentre 7220/7220i/7225/7225i, WorkCentre 7830/7830i/7835/7835i, WorkCentre 7845/7845i/7855/7855i, WorkCentre 3655/3655i, WorkCentre 6655/6655i, WorkCentre 7970/7970i