Security Bulletins for Xerox Products

Xerox Security Mini Bulletin XRX16Q_V1.1 (PDF 213.6K)

Update with clarification of TLS 1.0 Disablement feature for WorkCentre 3655/3655i58XX/58XXi/59XX/59XXi/6655/6655i/72XX/72XXi/78XX/78XXi/ 7970/790i

Xerox Security Mini Bulletin XRX16AA_V1.0 (PDF 195.2K)

Contains fixes for many vulnerabilities on WorkCentre®
3655/3655i, 5845, 5855, 5865/5865i, 5875/5875i, 5890/5890i,
5945/5945i, 5955/5955i, 6655/6655i, 7220/7220i, 7225/7225i, 7830/7830i, 7835/7835i, 7845/7845i, 7855/7855i, 7970/7970i.

Xerox Security Bulletin XRX16-017 V1.0 (PDF 219.3K)

Cumulative update for Common Criteria Certification . Affected products:

WorkCentre®
3655/3655i, 5845, 5855, 5865/5865i, 5875/5875i, 5890/5890i,
5945/5945i, 5955/5955i, 6655/6655i, 7220/7220i, 7225/7225i, 7830/7830i, 7835/7835i, 7845/7845i, 7855/7855i, 7970/7970i.

Xerox Security Bulletin XRX16-016 V1.0 (PDF 222.9K)

Patch that enables FIPS 140-2 certified encryption and hashing for the SNMPv3 protocol. NOTE this patch is for ConnectKey Technology with SIPRNet support only.

Supported products: WC 3655; WC 5845/5855; WC 5865/5875/5890; WC 5945/5955; WC 6655; WC 7220/7225; WC 7830/7835/7845/7855 ; WC 7970

Xerox Security Mini Bulletin XRX16P_V1.1 (PDF 112.9K)

Includes fix for:

CVE-2015-2808 Bar Mitzvah
ï‚· Muptiple CVEs that were associated with Logjam. The following CVEs are fixed in this release.
ï‚· CVE-2014-8176
ï‚· CVE-2015-1788
ï‚· CVE-2015-1789
ï‚· CVE-2015-1790
ï‚· CVE-2015-1791
ï‚· CVE-2015-1792

on WorkCentre 7525/7530/7535/7545/7556

Xerox Security Mini Bulletin XRX16O_V1.1 (PDF 113.9K)

Contains fix for CVE-2015-2808 Bar Mitzvah (RC4 removed) and CVE-2015-7547 glibc vulnerability on ColorQube 8700/8900 and 9301/9302/9303.

Xerox Security Bulletin XRX16-007 V1.3 (PDF 255K)

Patch fixes an error in authentication using cards could allow unauthorized access to user print jobs. This patch applies to ConnectKey devices.