Blueprint and Uniprint Security Update December 2023

Pharos has identified security vulnerabilities impacting Pharos Blueprint and Uniprint. At this point, Pharos does not believe that these vulnerabilities are being actively exploited and is not aware of any customers that have been impacted.

Impacted versions of Pharos software

These vulnerabilities impact the following versions of Blueprint and Uniprint:

• Blueprint 5.0 to Blueprint 5.4 Update 2:

  • Print Center

  • EDI Service

• Uniprint 8.4 to Uniprint 9.2:

  • SignUp

  • Print Center

  • EDI Service

Pharos Response

Pharos has developed the following fixes which will be available on the morning of Thursday, December 14th:

• Blueprint:

  • A new update (Blueprint 5.4 Update 3)

  • Site Security Utility: Must apply to each Collector and MobilePrint Server (if not previously applied)

• Uniprint: 

  • Security patches for Uniprint 9.1 SP3

    • EDI Service Updater Package 

    • Print Center API Updater Package 

    • SignUp Files 

    • Site Security Utility: Must apply to each server with Pharos API or MobilePrint (if not previously applied)

  • Security patches for Uniprint 9.2 

    • EDI Service Updater Package 

    • Print Center API Updater Package 

    • SignUp Files 

    • Site Security Utility: Must apply to each server with Pharos API or MobilePrint (if not previously applied)

Mitigation steps for impacted software

Blueprint and Uniprint customers should install the fixes. Older, unsupported versions of Blueprint and Uniprint should be upgraded to a supported version of software first.

How do I determine what version of software I'm on?

• Blueprint:

  • Blueprint: In the Blueprint Administrator, select “Help”, then select “About”, which will show the version number

  • Print Center: Bottom of Print Center login screen displays the version number

• Uniprint:

  • Uniprint: Uniprint Updater Service shows available packages, installed packages, and their respective version numbers.

  • Print Center: Uniprint Updater Service shows available packages, installed packages, and their respective version numbers.

  • SignUp: Same version as the Uniprint version

How much time will these updates take?

For Blueprint, if a customer is already on 5.4 or later, the updates should take less than 15 minutes per server. Customers on Blueprint 5.3 Update 7 or earlier will first need to upgrade to 5.4, and then apply Update 3. Multiple upgrades are required in this scenario, but servers can be updated concurrently.

For Uniprint, if a customer is already on Uniprint 9.1 SP3 or 9.2 General Release, the updates should take less than 15 minutes per server. If a customer is on an earlier version, it may take around 15 minutes to an hour per server to apply the Service Pack, including this update (servers can be updated concurrently). 

What if I need help with the upgrade? 

If you prefer Pharos to manage the upgrading of your older Blueprint or Uniprint systems to the latest versions to ensure a smooth and hassle-free experience, please contact clientservices@pharos.com and our Professional Services Team will prepare a quote for you. 

We understand that you depend on Pharos for your user printing and want to assure you that the security and uptime of your system is our number one priority. If you have any questions, please submit a support case on the Pharos Community