Alert GCSA-26153 - Aggiornamento di sicurezza per prodotti VMware

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

******************************************************************

   alert ID: GCSA-26153
       data: 30 luglio 2026
     titolo: Aggiornamento di sicurezza per prodotti VMware

******************************************************************

:: Descrizione del problema

   Broadcom ha rilasciato aggiornamenti di sicurezza per risolvere alcune vulnerabilita',
   delle quali tre con gravita' "critica" e una con gravita' "alta",
   in vari prodotti della suite VMware.

   Maggiori informazioni sono disponibili alla sezione "Riferimenti".


:: Software interessato

   VMware ESX version 8.0
   VMware vCenter version 8.0 (Fixed in 8.0 U3k)
   VMware Workstation version 25H2
   VMware Fusion version 25H2
   VMware Cloud Foundation versions 9.1.x.x (Fixed in 9.1.0.0300)
   VMware Cloud Foundation versions 9.0.x.x (Fixed in 9.0.2.0100)
   VMware Cloud Foundation versions 5.x (Async patch to 8.0 U3k)
   VMware vSphere Foundation versions 9.1.x.x (Fixed in 9.1.0.0300)
   VMware vSphere Foundation versions 9.0.x.x (Fixed in 9.0.2.0100)
   VMware Telco Cloud Platform versions 3.0, 4.x, 5.0.x, 5.1.x
   VMware Telco Cloud Infrastructure version 3.0


:: Impatto

   Accesso a dati riservati (ID)
   Bypass delle funzionalita' di sicurezza (SFB)
   Esecuzione remota di codice arbitrario (RCE)
   Denial of Service (DoS)


:: Soluzioni

   Aggiornare alla versioni piu' recenti.


:: Riferimenti

   Broadcom Security Advisories
   https://support.broadcom.com/web/ecx/security-advisory?
   https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/38017

   Riferimenti CVE
   https://www.cve.org/CVERecord?id=CVE-2026-41703
   https://www.cve.org/CVERecord?id=CVE-2026-41709
   https://www.cve.org/CVERecord?id=CVE-2026-47876
   https://www.cve.org/CVERecord?id=CVE-2026-59309
   https://www.cve.org/CVERecord?id=CVE-2026-59310


GARR CERT Security Alert - subscribe/unsubscribe:
http://www.cert.garr.it/alert/ricevi-gli-alert-di-cert
-----BEGIN PGP SIGNATURE-----

iF0EAREIAB0WIQTGpdiR5MqstacBGHbBnEyTZRJgQgUCamt5ywAKCRDBnEyTZRJg
QlRWAJ4yuSs3QpZ68L12eUAuKx8tbWnrDQCbB8mpDgz8R59xh8JzDQqUD5KnL9w=
=R14J
-----END PGP SIGNATURE-----