Vai al contenuto principale

Alert GCSA-09013 - Apple Security Update 2009-001


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


************************************************************************

     Alert ID : GCSA-09013
         Data : 13 febbraio 2009
       Titolo : Apple Security Update 2009-001

************************************************************************


:: Descrizione del problema

Apple ha rilasciato il Security Update 2009-001 per correggere
varie vulnerabilta' che affliggono il sistema operativo Mac OS X
ed alcune applicazioni distribuite insieme al sistema stesso.


:: Software interessato

Apple Mac OS X


:: Impatto

Esposizione di informazioni sensibili
Security Bypass
Privilege escalation
DoS


:: Soluzione

Applicare il Security Update 2009-001:
http://www.apple.com/support/downloads/


:: Riferimenti

Apple - About Security Update 2009-001
http://support.apple.com/kb/HT3438

Secunia
http://secunia.com/advisories/33937/

Mitre's CVE ID
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1861
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3467
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1351
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1352
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1667
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4565
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4965
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1377
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1379
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1679
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1721
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1806
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1807
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1808
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1887
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1927
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2315
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2316
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2360
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2361
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2362
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2379
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2711
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3142
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3144
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3663
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4864
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5031
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5050
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5183
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5314
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0009
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0011
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0012
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0013
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0014
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0015
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0017
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0018
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0020
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0138
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0139
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0140
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0141
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0142
-----BEGIN PGP SIGNATURE-----

iQCVAwUBSZVYf/OB+SpikaiRAQKYEgQAh711lj4zytg7SDfHlZNXewfG0a5RHnIL
JPoYSH+Ja689jLp93vo4nQ7A9TT7Bh93+TfKeTBP9Rfa9a2IkZMjJYJE79lN+y1/
omfJtHpbwN8/8DfEBAQbtkWfejLk+ukFTo/2AjO1JEWAfgjxy9FCZt+utUZB6JkY
vscRLZ9deqw=
=DB9l
-----END PGP SIGNATURE-----

 

Alert di GARR-CERT Usata per la segnalazione di allarmi di sicurezza e comunicazioni di interesse generale diretti agli enti GARR. L'iscrizione è aperta e consigliata a tutti, il posting è riservato ai membri di GARR-CERT