Alert GCSA-13027 - Oracle Java SE Critical Patch Update Advisory - April 2013
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ****************************************************************** Alert ID: GCSA-13027 Data: 18 Aprile 2013 Titolo: Oracle Java SE Critical Patch Update Advisory - April 2013 ****************************************************************** :: Descrizione del problema Oracle ha pubblicato il Java SE Critical Patch Update Advisory (April 2013) che risolve oltre 40 nuovi bug di sicurezza nei prodotti Java SE. :: Piattaforme e Software interessati JDK and JRE 7 Update 17 e precedenti JDK and JRE 6 Update 43 e precedenti JDK and JRE 5.0 Update 41 e precedenti JavaFX 2.2.7 e precedenti :: Impatto Information disclosure Privilege escalation Manipolazione di dati Denial of Service Compromissione del sistema :: Soluzioni Aggiornare Java alle ultime versioni tramite la funzione 'Aggiornamento' in Pannello di controllo -> Java, oppure con download dal sito ufficiale: http://www.oracle.com/technetwork/java/javase/downloads/index.html http://java.com/it/download/manual.jsp :: Riferimenti Oracle: http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html http://www.oracle.com/technetwork/topics/security/javacpuapr2013verbose-1928687.html Secunia: http://secunia.com/advisories/53008/ http://secunia.com/advisories/53095/ Mitre's CVE ID: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0401 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0402 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1488 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1491 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1518 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1537 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1540 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1557 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1558 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1561 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1563 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1564 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1569 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2383 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2384 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2394 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2414 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2415 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2416 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2417 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2418 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2419 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2420 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2421 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2422 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2423 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2424 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2425 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2426 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2427 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2428 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2429 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2430 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2431 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2432 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2433 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2434 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2435 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2436 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2438 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2439 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2440 GARR CERT Newsletter subscribe/unsubscribe: http://www.cert.garr.it/alert/ricevi-gli-alert-di-cert -----BEGIN PGP SIGNATURE----- iD8DBQFRb/dwwZxMk2USYEIRAjiaAJ9qtatNflK5unA8uiG+bhVtUdPBmQCcDqfV N12fcX5pb0GvcZwqc6l1JDc= =/SwS -----END PGP SIGNATURE-----