Vai al contenuto principale

Alert GCSA-15013 - Apple Security Updates APPLE-SA-2015-03-09


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1



**********************************************************************

Alert ID: GCSA-15013
Data: 13 Marzo 2015
Titolo: Apple Security Updates APPLE-SA-2015-03-09

**********************************************************************


:: Descrizione del problema

Apple ha rilasciato vari aggiornamenti che risolvono numerose
vulnerabilita' presenti nei sistemi Apple iOS, Xcode, Apple TV:

APPLE-SA-2015-03-09-1 iOS 8.2
APPLE-SA-2015-03-09-2 AppleTV 7.1
APPLE-SA-2015-03-09-3 Security Update 2015-002
APPLE-SA-2015-03-09-4 Xcode 6.2

Per una descrizione completa delle vulnerabilita' consultare
le segnalazioni ufficiali.


:: Piattaforme e Software interessati

Apple iOS
Apple Os X
Apple OS X Server
Apple TV
Apple Xcode


:: Impatto

Security Bypass
Esposizione di informazioni sensibili
Acquisizione di privilegi piu' elevati
Esecuzione di codice arbitrario
Accesso al sistema
Denial of Service


:: Soluzione

Applicare i security update:
http://www.apple.com/support/downloads/
http://www.apple.com/it/osx/apps/app-store.html
http://developer.apple.com/


:: Riferimenti

Apple security updates
http://support.apple.com/kb/ht1222

APPLE-SA-2015-03-09-1 iOS 8.2
https://support.apple.com/kb/HT204423

APPLE-SA-2015-03-09-2 AppleTV 7.1
https://support.apple.com/kb/HT204426

APPLE-SA-2015-03-09-3 Security Update 2015-002
https://support.apple.com/kb/HT204413

APPLE-SA-2015-03-09-4 Xcode 6.2
https://support.apple.com/kb/HT204427


Security Tracker
http://www.securitytracker.com/id/1031864
http://www.securitytracker.com/id/1031868
http://www.securitytracker.com/id/1031867
http://www.securitytracker.com/id/1031869


ISC SANS
https://isc.sans.edu/diary/Apple+Patches+for+iOS%2C+OS+X+and+Apple+TV/19443


Mitre CVE
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4496
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1061
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1062
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1063
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1064
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1065
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1066
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1067



GARR CERT Newsletter subscribe/unsubscribe:
http://www.cert.garr.it/alert/ricevi-gli-alert-di-cert



-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)

iEYEARECAAYFAlUCvd8ACgkQwZxMk2USYELnDgCgmfVnG3xmBG+JlkLI6Ue+MSwH
p7UAoLtwqvO8nMS7BZuLfpbMnC5te599
=rFnO
-----END PGP SIGNATURE-----

 

Alert di GARR-CERT Usata per la segnalazione di allarmi di sicurezza e comunicazioni di interesse generale diretti agli enti GARR. L'iscrizione è aperta e consigliata a tutti, il posting è riservato ai membri di GARR-CERT