Alert GCSA-21098 - Aggiornamenti di sicurezza per prodotti Adobe
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ****************************************************************** Alert ID: GCSA-21098 Data: 15 Settembre 2021 Titolo: Aggiornamenti di sicurezza per prodotti Adobe ****************************************************************** :: Descrizione del problema Adobe ha rilasciato i seguenti aggiornamenti di sicurezza per risolvere diverse vulnerabilita': APSB21-85 Security update available for Adobe XMP Toolkit SDK APSB21-84 Security update available for Adobe Photoshop APSB21-82 Security update available for Adobe Experience Manager APSB21-81 Security update availabie for Adobe Genuine Service APSB21-80 Security update available for Adobe Digital Editions APSB21-78 Security update available for Adobe Premiere Elements APSB21-77 Security update available for Adobe Photoshop Elements APSB21-76 Security update available for Adobe Creative Cloud Desktop Application APSB21-75 Security update available for Adobe ColdFusion APSB21-74 Security update available for Adobe Framemaker APSB21-73 Security update available for Adobe InDesign APSB21-72 Security update available for Adobe SVG-Native-Viewer APSB21-71 Security update available for Adobe InCopy APSB21-67 Security update available for Adobe Premiere Pro APSB21-55 Security update available for Adobe Acrobat and Reader Maggiori informazioni sono disponibili alla sezione "Riferimenti". :: Software interessato Adobe XMP-Toolkit-SDK 2021.07 e versioni precedenti Photoshop 2020 21.2.11 e versioni precedenti Photoshop 2021 22.5 e versioni precedenti Adobe Experience Manager (AEM) AEM Cloud Service (CS) Adobe Experience Manager (AEM) 6.5.9.0 e versioni precedenti Adobe Genuine Service 7.3 e versioni precedenti Adobe Digital Editions 4.5.11.187646 e versioni precedenti Adobe Premiere Elements 2021 [build 19.0 (20210127.daily.2235820)] e versioni precedenti Photoshop Elements 2021 [build 19.0 (20210304.m.156367)] e versioni precedenti Creative Cloud Desktop Application 5.4 e versioni precedenti ColdFusion 2018 Update 11 e versioni precedenti ColdFusion 2021 Version 1 e versioni precedenti Adobe Framemaker 2019 Update 8 e versioni precedenti Adobe Framemaker 2020 Release Update 2 e versioni precedenti Adobe InDesign 16.3.2 e versioni precedenti Adobe InDesign 16.3 e versioni precedenti Adobe SVG-Native-Viewer Adobe InCopy 16.3.1 e versioni precedenti Adobe InCopy 16.3 e versioni precedenti Adobe Premiere Pro 15.4 e versioni precedenti Acrobat DC 2021.005.20060 e versioni precedenti Acrobat Reader DC 2021.005.20060 e versioni precedenti Acrobat DC 2021.005.20058 e versioni precedenti Acrobat Reader DC 2021.005.20058 e versioni precedenti Acrobat 2020 2020.004.30006 e versioni precedenti Acrobat Reader 2020 2020.004.30006 e versioni precedenti Acrobat 2017 2017.011.30199 e versioni precedenti Acrobat Reader 2017 2017.011.30199 e versioni precedenti :: Impatto Esecuzione remota di codice arbitrario (RCE) Rivelazione di informazioni riservate (ID) Manipolazione dei dati (DM) Acquisizione di privilegi piu' elevati (EoP) Denial of Service (DoS) Elusione delle restrizioni di sicurezza (SRB) Cross-Site Scripting (XSS) :: Soluzioni Aggiornare i software alle ultime versioni: Adobe XMP-Toolkit-SDK 2021.08 Photoshop 2020 21.2.12 Photoshop 2021 22.5.1 Adobe Experience Manager (AEM) AEM Cloud Service (CS) Adobe Experience Manager (AEM) 6.5.10.0 Adobe Genuine Service 7.4 Adobe Digital Editions 4.5.11.187658 Adobe Premiere Elements 2021 [build 19.0 (20210809.daily.2242976)] Photoshop Elements 2021 [build 19.0 (20210811.m.158081)] Creative Cloud Desktop Application 5.5 ColdFusion 2018 Update 12 ColdFusion 2021 Update 2 Adobe Framemaker 2019 Release Update 8 (hotfix) Adobe Framemaker 2020 Release Update 3 Adobe InDesign 16.4 Adobe SVG-Native-Viewer (https://github.com/adobe/svg-native-viewer/commit/b79ecc37b2572b27aa8ff93de67ffa55828e4df8) Adobe InCopy 16.4 Adobe Premiere Pro 15.4.1 Acrobat DC Continuous 2021.007.20091 Acrobat Reader DC Continuous 2021.007.20091 Acrobat 2020 Classic 2020 2020.004.30015 Acrobat Reader 2020 Classic 2020.2020.004.30015 Acrobat 2017 Classic 2017 2017.011.30202 Acrobat Reader 2017 Classic 2017 2017.011.30202 :: Riferimenti Adobe Security Bulletins e Advisories https://helpx.adobe.com/security.html https://helpx.adobe.com/security/products/xmpcore/apsb21-85.html https://helpx.adobe.com/security/products/photoshop/apsb21-84.html https://helpx.adobe.com/security/products/experience-manager/apsb21-82.html https://helpx.adobe.com/security/products/integrity_service/apsb21-81.html https://helpx.adobe.com/security/products/Digital-Editions/apsb21-80.html https://helpx.adobe.com/security/products/premiere_elements/apsb21-78.html https://helpx.adobe.com/security/products/photoshop_elements/apsb21-77.html https://helpx.adobe.com/security/products/creative-cloud/apsb21-76.html https://helpx.adobe.com/security/products/coldfusion/apsb21-75.html https://helpx.adobe.com/security/products/framemaker/apsb21-74.html https://helpx.adobe.com/security/products/indesign/apsb21-73.html https://helpx.adobe.com/security/products/svg-native-viewer/apsb21-72.html https://helpx.adobe.com/security/products/incopy/apsb21-71.html https://helpx.adobe.com/security/products/premiere_pro/apsb21-67.html https://helpx.adobe.com/security/products/acrobat/apsb21-55.html Mitre CVE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-40716 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-40709 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-40711 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-40712 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-40713 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-40714 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-40708 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-39828 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-39827 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-39826 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-39824 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-40701 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-40700 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-40703 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-40702 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-39825 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-28613 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-40698 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-40699 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-39835 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-40697 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-39833 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-39834 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-39832 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-39830 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-39829 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-39831 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-39820 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-39821 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-39822 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-39823 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-39819 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-39818 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-40710 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-40715 GARR CERT Security Alert - subscribe/unsubscribe: http://www.cert.garr.it/alert/ricevi-gli-alert-di-cert -----BEGIN PGP SIGNATURE----- iF0EARECAB0WIQTGpdiR5MqstacBGHbBnEyTZRJgQgUCYUHcQQAKCRDBnEyTZRJg QnsEAKDUN7iSsw3/Lll+4MZ+UzB9ZKsAlgCfS/eTDjEQC91m5F0kWoGzSp5AK7E= =mRh8 -----END PGP SIGNATURE-----