Alert GCSA-22104 - Apple Security Updates APPLE-SA-2022-09-12
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ****************************************************************** alert ID: GCSA-22104 data: 13 settembre 2022 titolo: Apple Security Updates APPLE-SA-2022-09-12 ****************************************************************** :: Descrizione del problema Apple ha rilasciato i seguenti aggiornamenti di sicurezza per risolvere varie vulnerabilita' software presenti nei sistemi operativi e nelle applicazioni di cui una 0-day. APPLE-SA-2022-09-12-1 iOS 16 APPLE-SA-2022-09-12-2 iOS 15.7 and iPadOS 15.7 APPLE-SA-2022-09-12-3 macOS Big Sur 11.7 APPLE-SA-2022-09-12-4 macOS Monterey 12.6 APPLE-SA-2022-09-12-5 Safari 16 NB: le CVE-2022-32917 e CVE-2022-32894 sono al momento ampiamente sfruttate in rete Maggiori informazioni sono disponibili alla sezione "Riferimenti". :: Software interessato iOS versioni precedenti alla 15.7 iPadOS versioni precedenti alla 15.7 macOS Monterey versioni precedenti alla 12.6 macOS Big Sur versioni precedenti alla 11.7 Safari browser versioni precedenti alla 16 :: Impatto Rivelazione di informazioni (ID) Esecuzione remota di codice arbitrario (RCE) Acquisizione di privilegi piu' elevati (EoP) Bypass delle funzionalita' di sicurezza (SFB) Denial of Service (DoS) Spoofing :: Soluzione Aggiornare il software alle ultime versioni iOS 16 o 15.7 iPadOS 15.7 macOS Monterey 12.6 macOS Big Sur 11.7 Safari browser 16 Aggiornare il software sul Mac https://support.apple.com/it-it/HT201541 Keep your Mac up to date https://support.apple.com/en-in/guide/mac-help/mchlpx1065/mac Aggiornare iPhone, iPad o iPod touch https://support.apple.com/it-it/HT204204 https://www.apple.com/itunes/ L'aggiornamento e' disponibile tramite iTunes e "Aggiornamento software" sul tuo dispositivo iOS e non verra' visualizzato nell'applicazione "Aggiornamento software" del tuo computer o nel sito di download di Apple. Assicurati di aver installato l'ultima versione di iTunes da https://www.apple.com/itunes/ :: Riferimenti Aggiornamenti di sicurezza Apple https://support.apple.com/it-it/HT201222 https://support.apple.com/kb/HT213442 https://support.apple.com/kb/HT213446 https://support.apple.com/kb/HT213444 https://support.apple.com/kb/HT213443 https://support.apple.com/kb/HT213445 CSIRT Italia https://www.csirt.gov.it/contenuti/aggiornamenti-di-sicurezza-apple-al01-220913-csirt-ita CIS - Center for Internet Security https://www.cisecurity.org/advisory/multiple-vulnerabilities-in-apple-products-could-allow-for-arbitrary-code-execution_2022-112 Mitre CVE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32795 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32854 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32864 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32868 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32872 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32883 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32886 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32891 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32894 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32896 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32900 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32902 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32908 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32911 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32912 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32917 GARR CERT Security Alert - subscribe/unsubscribe: http://www.cert.garr.it/alert/ricevi-gli-alert-di-cert -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iEYEAREIAAYFAmMhh5IACgkQwZxMk2USYEIB5wCfTjHqz225gDr4qQTCidKXTzhR 7RgAn2AIpExiEYqLW54SjqSdQBxaVYko =r/Wd -----END PGP SIGNATURE-----