Alert GCSA-22121 - Apple Security Updates APPLE-SA-2022-10-24
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ****************************************************************** Alert ID: GCSA-22121 Data: 25 Settembre 2022 Titolo: Apple Security Updates APPLE-SA-2022-10-24 ****************************************************************** :: Descrizione del problema Apple ha rilasciato i seguenti aggiornamenti di sicurezza per risolvere varie vulnerabilita' software presenti nei sistemi operativi e nelle applicazioni di cui una 0-day. APPLE-SA-2022-10-24-1 iOS 16.1 and iPadOS 16 APPLE-SA-2022-10-24-2 macOS Ventura 13 APPLE-SA-2022-10-24-3 macOS Monterey 12.6.1 APPLE-SA-2022-10-24-4 macOS Big Sur 11.7.1 APPLE-SA-2022-10-24-5 watchOS 9.1 APPLE-SA-2022-10-24-6 tvOS 16.1 APPLE-SA-2022-10-24-7 Safari 16.1 NB: la CVE-2002-42827 risulta al momento ampiamente sfruttata in rete Maggiori informazioni sono disponibili alla sezione "Riferimenti". :: Software interessato iOS versioni precedenti alla 16.1 iPadOS versioni precedenti alla 16 macOS Ventura versioni precedenti alla 13 macOS Monterey versioni precedenti alla 12.6.1 macOS Big Sur versioni precedenti alla 11.7.1 watchOS versioni precedenti alla 9.1 tvOS versioni precedenti alla 16.1 Safari browser versioni precedenti alla 16.1 :: Impatto Manipolazione di dati Denial of Service (DoS) Acquisizione di privilegi piu' elevati (EoP) Rivelazione di informazioni (ID) Esecuzione remota di codice arbitrario (RCE) Bypass delle funzionalita' di sicurezza (SFB) Spoofing :: Soluzione Aggiornare il software alle ultime versioni iOS 16.1 ipadOS 16 macOS Ventura 13 macOS Monterey 12.6.1 macOS Big Sur 11.7.1 watchOS 9.1 tvOS 16.1 Safari browser 16.1 Aggiornare il software sul Mac https://support.apple.com/it-it/HT201541 Keep your Mac up to date https://support.apple.com/en-in/guide/mac-help/mchlpx1065/mac Aggiornare iPhone, iPad o iPod touch https://support.apple.com/it-it/HT204204 https://www.apple.com/itunes/ L'aggiornamento e' disponibile tramite iTunes e "Aggiornamento software" sul tuo dispositivo iOS e non verra' visualizzato nell'applicazione "Aggiornamento software" del tuo computer o nel sito di download di Apple. Assicurati di aver installato l'ultima versione di iTunes da https://www.apple.com/itunes/ :: Riferimenti Aggiornamenti di sicurezza Apple https://support.apple.com/it-it/HT201222 https://support.apple.com/en-sg/HT201222 https://support.apple.com/it-it/HT213495 https://support.apple.com/it-it/HT213489 https://support.apple.com/it-it/HT213493 https://support.apple.com/it-it/HT213494 https://support.apple.com/it-it/HT213488 https://support.apple.com/it-it/HT213492 https://support.apple.com/it-it/HT213491 CSIRT Italia https://www.csirt.gov.it/contenuti/aggiornamenti-di-sicurezza-apple-al01-221024-csirt-ita Mitre CVE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-36690 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-39537 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0261 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0318 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0319 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0351 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0359 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0361 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0368 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0392 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0554 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0572 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0629 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0685 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0696 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0714 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0729 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0943 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1381 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1420 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1616 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1620 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1621 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1622 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1629 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1674 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1720 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1725 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1733 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1735 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1769 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1851 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1897 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1898 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1927 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1942 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1968 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2000 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2042 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2124 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2125 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2126 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-26730 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28739 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29458 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32205 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32206 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32207 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32208 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32827 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32858 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32862 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32864 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32865 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32866 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32867 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32870 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32875 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32879 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32881 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32883 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32886 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32888 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32890 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32892 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32895 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32898 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32899 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32902 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32904 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32905 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32908 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32911 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32912 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32913 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32914 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32915 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32918 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32922 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32924 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32928 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32934 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32936 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32938 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32940 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32946 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32947 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42788 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42789 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42790 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42791 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42793 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42795 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42796 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42799 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42806 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42808 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42809 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42811 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42813 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42814 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42815 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42818 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42819 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42820 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42823 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42824 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42825 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42827 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42829 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42830 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42831 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42832 GARR CERT Security Alert - subscribe/unsubscribe: http://www.cert.garr.it/alert/ricevi-gli-alert-di-cert -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iEYEAREIAAYFAmNX2oQACgkQwZxMk2USYEJ2YACgmXDFgsX+N7vrrVIQqA2adRuK wHEAn2VA8Wz+88sCSyQPQBK/TGgOhXIw =HNpI -----END PGP SIGNATURE-----