Alert GCSA-23131 - Adobe Security Bulletin - Ottobre 2023
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ****************************************************************** Alert ID: GCSA-23131 Data: 11 Ottobre 2023 Titolo: Adobe Security Bulletin - Ottobre 2023 ****************************************************************** :: Descrizione del problema Adobe ha rilasciato i seguenti aggiornamenti di sicurezza APSB23-49 Security update available for Adobe Bridge APSB23-50 Security update available for Adobe Commerce APSB23-51 Security update available for Adobe Photoshop Maggiori informazioni sono disponibili alla sezione "Riferimenti". :: Software interessato Adobe Bridge versione 12.0.4 e precedenti Adobe Bridge versione 13.0.3 e precedenti Adobe Commerce versione 2.4.7-beta1 e precedenti Adobe Commerce versione 2.4.6-p2 e precedenti Adobe Commerce versione 2.4.5-p4 e precedenti Adobe Commerce versione 2.4.4-p5 e precedenti Adobe Commerce versione 2.4.3-ext-4 e precedenti Adobe Commerce versione 2.4.2-ext-4 e precedenti Adobe Commerce versione 2.4.1-ext-4 e precedenti Adobe Commerce versione 2.4.0-ext-4 e precedenti Adobe Commerce versione 2.3.7-p4-ext-4 e precedenti Magento Open Source versione 2.4.7-beta1 e precedenti Magento Open Source versione 2.4.6-p2 e precedenti Magento Open Source versione 2.4.5-p4 e precedenti Magento Open Source versione 2.4.4-p5 e precedenti Adobe Photoshop 2022 versione 23.5.5 e precedenti Adobe Photoshop 2023 versione 24.7 e precedenti :: Impatto Esecuzione remota di codice arbitrario (RCE) Acquisizione di privilegi piu' elevati (EoP) Denial of Service (DoS) Rivelazione di informazioni (ID) Bypass delle restrizioni di sicurezza (SRB) Cross-Site Scripting (XXS) :: Soluzioni Aggiornare i software alle ultime versioni: Adobe Bridge 13.0.4 (Windows e Mac) Adobe Bridge 14.0.0 (Windows e Mac) Adobe Commerce 2.4.7-beta2 Adobe Commerce 2.4.6-p3 Adobe Commerce 2.4.5-p5 Adobe Commerce 2.4.4-p6 Adobe Commerce 2.4.3-ext-5 Adobe Commerce 2.4.2-ext-5 Adobe Commerce 2.4.1-ext-5 Adobe Commerce 2.4.0-ext-5 Adobe Commerce 2.3.7-p4-ext-5 Magento Open Source 2.4.7-beta2 Magento Open Source 2.4.6-p3 Magento Open Source 2.4.5-p5 Magento Open Source 2.4.4-p6 Photoshop 2023 24.7.1 (Windows e Mac) Photoshop 2024 25.0 (Windows e Mac) :: Riferimenti Adobe Security Bulletins e Advisories https://helpx.adobe.com/security/security-bulletin.html https://helpx.adobe.com/security/products/bridge/apsb23-49.html https://helpx.adobe.com/security/products/magento/apsb23-50.html https://helpx.adobe.com/security/products/photoshop/apsb23-51.html Mitre CVE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38216 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38217 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38220 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38221 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38249 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38250 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38251 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-26367 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38219 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38218 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-26366 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-26368 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-26370 GARR CERT Security Alert - subscribe/unsubscribe: http://www.cert.garr.it/alert/ricevi-gli-alert-di-cert -----BEGIN PGP SIGNATURE----- iD8DBQFlJmwowZxMk2USYEIRCF11AJ4jbhduNI8M74/5XO1vnGjwBeonmACgpwwg vhl1hZFU7iMLhZOKCtFyyD8= =s8kf -----END PGP SIGNATURE-----