Alert GCSA-25049 - Adobe Security Bulletin - Aprile 2025
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ****************************************************************** Alert ID: GCSA-25049 Data: 09 Aprile 2025 Titolo: Adobe Security Bulletin - Aprile 2025 ****************************************************************** :: Descrizione del problema Adobe ha rilasciato i seguenti aggiornamenti di sicurezza: APSB25-15 : Security update available for Adobe ColdFusion APSB25-23 : Security update available for Adobe After Effects APSB25-24 : Security update available for Adobe Media Encoder APSB25-25 : Security update available for Adobe Bridge APSB25-26 : Security update available for Adobe Commerce APSB25-27 : Security update available for Adobe Experience Manager Forms APSB25-28 : Security update available for Adobe Premiere Pro APSB25-30 : Security update available for Adobe Photoshop APSB25-31 : Security update available for Adobe Animate APSB25-32 : Security update available for Adobe Experience Manager Screens APSB25-33 : Security update available for Adobe FrameMaker APSB25-34 : Security update available for Adobe XMP Toolkit SDK Maggiori informazioni sono disponibili alla sezione "Riferimenti". :: Software interessato ColdFusion 2025 Build 331385 ColdFusion 2023 Update 12 e versioni precedenti ColdFusion 2021 Update 18 e versioni precedenti Adobe After Effects 24.6.4 e versioni precedenti Adobe After Effects 25.1 e versioni precedenti Adobe Media Encoder 24.6.4 e versioni precedenti Adobe Media Encoder 25.1 e versioni precedenti Adobe Bridge 14.1.5 e versioni precedenti Adobe Bridge 15.0.2 e versioni precedenti Adobe Commerce 2.4.8-beta2 Adobe Commerce 2.4.7-p4 e versioni precedenti Adobe Commerce 2.4.6-p9 e versioni precedenti Adobe Commerce 2.4.5-p11 e versioni precedenti Adobe Commerce 2.4.4-p12 e versioni precedenti Adobe Commerce B2B 1.5.1 e versioni precedenti Adobe Commerce B2B 1.4.2-p4 e versioni precedenti Adobe Commerce B2B 1.3.5-p9 e versioni precedenti Adobe Commerce B2B 1.3.4-p11 e versioni precedenti Adobe Commerce B2B 1.3.3-p12 e versioni precedenti Magento Open Source 2.4.8-beta Magento Open Source 2.4.7-p4 e versioni precedenti Magento Open Source 2.4.6-p9 e versioni precedenti Magento Open Source 2.4.5-p11 e versioni precedenti Magento Open Source 2.4.4-p12 e versioni precedenti Adobe Experience Manager (AEM) Forms on JEE 6.5.22.0 (AEMForms-6.5.0-0093) e versioni precedenti Adobe Premiere Pro 25.1 e versioni precedenti Adobe Premiere Pro 24.6.4 e versioni precedenti Photoshop 2025 26.4.1 e versioni precedenti Photoshop 2024 25.12.1 e versioni precedenti Adobe Animate 2023 23.0.10 e versioni precedenti Adobe Animate 2024 24.0.7 e versioni precedenti Adobe Experience Manager (AEM) Screens AEM 6.5 Screens FP11.3 e versioni precedenti Adobe FrameMaker 2020 Release Update 7 e versioni precedenti Adobe FrameMaker 2022 Release Update 5 e versioni precedenti Adobe XMP-Toolkit-SDK 2023.12 e versioni precedenti :: Impatto Remote Code Execution Information Disclosure Denial of Service Elevation of Privilege Security Restriction Bypass :: Soluzioni Aggiornare i software all'ultima versione: ColdFusion 2025 Update 1 ColdFusion 2023 Update 13 ColdFusion 2021 Update 19 Adobe After Effects 24.6.5 Adobe After Effects 25.2 Adobe Media Encoder 24.6.5 Adobe Media Encoder 25.2 Adobe Bridge 14.1.6 Adobe Bridge 15.0.3 Adobe Commerce 2.4.8 Adobe Commerce 2.4.7-p5 Adobe Commerce 2.4.6-p10 Adobe Commerce 2.4.5-p12 Adobe Commerce 2.4.4-p13 Adobe Commerce B2B 1.5.2 Adobe Commerce B2B 1.4.2-p5 Adobe Commerce B2B 1.3.5-p10 Adobe Commerce B2B 1.3.4-p12 Adobe Commerce B2B 1.3.3-p13 Magento Open Source 2.4.8 Magento Open Source 2.4.7-p5 Magento Open Source 2.4.6-p10 Magento Open Source 2.4.5-p12 Magento Open Source 2.4.4-p13 Adobe Experience Manager (AEM) Forms on JEE 6.5.22.0 (AEMForms-6.5.0-0095) Adobe Premiere Pro 25.2 Adobe Premiere Pro 24.6.5 Photoshop 2025 26.5 Photoshop 2024 25.12.2 Adobe Animate 2023 23.0.11 Adobe Animate 2024 24.0.8 Adobe Experience Manager (AEM) Screens AEM 6.5 Screens FP11.4 Adobe FrameMaker 2020 Update 8 Adobe FrameMaker 2022 Update 6 Adobe XMP-Toolkit-SDK 2025.03 :: Riferimenti Adobe Security Bulletins e Advisories: https://helpx.adobe.com/security/security-bulletin.html https://helpx.adobe.com/security/products/coldfusion/apsb25-15.html https://helpx.adobe.com/security/products/after_effects/apsb25-23.html https://helpx.adobe.com/security/products/media-encoder/apsb25-24.html https://helpx.adobe.com/security/products/bridge/apsb25-25.html https://helpx.adobe.com/security/products/magento/apsb25-26.html https://helpx.adobe.com/security/products/aem-forms/apsb25-27.html https://helpx.adobe.com/security/products/premiere_pro/apsb25-28.html https://helpx.adobe.com/security/products/photoshop/apsb25-30.html https://helpx.adobe.com/security/products/animate/apsb25-31.html https://helpx.adobe.com/security/products/aem-screens/apsb25-32.html https://helpx.adobe.com/security/products/framemaker/apsb25-33.html https://helpx.adobe.com/security/products/xmpcore/apsb25-34.html Mitre CVE: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-24446 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-24447 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30281 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30282 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30284 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30285 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30286 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30287 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30288 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30289 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30290 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30291 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30292 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30293 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30294 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-27182 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-27183 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-27184 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-27185 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-27186 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-27187 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-27204 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-27194 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-27195 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-27193 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-27188 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-27189 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-27190 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-27191 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-27192 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-27196 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-27198 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-27199 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-27200 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-27201 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-27202 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-27205 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30304 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30295 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30296 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30297 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30298 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30299 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30300 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30301 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30302 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30305 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30306 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30307 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30308 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30309 GARR CERT Security Alert - subscribe/unsubscribe: http://www.cert.garr.it/alert/ricevi-gli-alert-di-cert -----BEGIN PGP SIGNATURE----- iGsEAREIACsWIQTGpdiR5MqstacBGHbBnEyTZRJgQgUCZ/YleA0cY2VydEBnYXJy Lml0AAoJEMGcTJNlEmBC03IAoIRhO4gGhBQowvZpW0SvJyQjOZ6sAJ4q6XtL1gp7 0/5sBlWBBFsfK5enqg== =PAFn -----END PGP SIGNATURE-----