Alert GCSA-20118 - Apple Security Updates APPLE-SA-2020-12-14

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

******************************************************************

alert ID: GCSA-20118
data: 15 dicembre 2020
titolo: Apple Security Updates APPLE-SA-2020-12-14

******************************************************************

:: Descrizione del problema

Apple ha rilasciato i seguenti aggiornamenti di sicurezza
che risolvono delle vulnerabilita' presenti nei sistemi operativi
e nelle applicazioni.

APPLE-SA-2020-12-14-1 iOS 14.3 and iPadOS 14.3
APPLE-SA-2020-12-14-2 iOS 12.5
APPLE-SA-2020-12-14-3 macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave
APPLE-SA-2020-12-14-4 Additional information for APPLE-SA-2020-11-13-1 macOS Big Sur 11.0.1
APPLE-SA-2020-12-14-5 watchOS 7.2
APPLE-SA-2020-12-14-6 watchOS 6.3
APPLE-SA-2020-12-14-7 tvOS 14.3
APPLE-SA-2020-12-14-8 Safari 14.0.2
APPLE-SA-2020-12-14-9 macOS Server 5.11

Maggiori informazioni sono disponibili nelle segnalazioni
ufficiali alla sezione "Riferimenti".


:: Software interessato

Apple iOS
Apple iPadOS
Apple macOS
Apple macOS Server
Apple watchOS
Apple tvOS
Apple Safari


:: Impatto

Information Disclosure (ID)
https://cwe.mitre.org/data/definitions/200.html

Cross-Site Scripting (XSS)
https://cwe.mitre.org/data/definitions/79.html

Denial of Service (DoS)
https://cwe.mitre.org/data/definitions/400.html

Remote Code/Command Execution (RCE)
https://cwe.mitre.org/data/definitions/94.html

Unauthorised Access
https://cwe.mitre.org/data/definitions/284.html

Elevation of Privilege (EoP)
Modify Arbitrary Files
Reduced Security
Root Compromise


:: Soluzione

Applicare i security update e gli aggiornamenti rilasciati
https://support.apple.com/downloads

Aggiornare il software sul Mac
https://support.apple.com/it-it/HT201541

Aggiornare iPhone, iPad o iPod touch
https://support.apple.com/it-it/HT204204
https://www.apple.com/itunes/

Aggiornare Apple TV
https://support.apple.com/it-it/HT202716

Aggiornare Apple Watch
https://support.apple.com/it-it/HT204641

Aggiornare o reinstallare Safari
https://support.apple.com/it-it/HT204416


:: Riferimenti

Aggiornamenti di sicurezza Apple
https://support.apple.com/it-it/HT201222

https://support.apple.com/it-it/HT212003
https://support.apple.com/it-it/HT212004
https://support.apple.com/it-it/HT212011
https://support.apple.com/it-it/HT211931
https://support.apple.com/it-it/HT212009
https://support.apple.com/it-it/HT212006
https://support.apple.com/it-it/HT212005
https://support.apple.com/it-it/HT212007
https://support.apple.com/it-it/HT211932

Apple security-announce Mailing List
https://lists.apple.com/archives/security-announce/2020/Dec/index.html

I riferimenti CVE sono disponibili nell'advisory originale.


GARR CERT Security Alert - subscribe/unsubscribe:
http://www.cert.garr.it/alert/ricevi-gli-alert-di-cert

-----BEGIN PGP SIGNATURE-----

iD8DBQFf2MC6wZxMk2USYEIRAhyLAJ4zMilHra3Om6jv6Qazi5yFKzWCQgCgxvXU
OJHUigSi4i49WQTzaEvnKYo=
=E3vZ
-----END PGP SIGNATURE-----