Alert-GCSA-21010 - Apple Security Updates (APPLE-SA-2021-01-26)

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

******************************************************************

Alert ID: GCSA-21010
Data: 27 Gennaio 2021
Titolo: Apple Security Updates (APPLE-SA-2021-01-26)

******************************************************************


:: Descrizione

Apple ha rilasciato degli aggiornamenti di sicurezza che risolvono delle
vulnerabilita' presenti nei sistemi operativi e nelle applicazioni.

Alcune delle vulnerabilita' sono attualmente in corso di sfruttamento.

Per una descrizione degli aggiornamenti consultare le segnalazioni
ufficiali alla sezione 'Riferimenti'.


:: Software interessato

iCloud for Windows
iOS
iPadOS
watchOS
tvOS
Xcode


:: Impatto

Esecuzione remota di codice arbitrario
Denial of Service
Aumento dei privilegi
Rivelazione di informazioni riservate


:: Soluzione

Aggiornare i software alle seguenti versioni:

iCloud for Windows 12.0
iOS 14.4
iPadOS 14.4
watchOS 7.3
tvOS 14.4
Xcode 12.4


:: Riferimenti

Apple security updates
https://support.apple.com/en-us/HT212145
https://support.apple.com/en-us/HT212146
https://support.apple.com/en-us/HT212148
https://support.apple.com/en-us/HT212149
https://support.apple.com/en-us/HT212153

Mitre CVE
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-29611
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-29617
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-29618
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-29619
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-1782
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-1800
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-1870
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-1871



GARR CERT Security Alert - subscribe/unsubscribe:
http://www.cert.garr.it/alert/ricevi-gli-alert-di-cert
-----BEGIN PGP SIGNATURE-----

iD8DBQFgESSgwZxMk2USYEIRAhneAJ4/odj9LoTqFbWLtXX681q2/pualACfVKhq
3V4Qjb8zIUkX6qyB2XlvK9E=
=lgIE
-----END PGP SIGNATURE-----