Alert GCSA-26153 - Aggiornamento di sicurezza per prodotti VMware

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ****************************************************************** alert ID: GCSA-26153 data: 30 luglio 2026 titolo: Aggiornamento di sicurezza per prodotti VMware ****************************************************************** :: Descrizione del problema Broadcom ha rilasciato aggiornamenti di sicurezza per risolvere alcune vulnerabilita', delle quali tre con gravita' "critica" e una con gravita' "alta", in vari prodotti della suite VMware. Maggiori informazioni sono disponibili alla sezione "Riferimenti". :: Software interessato VMware ESX version 8.0 VMware vCenter version 8.0 (Fixed in 8.0 U3k) VMware Workstation version 25H2 VMware Fusion version 25H2 VMware Cloud Foundation versions 9.1.x.x (Fixed in 9.1.0.0300) VMware Cloud Foundation versions 9.0.x.x (Fixed in 9.0.2.0100) VMware Cloud Foundation versions 5.x (Async patch to 8.0 U3k) VMware vSphere Foundation versions 9.1.x.x (Fixed in 9.1.0.0300) VMware vSphere Foundation versions 9.0.x.x (Fixed in 9.0.2.0100) VMware Telco Cloud Platform versions 3.0, 4.x, 5.0.x, 5.1.x VMware Telco Cloud Infrastructure version 3.0 :: Impatto Accesso a dati riservati (ID) Bypass delle funzionalita' di sicurezza (SFB) Esecuzione remota di codice arbitrario (RCE) Denial of Service (DoS) :: Soluzioni Aggiornare alla versioni piu' recenti. :: Riferimenti Broadcom Security Advisories https://support.broadcom.com/web/ecx/security-advisory? https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/38017 Riferimenti CVE https://www.cve.org/CVERecord?id=CVE-2026-41703 https://www.cve.org/CVERecord?id=CVE-2026-41709 https://www.cve.org/CVERecord?id=CVE-2026-47876 https://www.cve.org/CVERecord?id=CVE-2026-59309 https://www.cve.org/CVERecord?id=CVE-2026-59310 GARR CERT Security Alert - subscribe/unsubscribe: http://www.cert.garr.it/alert/ricevi-gli-alert-di-cert -----BEGIN PGP SIGNATURE----- iF0EAREIAB0WIQTGpdiR5MqstacBGHbBnEyTZRJgQgUCamt5ywAKCRDBnEyTZRJg QlRWAJ4yuSs3QpZ68L12eUAuKx8tbWnrDQCbB8mpDgz8R59xh8JzDQqUD5KnL9w= =R14J -----END PGP SIGNATURE-----