Alert GCSA-25020 - Adobe Security Bulletin - Febbraio 2025

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256





******************************************************************

Alert ID: GCSA-25020
Data: 12 Febbraio 2025
Titolo: Adobe Security Bulletin - Febbraio 2025

******************************************************************

:: Descrizione del problema

Adobe ha rilasciato i seguenti aggiornamenti di sicurezza:

APSB25-01 : Security update available for Adobe InDesign
APSB25-08 : Security update available for Adobe Commerce
APSB25-09 : Security update available for Adobe Substance 3D Stager
APSB25-10 : Security update available for Adobe InCopy
APSB25-11 : Security update available for Adobe Illustrator
APSB25-12 : Security update available for Adobe Substance 3D Designer
APSB25-13 : Security update available for Adobe Photoshop Elements

Maggiori informazioni sono disponibili alla sezione "Riferimenti".


:: Software interessato

Adobe InDesign
Adobe Commerce
Adobe Commerce B2B
Magento Open Source
Adobe Substance 3D Stager
Adobe InCopy
Illustrator 2024
Illustrator 2025
Adobe Substance 3D Designer
Photoshop Elements


:: Impatto

Esecuzione remota di codice arbitrario (RCE)
Acquisizione di privilegi piu' elevati (EoP)
Bypass delle restrizioni di sicurezza (SRB)


:: Soluzioni

Aggiornare i software all'ultima versione:

Adobe InDesign ID20.1, ID19.5.2
Adobe Commerce 2.4.8-beta2, 2.4.7-p4, 2.4.6-p9, 2.4.5-p11, 2.4.4-p12
Adobe Commerce B2B 1.5.1, 1.4.2-p4, 1.3.5-p9, 1.3.4-p10, 1.3.3-p12
Magento Open Source 2.4.8-beta2, 2.4.7-p4, 2.4.6-p9, 2.4.5-p11, 2.4.4-p12
Adobe Substance 3D Stager 3.1.1
Adobe InCopy 20.1, 19.5.2
Illustrator 2024 28.7.4
Illustrator 2025 29.2.1
Adobe Substance 3D Designer 14.1
Photoshop Elements 2025.1 [build: 20250124.PSE.f552973b, 20250124.PSE.5345f07d (Mac ARM)]


:: Riferimenti

Adobe Security Bulletins e Advisories
https://helpx.adobe.com/security/security-bulletin.html
https://helpx.adobe.com/security/Home.html
https://helpx.adobe.com/security/products/indesign/apsb25-01.html
https://helpx.adobe.com/security/products/magento/apsb25-08.html
https://helpx.adobe.com/security/products/substance3d_stager/apsb25-09.html
https://helpx.adobe.com/security/products/incopy/apsb25-10.html
https://helpx.adobe.com/security/products/illustrator/apsb25-11.html
https://helpx.adobe.com/security/products/substance3d_designer/apsb25-12.html
https://helpx.adobe.com/security/products/photoshop_elements/apsb25-13.html

CSIRT Italia
https://www.acn.gov.it/portale/w/adobe-aggiornamenti-di-sicurezza

CIS - Center for Interner Security
https://www.cisecurity.org/advisory/multiple-vulnerabilities-in-adobe-products-could-allow-for-arbitrary-code-execution_2025-015

Mitre CVE
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21121
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21123
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21124
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21125
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21126
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21155
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21156
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21157
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21158
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21159
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21160
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21161
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21162
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21163
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-24406
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-24407
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-24408
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-24409
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-24410
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-24411
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-24412
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-24413
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-24414
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-24415
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-24416
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-24417
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-24418
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-24419
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-24420
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-24421
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-24422
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-24423
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-24424
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-24425
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-24426
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-24427
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-24428
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-24429
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-24430
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-24432
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-24434
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-24435
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-24436
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-24437
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-24438



GARR CERT Security Alert - subscribe/unsubscribe:
http://www.cert.garr.it/alert/ricevi-gli-alert-di-cert




-----BEGIN PGP SIGNATURE-----

iF0EAREIAB0WIQTGpdiR5MqstacBGHbBnEyTZRJgQgUCZ62g6QAKCRDBnEyTZRJg
QlIbAKDZnUsssxVPfF96ip/LtDC/k6jeBACbBHCsYqU/yohzi8g8aE1y59ijvAE=
=JkZb
-----END PGP SIGNATURE-----