Alert GCSA-25059 - Aggiornamento di sicurezza per prodotti Mozilla
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
******************************************************************
Alert ID: GCSA-25059
Data: 30 Aprile 2025
Titolo: Aggiornamento di sicurezza per prodotti Mozilla
******************************************************************
:: Descrizione del problema
Mozilla ha rilasciato nuove versioni del browser Firefox, Firefox ESR
e del client di posta Thunderbird, Thunderbird ESR con le quali risolve
vulnerabilita' multiple.
Maggiori informazioni sono disponibili alla sezione "Riferimenti".
:: Software interessato
Firefox versioni precedenti alla 138
Firefox ESR versioni precedenti alla 128.10
Firefox ESR versioni precedenti alla 115.23
Thunderbird versioni precedenti alla 138
Thunderbird ESR versioni precedenti alla 128.10
:: Impatto
Elevation of Privilege
Remote Code Execution
Information Disclosure
Security Restriction Bypass
Cross-Site Scripting
:: Soluzioni
Aggiornare Firefox all'ultima versione
https://support.mozilla.org/en-US/kb/update-firefox-latest-release
https://www.mozilla.org/it/firefox/new/
https://www.mozilla.org/it/firefox/enterprise/
https://www.mozilla.org/it/firefox/all/#product-desktop-release
Aggiornare Thunderbird all'ultima versione
https://support.mozilla.org/it/kb/aggiornamento-di-thunderbird
https://www.mozilla.org/it/thunderbird/
https://www.thunderbird.net/it/thunderbird/all/
https://www.thunderbird.net/it/thunderbird/releases/
:: Riferimenti
Mozilla Foundation Security Advisory
https://www.mozilla.org/en-US/security/advisories/
https://www.mozilla.org/en-US/security/advisories/mfsa2025-28/
https://www.mozilla.org/en-US/security/advisories/mfsa2025-29/
https://www.mozilla.org/en-US/security/advisories/mfsa2025-30/
https://www.mozilla.org/en-US/security/advisories/mfsa2025-31/
https://www.mozilla.org/en-US/security/advisories/mfsa2025-32/
Mitre CVE
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-2817
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4082
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4083
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4084
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4085
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4086
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4087
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4088
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4089
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4090
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4091
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4092
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4093
GARR CERT Security Alert - subscribe/unsubscribe:
https://www.cert.garr.it/alert/ricevi-gli-alert-di-cert
-----BEGIN PGP SIGNATURE-----
iGsEAREIACsWIQTGpdiR5MqstacBGHbBnEyTZRJgQgUCaBHaKQ0cY2VydEBnYXJy
Lml0AAoJEMGcTJNlEmBCgs8AoMBveJYxmILyPBEyaYRFCT+jFpZBAJ9dfsNPtbPa
vJxFieezslSmvphUUg==
=j2LF
-----END PGP SIGNATURE-----
Hash: SHA256
******************************************************************
Alert ID: GCSA-25059
Data: 30 Aprile 2025
Titolo: Aggiornamento di sicurezza per prodotti Mozilla
******************************************************************
:: Descrizione del problema
Mozilla ha rilasciato nuove versioni del browser Firefox, Firefox ESR
e del client di posta Thunderbird, Thunderbird ESR con le quali risolve
vulnerabilita' multiple.
Maggiori informazioni sono disponibili alla sezione "Riferimenti".
:: Software interessato
Firefox versioni precedenti alla 138
Firefox ESR versioni precedenti alla 128.10
Firefox ESR versioni precedenti alla 115.23
Thunderbird versioni precedenti alla 138
Thunderbird ESR versioni precedenti alla 128.10
:: Impatto
Elevation of Privilege
Remote Code Execution
Information Disclosure
Security Restriction Bypass
Cross-Site Scripting
:: Soluzioni
Aggiornare Firefox all'ultima versione
https://support.mozilla.org/en-US/kb/update-firefox-latest-release
https://www.mozilla.org/it/firefox/new/
https://www.mozilla.org/it/firefox/enterprise/
https://www.mozilla.org/it/firefox/all/#product-desktop-release
Aggiornare Thunderbird all'ultima versione
https://support.mozilla.org/it/kb/aggiornamento-di-thunderbird
https://www.mozilla.org/it/thunderbird/
https://www.thunderbird.net/it/thunderbird/all/
https://www.thunderbird.net/it/thunderbird/releases/
:: Riferimenti
Mozilla Foundation Security Advisory
https://www.mozilla.org/en-US/security/advisories/
https://www.mozilla.org/en-US/security/advisories/mfsa2025-28/
https://www.mozilla.org/en-US/security/advisories/mfsa2025-29/
https://www.mozilla.org/en-US/security/advisories/mfsa2025-30/
https://www.mozilla.org/en-US/security/advisories/mfsa2025-31/
https://www.mozilla.org/en-US/security/advisories/mfsa2025-32/
Mitre CVE
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-2817
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4082
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4083
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4084
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4085
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4086
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4087
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4088
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4089
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4090
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4091
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4092
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4093
GARR CERT Security Alert - subscribe/unsubscribe:
https://www.cert.garr.it/alert/ricevi-gli-alert-di-cert
-----BEGIN PGP SIGNATURE-----
iGsEAREIACsWIQTGpdiR5MqstacBGHbBnEyTZRJgQgUCaBHaKQ0cY2VydEBnYXJy
Lml0AAoJEMGcTJNlEmBCgs8AoMBveJYxmILyPBEyaYRFCT+jFpZBAJ9dfsNPtbPa
vJxFieezslSmvphUUg==
=j2LF
-----END PGP SIGNATURE-----