Alert GCSA-18022 - Vulnerabilita' nei prodotti Mozilla (Firefox)

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

******************************************************************

   Alert ID: GCSA-18022
   Data: 14 marzo 2018
   Titolo: Vulnerabilita' nei prodotti Mozilla (Firefox)

******************************************************************

:: Descrizione del problema

   E' stata rilasciata una nuova versione del browser Mozilla Firefox
   che risolve varie vulnerabilita' potenzialmente sfruttabili da
   aggressori per condurre attacchi.


:: Software interessato

   Firefox versioni precedenti alla 59.0
   Firefox versioni precedenti alla ESR 52.7


:: Impatto

   Bypass di funzioni di sicurezza
   Esecuzione di codice arbitrario (RCE)
   Denial of service
   Accesso ad informazioni sensibili


:: Soluzioni

   Aggiornare Firefox all'ultima versione
   https://www.mozilla.org/it/firefox/new/


:: Riferimenti

   Security vulnerabilities fixed in Firefox 59
   https://www.mozilla.org/en-US/security/advisories/mfsa2018-06/

   Security vulnerabilities fixed in Firefox ESR 52.7
   https://www.mozilla.org/en-US/security/advisories/mfsa2018-07/

   What's new in Firefox 59.0
   https://www.mozilla.org/en-US/firefox/59.0/releasenotes/

   Security Advisories for Firefox
   https://www.mozilla.org/security/known-vulnerabilities/firefox/#firefox59

   SecurityFocus
   https://www.securityfocus.com/bid/103388
   https://www.securityfocus.com/bid/103386

   Slackware Security Advisory
   http://www.slackware.com/security/viewer.php?l=slackware-security&y=2018&m=slackware-security.360459


GARR CERT Security Alert - subscribe/unsubscribe:
http://www.cert.garr.it/alert/ricevi-gli-alert-di-cert

-----BEGIN PGP SIGNATURE-----

iD8DBQFaqQXCwZxMk2USYEIRAgR6AKCySnjvc/qtrVooUCdUyw1sOA9xZgCfRfHc
MXiDSl+KH/bAIdJVxsSPt7g=
=Up+2
-----END PGP SIGNATURE-----