Alert GCSA-19109 - Aggiornamento di sicurezza per Mozilla Firefox

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

******************************************************************

   Alert ID: GCSA-19109
   Data: 24 ottobre 2019
   Titolo: Aggiornamento di sicurezza per Mozilla Firefox

******************************************************************

:: Descrizione del problema

   Mozilla ha rilasciato nuove versioni del browser Firefox
   con le quali risolve numerose vulnerabilita',
   potenzialmente sfruttabili per condurre attacchi.


:: Software interessato

   Firefox versioni precedenti alla 70
   Firefox ESR versioni precedenti alla 68.2


:: Impatto

   Denial of Service
   Remote Code Execution
   Security Restriction Bypass
   Information Disclosure


:: Soluzioni

   Aggiornare Firefox all'ultima versione

   https://www.mozilla.org/it/firefox/new/
   https://www.mozilla.org/en-US/firefox/organizations/


:: Riferimenti

   Mozilla Foundation Security Advisory
   https://www.mozilla.org/en-US/security/advisories/mfsa2019-34/
   https://www.mozilla.org/en-US/security/advisories/mfsa2019-33/

   What's new in Firefox - Release Notes
   https://www.mozilla.org/en-US/firefox/70.0/releasenotes/

   CERT Nazionale Italia
   https://www.certnazionale.it/news/2019/10/24/risolte-vulnerabilita-critiche-in-mozilla-firefox-70/

   Threatpost news
   https://threatpost.com/critical-firefox-bugs-arbitrary-code-execution/149455/

   Red Hat Security Advisory
   https://access.redhat.com/errata/RHSA-2019:3193

   Ubuntu security notices
   https://usn.ubuntu.com/4165-1/

   Scientific Linux
   https://www.scientificlinux.org/category/sl-errata/slsa-20193193-1/


GARR CERT Security Alert - subscribe/unsubscribe:
http://www.cert.garr.it/alert/ricevi-gli-alert-di-cert

-----BEGIN PGP SIGNATURE-----

iD8DBQFdsWnkwZxMk2USYEIRApThAJwMtH8RRvUUBMALfXm0kRjRrJPQ/wCeLKjn
KW5Si84NEB0AhXWHfnY87Tw=
=8CjC
-----END PGP SIGNATURE-----