Alert GCSA-22083 - Aggiornamento di sicurezza per Mozilla Firefox
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ****************************************************************** Alert ID: GCSA-22083 Data: 27 Luglio 2022 Titolo: Aggiornamento di sicurezza per Mozilla Firefox ****************************************************************** :: Descrizione del problema Mozilla ha rilasciato una nuova versione del browser Firefox con la quale risolve varie vulnerabilita', alcune delle quali di livello elevato. Maggiori informazioni sono disponibili alla sezione "Riferimenti". :: Software interessato Firefox versioni precedenti alla 103 Firefox ESR versioni precedenti alla 91.12 Firefox ESR versioni precedenti alla 102.1 :: Impatto Denial of Service (DoS) Esecuzione remota di codice arbitrario (RCE) Bypass delle restrizioni di sicurezza (SRB) Accesso a dati riservati (ID) Provide Misleading Information (spoofing) Manipolazione di dati (DM) :: Soluzioni Aggiornare Firefox all'ultima versione Firefox 103 Firefox ESR 91.12 Firefox ESR 102.1 https://support.mozilla.org/en-US/kb/update-firefox-latest-release https://www.mozilla.org/it/firefox/new/ https://www.mozilla.org/en-US/firefox/organizations/ https://www.mozilla.org/en-US/firefox/all/#product-desktop-release :: Riferimenti Mozilla Foundation Security Advisory https://www.mozilla.org/en-US/security/advisories/ https://www.mozilla.org/en-US/security/advisories/mfsa2022-28 https://www.mozilla.org/en-US/security/advisories/mfsa2022-29 https://www.mozilla.org/en-US/security/advisories/mfsa2022-30 Firefox - Release Notes https://www.mozilla.org/en-US/firefox/103.0/releasenotes/ https://www.mozilla.org/en-US/firefox/91.12.0/releasenotes/ https://www.mozilla.org/en-US/firefox/102.1.0/releasenotes/ Mitre CVE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2505 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36314 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36315 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36316 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36317 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36318 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36319 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36320 GARR CERT Security Alert - subscribe/unsubscribe: http://www.cert.garr.it/alert/ricevi-gli-alert-di-cert -----BEGIN PGP SIGNATURE----- iD8DBQFi4O4hwZxMk2USYEIRCGugAJ4g5svCWlqb0a8CxspmeyOXz/8XuACbByCU B2SwjPpFT99AeDFTEt/vcSY= =2DSb -----END PGP SIGNATURE-----