Alert GCSA-22095 - Aggiornamento di sicurezza per prodotti Mozilla
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ****************************************************************** alert ID: GCSA-22095 data: 24 Agosto 2022 titolo: Aggiornamento di sicurezza per Mozilla Firefox, Firefox ESR e Thunderbird ****************************************************************** :: Descrizione del problema Mozilla ha rilasciato nuove versioni del browser Firefox, Firefox ESR e del client di posta Thunderbird con le quali risolve varie vulnerabilita', alcune delle quali di livello elevato. Maggiori informazioni sono disponibili alla sezione "Riferimenti". :: Software interessato Firefox versioni precedenti alla 104 Firefox ESR 102.x: versioni precedenti alla 102.2 Firefox ESR 91.x: versioni precedenti alla 91.13 Thunderbird 102.x: versioni precedenti alla 102.2 Thunderbird 91.x: versioni precedenti alla 91.13 :: Impatto Esecuzione remota di codice arbitrario (RCE) Bypass delle funzionalita' di sicurezza (SFB) Accesso a dati riservati (ID) Provide Misleading Information (spoofing) Denial of Service (DoS) Manomissione di dati (Data Manipulation) :: Soluzioni Aggiornare Firefox all'ultima versione Firefox 102.2 Firefox ESR 91.13 e Firefox ESR 102.2 https://support.mozilla.org/en-US/kb/update-firefox-latest-release https://www.mozilla.org/it/firefox/new/ https://www.mozilla.org/en-US/firefox/organizations/ https://www.mozilla.org/en-US/firefox/all/#product-desktop-release Aggiornare Thunderbird all'ultima versione Thunderbird 102.2 Thunderbird 91.13 https://support.mozilla.org/it/kb/aggiornamento-di-thunderbird https://www.mozilla.org/it/thunderbird/ https://www.thunderbird.net/en-US/thunderbird/all/ :: Riferimenti Mozilla Foundation Security Advisory https://www.mozilla.org/en-US/security/advisories/ https://www.mozilla.org/en-US/security/advisories/mfsa2022-33/ https://www.mozilla.org/en-US/security/advisories/mfsa2022-34/ https://www.mozilla.org/en-US/security/advisories/mfsa2022-35/ https://www.mozilla.org/en-US/security/advisories/mfsa2022-36/ https://www.mozilla.org/en-US/security/advisories/mfsa2022-37/ https://www.mozilla.org/en-US/security/known-vulnerabilities/thunderbird/ CSIRT Italia https://www.csirt.gov.it/contenuti/aggiornamenti-di-sicurezza-per-prodotti-mozilla-al01-220824-csirt-ita CIS - Center for Internet Security https://www.cisecurity.org/advisory/multiple-vulnerabilities-in-mozilla-products-could-allow-for-arbitrary-code-execution_2022-0106 Mitre CVE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-38472 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-38473 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-38476 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-38477 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-38478 GARR CERT Security Alert - subscribe/unsubscribe: http://www.cert.garr.it/alert/ricevi-gli-alert-di-cert -----BEGIN PGP SIGNATURE----- iF0EAREIAB0WIQTGpdiR5MqstacBGHbBnEyTZRJgQgUCYwXbBAAKCRDBnEyTZRJg QkhMAKC4HyMS6upDwy8XsXcY1Wl0H/i26wCfasedznycn9y47cQ8dH85anrZrdI= =fSYR -----END PGP SIGNATURE-----