Alert GCSA-22127 - Aggiornamento di sicurezza per prodotti Mozilla
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ****************************************************************** Alert ID: GCSA-22127 Data: 16 Novembre 2022 Titolo: Aggiornamento di sicurezza per Mozilla Firefox, Firefox ESR e Thunderbird ****************************************************************** :: Descrizione del problema Mozilla ha rilasciato nuove versioni del browser Firefox, Firefox ESR e del client di posta Thunderbird con le quali risolve varie vulnerabilita', alcune delle quali di livello elevato. Maggiori informazioni sono disponibili alla sezione "Riferimenti". :: Software interessato Firefox versioni precedenti alla 107 Firefox ESR 102.x: versioni precedenti alla 102.5 Thunderbird 102.x: versioni precedenti alla 102.5 :: Impatto Esecuzione remota di codice arbitrario (RCE) Bypass delle funzionalita' di sicurezza (SFB) Accesso a dati riservati (ID) Provide Misleading Information (spoofing) :: Soluzioni Aggiornare Firefox all'ultima versione Firefox 107 Firefox ESR 102.5 https://support.mozilla.org/en-US/kb/update-firefox-latest-release https://www.mozilla.org/it/firefox/new/ https://www.mozilla.org/en-US/firefox/organizations/ https://www.mozilla.org/en-US/firefox/all/#product-desktop-release Aggiornare Thunderbird all'ultima versione Thunderbird 102.5 https://support.mozilla.org/it/kb/aggiornamento-di-thunderbird https://www.mozilla.org/it/thunderbird/ https://www.thunderbird.net/en-US/thunderbird/all/ :: Riferimenti Mozilla Foundation Security Advisory https://www.mozilla.org/en-US/security/advisories/ https://www.mozilla.org/en-US/security/advisories/mfsa2022-47/ https://www.mozilla.org/en-US/security/advisories/mfsa2022-48/ https://www.mozilla.org/en-US/security/advisories/mfsa2022-49/ https://www.mozilla.org/en-US/security/known-vulnerabilities/thunderbird/ CSIRT Italia https://www.csirt.gov.it/contenuti/aggiornamenti-di-sicurezza-per-prodotti-mozilla-al01-221116-csirt-ita CIS - Center for Internet Security https://www.cisecurity.org/advisory/multiple-vulnerabilities-in-mozilla-products-could-allow-for-arbitrary-code-execution_2022-134 Mitre CVE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45403 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45404 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45405 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45406 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45407 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45408 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45409 GARR CERT Security Alert - subscribe/unsubscribe: http://www.cert.garr.it/alert/ricevi-gli-alert-di-cert -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iEYEAREIAAYFAmN05vYACgkQwZxMk2USYEJKDQCfesq/T+ObT8pvDtj99NVq7iNL wKQAn2jSJQHXM8h+As6Mo3PIXtQU3EhL =LCcy -----END PGP SIGNATURE-----