Alert GCSA-23025 - Aggiornamento di sicurezza per Mozilla Thunderbird
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ****************************************************************** Alert ID: GCSA-23025 Data: 21 Febbraio 2023 Titolo: Aggiornamento di sicurezza per Mozilla Thunderbird ****************************************************************** :: Descrizione del problema Mozilla ha rilasciato una nuova versione del client di posta Thunderbird con le quali risolve una vulnerabilita' che potrebbe essere sfruttata da un attaccante remoto per innescare un Denial of Service, eseguire codice arbitrario, consentire lo spoofing, rivelare informazioni sensibili ed oltrepassare restrizioni di sicurezza su un sistema che ne sia affetto. Maggiori informazioni sono disponibili alla sezione "Riferimenti". :: Software interessato Thunderbird versioni precedenti alla 102.8 :: Impatto Spoofing Remote Code Execution Information Disclosure Security Restriction Bypass Denial of Service :: Soluzioni Aggiornare Thunderbird all'ultima versione Thunderbird 102.8 https://support.mozilla.org/it/kb/aggiornamento-di-thunderbird https://www.mozilla.org/it/thunderbird/ https://www.thunderbird.net/en-US/thunderbird/all/ :: Riferimenti Mozilla Foundation Security Advisory https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/ Mitre CVE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0616 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0767 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25728 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25729 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25730 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25732 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25734 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25735 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25737 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25738 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25739 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25742 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25746 GARR CERT Security Alert - subscribe/unsubscribe: http://www.cert.garr.it/alert/ricevi-gli-alert-di-cert -----BEGIN PGP SIGNATURE----- iD8DBQFj9KKewZxMk2USYEIRCCzhAKCZxHD4yXQTqNJ3g9Pk0WJW5mRefQCdFtDG X0h/F61huKGPkfA97+S6C6M= =u1KY -----END PGP SIGNATURE-----