Alert GCSA-25001 - Aggiornamento di sicurezza per prodotti Mozilla
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ****************************************************************** Alert ID: GCSA-25001 Data: 14 Gennaio 2025 Titolo: Aggiornamento di sicurezza per prodotti Mozilla ****************************************************************** :: Descrizione del problema Mozilla ha rilasciato nuove versioni del browser Firefox, Firefox ESR e del client di posta Thunderbird con le quali risolve alcune vulnerabilita', 2 delle quali di livello alto. Maggiori informazioni sono disponibili alla sezione "Riferimenti". :: Software interessato Firefox versioni precedenti alla 134 Firefox per iOS versioni precedenti alla 134 Firefox ESR versioni precedenti alla 128.6 Firefox ESR versioni precedenti alla 115.19 Thunderbird versioni precedenti alla 134 Thunderbird versioni precedenti alla 128.6 Thunderbird versioni precedenti alla 115.19 :: Impatto Remote Code Execution Denial of Service Information Disclosure Elevation of Privilege Security Restriction Bypass Spoofing :: Soluzioni Aggiornare Firefox all'ultima versione https://support.mozilla.org/en-US/kb/update-firefox-latest-release https://www.mozilla.org/it/firefox/new/ https://www.mozilla.org/it/firefox/enterprise/ https://www.mozilla.org/it/firefox/all/#product-desktop-release Aggiornare Thunderbird all'ultima versione https://support.mozilla.org/it/kb/aggiornamento-di-thunderbird https://www.mozilla.org/it/thunderbird/ https://www.thunderbird.net/it/thunderbird/all/ https://www.thunderbird.net/it/thunderbird/releases/ :: Riferimenti Mozilla Foundation Security Advisory https://www.mozilla.org/en-US/security/advisories/ https://www.mozilla.org/en-US/security/advisories/mfsa2025-01/ https://www.mozilla.org/en-US/security/advisories/mfsa2025-02/ https://www.mozilla.org/en-US/security/advisories/mfsa2025-03/ https://www.mozilla.org/en-US/security/advisories/mfsa2025-04/ https://www.mozilla.org/en-US/security/advisories/mfsa2025-05/ https://www.mozilla.org/en-US/security/advisories/mfsa2025-06/ Mitre CVE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-50336 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-0237 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-0238 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-0239 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-0240 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-0241 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-0242 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-0243 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-0244 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-0245 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-0246 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-0247 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-23108 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-23109 GARR CERT Security Alert - subscribe/unsubscribe: http://www.cert.garr.it/alert/ricevi-gli-alert-di-cert -----BEGIN PGP SIGNATURE----- iGsEAREIACsWIQTGpdiR5MqstacBGHbBnEyTZRJgQgUCZ4YjKQ0cY2VydEBnYXJy Lml0AAoJEMGcTJNlEmBCcB8An1TvaqDq+qwO0fDK5xDp9H8CCE4nAJwNZ0B/2RAZ WWhrwaaEh/unZL1xsA== =/ypR -----END PGP SIGNATURE-----