Alert GCSA-25059 - Aggiornamento di sicurezza per prodotti Mozilla
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ****************************************************************** Alert ID: GCSA-25059 Data: 30 Aprile 2025 Titolo: Aggiornamento di sicurezza per prodotti Mozilla ****************************************************************** :: Descrizione del problema Mozilla ha rilasciato nuove versioni del browser Firefox, Firefox ESR e del client di posta Thunderbird, Thunderbird ESR con le quali risolve vulnerabilita' multiple. Maggiori informazioni sono disponibili alla sezione "Riferimenti". :: Software interessato Firefox versioni precedenti alla 138 Firefox ESR versioni precedenti alla 128.10 Firefox ESR versioni precedenti alla 115.23 Thunderbird versioni precedenti alla 138 Thunderbird ESR versioni precedenti alla 128.10 :: Impatto Elevation of Privilege Remote Code Execution Information Disclosure Security Restriction Bypass Cross-Site Scripting :: Soluzioni Aggiornare Firefox all'ultima versione https://support.mozilla.org/en-US/kb/update-firefox-latest-release https://www.mozilla.org/it/firefox/new/ https://www.mozilla.org/it/firefox/enterprise/ https://www.mozilla.org/it/firefox/all/#product-desktop-release Aggiornare Thunderbird all'ultima versione https://support.mozilla.org/it/kb/aggiornamento-di-thunderbird https://www.mozilla.org/it/thunderbird/ https://www.thunderbird.net/it/thunderbird/all/ https://www.thunderbird.net/it/thunderbird/releases/ :: Riferimenti Mozilla Foundation Security Advisory https://www.mozilla.org/en-US/security/advisories/ https://www.mozilla.org/en-US/security/advisories/mfsa2025-28/ https://www.mozilla.org/en-US/security/advisories/mfsa2025-29/ https://www.mozilla.org/en-US/security/advisories/mfsa2025-30/ https://www.mozilla.org/en-US/security/advisories/mfsa2025-31/ https://www.mozilla.org/en-US/security/advisories/mfsa2025-32/ Mitre CVE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-2817 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4082 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4083 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4084 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4085 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4086 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4087 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4088 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4089 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4090 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4091 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4092 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4093 GARR CERT Security Alert - subscribe/unsubscribe: https://www.cert.garr.it/alert/ricevi-gli-alert-di-cert -----BEGIN PGP SIGNATURE----- iGsEAREIACsWIQTGpdiR5MqstacBGHbBnEyTZRJgQgUCaBHaKQ0cY2VydEBnYXJy Lml0AAoJEMGcTJNlEmBCgs8AoMBveJYxmILyPBEyaYRFCT+jFpZBAJ9dfsNPtbPa vJxFieezslSmvphUUg== =j2LF -----END PGP SIGNATURE-----