Alert GCSA-25065 - Aggiornamento di sicurezza per prodotti Mozilla
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ****************************************************************** Alert ID: GCSA-25065 Data: 19 Maggio 2025 Titolo: Aggiornamento di sicurezza per prodotti Mozilla ****************************************************************** :: Descrizione del problema Mozilla ha rilasciato nuove versioni del browser Firefox, Firefox ESR e del client di posta Thunderbird, con le quali risolve vulnerabilita' multiple. Maggiori informazioni sono disponibili alla sezione "Riferimenti". :: Software interessato Firefox versioni precedenti alla 138.0.4 Firefox ESR versioni precedenti alla 128.10.1 Firefox ESR versioni precedenti alla 115.23.1 Thunderbird versioni precedenti alla 138.0.1 Thunderbird versioni precedenti alla 128.10.1 :: Impatto Information Disclosure Remote Code Execution Denial of Service Security Restriction Bypass Spoofing :: Soluzioni Aggiornare Firefox all'ultima versione https://support.mozilla.org/en-US/kb/update-firefox-latest-release https://www.mozilla.org/it/firefox/new/ https://www.mozilla.org/it/firefox/enterprise/ https://www.mozilla.org/it/firefox/all/#product-desktop-release Aggiornare Thunderbird all'ultima versione https://support.mozilla.org/it/kb/aggiornamento-di-thunderbird https://www.mozilla.org/it/thunderbird/ https://www.thunderbird.net/it/thunderbird/all/ https://www.thunderbird.net/it/thunderbird/releases/ :: Riferimenti Mozilla Foundation Security Advisory https://www.mozilla.org/en-US/security/advisories/ https://www.mozilla.org/en-US/security/advisories/mfsa2025-34/ https://www.mozilla.org/en-US/security/advisories/mfsa2025-35/ https://www.mozilla.org/en-US/security/advisories/mfsa2025-36/ https://www.mozilla.org/en-US/security/advisories/mfsa2025-37/ https://www.mozilla.org/en-US/security/advisories/mfsa2025-38/ Mitre CVE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-3875 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-3877 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-3909 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-3932 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4918 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4919 GARR CERT Security Alert - subscribe/unsubscribe: https://www.cert.garr.it/alert/ricevi-gli-alert-di-cert -----BEGIN PGP SIGNATURE----- iGsEAREIACsWIQTGpdiR5MqstacBGHbBnEyTZRJgQgUCaCrrCw0cY2VydEBnYXJy Lml0AAoJEMGcTJNlEmBCt80AniMnQnPq4WX3s7AsWpkPudk9piuQAJ4kA/dI1uon ssUCZnisUMjQbKxSBg== =Wapu -----END PGP SIGNATURE-----