Alert GCSA-21041 - Aggiornamenti di sicurezza per prodotti Mozilla

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

******************************************************************

Alert ID: GCSA-21041
Data: 20 Aprile 2021
Titolo: Aggiornamenti di sicurezza per prodotti Mozilla

******************************************************************


:: Descrizione

Mozilla ha rilasciato nuove versioni del browser Firefox e del
client di posta Thunderbird, con le quali vengono risolte alcune
vulnerabilita', potenzialmente sfruttabili per condurre attacchi.

Maggiori informazioni sono disponibili nelle segnalazioni
ufficiali alla sezione "Riferimenti".


:: Software interessato

Firefox versioni precedenti alla 88
Firefox ESR versioni precedenti alla 78.10
Thunderbird versioni precedenti alla 78.10


:: Impatto

Esecuzione remota di codice arbitrario
Denial of Service
Aggiramento delle restrizioni di sicurezza
Rivelazione di informazioni riservate
Cross-Site Scripting
Aumento dei privilegi
Manipolazione di dati


:: Soluzione

Aggiornare i software all'ultima versione

https://www.mozilla.org/it/firefox/new/
https://www.mozilla.org/en-US/firefox/organizations/

https://www.mozilla.org/it/thunderbird/
https://www.thunderbird.net/en-US/thunderbird/all/
https://support.mozilla.org/it/kb/aggiornamento-di-thunderbird


:: Riferimenti

Mozilla - Release Notes
https://www.mozilla.org/en-US/firefox/88.0/releasenotes/
https://www.mozilla.org/en-US/firefox/78.10.0/releasenotes/
https://www.thunderbird.net/en-US/thunderbird/78.10.0/releasenotes/

Mozilla Security Advisory
https://www.mozilla.org/en-US/security/advisories/mfsa2021-16/
https://www.mozilla.org/en-US/security/advisories/mfsa2021-15/
https://www.mozilla.org/en-US/security/advisories/mfsa2021-14/

Mitre CVE
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23994
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23995
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23996
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23997
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23998
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23999
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-24000
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-24001
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-24002
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-29944
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-29945
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-29946
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-29947


GARR CERT Security Alert - subscribe/unsubscribe:
http://www.cert.garr.it/alert/ricevi-gli-alert-di-cert
-----BEGIN PGP SIGNATURE-----

iD8DBQFgfpIRwZxMk2USYEIRAqeqAJwNkCiYE5mr06ImG8nto9nV1FDdlgCgrt/v
P3NlK84WUHgtxKx0RVdKyvM=
=YKxY
-----END PGP SIGNATURE-----