Alert GCSA-25059 - Aggiornamento di sicurezza per prodotti Mozilla

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

******************************************************************

Alert ID: GCSA-25059
Data: 30 Aprile 2025
Titolo: Aggiornamento di sicurezza per prodotti Mozilla

******************************************************************

:: Descrizione del problema

Mozilla ha rilasciato nuove versioni del browser Firefox, Firefox ESR
e del client di posta Thunderbird, Thunderbird ESR con le quali risolve
vulnerabilita' multiple.

Maggiori informazioni sono disponibili alla sezione "Riferimenti".


:: Software interessato

Firefox versioni precedenti alla 138
Firefox ESR versioni precedenti alla 128.10
Firefox ESR versioni precedenti alla 115.23
Thunderbird versioni precedenti alla 138
Thunderbird ESR versioni precedenti alla 128.10


:: Impatto

Elevation of Privilege
Remote Code Execution
Information Disclosure
Security Restriction Bypass
Cross-Site Scripting


:: Soluzioni

Aggiornare Firefox all'ultima versione

https://support.mozilla.org/en-US/kb/update-firefox-latest-release
https://www.mozilla.org/it/firefox/new/
https://www.mozilla.org/it/firefox/enterprise/
https://www.mozilla.org/it/firefox/all/#product-desktop-release

Aggiornare Thunderbird all'ultima versione

https://support.mozilla.org/it/kb/aggiornamento-di-thunderbird
https://www.mozilla.org/it/thunderbird/
https://www.thunderbird.net/it/thunderbird/all/
https://www.thunderbird.net/it/thunderbird/releases/


:: Riferimenti

Mozilla Foundation Security Advisory
https://www.mozilla.org/en-US/security/advisories/
https://www.mozilla.org/en-US/security/advisories/mfsa2025-28/
https://www.mozilla.org/en-US/security/advisories/mfsa2025-29/
https://www.mozilla.org/en-US/security/advisories/mfsa2025-30/
https://www.mozilla.org/en-US/security/advisories/mfsa2025-31/
https://www.mozilla.org/en-US/security/advisories/mfsa2025-32/

Mitre CVE
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-2817
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4082
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4083
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4084
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4085
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4086
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4087
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4088
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4089
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4090
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4091
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4092
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4093



GARR CERT Security Alert - subscribe/unsubscribe:
https://www.cert.garr.it/alert/ricevi-gli-alert-di-cert
-----BEGIN PGP SIGNATURE-----

iGsEAREIACsWIQTGpdiR5MqstacBGHbBnEyTZRJgQgUCaBHaKQ0cY2VydEBnYXJy
Lml0AAoJEMGcTJNlEmBCgs8AoMBveJYxmILyPBEyaYRFCT+jFpZBAJ9dfsNPtbPa
vJxFieezslSmvphUUg==
=j2LF
-----END PGP SIGNATURE-----