Alert GCSA-25100 - Aggiornamento di sicurezza per prodotti Mozilla

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256





******************************************************************

Alert ID: GCSA-25100
Data: 22 agosto 2025
Titolo: Aggiornamento di sicurezza per prodotti Mozilla

******************************************************************

:: Descrizione del problema

Mozilla ha rilasciato nuove versioni del browser Firefox, Firefox ESR,
Focus, e dei client di posta Thunderbird e Thunderbird ESR, con le quali
risolve vulnerabilita' multiple, di cui 3 con gravita' "critica" e
7 con gravita' "alta"..

Maggiori informazioni sono disponibili alla sezione "Riferimenti".


:: Software interessato

Firefox versioni precedenti alla 142
Firefox ESR versioni precedenti alla 115.27
Firefox ESR versioni precedenti alla 128.14
Firefox ESR versioni precedenti alla 140.2
Focus per IoS versioni precedenti alla 142
Thunderbird versioni precedenti alla 142
Thunderbird ESR versioni precedenti alla 140.2
Thunderbird ESR versioni precedenti alla 128.14


:: Impatto

Remote Code Execution
Security Restriction Bypass


:: Soluzioni

Aggiornare Firefox all'ultima versione

https://support.mozilla.org/en-US/kb/update-firefox-latest-release
https://www.mozilla.org/it/firefox/new/
https://www.mozilla.org/it/firefox/enterprise/
https://www.mozilla.org/it/firefox/all/#product-desktop-release

Aggiornare Thunderbird all'ultima versione

https://support.mozilla.org/it/kb/aggiornamento-di-thunderbird
https://www.mozilla.org/it/thunderbird/
https://www.thunderbird.net/it/thunderbird/all/
https://www.thunderbird.net/it/thunderbird/releases/


:: Riferimenti

Mozilla Foundation Security Advisory
https://www.mozilla.org/en-US/security/advisories/
https://www.mozilla.org/en-US/security/advisories/mfsa2025-64/
https://www.mozilla.org/en-US/security/advisories/mfsa2025-65/
https://www.mozilla.org/en-US/security/advisories/mfsa2025-66/
https://www.mozilla.org/en-US/security/advisories/mfsa2025-67/
https://www.mozilla.org/en-US/security/advisories/mfsa2025-68/
https://www.mozilla.org/en-US/security/advisories/mfsa2025-69/
https://www.mozilla.org/en-US/security/advisories/mfsa2025-70/
https://www.mozilla.org/en-US/security/advisories/mfsa2025-71/
https://www.mozilla.org/en-US/security/advisories/mfsa2025-72/

CSIRT Italia
https://www.acn.gov.it/portale/w/aggiornamenti-di-sicurezza-per-prodotti-mozilla-11

Mitre CVE
https://www.cve.org/CVERecord/?id=CVE-2025-9187
https://www.cve.org/CVERecord/?id=CVE-2025-9186
https://www.cve.org/CVERecord/?id=CVE-2025-9185
https://www.cve.org/CVERecord/?id=CVE-2025-9184
https://www.cve.org/CVERecord/?id=CVE-2025-9183
https://www.cve.org/CVERecord/?id=CVE-2025-9182
https://www.cve.org/CVERecord/?id=CVE-2025-9181
https://www.cve.org/CVERecord/?id=CVE-2025-9180
https://www.cve.org/CVERecord/?id=CVE-2025-9179
https://www.cve.org/CVERecord/?id=CVE-2025-55033
https://www.cve.org/CVERecord/?id=CVE-2025-55032
https://www.cve.org/CVERecord/?id=CVE-2025-55031
https://www.cve.org/CVERecord/?id=CVE-2025-55030
https://www.cve.org/CVERecord/?id=CVE-2025-55029
https://www.cve.org/CVERecord/?id=CVE-2025-55028



GARR CERT Security Alert - subscribe/unsubscribe:
https://www.cert.garr.it/alert/ricevi-gli-alert-di-cert




-----BEGIN PGP SIGNATURE-----

iF0EAREIAB0WIQTGpdiR5MqstacBGHbBnEyTZRJgQgUCaKhpVQAKCRDBnEyTZRJg
QtKoAJ9n56WGpmtkbFTrks4AjfimJ15YWwCgtSHFMUDjzQJ8oV5uu/k2HyELpWQ=
=rRT+
-----END PGP SIGNATURE-----