Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

Firefox may let attackers run code on your computer

published 2 years ago

Summary

Red Hat has released an update for the Firefox web browser that fixes a security weakness that could let a malicious website or email cause the browser to run unwanted code. If that code runs, it could compromise the data on the affected system. Install the new Firefox package from Red Hat as soon as possible to stay protected.

What to do

Update redhat firefox to version 0:102.10.0-1.el9_1.
Update redhat firefox-debuginfo to version 0:102.10.0-1.el9_1.
Update redhat firefox-debugsource to version 0:102.10.0-1.el9_1.
Update redhat firefox-x11 to version 0:102.10.0-1.el9_1.

Affected software

Ecosystem	Vendor	Product	Affected versions
Red Hat:enterprise_linux:9::appstream	redhat	firefox	< 0:102.10.0-1.el9_1 Fix: upgrade to 0:102.10.0-1.el9_1
Red Hat:enterprise_linux:9::appstream	redhat	firefox-debuginfo	< 0:102.10.0-1.el9_1 Fix: upgrade to 0:102.10.0-1.el9_1
Red Hat:enterprise_linux:9::appstream	redhat	firefox-debugsource	< 0:102.10.0-1.el9_1 Fix: upgrade to 0:102.10.0-1.el9_1
Red Hat:enterprise_linux:9::appstream	redhat	firefox-x11	< 0:102.10.0-1.el9_1 Fix: upgrade to 0:102.10.0-1.el9_1

Original advisory text

Red Hat Security Advisory: firefox security update

References

https://access.redhat.com/errata/RHSA-2023:1786 Vendor Advisory
https://access.redhat.com/security/updates/classification/#important Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2186101 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2186102 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2186103 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2186104 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2186105 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2186106 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2186109 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2186110 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2186111 Third Party Advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_1786.j... Vendor Advisory
https://access.redhat.com/security/cve/CVE-2023-1945 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2023-1945 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-1945 Vendor Advisory
https://www.mozilla.org/en-US/security/advisories/mfsa2023-14/#CVE-2023-1945 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2023-1999 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2023-1999 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-1999 Vendor Advisory
https://www.mozilla.org/en-US/security/advisories/mfsa2023-14/#CVE-2023-1999 Third Party Advisory
https://www.mozilla.org/en-US/security/advisories/mfsa2023-15/#CVE-2023-1999 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2023-29533 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2023-29533 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-29533 Vendor Advisory
https://www.mozilla.org/en-US/security/advisories/mfsa2023-14/#CVE-2023-29533 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2023-29535 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2023-29535 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-29535 Vendor Advisory
https://www.mozilla.org/en-US/security/advisories/mfsa2023-14/#CVE-2023-29535 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2023-29536 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2023-29536 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-29536 Vendor Advisory
https://www.mozilla.org/en-US/security/advisories/mfsa2023-14/#CVE-2023-29536 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2023-29539 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2023-29539 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-29539 Vendor Advisory
https://www.mozilla.org/en-US/security/advisories/mfsa2023-14/#CVE-2023-29539 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2023-29541 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2023-29541 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-29541 Vendor Advisory
https://www.mozilla.org/en-US/security/advisories/mfsa2023-14/#CVE-2023-29541 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2023-29548 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2023-29548 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-29548 Vendor Advisory
https://www.mozilla.org/en-US/security/advisories/mfsa2023-14/#CVE-2023-29548 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2023-29550 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2023-29550 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-29550 Vendor Advisory
https://www.mozilla.org/en-US/security/advisories/mfsa2023-14/#CVE-2023-29550 Third Party Advisory

Fix within

Internet-facing 14 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit (estimated)
Gives an attacker full control (estimated)

Severity

8.8 High

Timeline

Published22 Sep 2024

Updated21 Aug 2026

First seen21 Aug 2026

Sources

RHSA-2023:1786 · OSV

Track software like this

Free during beta