Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

Firefox on Red Hat needs update to stay safe

published 2 years ago

Summary

The version of Firefox provided by Red Hat has known security weaknesses that could let attackers access data or take control of the browser. Installing the latest Red Hat security update for Firefox fixes these problems. Make sure your systems receive the update promptly through your normal patch management process.

What to do

Update redhat firefox to version 0:102.10.0-1.el8_1.
Update redhat firefox-debuginfo to version 0:102.10.0-1.el8_1.
Update redhat firefox-debugsource to version 0:102.10.0-1.el8_1.

Affected software

Ecosystem	Vendor	Product	Affected versions
Red Hat:rhel_e4s:8.1::appstream	redhat	firefox	< 0:102.10.0-1.el8_1 Fix: upgrade to 0:102.10.0-1.el8_1
Red Hat:rhel_e4s:8.1::appstream	redhat	firefox-debuginfo	< 0:102.10.0-1.el8_1 Fix: upgrade to 0:102.10.0-1.el8_1
Red Hat:rhel_e4s:8.1::appstream	redhat	firefox-debugsource	< 0:102.10.0-1.el8_1 Fix: upgrade to 0:102.10.0-1.el8_1

Original advisory text

Red Hat Security Advisory: firefox security update

References

https://access.redhat.com/errata/RHSA-2023:1792 Vendor Advisory
https://access.redhat.com/security/updates/classification/#important Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2186101 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2186102 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2186103 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2186104 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2186105 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2186106 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2186109 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2186110 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2186111 Third Party Advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_1792.j... Vendor Advisory
https://access.redhat.com/security/cve/CVE-2023-1945 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2023-1945 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-1945 Vendor Advisory
https://www.mozilla.org/en-US/security/advisories/mfsa2023-14/#CVE-2023-1945 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2023-1999 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2023-1999 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-1999 Vendor Advisory
https://www.mozilla.org/en-US/security/advisories/mfsa2023-14/#CVE-2023-1999 Third Party Advisory
https://www.mozilla.org/en-US/security/advisories/mfsa2023-15/#CVE-2023-1999 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2023-29533 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2023-29533 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-29533 Vendor Advisory
https://www.mozilla.org/en-US/security/advisories/mfsa2023-14/#CVE-2023-29533 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2023-29535 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2023-29535 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-29535 Vendor Advisory
https://www.mozilla.org/en-US/security/advisories/mfsa2023-14/#CVE-2023-29535 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2023-29536 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2023-29536 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-29536 Vendor Advisory
https://www.mozilla.org/en-US/security/advisories/mfsa2023-14/#CVE-2023-29536 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2023-29539 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2023-29539 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-29539 Vendor Advisory
https://www.mozilla.org/en-US/security/advisories/mfsa2023-14/#CVE-2023-29539 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2023-29541 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2023-29541 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-29541 Vendor Advisory
https://www.mozilla.org/en-US/security/advisories/mfsa2023-14/#CVE-2023-29541 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2023-29548 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2023-29548 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-29548 Vendor Advisory
https://www.mozilla.org/en-US/security/advisories/mfsa2023-14/#CVE-2023-29548 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2023-29550 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2023-29550 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-29550 Vendor Advisory
https://www.mozilla.org/en-US/security/advisories/mfsa2023-14/#CVE-2023-29550 Third Party Advisory

Fix within

Internet-facing 14 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit (estimated)
Gives an attacker full control (estimated)

Severity

8.8 High

Timeline

Published22 Sep 2024

Updated21 Aug 2026

First seen21 Aug 2026

Sources

RHSA-2023:1792 · OSV

Track software like this

Free during beta