DSA-6481-1 firefox-esr - security update
⚠️ Importante
https://security-tracker.debian.org/tracker/DSA-6481-1
Debian
2026-09-02 00:00 UTC · 2026-09-01 21:00 -03
https://security-tracker.debian.org/tracker/DSA-6481-1
It was discovered that pyasn1 did not properly bound the size of long-form tag identifiers when parsing BER, CER, or DER encoded data. An attacker could possibly use this issue to cause applications decoding untrusted ASN.1 data to consume…
It was discovered that Libgcrypt had a timing-based side-channel flaw in its RSA implementation. A remote attacker could possibly use this issue to obtain sensitive information.
USN-8688-1 fixed a vulnerability in PAM. This update provides the corresponding fix for PAM on Ubuntu 26.04 LTS. Original advisory details: Juthawong Naisanguansee discovered that PAM incorrectly cleared failed login attempt records wh…