DSA-6605-1 chromium - security update
tag:blogger.com,1999:blog-8982037438137564684.post-37521758293263241672026-10-29T14:26:20.252-07:002026-11-03T13:29:23.627-08:00Stable Channel Update for…
security.bloxprod.io
CVE für Linux-Server, Android, Apple-Telefone, Windows, Browser, Krypto-Wallets und übrige Software. Ein Klick auf den Titel öffnet das Original beim Herausgeber.
tag:blogger.com,1999:blog-8982037438137564684.post-37521758293263241672026-10-29T14:26:20.252-07:002026-11-03T13:29:23.627-08:00Stable Channel Update for…
tag:blogger.com,1999:blog-8982037438137564684.post-37521758293263241672026-10-29T14:26:20.252-07:002026-11-03T13:29:23.627-08:00Stable Channel Update for…
tag:blogger.com,1999:blog-8982037438137564684.post-37521758293263241672026-10-29T14:26:20.252-07:002026-11-03T13:29:23.627-08:00Stable Channel Update for…
tag:blogger.com,1999:blog-8982037438137564684.post-37521758293263241672026-10-29T14:26:20.252-07:002026-11-03T13:29:23.627-08:00Stable Channel Update for…
tag:blogger.com,1999:blog-8982037438137564684.post-37521758293263241672026-10-29T14:26:20.252-07:002026-11-03T13:29:23.627-08:00Stable Channel Update for…
tag:blogger.com,1999:blog-8982037438137564684.post-37521758293263241672026-10-29T14:26:20.252-07:002026-11-03T13:29:23.627-08:00Stable Channel Update for…
tag:blogger.com,1999:blog-8982037438137564684.post-37521758293263241672026-10-29T14:26:20.252-07:002026-11-03T13:29:23.627-08:00Stable Channel Update for…
tag:blogger.com,1999:blog-8982037438137564684.post-37521758293263241672026-10-29T14:26:20.252-07:002026-11-03T13:29:23.627-08:00Stable Channel Update for…
tag:blogger.com,1999:blog-8982037438137564684.post-37521758293263241672026-10-29T14:26:20.252-07:002026-11-03T13:29:23.627-08:00Stable Channel Update for…
tag:blogger.com,1999:blog-8982037438137564684.post-37521758293263241672026-10-29T14:26:20.252-07:002026-11-03T13:29:23.627-08:00Stable Channel Update for…
tag:blogger.com,1999:blog-8982037438137564684.post-37521758293263241672026-10-29T14:26:20.252-07:002026-11-03T13:29:23.627-08:00Stable Channel Update for…
tag:blogger.com,1999:blog-8982037438137564684.post-37521758293263241672026-10-29T14:26:20.252-07:002026-11-03T13:29:23.627-08:00Stable Channel Update for…
tag:blogger.com,1999:blog-8982037438137564684.post-37521758293263241672026-10-29T14:26:20.252-07:002026-11-03T13:29:23.627-08:00Stable Channel Update for…
tag:blogger.com,1999:blog-8982037438137564684.post-37521758293263241672026-10-29T14:26:20.252-07:002026-11-03T13:29:23.627-08:00Stable Channel Update for…
tag:blogger.com,1999:blog-8982037438137564684.post-37521758293263241672026-10-29T14:26:20.252-07:002026-11-03T13:29:23.627-08:00Stable Channel Update for…
tag:blogger.com,1999:blog-8982037438137564684.post-37521758293263241672026-10-29T14:26:20.252-07:002026-11-03T13:29:23.627-08:00Stable Channel Update for…
tag:blogger.com,1999:blog-8982037438137564684.post-37521758293263241672026-10-29T14:26:20.252-07:002026-11-03T13:29:23.627-08:00Stable Channel Update for…
tag:blogger.com,1999:blog-8982037438137564684.post-37521758293263241672026-10-29T14:26:20.252-07:002026-11-03T13:29:23.627-08:00Stable Channel Update for…
### Summary `asn1.fromDer()` decodes the contents of BIT STRINGs as ASN.1 by default. That decode ignored the `maxDepth` recursion limit (an incomplete fix of CVE-2025-66031) and also decoded nested BIT STRINGs, keeping a full copy of the decoded contents at each level, so small crafted DER or PEM inputs (certificates, keys, PKCS structures) use excessive CPU time and memory and can abort the Node.js process. Fixed in node-forge 1.4.1. ### Details `asn1.fromDer()` attempts…