Serial number:AV25-706
Date:October 29, 2025

On October 28, 2025, Google published a security advisory to address a vulnerability in the following product:

• Stable Channel Chrome for Desktop – versions prior to 142.0.7444.59/60 (Windows and Mac) and 142.0.7444.59 (Linux)

The Cyber Centre encourages users and administrators to review the provided web link and apply the necessary updates, when available.

• Google Chrome Security Advisory

Serial number:AV25-705
Date:October 29, 2025

On October 28, 2025, VMware published security advisories to address vulnerabilities in the following products. Included were critical updates for the following :

• VMware Tanzu GemFire Management Console – versions prior to 1.4.1
• VMware Tanzu for Valkey – versions prior to 7.2.11
• VMware Tanzu for Valkey – versions prior to 8.0.5
• VMware Tanzu for Valkey – versions prior to 8.0.6
• VMware Tanzu for Valkey – versions prior to 8.1.4
• VMware Tanzu for Valkey on Kubernetes – versions prior to 3.2.0
• VMware Tanzu GemFire – versions prior to 10.2.0

The Cyber Centre encourages users and administrators to review the provided web link and perform the suggested mitigations.

• Security Advisories - VMware Cloud Foundation

Serial number:AV25-704
Date:October 28, 2025

On October 28, 2025, Mozilla published a security advisory to address a vulnerability in the following product:

• Firefox – versions prior to 144.0.2

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.

• Mozilla Foundation Security Advisory 2025-86
• Mozilla Security Advisories

Serial number:AV25-703
Date:October 28, 2025

On October 14, 2025, Veeam published a security advisory to address vulnerabilities in the following product:

• Veeam Backup & Replication – version 12.3.2.3617 and prior

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.

• Vulnerabilities Resolved in Veeam Backup & Replication 12.3.2.4165 Patch
• Veeam Knowledge Base

Serial number:AV25-702
Date:October 28, 2025

On October 27, 2025, Apache published security advisories to address vulnerabilities in the following products:

• Apache Tomcat – versions 11.0.0-M1 to 11.0.10
• Apache Tomcat – versions 10.1.0-M1 to 10.1.44
• Apache Tomcat – versions 9.0.0.M11 to 9.0.108
• Apache Tomcat – versions 9.0.0.40 to 9.0.108

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.

• [SECURITY] CVE-2025-55754 Apache Tomcat - Console manipulation via escape sequences in log messages
• [SECURITY] CVE-2025-55752 Apache Tomcat - Directory traversal via rewrite with possible RCE if PUT is enabled

Serial number:AV25-701
Date:October 28, 2025

On October 23, 2025, HashiCorp published security advisories to address vulnerabilities in the following products:

• Vault Community – versions prior to 1.21.0
• Vault Enterprise – versions prior to 1.21.0, 1.20.5, 1.19.11 and 1.16.27

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.

• HCSEC-2025-31 - Vault Vulnerable to Denial of Service Due to Rate Limit Regression
• HCSEC-2025-30 - Vault AWS Auth Method Authentication Bypass Through Mishandling of Cache Entries