Serial number:AV25-694
Date:October 22, 2025

On October 22, 2025, Drupal published security advisories to address vulnerabilities in the following products:

• CivicTheme Design System – version prior to 1.12.0

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates or perform the suggested mitigations.

• CivicTheme Design System - Moderately critical - Information disclosure - SA-CONTRIB-2025-112
• CivicTheme Design System - Moderately critical - Cross-site Scripting - SA-CONTRIB-2025-113
• Drupal Security Advisories

Serial number:AV25-693
Date:October 22, 2025

On October 22, 2025, ISC published security advisories to address vulnerabilities in the following product:

• ISC BIND 9 – versions 9.11.3-S1 to 9.16.50-S1
• ISC BIND 9 – versions 9.18.11-S1 to 9.18.39-S1
• ISC BIND 9 – versions 9.20.9-S1 to 9.20.13-S1
• ISC BIND 9 – versions 9.11.0 to 9.16.50
• ISC BIND 9 – versions 9.18.0 to 9.18.39
• ISC BIND 9 – versions 9.20.0 to 9.20.13
• ISC BIND 9 – versions 9.21.0 to 9.21.12

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.

• ISC BIND security advisory - CVE-2025-8677
• ISC BIND security advisory - CVE-2025-40778
• ISC BIND security advisory - CVE-2025-40780
• BIND 9 Security Vulnerability Matrix

Serial number:AV25-692
Date:October 22, 2025

On October 21, 2025, Google published a security advisory to address a vulnerability in the following product:

• Stable Channel Chrome for Desktop – versions prior to 141.0.7390.122/.123 (Windows and Mac) and 141.0.7390.122 (Linux)

The Cyber Centre encourages users and administrators to review the provided web link and apply the necessary updates, when available.

• Google Chrome Security Advisory

Serial number:AV25-691
Date:October 22, 2025

Between September 25 and October 13, 2025, Ericsson published security advisories to address vulnerabilities in the following products:

• Ericsson Indoor Connect 8855 – versions prior to 2025.Q2
• Ericcson Network Manager – versions prior to 25.1 and 25.2
• RAN Compute (all BB versions) – versions prior to 24.Q1.C5
• Site Controller 6610 – versions prior to S24.Q2

The Cyber Centre encourages users and administrators to review the provided web link and apply the necessary updates.

• Security Bulletin – Ericsson Indoor Connect 8855, September 2025
• Security Bulletin – Ericsson High Severity Vulnerability in EMCLI included in Ericsson RAN Compute and Site Controller, October 2025
• Security Bulletin – Ericsson Network Manager (ENM), October 2025
• Ericsson Security Advisories

Serial number:AV25-690
Date:October 22, 2025

On October 21, 2025, SolarWinds published a security advisory to address a vulnerability in the following product:

• SolarWinds Observability Self-Hoste – version 2025.2.1 and prior

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.

• SolarWinds Observability Self-Hosted SQL Injection Vulnerability (CVE-2025-26392)
• SolarWinds Security Vulnerabilities

Serial number:AV25-689
Date:October 22, 2025

On October 22, 2025, GitLab published a security advisory to address vulnerabilities in the following products:

• GitLab Community Edition (CE) – versions prior to 18.5.1, 18.4.3 and 18.3.5
• GitLab Enterprise Edition (EE) – versions prior to 18.5.1, 18.4.3 and 18.3.5

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.

• GitLab Patch Release: 18.5.1, 18.4.3, 18.3.5
• GitLab Releases