Map

Serial number:AV25-829
Date:December 11, 2025

On December 10, 2025, Google published a security advisory to address vulnerabilities in the following product:

• Stable Channel Chrome for Desktop – versions prior to 143.0.7499.109/.110 (Windows/Mac) and 143.0.7499.109 (Linux)

The Cyber Centre encourages users and administrators to review the provided web link and apply the necessary updates, when available.

• Google Chrome Security Advisory

Serial number:AV25-828
Date:December 11, 2025

On December 10, 2025, Drupal published security advisory to address a vulnerability in the following product:

• Acquia Content Hub – versions 3.6.x prior to 3.6.4
• Acquia Content Hub – versions 3.7.x prior to 3.7.3

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates or perform the suggested mitigations.

• Acquia Content Hub - Moderately critical - Cross-Site Request Forgery - SA-CONTRIB-2025-125
• Drupal Security Advisories

Serial number:AV25-827
Date:December 11, 2025

On December 10, 2025, GitLab published a security advisory to address vulnerabilities in the following products:

• GitLab Community Edition (CE) – versions prior to 18.6.2, 18.5.4 and 18.4.6
• GitLab Enterprise Edition (EE) – versions prior to 18.6.2, 18.5.4 and 18.4.6

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.

• GitLab Patch Release: 18.6.2, 18.5.4, 18.4.6
• GitLab Releases

Serial number:AV25-826
Date:December 10, 2025

On December 10, 2025, Jenkins published a security advisory to address vulnerabilities in the following products:

• BlazeMeter – version 4.27
• Coverage – version 2.3054.ve1ff7b_a_a_123b_ and prior
• Git client – version 6.4.0 and prior
• HashiCorp Vault – version 371.v884a_4dd60fb_6 and prior
• Redpen - Pipeline Reporter for Jira – version 1.054.v7b_9517b_6b_202 and prior

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.

• Jenkins Security Advisory 2025-12-10
• Jenkins Security Advisories

Serial number:AV25-825
Date:December 10, 2025

On December 9, 2025, Schneider Electric published advisories to address vulnerabilities in the following products:

• EcoStruxure™ Foxboro DCS – version EcoStruxure™ Foxboro DCS and prior
• V91 DCS Virtualization Server and H92 DCS Standard Workstation – version Intel Xeon W-2123 and prior
• EcoStruxure™ Foxboro DCS Advisor services with Windows Server Update Services application running on MS Server 2016 – version Microsoft updates KB5066836
• EcoStruxure™ Foxboro DCS Advisor services with Windows Server Update Services application running on MS Server 2022 – version Microsoft updates KB5066782

The Cyber Centre encourages users and administrators to review the provided web links, perform the suggested mitigations and apply the necessary updates.

• EcoStruxure™ Foxboro DCS (PDF)
• EcoStruxure™ Foxboro DCS Advisor (PDF)
• Schneider Electric Security Notifications

Serial number:AV25-824
Date:December 10, 2025

On December 9, 2025, Ivanti published a security advisory to address vulnerabilities in the following product. Included was a critical update for the following:

• Ivanti Endpoint Manager – version 2024 SU4 and prior

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.

• Security Advisory EPM December 2025 for EPM 2024
• Ivanti Security Advisories