Downloads

Serial number:AV25-354
Date:June 18, 2025

On June 16, 2025, Apache published a security advisory to address a vulnerability in the following products:

• Apache Tomcat – versions 11.0.0-M1 to 11.0.7
• Apache Tomcat – versions 10.1.0-M1 to 10.1.41
• Apache Tomcat – versions 9.0.0.M1 to 9.0.105

The Cyber Centre encourages users and administrators to review the provided web link and apply the necessary updates.

• Apache Security Advisory - [SECURITY] CVE-2025-48988 Apache Tomcat - DoS in multipart upload

Serial number:AV25-353
Date:June 17, 2025

On June 17, 2025, Google published a security advisory to address vulnerabilities in the following product:

• Stable Channel Chrome for Desktop – versions prior to 137.0.7151.119/.120 (Windows/Mac), and 137.0.7151.119 (Linux)

The Cyber Centre encourages users and administrators to review the provided web link and apply the necessary updates, when available.

• Google Chrome Security Advisory

Serial number:AV25-352
Date:June 17, 2025

On June 17, 2025, Veeam published a security advisory to address vulnerabilities in the following products:

• Veeam Backup & Replication – version 12.3.1.1139 and prior
• Veeam Agent for Microsoft Windows – version 6.3.1.1074 and prior

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.

• Veeam Security Advisory – KB4743
• Veeam Knowledge Base

Serial number:AV25-351
Date:June 17, 2025

On June 16, 2025, BeyondTrust published a security advisory to address a vulnerability in the following products:

• Remote Support – version 24.2.2 to 24.2.4, 24.3.1 to 24.3.3, and 25.1.1
• Privileged Remote Access – version 24.2.2 to 24.2.4, 24.3.1 to 24.3.3, and 25.1.1

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.

• BeyondTrust Security Advisory - Advisory ID: BT25-04
• BeyondTrust Advisories

Serial number:AV25-350
Date:June 17, 2025

On June 17, 2025, Citrix published security advisories to address vulnerabilities in the following products:

• Citrix Secure Access Client for Windows – versions prior to 25.5.1.15
• NetScaler ADC and NetScaler Gateway 14.1 – versions prior to 14.1-43.56
• NetScaler ADC and NetScaler Gateway 13.1 – versions prior to 13.1-58.32
• NetScaler ADC 13.1-FIPS and NDcPP – versions prior to 13.1-37.235-FIPS and NDcPP
• NetScaler ADC 12.1-FIPS – versions prior to 12.1-55.328-FIPS
• NetScaler Console 14.1 – versions prior to 14.1.47.46
• NetScaler Console 13.1 – versions prior to 13.1.58.32
• NetScaler SDX (SVM) 14.1 – versions prior to 14.1.47.46
• NetScaler SDX (SVM) 13.1 – versions prior to 13.1.58.32

The Cyber Centre encourages users and administrators to review the provided web links and perform the suggested mitigations.

• Citrix Security Advisory – CTX694724
• Citrix Security Advisory – CTX693420
• Citrix Security Advisory – CTX694729
• Citrix Security Advisories

Serial number:AV25-349
Date:June 16, 2025

On May 21, 2025, Grafana published a security advisory to address vulnerabilities in the following product:

• Grafana – versions prior to 11.2, 11.3, 11.4, 11.5, 11.6 and 12.0

The Cyber Centre encourages users and administrators to review the provided web link and apply the necessary updates.

• Grafana Security Advisory

Serial number:AV25-348
Date:June 16, 2025

Between June 9 and 15, 2025, CISA published ICS advisories to address vulnerabilities in the following products:

• AVEVA PI Connector for CygNet – version 1.6.14 and prior
• AVEVA PI Data Archive – multiple versions
• AVEVA PI Server – multiple versions
• AVEVA PI Web API – versions 2023 SP1 and prior
• Hitachi Energy Relion 670 – version 2.2.0
• Hitachi Relion 650 – multiple versions
• Hitachi Relion 670 – multiple versions
• Hitachi SAM600-IO – multiple versions
• multiCAM Systems Pan-Tilt-Zoom Cameras – all versions
• PTZOptics – multiple versions and models
• Siemens Energy Services – all versions
• Siemens RUGGEDCOM APE1808 – all versions (with Palo Alto Networks Virtual NGFW with an enabled GlobalProtect gateway or portal)
• Siemens RUGGEDCOM RST2428P (6GK6242-6PA00) – versions prior to V3.1
• Siemens SCALANCE – multiple versions and models
• Siemens SIMATIC – multiple versions and models
• Siemens Tecnomatix Plant Simulation V2404 – versions prior to V2404.0013
• SinoTrack IOT PC Platform – all versions
• SMTAV Pan-Tilt-Zoom Cameras – all versions
• ValueHD Pan-Tilt-Zoom Cameras – all version

The Cyber Centre encourages users and administrators to review the provided web link, perform the suggested mitigations and apply the necessary updates if available.

• CISA ICS Advisories

Serial number:AV25-347
Date:June 16, 2025

Between June 9 and 15, 2025, Dell published security advisories to address a vulnerability in the following product:

• Dell iDRAC Tools – versions prior to 11.3.0.0

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.

• Dell Security Advisories – DSA-2025-169
• Dell Security advisories and notices

Serial number:AV25-346
Date:June 16, 2025

Between June 9 and 15, 2025, IBM published security advisories to address vulnerabilities in multiple products. Included were critical updates for the following product:

• API Connect – version V10.0.5.0 to V10.0.5.9
• API Connect – version V10.0.8.0 to V10.0.8.2-iFix1
• IBM DataPower Gateway 10.6CD – versions 10.6.1.0 to 10.6.3.0
• IBM Db2 on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data – multiple versions
• IBM MQ Operator – multiple versions
• IBM Robotic Process Automation – version 21.0.0 to 21.0.7.20 and version 23.0.0 to 23.0.20.1
• IBM Robotic Process Automation for Cloud Pak – version 21.0.0 to 21.0.7.20 and version 23.0.0 to 23.0.20.1
• IBM Security QRadar EDR – version 3.12
• IBM supplied MQ Advanced container images – multiple versions
• PowerVC – version 2.2.0, 2.2.1, 2.2.1.1, 2.2.1.2 and 2.3.0

The Cyber Centre encourages users and administrators to review the provided web link and apply the necessary updates.

• IBM Product Security Incident Response

Serial number:AV25-345
Date:June 16, 2025

Between June 9 and 15, 2025, Ubuntu published security notices to address vulnerabilities in the Linux kernel affecting the following products:

• Ubuntu 14.04 LTS
• Ubuntu 16.04 LTS
• Ubuntu 18.04 LTS
• Ubuntu 22.04 LTS

The Cyber Centre encourages users and administrators to review the provided web link and apply the necessary updates.

• Ubuntu Security Notices