Most recent entries from all

ALSA-2025:11888 — Moderate: icu security update

Affected: AlmaLinux:10: icu, AlmaLinux:10: libicu, AlmaLinux:10: libicu-devel

The International Components for Unicode (ICU) library provides robust and full-featured Unicode services.

Security Fix(es):

* icu: Stack buffer overflow in the SRBRoot::addTag function (CVE-2025-5222)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

bdu:2025-10931

BELL-CVE-2025-5222

Affected: Alpaquita:23: icu, Alpaquita:25: icu, Alpaquita:stream: icu, BellSoft Hardened Containers:23: icu, BellSoft Hardened Containers:25: icu, BellSoft Hardened Containers:stream: icu

certfr-2025-avi-0756 — De multiples vulnérabilités ont été découvertes dans les produits VMware. Elles permettent à un attaquant de provoquer…

certfr-2025-avi-0756

CLEANSTART-2026-GC28946 — Security fix for CVE-2025-5222 applied in: icu 74.2-r1

Affected: CleanStart: icu

Security vulnerability affects the icu package. This issue is resolved in later releases. See references for vulnerability details.

EUVD-2026-371396

fkie_cve-2025-5222

A stack buffer overflow was found in Internationl components for unicode (ICU ). While running the genrb binary, the 'subtag' struct overflowed at the SRBRoot::addTag function. This issue may lead to memory corruption and local arbitrary code execution.

GHSA-wv79-2fc4-v4hj

ICSA-26-202-04 — Siemens SIDIS Secured SmartPlug

SIDIS Secured SmartPlug before V7.26.0310 is affected by multiple vulnerabilities in the components OpenSSL, OpenSSH, and several other packages as described below.

Siemens has released a new version of SIDIS Secured SmartPlug and recommends to update to the latest version.

msrc_CVE-2025-5222 — Icu: stack buffer overflow in the srbroot::addtag function

msrc_CVE-2025-5222

NCSC-2026-0229 — Kwetsbaarheden verholpen in Siemens producten

NCSC-2026-0229

OESA-2025-1982 — icu security update

Affected: openEuler:24.03-LTS-SP2: icu, openEuler:20.03-LTS-SP4: icu, openEuler:22.03-LTS-SP3: icu, openEuler:22.03-LTS-SP4: icu, openEuler:24.03-LTS: icu, openEuler:24.03-LTS-SP1: icu

Tools and utilities for developing with icu. Security Fix(es):

RHSA-2025:11888 — Red Hat Security Advisory: icu security update

icu: Stack buffer overflow in the SRBRoot::addTag function

SSA-585531 — SSA-585531: Multiple Vulnerabilities in SIDIS Secured SmartPlug before V7.26.0310

SIDIS Secured SmartPlug before V7.26.0310 is affected by multiple vulnerabilities in the components OpenSSL, OpenSSH, and several other packages as described below.

Siemens has released a new version of SIDIS Secured SmartPlug and recommends to update to the latest version.

UBUNTU-CVE-2025-5222

Affected: Ubuntu:Pro:14.04:LTS: icu, Ubuntu:Pro:16.04:LTS: icu, Ubuntu:18.04:LTS: icu, Ubuntu:20.04:LTS: icu, Ubuntu:22.04:LTS: icu, Ubuntu:24.04:LTS: icu, Ubuntu:25.10: icu, Ubuntu:26.04:LTS: icu

VDE-2026-088 — METTLER TOLEDO: LabX Standard and Enterprise Report on External Component Analysis - v21.4

The vulnerabilities found in LabX Standard versions 21.3.22 - 21.4.23 are CVE-2025-69419, CVE-2026-0915, CVE-2025-15467, CVE-2026-4800, CVE-2026-33186, CVE-2026-39821, CVE-2026-33671 and are fixed in LabX Standard v21.4.25.

The vulnerabilities found in LabX Enterprise versions 21.3.22 - 21.4.23 are CVE-2026-4800, CVE-2026-33186, CVE-2026-39821, CVE-2026-33671 and are fixed in LabX Enterprise v21.4.25

All other vulnerabilities are to be fixed in the upcoming releases.

WID-SEC-W-2025-1406 — International Components for Unicode (icu): Schwachstelle ermöglicht Codeausführung

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in International Components for Unicode (icu) ausnutzen, um beliebigen Programmcode auszuführen.