CISA Releases Seven Industrial Control Systems Advisories

CISA released seven Industrial Control Systems ICS advisories on April 24, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-114-01 Schneider Electric Modicon Controllers ICSA-25-114-02 ALBEDO Telecom Net.Time -...

Johnson Controls Software House iSTAR Configuration Utility (ICU) Tool

RISK EVALUATION Successful exploitation of this vulnerability may allow an attacker to execute arbitrary code. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability, such as: Minimize network exposure for all control...

[SECURITY] Fedora 41 Update: rust-icu_provider_macros-1.5.0-1.fc41

Proc macros for ICU data providers...

[SECURITY] Fedora 41 Update: rust-icu_normalizer-1.5.0-2.fc41

API for normalizing text into Unicode Normalization Forms...

[SECURITY] Fedora 41 Update: rust-icu_provider-1.5.0-1.fc41

Trait and struct definitions for the ICU data provider...

[SECURITY] Fedora 41 Update: rust-icu_locid_transform-1.5.0-1.fc41

API for Unicode Language and Locale Identifiers canonicalization...

[SECURITY] Fedora 41 Update: rust-icu_collections-1.5.0-3.fc41

Collection of API for use in ICU libraries...

[SECURITY] Fedora 40 Update: rust-icu_provider-1.5.0-1.fc40

Trait and struct definitions for the ICU data provider...

[SECURITY] Fedora 40 Update: rust-icu_provider_macros-1.5.0-1.fc40

Proc macros for ICU data providers...

[SECURITY] Fedora 40 Update: rust-icu_collections-1.5.0-3.fc40

Collection of API for use in ICU libraries...

[SECURITY] Fedora 42 Update: rust-icu_provider_macros-1.5.0-1.fc42

Proc macros for ICU data providers...

[SECURITY] Fedora 42 Update: rust-icu_provider-1.5.0-1.fc42

Trait and struct definitions for the ICU data provider...

[SECURITY] Fedora 42 Update: rust-icu_collections-1.5.0-3.fc42

Collection of API for use in ICU libraries...

[SECURITY] Fedora 42 Update: rust-icu_properties_data-1.5.1-1.fc42

Data for the icuproperties crate...

[SECURITY] Fedora 42 Update: rust-icu_normalizer-1.5.0-2.fc42

API for normalizing text into Unicode Normalization Forms...

Linux Distros Unpatched Vulnerability : CVE-2016-7415

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Stack-based buffer overflow in the Locale class in common/locid.cpp in International Components for Unicode ICU through 57.1 for C/C++ allows remote attackers t...

Linux Distros Unpatched Vulnerability : CVE-2014-9911

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Stack-based buffer overflow in the uresgetByKeyWithFallback function in common/uresbund.cpp in International Components for Unicode ICU before 54.1 for C/C++...

Linux Distros Unpatched Vulnerability : CVE-2013-2924

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free vulnerability in International Components for Unicode ICU, as used in Google Chrome before 30.0.1599.66 and other products, allows remote attacke...

The vulnerability of the ICU operating system components in MacOs, visionOS, tvOS, watchOS, iPadOS, and iOS allows attackers to trigger service failures.

The vulnerability of ICU components in MacOs, visionOS, tvOS, watchOS, iPadOS, and iOS lies in reading data beyond the allowed range in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures...

CVE-2021-39176

detect-character-encoding is a package for detecting character encoding using ICU. In detect-character-encoding v0.3.0 and earlier, allocated memory is not released. The problem has been patched in detect-character-encoding v0.3.1...