Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity). 1 is already weaponised in the wild — see the Exploited section.
ALINUX2-SA-2020:0108: grub2 security and bug fix update (Moderate)
CVEs:CVE-2020-10713CVE-2020-14308CVE-2020-14309CVE-2020-14310CVE-2020-14311CVE-2020-15705CVE-2020-15706CVE-2020-15707
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| fwupdate | affected | Alibaba Cloud | fwupdate | — |
| grub2 | affected | Alibaba Cloud | grub2 | — |
| shim | affected | Alibaba Cloud | shim | — |
| shim-signed | affected | Alibaba Cloud | shim-signed | — |
ALINUX2-SA-2020:0109: firefox security update (Important)
CVEs:CVE-2020-15652CVE-2020-15659CVE-2020-6463CVE-2020-6514
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| firefox | affected | Alibaba Cloud | firefox | — |
ALINUX2-SA-2020:0106: java-11-openjdk security update (Important)
CVEs:CVE-2020-14556CVE-2020-14562CVE-2020-14573CVE-2020-14577CVE-2020-14583CVE-2020-14593CVE-2020-14621
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| java-11-openjdk | affected | Alibaba Cloud | java-11-openjdk | — |
ALINUX2-SA-2020:0107: java-1.8.0-openjdk security update (Important)
CVEs:CVE-2020-14556CVE-2020-14577CVE-2020-14578CVE-2020-14579CVE-2020-14583CVE-2020-14593CVE-2020-14621
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| java-1.8.0-openjdk | affected | Alibaba Cloud | java-1.8.0-openjdk | — |
ALINUX2-SA-2020:0105: dbus security update (Important)
CVEs:CVE-2020-12049
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| dbus | affected | Alibaba Cloud | dbus | — |
ALINUX2-SA-2020:0104: firefox security update (Important)
CVEs:CVE-2020-12417CVE-2020-12418CVE-2020-12419CVE-2020-12420CVE-2020-12421
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| firefox | affected | Alibaba Cloud | firefox | — |
Every CVE above is indexed in the Vulnetix VDB with KEV, EPSS, and PoC maturity. The interactive page surfaces that on hover.