Alibaba Security Advisories: October 2020 — Alibaba Security Advisories

ALINUX2-SA-2020:0147

ALINUX 2ExploitedCISA KEV listedHIGH2020-10-11

ALINUX2-SA-2020:0147: webkitgtk4 security, bug fix, and enhancement update (Moderate)

CVEs:CVE-2019-11070 CVE-2019-6237 CVE-2019-6251 CVE-2019-8506 CVE-2019-8524 CVE-2019-8535 CVE-2019-8536 CVE-2019-8544 CVE-2019-8551 CVE-2019-8558 CVE-2019-8559 CVE-2019-8563 CVE-2019-8571 CVE-2019-8583 CVE-2019-8584 CVE-2019-8586 CVE-2019-8587 CVE-2019-8594 CVE-2019-8595 CVE-2019-8596 CVE-2019-8597 CVE-2019-8601 CVE-2019-8607 CVE-2019-8608 CVE-2019-8609 CVE-2019-8610 CVE-2019-8611 CVE-2019-8615 CVE-2019-8619 CVE-2019-8622 CVE-2019-8623 CVE-2019-8625 CVE-2019-8644 CVE-2019-8649 CVE-2019-8658 CVE-2019-8666 CVE-2019-8669 CVE-2019-8671 CVE-2019-8672 CVE-2019-8673 CVE-2019-8674 CVE-2019-8676 CVE-2019-8677 CVE-2019-8678 CVE-2019-8679 CVE-2019-8680 CVE-2019-8681 CVE-2019-8683 CVE-2019-8684 CVE-2019-8686 CVE-2019-8687 CVE-2019-8688 CVE-2019-8689 CVE-2019-8690 CVE-2019-8707 CVE-2019-8710 CVE-2019-8719 CVE-2019-8720 CVE-2019-8726 CVE-2019-8733 CVE-2019-8735 CVE-2019-8743 CVE-2019-8763 CVE-2019-8764 CVE-2019-8765 CVE-2019-8766 CVE-2019-8768 CVE-2019-8769 CVE-2019-8771 CVE-2019-8782 CVE-2019-8783 CVE-2019-8808 CVE-2019-8811 CVE-2019-8812 CVE-2019-8813 CVE-2019-8814 CVE-2019-8815 CVE-2019-8816 CVE-2019-8819 CVE-2019-8820 CVE-2019-8821 CVE-2019-8822 CVE-2019-8823 CVE-2019-8835 CVE-2019-8844 CVE-2019-8846 CVE-2020-10018 CVE-2020-11793 CVE-2020-3862 CVE-2020-3864 CVE-2020-3865 CVE-2020-3867 CVE-2020-3868 CVE-2020-3885 CVE-2020-3894 CVE-2020-3895 CVE-2020-3897 CVE-2020-3899 CVE-2020-3900 CVE-2020-3901 CVE-2020-3902

Affected products

Product	Status	Vendor	Package	Ecosystem
webkitgtk4	affected	Alibaba Cloud	webkitgtk4	—

Upstream advisory

ALINUX2-SA-2020:0169

ALINUX 2Weaponized exploitMEDIUM2020-10-19

ALINUX2-SA-2020:0169: ipa security, bug fix, and enhancement update (Moderate)

CVEs:CVE-2015-9251 CVE-2016-10735 CVE-2018-14040 CVE-2018-14042 CVE-2018-20676 CVE-2018-20677 CVE-2019-11358 CVE-2019-8331 CVE-2020-11022 CVE-2020-1722

Affected products

Product	Status	Vendor	Package	Ecosystem
ipa	affected	Alibaba Cloud	ipa	—

Upstream advisory

ALINUX2-SA-2020:0165

ALINUX 2Weaponized exploitMEDIUM2020-10-14

ALINUX2-SA-2020:0165: httpd security, bug fix, and enhancement update (Moderate)

CVEs:CVE-2017-15715 CVE-2018-1283 CVE-2018-1303 CVE-2019-10098 CVE-2020-1927 CVE-2020-1934

Affected products

Product	Status	Vendor	Package	Ecosystem
httpd	affected	Alibaba Cloud	httpd	—

Upstream advisory

ALINUX2-SA-2020:0148

ALINUX 2Weaponized exploitHIGH2020-10-11

ALINUX2-SA-2020:0148: freeradius security and bug fix update (Moderate)

CVEs:CVE-2019-10143 CVE-2019-13456 CVE-2019-17185

Affected products

Product	Status	Vendor	Package	Ecosystem
freeradius	affected	Alibaba Cloud	freeradius	—

Upstream advisory

ALINUX2-SA-2020:0143

ALINUX 2Active exploitation (sightings)HIGH2020-10-11

ALINUX2-SA-2020:0143: spamassassin security update (Moderate)

CVEs:CVE-2019-12420

Affected products

Product	Status	Vendor	Package	Ecosystem
spamassassin	affected	Alibaba Cloud	spamassassin	—

Upstream advisory

ALINUX2-SA-2020:0126

ALINUX 2Active exploitation (sightings)HIGH2020-10-10

ALINUX2-SA-2020:0126: tigervnc security and bug fix update (Moderate)

CVEs:CVE-2019-15691 CVE-2019-15692 CVE-2019-15693 CVE-2019-15694 CVE-2019-15695

Affected products

Product	Status	Vendor	Package	Ecosystem
tigervnc	affected	Alibaba Cloud	tigervnc	—

Upstream advisory

ALINUX2-SA-2020:0118

ALINUX 2Active exploitation (sightings)MEDIUM2020-10-09

ALINUX2-SA-2020:0118: spice and spice-gtk security update (Important)

CVEs:CVE-2020-14355

Affected products

Product	Status	Vendor	Package	Ecosystem
spice	affected	Alibaba Cloud	spice	—
spice-gtk	affected	Alibaba Cloud	spice-gtk	—

Upstream advisory

ALINUX2-SA-2020:0161

ALINUX 2Active exploitation (sightings)MEDIUM2020-10-13

ALINUX2-SA-2020:0161: freerdp security, bug fix, and enhancement update (Moderate)

CVEs:CVE-2020-11018 CVE-2020-11019 CVE-2020-11038 CVE-2020-11039 CVE-2020-11040 CVE-2020-11041 CVE-2020-11042 CVE-2020-11043 CVE-2020-11044 CVE-2020-11045 CVE-2020-11046 CVE-2020-11047 CVE-2020-11048 CVE-2020-11049 CVE-2020-11058 CVE-2020-11085 CVE-2020-11086 CVE-2020-11087 CVE-2020-11088 CVE-2020-11089 CVE-2020-11522 CVE-2020-11525 CVE-2020-11526 CVE-2020-13396 CVE-2020-13397

Affected products

Product	Status	Vendor	Package	Ecosystem
freerdp	affected	Alibaba Cloud	freerdp	—

Upstream advisory

ALINUX2-SA-2020:0119

ALINUX 2PoC exploitHIGH2020-10-09

ALINUX2-SA-2020:0119: squid security update (Important)

CVEs:CVE-2019-12528 CVE-2020-15049 CVE-2020-15810 CVE-2020-15811 CVE-2020-24606 CVE-2020-8449 CVE-2020-8450

Affected products

Product	Status	Vendor	Package	Ecosystem
squid	affected	Alibaba Cloud	squid	—

Upstream advisory

ALINUX2-SA-2020:0163

ALINUX 2PoC exploitMEDIUM2020-10-13

ALINUX2-SA-2020:0163: curl security update (Moderate)

CVEs:CVE-2019-5482

Affected products

Product	Status	Vendor	Package	Ecosystem
curl	affected	Alibaba Cloud	curl	—

Upstream advisory

ALINUX2-SA-2020:0149

ALINUX 2PoC exploitHIGH2020-10-11

ALINUX2-SA-2020:0149: libxml2 security and bug fix update (Moderate)

CVEs:CVE-2019-19956 CVE-2019-20388 CVE-2020-7595

Affected products

Product	Status	Vendor	Package	Ecosystem
libxml2	affected	Alibaba Cloud	libxml2	—

Upstream advisory

ALINUX2-SA-2020:0139

ALINUX 2PoC exploitMEDIUM2020-10-11

ALINUX2-SA-2020:0139: expat security update (Moderate)

CVEs:CVE-2018-20843 CVE-2019-15903

Affected products

Product	Status	Vendor	Package	Ecosystem
expat	affected	Alibaba Cloud	expat	—

Upstream advisory

ALINUX2-SA-2020:0137

ALINUX 2PoC exploitMEDIUM2020-10-10

ALINUX2-SA-2020:0137: python3 security update (Moderate)

CVEs:CVE-2019-16935 CVE-2020-8492

Affected products

Product	Status	Vendor	Package	Ecosystem
python3	affected	Alibaba Cloud	python3	—

Upstream advisory

ALINUX2-SA-2020:0120

ALINUX 2PoC exploitMEDIUM2020-10-09

ALINUX2-SA-2020:0120: qemu-kvm security update (Important)

CVEs:CVE-2020-14364 CVE-2020-1983

Affected products

Product	Status	Vendor	Package	Ecosystem
qemu-kvm	affected	Alibaba Cloud	qemu-kvm	—

Upstream advisory

ALINUX2-SA-2020:0160

ALINUX 2PoC exploitHIGH2020-10-13

ALINUX2-SA-2020:0160: libxslt security update (Moderate)

CVEs:CVE-2019-11068 CVE-2019-18197

Affected products

Product	Status	Vendor	Package	Ecosystem
libxslt	affected	Alibaba Cloud	libxslt	—

Upstream advisory

ALINUX2-SA-2020:0127

ALINUX 2PoC exploitMEDIUM2020-10-10

ALINUX2-SA-2020:0127: libvpx security update (Moderate)

CVEs:CVE-2017-0393 CVE-2019-9232 CVE-2019-9433 CVE-2020-0034

Affected products

Product	Status	Vendor	Package	Ecosystem
libvpx	affected	Alibaba Cloud	libvpx	—

Upstream advisory

ALINUX2-SA-2020:0171

ALINUX 2PoC exploitMEDIUM2020-10-20

ALINUX2-SA-2020:0171: python security update (Moderate)

CVEs:CVE-2019-16935

Affected products

Product	Status	Vendor	Package	Ecosystem
python	affected	Alibaba Cloud	python	—

Upstream advisory

ALINUX2-SA-2020:0158

ALINUX 2PoC exploitHIGH2020-10-12

ALINUX2-SA-2020:0158: openldap security update (Moderate)

CVEs:CVE-2020-12243

Affected products

Product	Status	Vendor	Package	Ecosystem
openldap	affected	Alibaba Cloud	openldap	—

Upstream advisory

ALINUX2-SA-2020:0129

ALINUX 2PoC exploitLOW2020-10-10

ALINUX2-SA-2020:0129: libpng security update (Low)

CVEs:CVE-2017-12652

Affected products

Product	Status	Vendor	Package	Ecosystem
libpng	affected	Alibaba Cloud	libpng	—

Upstream advisory

ALINUX2-SA-2020:0132

ALINUX 2PoC exploitMEDIUM2020-10-10

ALINUX2-SA-2020:0132: libssh2 security update (Moderate)

CVEs:CVE-2019-17498

Affected products

Product	Status	Vendor	Package	Ecosystem
libssh2	affected	Alibaba Cloud	libssh2	—

Upstream advisory

ALINUX2-SA-2020:0172

ALINUX 2PoC exploitLOW2020-10-23

ALINUX2-SA-2020:0172: java-11-openjdk security update (Moderate)

CVEs:CVE-2020-14779 CVE-2020-14781 CVE-2020-14782 CVE-2020-14792 CVE-2020-14796 CVE-2020-14797 CVE-2020-14803

Affected products

Product	Status	Vendor	Package	Ecosystem
java-11-openjdk	affected	Alibaba Cloud	java-11-openjdk	—

Upstream advisory

ALINUX2-SA-2020:0170

ALINUX 2PoC exploitMEDIUM2020-10-19

ALINUX2-SA-2020:0170: mariadb security and bug fix update (Moderate)

CVEs:CVE-2019-2974 CVE-2020-2574 CVE-2020-2752 CVE-2020-2780 CVE-2020-2812

Affected products

Product	Status	Vendor	Package	Ecosystem
mariadb	affected	Alibaba Cloud	mariadb	—

Upstream advisory

ALINUX2-SA-2020:0173

ALINUX 2PoC exploitMEDIUM2020-10-28

ALINUX2-SA-2020:0173: nss and nspr security, bug fix, and enhancement update (Moderate)

CVEs:CVE-2019-11719 CVE-2019-11727 CVE-2019-11756 CVE-2019-17006 CVE-2019-17023 CVE-2020-12400 CVE-2020-12401 CVE-2020-12402 CVE-2020-12403 CVE-2020-6829

Affected products

Product	Status	Vendor	Package	Ecosystem
nspr	affected	Alibaba Cloud	nspr	—
nss	affected	Alibaba Cloud	nss	—
nss-softokn	affected	Alibaba Cloud	nss-softokn	—
nss-util	affected	Alibaba Cloud	nss-util	—

Upstream advisory

ALINUX2-SA-2020:0123

ALINUX 2PoC exploitHIGH2020-10-10

ALINUX2-SA-2020:0123: SDL security update (Moderate)

CVEs:CVE-2019-7572 CVE-2019-7573 CVE-2019-7574 CVE-2019-7575 CVE-2019-7576 CVE-2019-7577 CVE-2019-7578 CVE-2019-7635 CVE-2019-7636 CVE-2019-7637 CVE-2019-7638

Affected products

Product	Status	Vendor	Package	Ecosystem
SDL	affected	Alibaba Cloud	SDL	—

Upstream advisory

ALINUX2-SA-2020:0122

ALINUX 2PoC exploitMEDIUM2020-10-10

ALINUX2-SA-2020:0122: cups security and bug fix update (Moderate)

CVEs:CVE-2017-18190 CVE-2019-8675 CVE-2019-8696

Affected products

Product	Status	Vendor	Package	Ecosystem
cups	affected	Alibaba Cloud	cups	—

Upstream advisory

ALINUX2-SA-2020:0162

ALINUX 2PoC exploitLOW2020-10-13

ALINUX2-SA-2020:0162: dnsmasq security and bug fix update (Low)

CVEs:CVE-2019-14834

Affected products

Product	Status	Vendor	Package	Ecosystem
dnsmasq	affected	Alibaba Cloud	dnsmasq	—

Upstream advisory

ALINUX2-SA-2020:0146

ALINUX 2PoC exploitMEDIUM2020-10-11

ALINUX2-SA-2020:0146: glib2 and ibus security and bug fix update (Moderate)

CVEs:CVE-2019-12450 CVE-2019-14822

Affected products

Product	Status	Vendor	Package	Ecosystem
glib2	affected	Alibaba Cloud	glib2	—
ibus	affected	Alibaba Cloud	ibus	—

Upstream advisory

ALINUX2-SA-2020:0144

ALINUX 2PoC exploitMEDIUM2020-10-11

ALINUX2-SA-2020:0144: subversion security update (Moderate)

CVEs:CVE-2018-11782

Affected products

Product	Status	Vendor	Package	Ecosystem
subversion	affected	Alibaba Cloud	subversion	—

Upstream advisory

ALINUX2-SA-2020:0140

ALINUX 2PoC exploitMEDIUM2020-10-11

ALINUX2-SA-2020:0140: libvirt security and bug fix update (Moderate)

CVEs:CVE-2019-20485 CVE-2020-10703

Affected products

Product	Status	Vendor	Package	Ecosystem
libvirt	affected	Alibaba Cloud	libvirt	—

Upstream advisory

ALINUX2-SA-2020:0159

ALINUX 2PoC exploitHIGH2020-10-13

ALINUX2-SA-2020:0159: libcroco security update (Moderate)

CVEs:CVE-2020-12825

Affected products

Product	Status	Vendor	Package	Ecosystem
libcroco	affected	Alibaba Cloud	libcroco	—

Upstream advisory

ALINUX2-SA-2020:0152

ALINUX 2PoC exploitHIGH2020-10-11

ALINUX2-SA-2020:0152: e2fsprogs security and bug fix update (Moderate)

CVEs:CVE-2019-5094 CVE-2019-5188

Affected products

Product	Status	Vendor	Package	Ecosystem
e2fsprogs	affected	Alibaba Cloud	e2fsprogs	—

Upstream advisory

ALINUX2-SA-2020:0150

ALINUX 2PoC exploitHIGH2020-10-11

ALINUX2-SA-2020:0150: bluez security update (Moderate)

CVEs:CVE-2020-0556

Affected products

Product	Status	Vendor	Package	Ecosystem
bluez	affected	Alibaba Cloud	bluez	—

Upstream advisory

ALINUX2-SA-2020:0151

ALINUX 2PoC exploitMEDIUM2020-10-11

ALINUX2-SA-2020:0151: NetworkManager security and bug fix update (Moderate)

CVEs:CVE-2020-10754

Affected products

Product	Status	Vendor	Package	Ecosystem
NetworkManager	affected	Alibaba Cloud	NetworkManager	—

Upstream advisory

ALINUX2-SA-2020:0131

ALINUX 2PoC exploitMEDIUM2020-10-10

ALINUX2-SA-2020:0131: cpio security update (Moderate)

CVEs:CVE-2019-14866

Affected products

Product	Status	Vendor	Package	Ecosystem
cpio	affected	Alibaba Cloud	cpio	—

Upstream advisory

ALINUX2-SA-2020:0155

ALINUX 2PoC exploitHIGH2020-10-12

ALINUX2-SA-2020:0155: dbus security update (Moderate)

CVEs:CVE-2019-12749

Affected products

Product	Status	Vendor	Package	Ecosystem
dbus	affected	Alibaba Cloud	dbus	—

Upstream advisory

ALINUX2-SA-2020:0166

ALINUX 2PoC exploitLOW2020-10-14

ALINUX2-SA-2020:0166: systemd security and bug fix update (Low)

CVEs:CVE-2019-20386

Affected products

Product	Status	Vendor	Package	Ecosystem
systemd	affected	Alibaba Cloud	systemd	—

Upstream advisory

ALINUX2-SA-2020:0164

ALINUX 2PoC exploitLOW2020-10-13

ALINUX2-SA-2020:0164: glibc security, bug fix, and enhancement update (Low)

CVEs:CVE-2019-19126

Affected products

Product	Status	Vendor	Package	Ecosystem
glibc	affected	Alibaba Cloud	glibc	—

Upstream advisory

ALINUX2-SA-2020:0128

ALINUX 2Coalition ESS < 30%HIGH2020-10-10

ALINUX2-SA-2020:0128: python-pillow security update (Moderate)

CVEs:CVE-2020-5313

Affected products

Product	Status	Vendor	Package	Ecosystem
python-pillow	affected	Alibaba Cloud	python-pillow	—

Upstream advisory

ALINUX2-SA-2020:0154

ALINUX 2Coalition ESS < 30%MEDIUM2020-10-12

ALINUX2-SA-2020:0154: okular security update (Moderate)

CVEs:CVE-2020-9359

Affected products

Product	Status	Vendor	Package	Ecosystem
okular	affected	Alibaba Cloud	okular	—

Upstream advisory

ALINUX2-SA-2020:0167

ALINUX 2Coalition ESS < 30%HIGH2020-10-16

ALINUX2-SA-2020:0167: cloud-init security, bug fix, and enhancement update (Moderate)

CVEs:CVE-2018-10896 CVE-2020-8631 CVE-2020-8632

Affected products

Product	Status	Vendor	Package	Ecosystem
cloud-init	affected	Alibaba Cloud	cloud-init	—

Upstream advisory

ALINUX2-SA-2020:0134

ALINUX 2EPSS <= 49%HIGH2020-10-10

ALINUX2-SA-2020:0134: openwsman security update (Moderate)

CVEs:CVE-2019-3833

Affected products

Product	Status	Vendor	Package	Ecosystem
openwsman	affected	Alibaba Cloud	openwsman	—

Upstream advisory

ALINUX2-SA-2020:0125

ALINUX 2EPSS <= 49%HIGH2020-10-10

ALINUX2-SA-2020:0125: libsrtp security and bug fix update (Moderate)

CVEs:CVE-2013-2139 CVE-2015-6360

Affected products

Product	Status	Vendor	Package	Ecosystem
libsrtp	affected	Alibaba Cloud	libsrtp	—

Upstream advisory

ALINUX2-SA-2020:0135

ALINUX 2EPSS <= 49%MEDIUM2020-10-10

ALINUX2-SA-2020:0135: libwmf security and bug fix update (Low)

CVEs:CVE-2019-6978

Affected products

Product	Status	Vendor	Package	Ecosystem
libwmf	affected	Alibaba Cloud	libwmf	—

Upstream advisory

ALINUX2-SA-2020:0130

ALINUX 2EPSS <= 49%HIGH2020-10-10

ALINUX2-SA-2020:0130: libtiff security update (Moderate)

CVEs:CVE-2019-14973 CVE-2019-17546

Affected products

Product	Status	Vendor	Package	Ecosystem
libtiff	affected	Alibaba Cloud	libtiff	—

Upstream advisory

ALINUX2-SA-2020:0157

ALINUX 2EPSS <= 49%MEDIUM2020-10-12

ALINUX2-SA-2020:0157: libexif security, bug fix, and enhancement update (Moderate)

CVEs:CVE-2019-9278 CVE-2020-0093 CVE-2020-0182 CVE-2020-12767 CVE-2020-13113 CVE-2020-13114

Affected products

Product	Status	Vendor	Package	Ecosystem
libexif	affected	Alibaba Cloud	libexif	—

Upstream advisory

ALINUX2-SA-2020:0136

ALINUX 2EPSS <= 49%HIGH2020-10-10

ALINUX2-SA-2020:0136: librabbitmq security update (Moderate)

CVEs:CVE-2019-18609

Affected products

Product	Status	Vendor	Package	Ecosystem
librabbitmq	affected	Alibaba Cloud	librabbitmq	—

Upstream advisory

ALINUX2-SA-2020:0168

ALINUX 2EPSS <= 49%MEDIUM2020-10-19

ALINUX2-SA-2020:0168: samba security, bug fix, and enhancement update (Moderate)

CVEs:CVE-2019-14907

Affected products

Product	Status	Vendor	Package	Ecosystem
samba	affected	Alibaba Cloud	samba	—

Upstream advisory

ALINUX2-SA-2020:0145

ALINUX 2EPSS <= 49%HIGH2020-10-11

ALINUX2-SA-2020:0145: evince and poppler security and bug fix update (Low)

CVEs:CVE-2019-14494

Affected products

Product	Status	Vendor	Package	Ecosystem
evince	affected	Alibaba Cloud	evince	—
poppler	affected	Alibaba Cloud	poppler	—

Upstream advisory

ALINUX2-SA-2020:0133

ALINUX 2EPSS <= 49%LOW2020-10-10

ALINUX2-SA-2020:0133: libsndfile security update (Low)

CVEs:CVE-2018-19662

Affected products

Product	Status	Vendor	Package	Ecosystem
libsndfile	affected	Alibaba Cloud	libsndfile	—

Upstream advisory

ALINUX2-SA-2020:0141

ALINUX 2EPSS <= 49%MEDIUM2020-10-11

ALINUX2-SA-2020:0141: mod_auth_openidc security update (Low)

CVEs:CVE-2019-14857 CVE-2019-20479

Affected products

Product	Status	Vendor	Package	Ecosystem
mod_auth_openidc	affected	Alibaba Cloud	mod_auth_openidc	—

Upstream advisory

ALINUX2-SA-2020:0138

ALINUX 2EPSS <= 49%MEDIUM2020-10-11

ALINUX2-SA-2020:0138: exiv2 security update (Low)

CVEs:CVE-2019-17402

Affected products

Product	Status	Vendor	Package	Ecosystem
exiv2	affected	Alibaba Cloud	exiv2	—

Upstream advisory

ALINUX2-SA-2020:0156

ALINUX 2EPSS <= 49%MEDIUM2020-10-12

ALINUX2-SA-2020:0156: OpenEXR security update (Moderate)

CVEs:CVE-2020-11761 CVE-2020-11763 CVE-2020-11764

Affected products

Product	Status	Vendor	Package	Ecosystem
OpenEXR	affected	Alibaba Cloud	OpenEXR	—

Upstream advisory

ALINUX2-SA-2020:0142

ALINUX 2EPSS <= 49%MEDIUM2020-10-11

ALINUX2-SA-2020:0142: hunspell security update (Low)

CVEs:CVE-2019-16707

Affected products

Product	Status	Vendor	Package	Ecosystem
hunspell	affected	Alibaba Cloud	hunspell	—

Upstream advisory

ALINUX2-SA-2020:0121

ALINUX 2EPSS <= 49%LOW2020-10-10

ALINUX2-SA-2020:0121: libmspack security update (Low)

CVEs:CVE-2019-1010305

Affected products

Product	Status	Vendor	Package	Ecosystem
libmspack	affected	Alibaba Cloud	libmspack	—

Upstream advisory

ALINUX2-SA-2020:0153

ALINUX 2EPSS <= 49%HIGH2020-10-12

ALINUX2-SA-2020:0153: qt5-qtbase security update (Moderate)

CVEs:CVE-2020-0569 CVE-2020-0570

Affected products

Product	Status	Vendor	Package	Ecosystem
qt5-qtbase	affected	Alibaba Cloud	qt5-qtbase	—

Upstream advisory

ALINUX2-SA-2020:0124

ALINUX 2EPSS <= 49%HIGH2020-10-10

ALINUX2-SA-2020:0124: pcp security, bug fix, and enhancement update (Low)

CVEs:CVE-2019-3695 CVE-2019-3696

Affected products

Product	Status	Vendor	Package	Ecosystem
pcp	affected	Alibaba Cloud	pcp	—

Upstream advisory

What would you fix first?

Advisories

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Need live exploit intelligence?