Alibaba Security Advisories · February 2021 — Alibaba Security Advisories
7 advisories 12 CVEs

Alibaba Cloud Linux 2 advisories and cross-source Alibaba/Aliyun CVEs for 2021-02. Mirrored into Vulnetix VDB.

Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity).

What would you fix first?

The advisories below are ordered by the Vulnetix risk prioritization strategy: exploitation evidence first, scores second. On the interactive page you can switch to three other lenses.

Advisories

ALINUX2-SA-2021:0009

ALINUX 2Active exploitation (sightings)2021-02-05

ALINUX2-SA-2021:0009: flatpak security update (Important)

CVEs:CVE-2021-21261

Affected products

ProductStatusVendorPackageEcosystem
flatpak affected Alibaba Cloud flatpak
Upstream advisory

ALINUX2-SA-2021:0006

ALINUX 2EPSS <= 49%2021-02-03

ALINUX2-SA-2021:0006: linux-firmware security update (Important)

CVEs:CVE-2020-12321

Affected products

ProductStatusVendorPackageEcosystem
linux-firmware affected Alibaba Cloud linux-firmware
Upstream advisory

Need live exploit intelligence?

Every CVE above is indexed in the Vulnetix VDB with KEV, EPSS, and PoC maturity. The interactive page surfaces that on hover.