Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity).
The advisories below are ordered by the Vulnetix risk prioritization strategy: exploitation evidence first, scores second. On the interactive page you can switch to three other lenses.
ALINUX2-SA-2021:0024: xstream security update (Important)
CVEs:CVE-2021-21344CVE-2021-21345CVE-2021-21346CVE-2021-21347CVE-2021-21350
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| xstream | affected | Alibaba Cloud | xstream | — |
ALINUX2-SA-2021:0026: bind security update (Important)
CVEs:CVE-2021-25215
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| bind | affected | Alibaba Cloud | bind | — |
ALINUX2-SA-2021:0021: java-11-openjdk security and bug fix update (Moderate)
CVEs:CVE-2021-2163
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| java-11-openjdk | affected | Alibaba Cloud | java-11-openjdk | — |
ALINUX2-SA-2021:0022: java-1.8.0-openjdk security update (Moderate)
CVEs:CVE-2021-2163
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| java-1.8.0-openjdk | affected | Alibaba Cloud | java-1.8.0-openjdk | — |
ALINUX2-SA-2021:0023: openldap security update (Moderate)
CVEs:CVE-2020-25692
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| openldap | affected | Alibaba Cloud | openldap | — |
ALINUX2-SA-2021:0020: grub2 security update (Moderate)
CVEs:CVE-2020-14372CVE-2020-25632CVE-2020-25647CVE-2020-27749CVE-2020-27779CVE-2021-20225CVE-2021-20233
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| grub2 | affected | Alibaba Cloud | grub2 | — |
ALINUX2-SA-2021:0018: nettle security update (Important)
CVEs:CVE-2021-20305
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| nettle | affected | Alibaba Cloud | nettle | — |
ALINUX2-SA-2021:0019: squid security update (Important)
CVEs:CVE-2020-25097
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| squid | affected | Alibaba Cloud | squid | — |
ALINUX2-SA-2021:0017: libldb security update (Important)
CVEs:CVE-2021-20277
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| libldb | affected | Alibaba Cloud | libldb | — |
ALINUX2-SA-2021:0025: nss security and bug fix update (Moderate)
CVEs:CVE-2020-25648
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| nss | affected | Alibaba Cloud | nss | — |
HOTFIX-BA-2021:0001: kernel-hotfix bugfix update (Important)
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| kernel-hotfix-5260815-19.1.al7 | affected | Alibaba Cloud | kernel-hotfix-5260815-19.1.al7 | — |
HOTFIX-BA-2021:0002: kernel-hotfix bugfix update (Important)
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| kernel-hotfix-5260815-21.2.al7 | affected | Alibaba Cloud | kernel-hotfix-5260815-21.2.al7 | — |
Every CVE above is indexed in the Vulnetix VDB with KEV, EPSS, and PoC maturity. The interactive page surfaces that on hover.