Alibaba Security Advisories: August 2021 — Alibaba Security Advisories | Vulnetix

Try Vulnetix Request Demo

Alibaba Security Advisories · August 2021 — Alibaba Security Advisories

18 advisories 16 CVEs

Alibaba Cloud Linux 2 advisories and cross-source Alibaba/Aliyun CVEs for 2021-08. Mirrored into Vulnetix VDB.

Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity).

Back to archive Open Console

What would you fix first?

The advisories below are ordered by the Vulnetix risk prioritization strategy: exploitation evidence first, scores second. On the interactive page you can switch to three other lenses.

Vulnetix priority default

Malware first, then the KEV catalogues, then weaponized and observed exploitation, and only then the scores.
Vendor rating

The vendor's own words, ranked in the vendor's own order.
CVSS score

The CVSS base score the vendor published, or the highest score in the Vulnetix VDB when the vendor published none.
EPSS likelihood

FIRST’s exploit prediction. Advisories that resolve to no CVE have no EPSS and sort last.

How Vulnetix ranks risk Get a free API key

Advisories

ALINUX2-SA-2021:0045

ALINUX 2PoC exploit2021-08-04

ALINUX2-SA-2021:0045: java-1.8.0-openjdk security and bug fix update (Important)

CVEs:CVE-2021-2341 CVE-2021-2369 CVE-2021-2388

Affected products

Product	Status	Vendor	Package	Ecosystem
java-1.8.0-openjdk	affected	Alibaba Cloud	java-1.8.0-openjdk	—

Upstream advisory

ALINUX2-SA-2021:0047

ALINUX 2PoC exploit2021-08-13

ALINUX2-SA-2021:0047: microcode_ctl security, bug fix and enhancement update (Important)

CVEs:CVE-2020-0543 CVE-2020-0548 CVE-2020-0549 CVE-2020-24489 CVE-2020-24511 CVE-2020-24512 CVE-2020-8695 CVE-2020-8696 CVE-2020-8698

Affected products

Product	Status	Vendor	Package	Ecosystem
microcode_ctl	affected	Alibaba Cloud	microcode_ctl	—

Upstream advisory

ALINUX2-SA-2021:0052

ALINUX 2Coalition ESS < 30%2021-08-31

ALINUX2-SA-2021:0052: libX11 security update (Important)

CVEs:CVE-2021-31535

Affected products

Product	Status	Vendor	Package	Ecosystem
libX11	affected	Alibaba Cloud	libX11	—

Upstream advisory

ALINUX2-SA-2021:0051

ALINUX 2Coalition ESS < 30%2021-08-31

ALINUX2-SA-2021:0051: libsndfile security update (Important)

CVEs:CVE-2021-3246

Affected products

Product	Status	Vendor	Package	Ecosystem
libsndfile	affected	Alibaba Cloud	libsndfile	—

Upstream advisory

ALINUX2-SA-2021:0046

ALINUX 2Coalition ESS < 30%2021-08-04

ALINUX2-SA-2021:0046: lasso security update (Important)

CVEs:CVE-2021-28091

Affected products

Product	Status	Vendor	Package	Ecosystem
lasso	affected	Alibaba Cloud	lasso	—

Upstream advisory

ALINUX2-SA-2021:0049

ALINUX 2EPSS <= 49%2021-08-27

ALINUX2-SA-2021:0049: compat-exiv2-026 security update (Important)

CVEs:CVE-2021-31291

Affected products

Product	Status	Vendor	Package	Ecosystem
compat-exiv2-026	affected	Alibaba Cloud	compat-exiv2-026	—

Upstream advisory

ALINUX2-SA-2021:0050

ALINUX 2EPSS <= 49%2021-08-27

ALINUX2-SA-2021:0050: compat-exiv2-023 security update (Important)

CVEs:CVE-2021-31291

Affected products

Product	Status	Vendor	Package	Ecosystem
compat-exiv2-023	affected	Alibaba Cloud	compat-exiv2-023	—

Upstream advisory

ALINUX2-SA-2021:0048

ALINUX 2EPSS <= 49%2021-08-17

ALINUX2-SA-2021:0048: exiv2 security update (Important)

CVEs:CVE-2021-31291

Affected products

Product	Status	Vendor	Package	Ecosystem
exiv2	affected	Alibaba Cloud	exiv2	—

Upstream advisory

HOTFIX-BA-2021:0036

ALINUX 2All remaining2021-08-26

HOTFIX-BA-2021:0036: kernel-hotfix bugfix update (Important)

Affected products

Product	Status	Vendor	Package	Ecosystem
kernel-hotfix-5000697-19.1.al7	affected	Alibaba Cloud	kernel-hotfix-5000697-19.1.al7	—

Upstream advisory

HOTFIX-BA-2021:0027

ALINUX 2All remaining2021-08-07

HOTFIX-BA-2021:0027: kernel-hotfix bugfix update (Important)

Affected products

Product	Status	Vendor	Package	Ecosystem
kernel-hotfix-5260815-21.al7	affected	Alibaba Cloud	kernel-hotfix-5260815-21.al7	—

Upstream advisory

HOTFIX-BA-2021:0028

ALINUX 2All remaining2021-08-07

HOTFIX-BA-2021:0028: kernel-hotfix bugfix update (Important)

Affected products

Product	Status	Vendor	Package	Ecosystem
kernel-hotfix-5260815-22.2.al7	affected	Alibaba Cloud	kernel-hotfix-5260815-22.2.al7	—

Upstream advisory

HOTFIX-BA-2021:0029

ALINUX 2All remaining2021-08-07

HOTFIX-BA-2021:0029: kernel-hotfix bugfix update (Important)

Affected products

Product	Status	Vendor	Package	Ecosystem
kernel-hotfix-5260815-23.al7	affected	Alibaba Cloud	kernel-hotfix-5260815-23.al7	—

Upstream advisory

HOTFIX-BA-2021:0030

ALINUX 2All remaining2021-08-07

HOTFIX-BA-2021:0030: kernel-hotfix bugfix update (Important)

Affected products

Product	Status	Vendor	Package	Ecosystem
kernel-hotfix-4375449-19.1.al7	affected	Alibaba Cloud	kernel-hotfix-4375449-19.1.al7	—

Upstream advisory

HOTFIX-BA-2021:0031

ALINUX 2All remaining2021-08-07

HOTFIX-BA-2021:0031: kernel-hotfix bugfix update (Important)

Affected products

Product	Status	Vendor	Package	Ecosystem
kernel-hotfix-4375449-21.al7	affected	Alibaba Cloud	kernel-hotfix-4375449-21.al7	—

Upstream advisory

HOTFIX-BA-2021:0032

ALINUX 2All remaining2021-08-07

HOTFIX-BA-2021:0032: kernel-hotfix bugfix update (Important)

Affected products

Product	Status	Vendor	Package	Ecosystem
kernel-hotfix-4375449-22.2.al7	affected	Alibaba Cloud	kernel-hotfix-4375449-22.2.al7	—

Upstream advisory

HOTFIX-BA-2021:0033

ALINUX 2All remaining2021-08-07

HOTFIX-BA-2021:0033: kernel-hotfix bugfix update (Important)

Affected products

Product	Status	Vendor	Package	Ecosystem
kernel-hotfix-5692820-21.al7	affected	Alibaba Cloud	kernel-hotfix-5692820-21.al7	—

Upstream advisory

HOTFIX-BA-2021:0034

ALINUX 2All remaining2021-08-07

HOTFIX-BA-2021:0034: kernel-hotfix bugfix update (Important)

Affected products

Product	Status	Vendor	Package	Ecosystem
kernel-hotfix-5692820-22.2.al7	affected	Alibaba Cloud	kernel-hotfix-5692820-22.2.al7	—

Upstream advisory

HOTFIX-BA-2021:0035

ALINUX 2All remaining2021-08-07

HOTFIX-BA-2021:0035: kernel-hotfix bugfix update (Important)

Affected products

Product	Status	Vendor	Package	Ecosystem
kernel-hotfix-5577959-23.al7	affected	Alibaba Cloud	kernel-hotfix-5577959-23.al7	—

Upstream advisory

Need live exploit intelligence?

Every CVE above is indexed in the Vulnetix VDB with KEV, EPSS, and PoC maturity. The interactive page surfaces that on hover.

All months Open Console