Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity). 1 is already weaponised in the wild — see the Exploited section.
ALINUX2-SA-2021:0060: java-1.8.0-openjdk security and bug fix update (Important)
CVEs:CVE-2021-35550CVE-2021-35556CVE-2021-35559CVE-2021-35561CVE-2021-35564CVE-2021-35565CVE-2021-35567CVE-2021-35578CVE-2021-35586CVE-2021-35588CVE-2021-35603
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| java-1.8.0-openjdk | affected | Alibaba Cloud | java-1.8.0-openjdk | — |
ALINUX2-SA-2021:0061: java-11-openjdk security and bug fix update (Important)
CVEs:CVE-2021-35550CVE-2021-35556CVE-2021-35559CVE-2021-35561CVE-2021-35564CVE-2021-35565CVE-2021-35567CVE-2021-35578CVE-2021-35586CVE-2021-35603
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| java-11-openjdk | affected | Alibaba Cloud | java-11-openjdk | — |
ALINUX2-SA-2021:0059: httpd security update (Important)
CVEs:CVE-2021-40438
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| httpd | affected | Alibaba Cloud | httpd | — |
ALINUX2-SA-2021:0056: openssl security update (Moderate)
CVEs:CVE-2021-23840CVE-2021-23841
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| openssl | affected | Alibaba Cloud | openssl | — |
ALINUX2-SA-2021:0057: 389-ds-base security and bug fix update (Low)
CVEs:CVE-2021-3652
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| 389-ds-base | affected | Alibaba Cloud | 389-ds-base | — |
ALINUX2-SA-2021:0058: libxml2 security update (Moderate)
CVEs:CVE-2016-4658
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| libxml2 | affected | Alibaba Cloud | libxml2 | — |
Every CVE above is indexed in the Vulnetix VDB with KEV, EPSS, and PoC maturity. The interactive page surfaces that on hover.