Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity). 2 are already weaponised in the wild — see the Exploited section.
ALINUX2-SA-2022:0008: java-1.8.0-openjdk security update (Moderate)
CVEs:CVE-2022-21248CVE-2022-21282CVE-2022-21283CVE-2022-21293CVE-2022-21294CVE-2022-21296CVE-2022-21299CVE-2022-21305CVE-2022-21340CVE-2022-21341CVE-2022-21360CVE-2022-21365
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| java-1.8.0-openjdk | affected | Alibaba Cloud | java-1.8.0-openjdk | — |
ALINUX2-SA-2022:0007: polkit security update (Important)
CVEs:CVE-2021-4034
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| polkit | affected | Alibaba Cloud | polkit | — |
ALINUX2-SA-2022:0006: java-11-openjdk security update (Moderate)
CVEs:CVE-2022-21248CVE-2022-21277CVE-2022-21282CVE-2022-21283CVE-2022-21291CVE-2022-21293CVE-2022-21294CVE-2022-21296CVE-2022-21299CVE-2022-21305CVE-2022-21340CVE-2022-21341CVE-2022-21360CVE-2022-21365CVE-2022-21366
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| java-11-openjdk | affected | Alibaba Cloud | java-11-openjdk | — |
ALINUX2-SA-2022:0005: gegl security update (Important)
CVEs:CVE-2021-45463
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| gegl | affected | Alibaba Cloud | gegl | — |
ALINUX2-SA-2022:0004: httpd security update (Important)
CVEs:CVE-2021-26691CVE-2021-34798CVE-2021-39275CVE-2021-44790
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| httpd | affected | Alibaba Cloud | httpd | — |
ALINUX2-SA-2022:0002: openssl security update (Moderate)
CVEs:CVE-2021-3712
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| openssl | affected | Alibaba Cloud | openssl | — |
ALINUX2-SA-2022:0003: webkitgtk4 security update (Moderate)
CVEs:CVE-2021-30858
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| webkitgtk4 | affected | Alibaba Cloud | webkitgtk4 | — |
ALINUX2-SA-2022:0001: xorg-x11-server security update (Important)
CVEs:CVE-2021-4008CVE-2021-4009CVE-2021-4010CVE-2021-4011
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| xorg-x11-server | affected | Alibaba Cloud | xorg-x11-server | — |
Every CVE above is indexed in the Vulnetix VDB with KEV, EPSS, and PoC maturity. The interactive page surfaces that on hover.