ALINUX2-SA-2023:0004
ALINUX2-SA-2023:0004: sudo security update (Important)
CVEs:CVE-2023-22809
Affected products
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| sudo | affected | Alibaba Cloud | sudo | — |
Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity). 1 is already weaponised in the wild — see the Exploited section.
The advisories below are ordered by the Vulnetix risk prioritization strategy: exploitation evidence first, scores second. On the interactive page you can switch to three other lenses.
ALINUX2-SA-2023:0004: sudo security update (Important)
CVEs:CVE-2023-22809
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| sudo | affected | Alibaba Cloud | sudo | — |
ALINUX2-SA-2023:0003: libXpm security update (Important)
CVEs:CVE-2022-4883
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| libXpm | affected | Alibaba Cloud | libXpm | — |
ALINUX2-SA-2023:0006: bind security update (Moderate)
CVEs:CVE-2021-25220CVE-2022-2795
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| bind | affected | Alibaba Cloud | bind | — |
ALINUX2-SA-2023:0008: java-11-openjdk security and bug fix update (Moderate)
CVEs:CVE-2023-21835CVE-2023-21843
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| java-11-openjdk | affected | Alibaba Cloud | java-11-openjdk | — |
ALINUX2-SA-2023:0007: java-1.8.0-openjdk security and bug fix update (Moderate)
CVEs:CVE-2023-21830CVE-2023-21843
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| java-1.8.0-openjdk | affected | Alibaba Cloud | java-1.8.0-openjdk | — |
ALINUX2-SA-2023:0002: tigervnc security update (Important)
CVEs:CVE-2022-4283CVE-2022-46340CVE-2022-46341CVE-2022-46342CVE-2022-46343CVE-2022-46344
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tigervnc | affected | Alibaba Cloud | tigervnc | — |
ALINUX2-SA-2023:0009: libksba security update (Important)
CVEs:CVE-2022-47629
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| libksba | affected | Alibaba Cloud | libksba | — |
ALINUX2-SA-2023:0005: sssd security and bug fix update (Important)
CVEs:CVE-2022-4254
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| sssd | affected | Alibaba Cloud | sssd | — |
Every CVE above is indexed in the Vulnetix VDB with KEV, EPSS, and PoC maturity. The interactive page surfaces that on hover.