Alibaba Security Advisories — March 2023 — Alibaba Security Advisories — Vulnetix

Try Vulnetix Request Demo

Alibaba Security Advisories · March 2023 — Alibaba Security Advisories

6 advisories 6 CVEs

Alibaba Cloud Linux 2 advisories and cross-source Alibaba/Aliyun CVEs for 2023-03. Mirrored into Vulnetix VDB.

Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity).

Back to archive Open Console

Advisories

ALINUX2-SA-2023:0016

ALINUX 22023-03-21

ALINUX2-SA-2023:0016: openssl security update (Important)

CVEs:CVE-2023-0286

Affected products

Product	Status	Vendor	Package	Ecosystem
openssl	affected	Alibaba Cloud	openssl	—

Upstream advisory

HOTFIX-SA-2023:0001

ALINUX 22023-03-17

HOTFIX-SA-2023:0001: kernel-hotfix security update (Important)

Affected products

Product	Status	Vendor	Package	Ecosystem
kernel-hotfix-CVE-2023-0461-4.19.91-25.1	affected	Alibaba Cloud	kernel-hotfix-CVE-2023-0461-4.19.91-25.1	—
kernel-hotfix-CVE-2023-0461-4.19.91-25.6	affected	Alibaba Cloud	kernel-hotfix-CVE-2023-0461-4.19.91-25.6	—
kernel-hotfix-CVE-2023-0461-4.19.91-25.7	affected	Alibaba Cloud	kernel-hotfix-CVE-2023-0461-4.19.91-25.7	—
kernel-hotfix-CVE-2023-0461-4.19.91-25.8	affected	Alibaba Cloud	kernel-hotfix-CVE-2023-0461-4.19.91-25.8	—
kernel-hotfix-CVE-2023-0461-4.19.91-26	affected	Alibaba Cloud	kernel-hotfix-CVE-2023-0461-4.19.91-26	—
kernel-hotfix-CVE-2023-0461-4.19.91-26.1	affected	Alibaba Cloud	kernel-hotfix-CVE-2023-0461-4.19.91-26.1	—
kernel-hotfix-CVE-2023-0461-4.19.91-26.2	affected	Alibaba Cloud	kernel-hotfix-CVE-2023-0461-4.19.91-26.2	—
kernel-hotfix-CVE-2023-0461-4.19.91-26.3	affected	Alibaba Cloud	kernel-hotfix-CVE-2023-0461-4.19.91-26.3	—
kernel-hotfix-CVE-2023-0461-4.19.91-26.4	affected	Alibaba Cloud	kernel-hotfix-CVE-2023-0461-4.19.91-26.4	—
kernel-hotfix-CVE-2023-0461-4.19.91-26.5	affected	Alibaba Cloud	kernel-hotfix-CVE-2023-0461-4.19.91-26.5	—
kernel-hotfix-CVE-2023-0461-4.19.91-26.6	affected	Alibaba Cloud	kernel-hotfix-CVE-2023-0461-4.19.91-26.6	—
kernel-hotfix-CVE-2023-0461-4.19.91-27	affected	Alibaba Cloud	kernel-hotfix-CVE-2023-0461-4.19.91-27	—
kernel-hotfix-CVE-2023-0461-4.19.91-27.1	affected	Alibaba Cloud	kernel-hotfix-CVE-2023-0461-4.19.91-27.1	—

Upstream advisory

ALINUX2-SA-2023:0013

ALINUX 22023-03-08

ALINUX2-SA-2023:0013: samba security update (Important)

CVEs:CVE-2022-38023

Affected products

Product	Status	Vendor	Package	Ecosystem
samba	affected	Alibaba Cloud	samba	—

Upstream advisory

ALINUX2-SA-2023:0014

ALINUX 22023-03-08

ALINUX2-SA-2023:0014: pesign security update (Important)

CVEs:CVE-2022-3560

Affected products

Product	Status	Vendor	Package	Ecosystem
pesign	affected	Alibaba Cloud	pesign	—

Upstream advisory

ALINUX2-SA-2023:0015

ALINUX 22023-03-08

ALINUX2-SA-2023:0015: zlib security update (Moderate)

CVEs:CVE-2022-37434

Affected products

Product	Status	Vendor	Package	Ecosystem
zlib	affected	Alibaba Cloud	zlib	—

Upstream advisory

ALINUX2-SA-2023:0012

ALINUX 22023-03-01

ALINUX2-SA-2023:0012: git security update (Important)

CVEs:CVE-2022-23521 CVE-2022-41903

Affected products

Product	Status	Vendor	Package	Ecosystem
git	affected	Alibaba Cloud	git	—

Upstream advisory

Need live exploit intelligence?

Every CVE above is indexed in the Vulnetix VDB with KEV, EPSS, and PoC maturity. The interactive page surfaces that on hover.

All months Open Console