Alibaba Security Advisories — February 2024 — Alibaba Security Advisories — Vulnetix

Try Vulnetix Request Demo

Alibaba Security Advisories · February 2024 — Alibaba Security Advisories

3 advisories 39 CVEs

Alibaba Cloud Linux 2 advisories and cross-source Alibaba/Aliyun CVEs for 2024-02. Mirrored into Vulnetix VDB.

Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity).

Back to archive Open Console

Advisories

ALINUX2-SA-2024:0012

ALINUX 22024-02-26

ALINUX2-SA-2024:0012: cloud-kernel bugfix, enhancement and security update (Important)

CVEs:CVE-2022-3424 CVE-2022-3643 CVE-2022-3903 CVE-2022-41849 CVE-2022-45887 CVE-2023-0615 CVE-2023-1079 CVE-2023-1206 CVE-2023-1390 CVE-2023-1513 CVE-2023-2002 CVE-2023-20569 CVE-2023-20593 CVE-2023-2860 CVE-2023-3006 CVE-2023-31083 CVE-2023-31085 CVE-2023-3159 CVE-2023-3161 CVE-2023-3358 CVE-2023-3567 CVE-2023-35823 CVE-2023-35824 CVE-2023-35828 CVE-2023-39192 CVE-2023-4128 CVE-2023-4132 CVE-2023-42755 CVE-2023-4385 CVE-2023-4387 CVE-2023-45863 CVE-2023-45871 CVE-2023-4623 CVE-2023-4921 CVE-2023-5717 CVE-2023-6931 CVE-2023-6932

Affected products

Product	Status	Vendor	Package	Ecosystem
kernel	affected	Alibaba Cloud	kernel	—

Upstream advisory

ALINUX2-SA-2024:0010

ALINUX 22024-02-19

ALINUX2-SA-2024:0010: python-pillow security update (Important)

CVEs:CVE-2023-50447

Affected products

Product	Status	Vendor	Package	Ecosystem
python-pillow	affected	Alibaba Cloud	python-pillow	—

Upstream advisory

ALINUX2-SA-2024:0011

ALINUX 22024-02-19

ALINUX2-SA-2024:0011: linux-firmware security update (Moderate)

CVEs:CVE-2023-20592

Affected products

Product	Status	Vendor	Package	Ecosystem
linux-firmware	affected	Alibaba Cloud	linux-firmware	—

Upstream advisory

Need live exploit intelligence?

Every CVE above is indexed in the Vulnetix VDB with KEV, EPSS, and PoC maturity. The interactive page surfaces that on hover.

All months Open Console