Oval Definition:oval:org.opensuse.security:def:202014929
Revision Date:2022-06-30Version:1
Title:CVE-2020-14929
Description:

Alpine before 2.23 silently proceeds to use an insecure connection after a /tls is sent in certain circumstances involving PREAUTH, which is a less secure behavior than the alternative of closing the connection and letting the user decide what they would like to do.
Family:unixClass:vulnerability
Status:Reference(s):Mitre CVE-2020-14929
SUSE CVE-2020-14929
openSUSE-SU-2021:0675-1
openSUSE-SU-2021:0695-1
Platform(s):openSUSE Leap 15.2
openSUSE Tumbleweed
SUSE Linux Enterprise High Performance Computing 15 SP1
SUSE Linux Enterprise High Performance Computing 15 SP2
SUSE Linux Enterprise Server 15 SP1
SUSE Linux Enterprise Server 15 SP2
SUSE Linux Enterprise Server for SAP Applications 15 SP1
SUSE Linux Enterprise Server for SAP Applications 15 SP2
SUSE Linux Enterprise Storage 6
SUSE Linux Enterprise Storage 7
SUSE Manager Proxy 4.0
SUSE Manager Proxy 4.1
SUSE Manager Server 4.0
SUSE Manager Server 4.1
SUSE Package Hub for SUSE Linux Enterprise 15 SP1
SUSE Package Hub for SUSE Linux Enterprise 15 SP2
Product(s):
Definition Synopsis
  • openSUSE Tumbleweed is installed
  • AND Package Information
  • alpine-2.25-24.1 is installed
  • OR pico-5.07-24.1 is installed
  • OR pilot-2.99-24.1 is installed
  • Definition Synopsis
  • SUSE Package Hub for SUSE Linux Enterprise 15 SP1 is installed
  • AND Package Information
  • alpine-2.24-bp151.5.3.1 is installed
  • OR pico-5.07-bp151.5.3.1 is installed
  • OR pilot-2.99-bp151.5.3.1 is installed
  • Definition Synopsis
  • SUSE Package Hub for SUSE Linux Enterprise 15 SP2 is installed
  • AND Package Information
  • alpine-2.24-bp152.4.3.1 is installed
  • OR pico-5.07-bp152.4.3.1 is installed
  • OR pilot-2.99-bp152.4.3.1 is installed
  • Definition Synopsis
  • Release Information
  • SUSE Package Hub for SUSE Linux Enterprise 15 SP2 is installed
  • AND
  • alpine-2.24-bp152.4.3.1 is installed
  • OR pico-5.07-bp152.4.3.1 is installed
  • OR pilot-2.99-bp152.4.3.1 is installed
  • OR Package Information
  • SUSE Package Hub for SUSE Linux Enterprise 15 SP1 is installed
  • AND
  • alpine-2.24-bp151.5.3.1 is installed
  • OR pico-5.07-bp151.5.3.1 is installed
  • OR pilot-2.99-bp151.5.3.1 is installed
  • Definition Synopsis
  • openSUSE Leap 15.2 is installed
  • AND Package Information
  • alpine-2.24-lp152.5.3.1 is installed
  • AND alpine is signed with openSUSE key
  • OR
  • pico-5.07-lp152.5.3.1 is installed
  • AND pico is signed with openSUSE key
  • OR
  • pilot-2.99-lp152.5.3.1 is installed
  • AND pilot is signed with openSUSE key
  • BACK