Oval Definition:	oval:org.opensuse.security:def:46301
Revision Date: 2020-12-01 Version: 1 Title: Security update for mutt (Important) Description: This update for mutt fixes the following issues: - CVE-2020-14954: Fixed a response injection due to a STARTTLS buffering issue which was affecting IMAP, SMTP, and POP3 (bsc#1173197). - CVE-2020-14093: Fixed a potential IMAP Man-in-the-Middle attack via a PREAUTH response (bsc#1172906, bsc#1172935). - CVE-2020-14154: Fixed an issue where Mutt was ignoring an expired certificate and was proceeding with a connection (bsc#1172906, bsc#1172935). Family: unix Class: patch Status: Reference(s): 1012382 1020940 1035686 1060031 1060321 1063798 1064232 1072385 1075876 1076110 1085185 1085657 1085790 1089525 1090435 1090888 1091171 1092207 1094244 1094248 1094643 1095453 1096790 1097034 1097140 1097492 1097501 1097551 1097808 1097931 1097961 1098016 1098236 1098425 1098435 1098527 1098599 1099042 1099183 1099279 1099713 1099732 1099792 1099810 1099918 1099924 1099966 1099993 1100089 1100340 1100416 1100418 1100491 1100843 1101296 1115750 1120114 1120115 1120116 1120117 1120118 1120119 1120120 1120121 1120122 1132045 1140868 1144524 1146848 1148987 1152107 1154212 1158442 1160305 1160498 1166847 1172906 1172935 1173197 1173798 1173998 1174205 1174757 1174771 1175112 1175127 1175228 1175691 1176069 1176733 905870 905871 905872 922220 922221 922222 922223 927637 CVE-2014-8767 CVE-2014-8768 CVE-2014-8769 CVE-2015-0261 CVE-2015-2153 CVE-2015-2154 CVE-2015-2155 CVE-2015-3138 CVE-2016-7922 CVE-2016-7923 CVE-2016-7924 CVE-2016-7925 CVE-2016-7926 CVE-2016-7927 CVE-2016-7928 CVE-2016-7929 CVE-2016-7930 CVE-2016-7931 CVE-2016-7932 CVE-2016-7933 CVE-2016-7934 CVE-2016-7935 CVE-2016-7936 CVE-2016-7937 CVE-2016-7938 CVE-2016-7939 CVE-2016-7940 CVE-2016-7973 CVE-2016-7974 CVE-2016-7975 CVE-2016-7983 CVE-2016-7984 CVE-2016-7985 CVE-2016-7986 CVE-2016-7992 CVE-2016-7993 CVE-2016-8574 CVE-2016-8575 CVE-2017-10989 CVE-2017-13735 CVE-2017-14604 CVE-2017-14608 CVE-2017-16909 CVE-2017-5202 CVE-2017-5203 CVE-2017-5204 CVE-2017-5205 CVE-2017-5341 CVE-2017-5342 CVE-2017-5482 CVE-2017-5483 CVE-2017-5484 CVE-2017-5485 CVE-2017-5486 CVE-2018-13053 CVE-2018-13405 CVE-2018-13406 CVE-2018-15126 CVE-2018-15127 CVE-2018-20019 CVE-2018-20020 CVE-2018-20021 CVE-2018-20022 CVE-2018-20023 CVE-2018-20024 CVE-2018-4700 CVE-2018-6307 CVE-2018-8740 CVE-2018-9385 CVE-2019-11709 CVE-2019-11711 CVE-2019-11712 CVE-2019-11713 CVE-2019-11715 CVE-2019-11717 CVE-2019-11719 CVE-2019-11729 CVE-2019-11730 CVE-2019-13456 CVE-2019-13627 CVE-2019-16746 CVE-2019-17015 CVE-2019-17016 CVE-2019-17017 CVE-2019-17021 CVE-2019-17022 CVE-2019-17024 CVE-2019-17026 CVE-2019-17185 CVE-2019-2933 CVE-2019-2945 CVE-2019-2962 CVE-2019-2964 CVE-2019-2973 CVE-2019-2978 CVE-2019-2981 CVE-2019-2983 CVE-2019-2989 CVE-2019-2992 CVE-2019-2999 CVE-2019-9811 CVE-2020-13753 CVE-2020-14093 CVE-2020-14154 CVE-2020-14314 CVE-2020-14331 CVE-2020-14386 CVE-2020-14954 CVE-2020-16166 CVE-2020-26117 CVE-2020-9802 CVE-2020-9803 CVE-2020-9805 CVE-2020-9806 CVE-2020-9807 CVE-2020-9843 CVE-2020-9850 SUSE-SU-2017:1110-1 SUSE-SU-2017:3392-1 SUSE-SU-2018:2051-1 SUSE-SU-2018:2058-1 SUSE-SU-2018:4089-1 SUSE-SU-2019:0060-1 SUSE-SU-2019:1208-1 SUSE-SU-2019:1861-1 SUSE-SU-2019:2510-1 SUSE-SU-2020:0068-1 SUSE-SU-2020:1020-1 SUSE-SU-2020:2069-1 Platform(s): openSUSE Leap 15.0 openSUSE Leap 42.3 SUSE Linux Enterprise Desktop 11 SP2 SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise Module for additional PackageHub packages 15 SUSE Linux Enterprise Module for additional PackageHub packages 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Desktop Applications 15 SUSE Linux Enterprise Module for Desktop Applications 15 SP1 SUSE Linux Enterprise Module for Development Tools 15 SP1 SUSE Linux Enterprise Module for Legacy Software 15 SUSE Linux Enterprise Module for Live Patching 15 SUSE Linux Enterprise Module for Live Patching 15 SP1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP1 SUSE Linux Enterprise Module for Public Cloud 15 SP1 SUSE Linux Enterprise Module for Server Applications 15 SUSE Linux Enterprise Module for Server Applications 15 SP1 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP2-ESPOS SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP3-BCL SUSE Linux Enterprise Server 12 SP3-ESPOS SUSE Linux Enterprise Server 12 SP3-LTSS SUSE Linux Enterprise Server 12 SP3-TERADATA SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 12 SP4-ESPOS SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server for SAP Applications 12 SP3-ESPOS SUSE Linux Enterprise Server for SAP Applications 12 SP3-TERADATA SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP4-ESPOS SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SUSE Linux Enterprise Workstation Extension 12 SP1 SUSE Linux Enterprise Workstation Extension 12 SP3 SUSE Linux Enterprise Workstation Extension 12 SP4 SUSE Linux Enterprise Workstation Extension 12 SP5 SUSE Linux Enterprise Workstation Extension 15 SP1 SUSE OpenStack Cloud Crowbar 8 SUSE OpenStack Cloud Crowbar 9 Product(s): Definition Synopsis openSUSE Leap 15.0 is installed AND Package Information apparmor-abstractions-2.12-lp150.5 is installed OR apparmor-docs-2.12-lp150.5 is installed OR apparmor-parser-2.12-lp150.5 is installed OR apparmor-parser-lang-2.12-lp150.5 is installed OR apparmor-profiles-2.12-lp150.5 is installed OR apparmor-utils-2.12-lp150.5 is installed OR apparmor-utils-lang-2.12-lp150.5 is installed OR perl-apparmor-2.12-lp150.5 is installed OR python3-apparmor-2.12-lp150.5 is installed Definition Synopsis openSUSE Leap 42.3 is installed AND Package Information MozillaFirefox-52.4.0-63 is installed OR MozillaFirefox-branding-upstream-52.4.0-63 is installed OR MozillaFirefox-buildsymbols-52.4.0-63 is installed OR MozillaFirefox-devel-52.4.0-63 is installed OR MozillaFirefox-translations-common-52.4.0-63 is installed OR MozillaFirefox-translations-other-52.4.0-63 is installed OR java-1_8_0-openjdk-1.8.0.144-15 is installed OR java-1_8_0-openjdk-accessibility-1.8.0.144-15 is installed OR java-1_8_0-openjdk-demo-1.8.0.144-15 is installed OR java-1_8_0-openjdk-devel-1.8.0.144-15 is installed OR java-1_8_0-openjdk-headless-1.8.0.144-15 is installed OR java-1_8_0-openjdk-javadoc-1.8.0.144-15 is installed OR java-1_8_0-openjdk-src-1.8.0.144-15 is installed OR libfreebl3-3.28.6-44 is installed OR libfreebl3-32bit-3.28.6-44 is installed OR libsoftokn3-3.28.6-44 is installed OR libsoftokn3-32bit-3.28.6-44 is installed OR mozilla-nss-3.28.6-44 is installed OR mozilla-nss-32bit-3.28.6-44 is installed OR mozilla-nss-certs-3.28.6-44 is installed OR mozilla-nss-certs-32bit-3.28.6-44 is installed OR mozilla-nss-devel-3.28.6-44 is installed OR mozilla-nss-sysinit-3.28.6-44 is installed OR mozilla-nss-sysinit-32bit-3.28.6-44 is installed OR mozilla-nss-tools-3.28.6-44 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP2 is installed AND permissions-2013.1.7-0.3 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP3 is installed AND Package Information bind-9.9.6P1-0.12 is installed OR bind-libs-9.9.6P1-0.12 is installed OR bind-libs-32bit-9.9.6P1-0.12 is installed OR bind-utils-9.9.6P1-0.12 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 is installed AND Package Information libIlmImf-Imf_2_1-21-2.1.0-4 is installed OR libIlmImf-Imf_2_1-21-32bit-2.1.0-4 is installed OR openexr-2.1.0-4 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP1 is installed AND Package Information cyrus-sasl-2.1.26-7 is installed OR cyrus-sasl-32bit-2.1.26-7 is installed OR cyrus-sasl-crammd5-2.1.26-7 is installed OR cyrus-sasl-crammd5-32bit-2.1.26-7 is installed OR cyrus-sasl-digestmd5-2.1.26-7 is installed OR cyrus-sasl-digestmd5-32bit-2.1.26-7 is installed OR cyrus-sasl-gssapi-2.1.26-7 is installed OR cyrus-sasl-gssapi-32bit-2.1.26-7 is installed OR cyrus-sasl-plain-2.1.26-7 is installed OR cyrus-sasl-plain-32bit-2.1.26-7 is installed OR cyrus-sasl-saslauthd-2.1.26-7 is installed OR libsasl2-3-2.1.26-7 is installed OR libsasl2-3-32bit-2.1.26-7 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP2 is installed AND Package Information ibus-chewing-1.4.14-4 is installed OR ibus-pinyin-1.5.0-7 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP3 is installed AND Package Information accountsservice-0.6.42-14 is installed OR accountsservice-lang-0.6.42-14 is installed OR libaccountsservice0-0.6.42-14 is installed OR typelib-1_0-AccountsService-1_0-0.6.42-14 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP4 is installed AND Package Information cpio-2.11-36.3 is installed OR cpio-lang-2.11-36.3 is installed Definition Synopsis SUSE Linux Enterprise Module for additional PackageHub packages 15 is installed AND Package Information ffmpeg-3.4.2-4.12 is installed OR libavdevice57-3.4.2-4.12 is installed OR libavfilter6-3.4.2-4.12 is installed Definition Synopsis SUSE Linux Enterprise Module for additional PackageHub packages 15 SP2 is installed AND Package Information perl-5.26.1-7.12 is installed OR perl-32bit-5.26.1-7.12 is installed Definition Synopsis SUSE Linux Enterprise Module for Basesystem 15 is installed AND Package Information alsa-1.1.5-4 is installed OR alsa-devel-1.1.5-4 is installed OR libasound2-1.1.5-4 is installed OR libasound2-32bit-1.1.5-4 is installed Definition Synopsis SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed AND Package Information binutils-2.31-5 is installed OR binutils-devel-2.31-5 is installed Definition Synopsis SUSE Linux Enterprise Module for Desktop Applications 15 is installed AND Package Information firewall-applet-0.5.3-2 is installed OR firewall-config-0.5.3-2 is installed Definition Synopsis SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed AND Package Information libgme-devel-0.6.2-1 is installed OR libgme0-0.6.2-1 is installed Definition Synopsis SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed AND binutils-devel-32bit-2.31-5 is installed Definition Synopsis SUSE Linux Enterprise Module for Legacy Software 15 is installed AND Package Information openldap2-2.4.46-7 is installed OR openldap2-back-meta-2.4.46-7 is installed OR openldap2-back-perl-2.4.46-7 is installed Definition Synopsis SUSE Linux Enterprise Module for Live Patching 15 is installed AND Package Information kernel-livepatch-4_12_14-25_25-default-5-2 is installed OR kernel-livepatch-SLE15_Update_7-5-2 is installed Definition Synopsis SUSE Linux Enterprise Module for Live Patching 15 SP1 is installed AND Package Information kernel-livepatch-4_12_14-197_15-default-2-2 is installed OR kernel-livepatch-SLE15-SP1_Update_4-2-2 is installed Definition Synopsis SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 is installed AND Package Information ncat-7.70-3.5 is installed OR ndiff-7.70-3.5 is installed OR nmap-7.70-3.5 is installed OR nping-7.70-3.5 is installed OR zenmap-7.70-3.5 is installed Definition Synopsis SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP1 is installed AND Package Information gcc9-9.2.1+r275327-1.3 is installed OR gcc9-ada-32bit-9.2.1+r275327-1.3 is installed OR gcc9-fortran-32bit-9.2.1+r275327-1.3 is installed OR gcc9-go-9.2.1+r275327-1.3 is installed OR gcc9-go-32bit-9.2.1+r275327-1.3 is installed OR libada9-32bit-9.2.1+r275327-1.3 is installed OR libgfortran5-32bit-9.2.1+r275327-1.3 is installed OR libgo14-9.2.1+r275327-1.3 is installed OR libgo14-32bit-9.2.1+r275327-1.3 is installed Definition Synopsis SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed AND Package Information kernel-azure-4.12.14-8.33 is installed OR kernel-azure-base-4.12.14-8.33 is installed OR kernel-azure-devel-4.12.14-8.33 is installed OR kernel-devel-azure-4.12.14-8.33 is installed OR kernel-source-azure-4.12.14-8.33 is installed OR kernel-syms-azure-4.12.14-8.33 is installed Definition Synopsis SUSE Linux Enterprise Module for Server Applications 15 is installed AND Package Information 389-ds-1.4.0.3-2 is installed OR 389-ds-devel-1.4.0.3-2 is installed Definition Synopsis SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed AND Package Information gtk-vnc-devel-0.7.2-1 is installed OR libgvncpulse-1_0-0-0.7.2-1 is installed OR typelib-1_0-GVnc-1_0-0.7.2-1 is installed OR typelib-1_0-GVncPulse-1_0-0.7.2-1 is installed OR typelib-1_0-GtkVnc-1_0-0.7.2-1 is installed OR typelib-1_0-GtkVnc-2_0-0.7.2-1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1 is installed AND binutils-2.25.0-13 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-ESPOS is installed AND Package Information xen-4.7.6_04-43.39 is installed OR xen-doc-html-4.7.6_04-43.39 is installed OR xen-libs-4.7.6_04-43.39 is installed OR xen-libs-32bit-4.7.6_04-43.39 is installed OR xen-tools-4.7.6_04-43.39 is installed OR xen-tools-domU-4.7.6_04-43.39 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND Package Information automake-1.13.4-6 is installed OR m4-1.4.16-15 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-BCL is installed AND squid-3.5.21-26.17 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 12 SP3-ESPOS is installed AND mutt-1.10.1-55.11 is installed OR Package Information SUSE Linux Enterprise Server for SAP Applications 12 SP3-ESPOS is installed AND mutt-1.10.1-55.11 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-ESPOS is installed AND Package Information ghostscript-9.27-23.28 is installed OR ghostscript-x11-9.27-23.28 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-LTSS is installed AND Package Information kgraft-patch-4_4_178-94_91-default-3-2 is installed OR kgraft-patch-SLE12-SP3_Update_25-3-2 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 12 SP3-TERADATA is installed AND java-1_7_1-ibm-1.7.1_sr4.55-38.44 is installed OR java-1_7_1-ibm-alsa-1.7.1_sr4.55-38.44 is installed OR java-1_7_1-ibm-jdbc-1.7.1_sr4.55-38.44 is installed OR java-1_7_1-ibm-plugin-1.7.1_sr4.55-38.44 is installed OR Package Information SUSE Linux Enterprise Server for SAP Applications 12 SP3-TERADATA is installed AND java-1_7_1-ibm-1.7.1_sr4.55-38.44 is installed OR java-1_7_1-ibm-alsa-1.7.1_sr4.55-38.44 is installed OR java-1_7_1-ibm-jdbc-1.7.1_sr4.55-38.44 is installed OR java-1_7_1-ibm-plugin-1.7.1_sr4.55-38.44 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-TERADATA is installed AND Package Information libcgroup-0.41.rc1-10.9 is installed OR libcgroup-tools-0.41.rc1-10.9 is installed OR libcgroup1-0.41.rc1-10.9 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 12 SP4 is installed AND cups-1.7.5-20.20 is installed OR cups-client-1.7.5-20.20 is installed OR cups-libs-1.7.5-20.20 is installed OR cups-libs-32bit-1.7.5-20.20 is installed OR Package Information SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed AND cups-1.7.5-20.20 is installed OR cups-client-1.7.5-20.20 is installed OR cups-libs-1.7.5-20.20 is installed OR cups-libs-32bit-1.7.5-20.20 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP4 is installed AND Package Information aaa_base-13.2+git20140911.61c1681-38.8 is installed OR aaa_base-extras-13.2+git20140911.61c1681-38.8 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 12 SP4-ESPOS is installed AND libXvnc1-1.6.0-22.17 is installed OR tigervnc-1.6.0-22.17 is installed OR xorg-x11-Xvnc-1.6.0-22.17 is installed OR Package Information SUSE Linux Enterprise Server for SAP Applications 12 SP4-ESPOS is installed AND libXvnc1-1.6.0-22.17 is installed OR tigervnc-1.6.0-22.17 is installed OR xorg-x11-Xvnc-1.6.0-22.17 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 12 SP5 is installed AND freeradius-server-3.0.19-3.3 is installed OR freeradius-server-doc-3.0.19-3.3 is installed OR freeradius-server-krb5-3.0.19-3.3 is installed OR freeradius-server-ldap-3.0.19-3.3 is installed OR freeradius-server-libs-3.0.19-3.3 is installed OR freeradius-server-mysql-3.0.19-3.3 is installed OR freeradius-server-perl-3.0.19-3.3 is installed OR freeradius-server-postgresql-3.0.19-3.3 is installed OR freeradius-server-python-3.0.19-3.3 is installed OR freeradius-server-sqlite-3.0.19-3.3 is installed OR freeradius-server-utils-3.0.19-3.3 is installed OR Package Information SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed AND freeradius-server-3.0.19-3.3 is installed OR freeradius-server-doc-3.0.19-3.3 is installed OR freeradius-server-krb5-3.0.19-3.3 is installed OR freeradius-server-ldap-3.0.19-3.3 is installed OR freeradius-server-libs-3.0.19-3.3 is installed OR freeradius-server-mysql-3.0.19-3.3 is installed OR freeradius-server-perl-3.0.19-3.3 is installed OR freeradius-server-postgresql-3.0.19-3.3 is installed OR freeradius-server-python-3.0.19-3.3 is installed OR freeradius-server-sqlite-3.0.19-3.3 is installed OR freeradius-server-utils-3.0.19-3.3 is installed Definition Synopsis SUSE Linux Enterprise Server 15-LTSS is installed AND nginx-1.16.1-3.12 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 15 is installed AND Package Information java-1_8_0-openjdk-1.8.0.252-3.35 is installed OR java-1_8_0-openjdk-demo-1.8.0.252-3.35 is installed OR java-1_8_0-openjdk-devel-1.8.0.252-3.35 is installed OR java-1_8_0-openjdk-headless-1.8.0.252-3.35 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP1 is installed AND Package Information libpcap-1.8.1-9 is installed OR libpcap1-32bit-1.8.1-9 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP3 is installed AND Package Information libraw-0.15.4-16 is installed OR libraw9-0.15.4-16 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP4 is installed AND Package Information kernel-default-4.12.14-95.29 is installed OR kernel-default-extra-4.12.14-95.29 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP5 is installed AND Package Information python-base-2.7.17-28.48 is installed OR python-devel-2.7.17-28.48 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 SP1 is installed AND Package Information MozillaThunderbird-60.7.0-3.36 is installed OR MozillaThunderbird-translations-common-60.7.0-3.36 is installed OR MozillaThunderbird-translations-other-60.7.0-3.36 is installed Definition Synopsis SUSE OpenStack Cloud Crowbar 8 is installed AND python-Django-1.11.23-3.12 is installed Definition Synopsis SUSE OpenStack Cloud Crowbar 9 is installed AND Package Information ruby2.1-rubygem-rails-html-sanitizer-1.0.3-8.8 is installed OR rubygem-rails-html-sanitizer-1.0.3-8.8 is installed
BACK