Alerts This Week
Warning Icon 1 681
Alerts This Week
Warning Icon 1 681

openSUSE 15 SP2: 2021:0695-1 Moderate: Alpine Insecure Connection Fix

opensuse
Calendar Grey May 9, 2021
Dist Opensuse Esm H88
openSUSE Security Patch for alpine: Addresses CVE-2020-14929 and enhances security measures for dependable performance.
An update that fixes one vulnerability is now available

Description

This update for alpine fixes the following issues:

Update to release 2.24

* A few crash fixes

* Implementation of XOAUTH2 for Yahoo! Mail.

Update to release 2.23.2

* Expansion of the configuration screen for XOAUTH2 to include username,

and tenant.

* Alpine uses the domain in the From: header of a message to generate a

message-id and suppresses all information about Alpine, version,

revision, and time of generation

of the message-id from this header.

* Alpine does not generate Sender or X-X-Sender by default by enabling [X]

Disable Sender as the default.

* Alpine does not disclose User Agent by default by enabling [X] Suppress

User Agent by default.

* When messages are selected, pressing the ';' command to broaden or

narrow a search, now offers the possibility to completely replace the

search, and is almost equivalent to being a shortcut to "unselect all

messages, and select again".

Update to release...

Read the Full Advisory

Patch

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods

like YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

- openSUSE Backports SLE-15-SP2:

zypper in -t patch openSUSE-2021-695=1

Package List

- openSUSE Backports SLE-15-SP2 (aarch64 ppc64le s390x x86_64):

alpine-2.24-bp152.4.3.1

pico-5.07-bp152.4.3.1

pilot-2.99-bp152.4.3.1

References

https://www.suse.com/security/cve/CVE-2020-14929.html

https://bugzilla.suse.com/1173281

Announcement ID: openSUSE-SU-2021:0695-1
Rating: moderate
Affected Products: openSUSE Backports SLE-15-SP2 .

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here