File _patchinfo of Package patchinfo.14603

<patchinfo incident="14603">
  <issue tracker="cve" id="2020-7942"/>
  <issue tracker="bnc" id="1167645">VUL-0: CVE-2020-7942: puppet: arbitrary catalog retrieval with strict_hostname_checking = false</issue>
  <packager>kstreitova</packager>
  <rating>moderate</rating>
  <category>security</category>
  <summary>Security update for puppet</summary>
  <description>This update for puppet fixes the following issues:

- CVE-2020-7942: Added a warning for a vulnerable configuration option, which could allow
  for information disclosure in certain setups. Disabling it my break some setups. (bsc#1167645)
</description>
</patchinfo>
openSUSE Build Service is sponsored by