1 issue skipped by the security teams:
- CVE-2020-14929: Alpine before 2.23 silently proceeds to use an insecure connection after a /tls is sent in certain circumstances involving PREAUTH, which is a less secure behavior than the alternative of closing the connection and letting the user decide what they would like to do.
![[bug history graph]](https://qa.debian.org/data/bts/graphs/a/alpine.png){kind=link}