openSUSE Security Update: Security update for viewvc

Announcement ID:    openSUSE-SU-2021:0145-1
Rating:             moderate
References:         #1167974 
Cross-References:   CVE-2020-5283
Affected Products:
                    openSUSE Backports SLE-15-SP2

   An update that fixes one vulnerability is now available.


   This update for viewvc fixes the following issues:

   - update to 1.1.28 (boo#1167974, CVE-2020-5283):
     * security fix: escape subdir lastmod file name (#211)
     * fix first request failure (#195)
     * suppress stack traces (with option to show) (#140)
     * distinguish text/binary/image files by icons (#166, #175)
     * colorize alternating file content lines (#167)
     * link to the instance root from the ViewVC logo (#168)
     * display directory and root counts, too (#169)
     * fix double fault error in (#157)
     * support timezone offsets with minutes piece (#176)

   This update was imported from the openSUSE:Leap:15.1:Update update
   project. This update was imported from the openSUSE:Leap:15.2:Update
   update project.

Patch Instructions:

   To install this openSUSE Security Update use the SUSE recommended installation methods
   like YaST online_update or "zypper patch".

   Alternatively you can run the command listed for your product:

   - openSUSE Backports SLE-15-SP2:

      zypper in -t patch openSUSE-2021-145=1

Package List:

   - openSUSE Backports SLE-15-SP2 (noarch):