File _patchinfo of Package patchinfo.15561

Overview Repositories Revisions Requests Users Attributes Meta

File _patchinfo of Package patchinfo.15561

<patchinfo incident="15561">
  <issue tracker="bnc" id="1167974">VUL-0: CVE-2020-5283: viewvc: CVS lastlog filename not escaped (XSS)</issue>
  <issue tracker="cve" id="2020-5283"/>
  <packager>dirkmueller</packager>
  <rating>moderate</rating>
  <category>security</category>
  <summary>Security update for viewvc</summary>
  <description>This update for viewvc fixes the following issues:

- update to 1.1.28 (boo#1167974, CVE-2020-5283):
  * security fix: escape subdir lastmod file name (#211)
  * fix standalone.py first request failure (#195)
  * suppress stack traces (with option to show) (#140)
  * distinguish text/binary/image files by icons (#166, #175)
  * colorize alternating file content lines (#167)
  * link to the instance root from the ViewVC logo (#168)
  * display directory and root counts, too (#169)
  * fix double fault error in standalone.py (#157)
  * support timezone offsets with minutes piece (#176)

This update was imported from the openSUSE:Leap:15.1:Update update project.</description>
</patchinfo>

Places

File _patchinfo of Package patchinfo.15561

Places