Script 'mail_helper' called by obssrc
Hello community,

here is the log from the commit of package patchinfo.15561 for 
openSUSE:Leap:15.2:Update checked in at 2021-01-20 00:24:06
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Leap:15.2:Update/patchinfo.15561 (Old)
 and      /work/SRC/openSUSE:Leap:15.2:Update/.patchinfo.15561.new.28504 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Package is "patchinfo.15561"

Wed Jan 20 00:24:06 2021 rev:1 rq:863763 version:unknown

Changes:
--------
New Changes file:

NO CHANGES FILE!!!

New:
----
  _patchinfo

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Other differences:
------------------
++++++ _patchinfo ++++++
<patchinfo incident="15561">
  <issue tracker="bnc" id="1167974">VUL-0: CVE-2020-5283: viewvc: CVS lastlog 
filename not escaped (XSS)</issue>
  <issue tracker="cve" id="2020-5283"/>
  <packager>dirkmueller</packager>
  <rating>moderate</rating>
  <category>security</category>
  <summary>Security update for viewvc</summary>
  <description>This update for viewvc fixes the following issues:

- update to 1.1.28 (boo#1167974, CVE-2020-5283):
  * security fix: escape subdir lastmod file name (#211)
  * fix standalone.py first request failure (#195)
  * suppress stack traces (with option to show) (#140)
  * distinguish text/binary/image files by icons (#166, #175)
  * colorize alternating file content lines (#167)
  * link to the instance root from the ViewVC logo (#168)
  * display directory and root counts, too (#169)
  * fix double fault error in standalone.py (#157)
  * support timezone offsets with minutes piece (#176)

This update was imported from the openSUSE:Leap:15.1:Update update 
project.</description>
</patchinfo>

Reply via email to