Security update for viewvc (moderate)

An update that fixes one vulnerability is now available.

Description:

This update for viewvc fixes the following issues:

• update to 1.1.28 (boo#1167974, CVE-2020-5283):
  • security fix: escape subdir lastmod file name (#211)
  • fix standalone.py first request failure (#195)
  • suppress stack traces (with option to show) (#140)
  • distinguish text/binary/image files by icons (#166, #175)
  • colorize alternating file content lines (#167)
  • link to the instance root from the ViewVC logo (#168)
  • display directory and root counts, too (#169)
  • fix double fault error in standalone.py (#157)
  • support timezone offsets with minutes piece (#176)

This update was imported from the openSUSE:Leap:15.1:Update update
project. This update was imported from the openSUSE:Leap:15.2:Update
update project.

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or “zypper patch”.

Alternatively you can run the command listed for your product:

• openSUSE Backports SLE-15-SP2:

  zypper in -t patch openSUSE-2021-145=1