Debian/lilypond: critical 9.8
scm/define-stencil-commands.scm in LilyPond through 2.20.0, and 2.21.x through 2.21.4, when -dsafe is used, lacks restrictions on embedded-ps and embedded-svg, as demonstrated by including dangerous P
Action: Upgrade lilypond to 2.20.0-2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.20.0-2 | - |
Fixed versions
| 2.20.0-2 |
Sources
published · modified · JSON