Debian/lilypond: critical 9.8
scm/define-stencil-commands.scm in LilyPond through 2.20.0, and 2.21.x through 2.21.4, when -dsafe is used, lacks restrictions on embedded-ps and embedded-svg, as demonstrated by including dangerous P
Action: Upgrade lilypond to 2.20.0-2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.20.0-2 | - |
Fixed versions
| 2.20.0-2 |
Sources
- osv: DEBIAN-CVE-2020-17353#Debian:14/lilypond
- https://security-tracker.debian.org/tracker/CVE-2020-17353
published · modified · JSON