Security update for lilypond (moderate)

2018-05-2103:07:38

lists.opensuse.org

EPSS

0.003

Percentile

65.4%

JSON

This update for lilypond fixes the following issues:

 - CVE-2018-10992: lilypond: Does not validate strings before launching
   the program specified by the BROWSER environment variable, which
   allows remote attackers to conduct argument-injection attacks
   (bsc#1093056)
 - packages do not build reproducibly from unsorted input (bsc#1041090)

OSVersionArchitecturePackageVersionFilename
openSUSE Leap42.3x86_64lilypond< 2.18.2-7.3.1lilypond-2.18.2-7.3.1.x86_64.rpm
openSUSE Leap42.3noarchlilypond-doc-cs< 2.18.2-7.3.1lilypond-doc-cs-2.18.2-7.3.1.noarch.rpm
openSUSE Leap42.3noarchlilypond-doc-nl< 2.18.2-7.3.1lilypond-doc-nl-2.18.2-7.3.1.noarch.rpm
openSUSE Leap42.3noarchlilypond-century-schoolbook-l-fonts< 2.18.2-7.3.1lilypond-century-schoolbook-l-fonts-2.18.2-7.3.1.noarch.rpm
openSUSE Leap42.3noarchlilypond-doc-es< 2.18.2-7.3.1lilypond-doc-es-2.18.2-7.3.1.noarch.rpm
openSUSE Leap42.3noarchlilypond-fonts-common< 2.18.2-7.3.1lilypond-fonts-common-2.18.2-7.3.1.noarch.rpm
openSUSE Leap42.3noarchlilypond-doc-fr< 2.18.2-7.3.1lilypond-doc-fr-2.18.2-7.3.1.noarch.rpm
openSUSE Leap42.3noarchlilypond-emmentaler-fonts< 2.18.2-7.3.1lilypond-emmentaler-fonts-2.18.2-7.3.1.noarch.rpm
openSUSE Leap42.3noarchlilypond-doc-ja< 2.18.2-7.3.1lilypond-doc-ja-2.18.2-7.3.1.noarch.rpm
openSUSE Leap42.3noarchlilypond-doc-hu< 2.18.2-7.3.1lilypond-doc-hu-2.18.2-7.3.1.noarch.rpm

OS	Version	Architecture	Package	Version	Filename
openSUSE Leap	42.3	x86_64	lilypond	< 2.18.2-7.3.1	lilypond-2.18.2-7.3.1.x86_64.rpm
openSUSE Leap	42.3	noarch	lilypond-doc-cs	< 2.18.2-7.3.1	lilypond-doc-cs-2.18.2-7.3.1.noarch.rpm
openSUSE Leap	42.3	noarch	lilypond-doc-nl	< 2.18.2-7.3.1	lilypond-doc-nl-2.18.2-7.3.1.noarch.rpm
openSUSE Leap	42.3	noarch	lilypond-century-schoolbook-l-fonts	< 2.18.2-7.3.1	lilypond-century-schoolbook-l-fonts-2.18.2-7.3.1.noarch.rpm
openSUSE Leap	42.3	noarch	lilypond-doc-es	< 2.18.2-7.3.1	lilypond-doc-es-2.18.2-7.3.1.noarch.rpm
openSUSE Leap	42.3	noarch	lilypond-fonts-common	< 2.18.2-7.3.1	lilypond-fonts-common-2.18.2-7.3.1.noarch.rpm
openSUSE Leap	42.3	noarch	lilypond-doc-fr	< 2.18.2-7.3.1	lilypond-doc-fr-2.18.2-7.3.1.noarch.rpm
openSUSE Leap	42.3	noarch	lilypond-emmentaler-fonts	< 2.18.2-7.3.1	lilypond-emmentaler-fonts-2.18.2-7.3.1.noarch.rpm
openSUSE Leap	42.3	noarch	lilypond-doc-ja	< 2.18.2-7.3.1	lilypond-doc-ja-2.18.2-7.3.1.noarch.rpm
openSUSE Leap	42.3	noarch	lilypond-doc-hu	< 2.18.2-7.3.1	lilypond-doc-hu-2.18.2-7.3.1.noarch.rpm