Lucene search

K
suseSuseOPENSUSE-SU-2020:1506-1
HistorySep 22, 2020 - 12:00 a.m.

Security update for lilypond (moderate)

2020-09-2200:00:00
lists.opensuse.org
28
lilypond security update
vulnerability fix
cve-2020-17353

EPSS

0.004

Percentile

73.0%

An update that fixes one vulnerability is now available.

Description:

This update for lilypond fixes the following issues:

  • CVE-2020-17353: When -dsafe is used, LilyPond lacks restrictions on
    embedded-ps and embedded-svg (boo#1174949).

This update was imported from the openSUSE:Leap:15.2:Update update project.

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or “zypper patch”.

Alternatively you can run the command listed for your product:

  • openSUSE Backports SLE-15-SP2:

    zypper in -t patch openSUSE-2020-1506=1