openSUSE-SU-2020:1453-1

See a problem?
Import Source
https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2020:1453-1.json
JSON Data
https://api.test.osv.dev/v1/vulns/openSUSE-SU-2020:1453-1
Upstream
Related
Published
2020-09-19T12:20:36Z
Modified
2026-03-11T07:32:40Z
Summary
Security update for lilypond
Details

This update for lilypond fixes the following issues:

  • CVE-2020-17353: When -dsafe is used, LilyPond lacks restrictions on embedded-ps and embedded-svg (boo#1174949).
References

Affected packages

SUSE:Package Hub 15 SP2 / lilypond

Package

Name
lilypond
Purl
pkg:rpm/suse/lilypond&distro=SUSE%20Package%20Hub%2015%20SP2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.20.0-bp152.2.5.6

Ecosystem specific 

{
    "binaries":  [
        {
            "lilypond":  "2.20.0-bp152.2.5.6",
            "lilypond-doc":  "2.20.0-lp152.2.5.10",
            "lilypond-doc-cs":  "2.20.0-lp152.2.5.10",
            "lilypond-doc-de":  "2.20.0-lp152.2.5.10",
            "lilypond-doc-es":  "2.20.0-lp152.2.5.10",
            "lilypond-doc-fr":  "2.20.0-lp152.2.5.10",
            "lilypond-doc-hu":  "2.20.0-lp152.2.5.10",
            "lilypond-doc-it":  "2.20.0-lp152.2.5.10",
            "lilypond-doc-ja":  "2.20.0-lp152.2.5.10",
            "lilypond-doc-nl":  "2.20.0-lp152.2.5.10",
            "lilypond-doc-zh":  "2.20.0-lp152.2.5.10",
            "lilypond-emmentaler-fonts":  "2.20.0-bp152.2.5.6",
            "lilypond-fonts-common":  "2.20.0-bp152.2.5.6",
            "lilypond-texgy-fonts":  "2.20.0-bp152.2.5.6"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2020:1453-1.json"

SUSE:Package Hub 15 SP2 / lilypond-doc

Package

Name
lilypond-doc
Purl
pkg:rpm/suse/lilypond-doc&distro=SUSE%20Package%20Hub%2015%20SP2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.20.0-lp152.2.5.10

Ecosystem specific 

{
    "binaries":  [
        {
            "lilypond":  "2.20.0-bp152.2.5.6",
            "lilypond-doc":  "2.20.0-lp152.2.5.10",
            "lilypond-doc-cs":  "2.20.0-lp152.2.5.10",
            "lilypond-doc-de":  "2.20.0-lp152.2.5.10",
            "lilypond-doc-es":  "2.20.0-lp152.2.5.10",
            "lilypond-doc-fr":  "2.20.0-lp152.2.5.10",
            "lilypond-doc-hu":  "2.20.0-lp152.2.5.10",
            "lilypond-doc-it":  "2.20.0-lp152.2.5.10",
            "lilypond-doc-ja":  "2.20.0-lp152.2.5.10",
            "lilypond-doc-nl":  "2.20.0-lp152.2.5.10",
            "lilypond-doc-zh":  "2.20.0-lp152.2.5.10",
            "lilypond-emmentaler-fonts":  "2.20.0-bp152.2.5.6",
            "lilypond-fonts-common":  "2.20.0-bp152.2.5.6",
            "lilypond-texgy-fonts":  "2.20.0-bp152.2.5.6"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2020:1453-1.json"

openSUSE:Leap 15.2 / lilypond

Package

Name
lilypond
Purl
pkg:rpm/opensuse/lilypond&distro=openSUSE%20Leap%2015.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.20.0-bp152.2.5.6

Ecosystem specific 

{
    "binaries":  [
        {
            "lilypond":  "2.20.0-bp152.2.5.6",
            "lilypond-doc":  "2.20.0-lp152.2.5.10",
            "lilypond-doc-cs":  "2.20.0-lp152.2.5.10",
            "lilypond-doc-de":  "2.20.0-lp152.2.5.10",
            "lilypond-doc-es":  "2.20.0-lp152.2.5.10",
            "lilypond-doc-fr":  "2.20.0-lp152.2.5.10",
            "lilypond-doc-hu":  "2.20.0-lp152.2.5.10",
            "lilypond-doc-it":  "2.20.0-lp152.2.5.10",
            "lilypond-doc-ja":  "2.20.0-lp152.2.5.10",
            "lilypond-doc-nl":  "2.20.0-lp152.2.5.10",
            "lilypond-doc-zh":  "2.20.0-lp152.2.5.10",
            "lilypond-emmentaler-fonts":  "2.20.0-bp152.2.5.6",
            "lilypond-fonts-common":  "2.20.0-bp152.2.5.6",
            "lilypond-texgy-fonts":  "2.20.0-bp152.2.5.6"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2020:1453-1.json"

openSUSE:Leap 15.2 / lilypond-doc

Package

Name
lilypond-doc
Purl
pkg:rpm/opensuse/lilypond-doc&distro=openSUSE%20Leap%2015.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.20.0-lp152.2.5.10

Ecosystem specific 

{
    "binaries":  [
        {
            "lilypond":  "2.20.0-bp152.2.5.6",
            "lilypond-doc":  "2.20.0-lp152.2.5.10",
            "lilypond-doc-cs":  "2.20.0-lp152.2.5.10",
            "lilypond-doc-de":  "2.20.0-lp152.2.5.10",
            "lilypond-doc-es":  "2.20.0-lp152.2.5.10",
            "lilypond-doc-fr":  "2.20.0-lp152.2.5.10",
            "lilypond-doc-hu":  "2.20.0-lp152.2.5.10",
            "lilypond-doc-it":  "2.20.0-lp152.2.5.10",
            "lilypond-doc-ja":  "2.20.0-lp152.2.5.10",
            "lilypond-doc-nl":  "2.20.0-lp152.2.5.10",
            "lilypond-doc-zh":  "2.20.0-lp152.2.5.10",
            "lilypond-emmentaler-fonts":  "2.20.0-bp152.2.5.6",
            "lilypond-fonts-common":  "2.20.0-bp152.2.5.6",
            "lilypond-texgy-fonts":  "2.20.0-bp152.2.5.6"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2020:1453-1.json"