rpm package
opensuse/guile1&distro=openSUSE Leap 15.4
pkg:rpm/opensuse/guile1&distro=openSUSE%20Leap%2015.4
Vulnerabilities (2)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2020-17354 | — | < 2.2.6-bp154.3.3.1 | 2.2.6-bp154.3.3.1 | Apr 15, 2023 | LilyPond before 2.24 allows attackers to bypass the -dsafe protection mechanism via output-def-lookup or output-def-scope, as demonstrated by dangerous Scheme code in a .ly file that causes arbitrary code execution during conversion to a different file format. NOTE: in 2.24 and l | ||
| CVE-2016-8605 | Med | 5.3 | < 2.2.6-bp154.3.3.1 | 2.2.6-bp154.3.3.1 | Jan 12, 2017 | The mkdir procedure of GNU Guile temporarily changed the process' umask to zero. During that time window, in a multithreaded application, other threads could end up creating files with insecure permissions. For example, mkdir without the optional mode argument would create direct |
- CVE-2020-17354Apr 15, 2023affected < 2.2.6-bp154.3.3.1fixed 2.2.6-bp154.3.3.1
LilyPond before 2.24 allows attackers to bypass the -dsafe protection mechanism via output-def-lookup or output-def-scope, as demonstrated by dangerous Scheme code in a .ly file that causes arbitrary code execution during conversion to a different file format. NOTE: in 2.24 and l
- affected < 2.2.6-bp154.3.3.1fixed 2.2.6-bp154.3.3.1
The mkdir procedure of GNU Guile temporarily changed the process' umask to zero. During that time window, in a multithreaded application, other threads could end up creating files with insecure permissions. For example, mkdir without the optional mode argument would create direct