rpm package
suse/lilypond&distro=SUSE Package Hub 15 SP4
pkg:rpm/suse/lilypond&distro=SUSE%20Package%20Hub%2015%20SP4
Vulnerabilities (2)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2020-17354 | — | < 2.24.1-bp154.2.3.2 | 2.24.1-bp154.2.3.2 | Apr 15, 2023 | LilyPond before 2.24 allows attackers to bypass the -dsafe protection mechanism via output-def-lookup or output-def-scope, as demonstrated by dangerous Scheme code in a .ly file that causes arbitrary code execution during conversion to a different file format. NOTE: in 2.24 and l | ||
| CVE-2016-8605 | Med | 5.3 | < 2.24.1-bp154.2.3.2 | 2.24.1-bp154.2.3.2 | Jan 12, 2017 | The mkdir procedure of GNU Guile temporarily changed the process' umask to zero. During that time window, in a multithreaded application, other threads could end up creating files with insecure permissions. For example, mkdir without the optional mode argument would create direct |
- CVE-2020-17354Apr 15, 2023affected < 2.24.1-bp154.2.3.2fixed 2.24.1-bp154.2.3.2
LilyPond before 2.24 allows attackers to bypass the -dsafe protection mechanism via output-def-lookup or output-def-scope, as demonstrated by dangerous Scheme code in a .ly file that causes arbitrary code execution during conversion to a different file format. NOTE: in 2.24 and l
- affected < 2.24.1-bp154.2.3.2fixed 2.24.1-bp154.2.3.2
The mkdir procedure of GNU Guile temporarily changed the process' umask to zero. During that time window, in a multithreaded application, other threads could end up creating files with insecure permissions. For example, mkdir without the optional mode argument would create direct