VDB

GCVE-110-MAGEIA-2020-414

GCVE-110-MAGEIA-2020-414
Advisory Published
Vulnetix · Advisory published November 13, 2020
It was discovered that Lilypond, a program for typesetting sheet music, did not restrict the inclusion of Postscript and SVG commands when operating in safe mode, which could result in the execution of arbitrary code when rendering a typesheet file with embedded Postscript code. (CVE-2020-17353)
Download JSON Open in Console

Affected Products

VendorProductVersionsPlatforms
Mageialilypond0 (affected), 2.19.83-1.1.mga7 (unaffected)—

Aliases

CVE-2020-17353

References

Updated lilypond package fixes a security vulnerability
advisory
Updated lilypond package fixes a security vulnerability
issue
Updated lilypond package fixes a security vulnerability
issue
Updated lilypond package fixes a security vulnerability
advisory

Browse GCVE Records

74,147 records in the GCVE database · Updated July 21, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›