[Git][security-tracker-team/security-tracker][master] link CVE-2020-17354 to lilypond, now public

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
0481c8b6 by Moritz Muehlenhoff at 2023-01-12T10:40:59+01:00
link CVE-2020-17354 to lilypond, now public

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -190267,9 +190267,11 @@ CVE-2020-17355 (Arista EOS before 4.21.12M, 4.22.x before 4.22.7M, 4.23.x before
 	NOT-FOR-US: Arista
 CVE-2020-17354
 	RESERVED
+	- lilypond 2.22.1-1
 	NOTE: https://phabricator.wikimedia.org/T259210
 	NOTE: https://phabricator.wikimedia.org/T257062
 	NOTE: https://www.mediawiki.org/wiki/Extension:Score/2021_security_advisory
+	NOTE: 2.22.1-1 adds a note about Lilypond security status, using that the "fixed" version
 CVE-2020-17353 (scm/define-stencil-commands.scm in LilyPond through 2.20.0, and 2.21.x ...)
 	{DSA-4756-1}
 	- lilypond 2.20.0-2 (bug #968993)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0481c8b69be84766ddab8e0ca62bf81ec876b4ec

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0481c8b69be84766ddab8e0ca62bf81ec876b4ec
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20230112/3877cd64/attachment.htm>