{"id":"openSUSE-SU-2023:0137-1","summary":"Security update for guile1, lilypond","details":"This update for guile1, lilypond fixes the following issues:\n\nguile1:\n\n- Add service file to download release from git excluding the\n  directory with commercial non free files.\n- Update to version 2.2.6 to enable lilypond to be updated to \n  2.24.1 to fix boo#1210502 and CVE-2020-17354.\n\nlilypond:\n\n- Update to version lilypond-2.24.1 to fix boo#1210502 -\n  CVE-2020-17354: lilypond: Lilypond allows attackers to bypass \n  the -dsafe protection mechanism.\n","modified":"2026-03-11T07:33:39.103851Z","published":"2023-06-27T15:41:48Z","related":["CVE-2016-8605","CVE-2020-17354"],"upstream":["CVE-2016-8605","CVE-2020-17354"],"references":[{"type":"ADVISORY","url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ROLJCNPWZ2G4IQWP7NQKXNBT2QR32K2A/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1210502"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-8605"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2020-17354"}],"affected":[{"package":{"name":"guile1","ecosystem":"SUSE:Package Hub 15 SP4","purl":"pkg:rpm/suse/guile1&distro=SUSE%20Package%20Hub%2015%20SP4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.6-bp154.3.3.1"}]}],"ecosystem_specific":{"binaries":[{"guile1-modules-2_2":"2.2.6-bp154.3.3.1","lilypond-doc-de":"2.24.1-bp154.2.3.2","lilypond-doc-zh":"2.24.1-bp154.2.3.2","lilypond-fonts-common":"2.24.1-bp154.2.3.2","libguile-2_2-1":"2.2.6-bp154.3.3.1","lilypond-doc-es":"2.24.1-bp154.2.3.2","lilypond-doc-it":"2.24.1-bp154.2.3.2","lilypond-doc":"2.24.1-bp154.2.3.2","guile1":"2.2.6-bp154.3.3.1","libguile1-devel":"2.2.6-bp154.3.3.1","lilypond-doc-fr":"2.24.1-bp154.2.3.2","lilypond-doc-nl":"2.24.1-bp154.2.3.2","lilypond-emmentaler-fonts":"2.24.1-bp154.2.3.2","lilypond":"2.24.1-bp154.2.3.2","lilypond-doc-cs":"2.24.1-bp154.2.3.2","lilypond-doc-hu":"2.24.1-bp154.2.3.2","lilypond-doc-ja":"2.24.1-bp154.2.3.2"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2023:0137-1.json"}},{"package":{"name":"lilypond","ecosystem":"SUSE:Package Hub 15 SP4","purl":"pkg:rpm/suse/lilypond&distro=SUSE%20Package%20Hub%2015%20SP4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.24.1-bp154.2.3.2"}]}],"ecosystem_specific":{"binaries":[{"guile1-modules-2_2":"2.2.6-bp154.3.3.1","libguile1-devel":"2.2.6-bp154.3.3.1","lilypond-doc-es":"2.24.1-bp154.2.3.2","lilypond-doc-hu":"2.24.1-bp154.2.3.2","lilypond-doc-it":"2.24.1-bp154.2.3.2","lilypond-doc-ja":"2.24.1-bp154.2.3.2","lilypond-doc-de":"2.24.1-bp154.2.3.2","lilypond-doc-nl":"2.24.1-bp154.2.3.2","lilypond-emmentaler-fonts":"2.24.1-bp154.2.3.2","guile1":"2.2.6-bp154.3.3.1","libguile-2_2-1":"2.2.6-bp154.3.3.1","lilypond-doc-fr":"2.24.1-bp154.2.3.2","lilypond-doc-zh":"2.24.1-bp154.2.3.2","lilypond":"2.24.1-bp154.2.3.2","lilypond-doc-cs":"2.24.1-bp154.2.3.2","lilypond-doc":"2.24.1-bp154.2.3.2","lilypond-fonts-common":"2.24.1-bp154.2.3.2"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2023:0137-1.json"}},{"package":{"name":"guile1","ecosystem":"openSUSE:Leap 15.4","purl":"pkg:rpm/opensuse/guile1&distro=openSUSE%20Leap%2015.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.6-bp154.3.3.1"}]}],"ecosystem_specific":{"binaries":[{"lilypond-doc-hu":"2.24.1-bp154.2.3.2","lilypond-emmentaler-fonts":"2.24.1-bp154.2.3.2","lilypond-fonts-common":"2.24.1-bp154.2.3.2","guile1-modules-2_2":"2.2.6-bp154.3.3.1","libguile-2_2-1":"2.2.6-bp154.3.3.1","lilypond-doc-cs":"2.24.1-bp154.2.3.2","lilypond-doc-de":"2.24.1-bp154.2.3.2","lilypond-doc-fr":"2.24.1-bp154.2.3.2","lilypond-doc-zh":"2.24.1-bp154.2.3.2","lilypond-doc-it":"2.24.1-bp154.2.3.2","lilypond-doc-ja":"2.24.1-bp154.2.3.2","lilypond-doc-nl":"2.24.1-bp154.2.3.2","lilypond-doc":"2.24.1-bp154.2.3.2","lilypond":"2.24.1-bp154.2.3.2","guile1":"2.2.6-bp154.3.3.1","lilypond-doc-es":"2.24.1-bp154.2.3.2","libguile1-devel":"2.2.6-bp154.3.3.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2023:0137-1.json"}},{"package":{"name":"lilypond","ecosystem":"openSUSE:Leap 15.4","purl":"pkg:rpm/opensuse/lilypond&distro=openSUSE%20Leap%2015.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.24.1-bp154.2.3.2"}]}],"ecosystem_specific":{"binaries":[{"guile1":"2.2.6-bp154.3.3.1","lilypond-doc-it":"2.24.1-bp154.2.3.2","lilypond-doc-ja":"2.24.1-bp154.2.3.2","lilypond-doc-zh":"2.24.1-bp154.2.3.2","lilypond-emmentaler-fonts":"2.24.1-bp154.2.3.2","libguile1-devel":"2.2.6-bp154.3.3.1","lilypond-doc-cs":"2.24.1-bp154.2.3.2","lilypond-doc-de":"2.24.1-bp154.2.3.2","lilypond-doc-hu":"2.24.1-bp154.2.3.2","lilypond-doc-nl":"2.24.1-bp154.2.3.2","lilypond-fonts-common":"2.24.1-bp154.2.3.2","guile1-modules-2_2":"2.2.6-bp154.3.3.1","libguile-2_2-1":"2.2.6-bp154.3.3.1","lilypond-doc-fr":"2.24.1-bp154.2.3.2","lilypond-doc":"2.24.1-bp154.2.3.2","lilypond-doc-es":"2.24.1-bp154.2.3.2","lilypond":"2.24.1-bp154.2.3.2"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2023:0137-1.json"}}],"schema_version":"1.7.5"}