CVE:CVE-2020-17353
CNNVD:CNNVD-202008-161
LilyPond是一套开源的音乐雕版软件。
LilyPond 2.20.0及之前版本和2.21.x版本至2.21.4版本中的scm/define-stencil-commands.scm存在安全漏洞，该漏洞源于在使用-dsafe时，embedded-ps和embedded-svg缺少限制。攻击者可利用该漏洞在系统上执行任意代码。
solution:Upgrade lilypond lilypond to a higher version than 2.20.0,2.21.4,and avoid the version (,2.20.0],[2.21.0,2.21.4]; Upgrade fedoraproject fedora to a higher version than 31,32,and avoid the version 31,32; Upgrade debian debian_linux to a higher version than 10.0,and avoid the version 10.0; Upgrade opensuse backports_sle to a higher version than 15.0:sp2,and avoid the version 15.0:sp2; Upgrade opensuse leap to a higher version than 15.2,and avoid the version 15.2