[Bug 1072186] VUL-0: CVE-2017-17523: lilypond: lilypond-invoke-editor does not validate strings before launching the program specified by the BROWSER environment variable

http://bugzilla.opensuse.org/show_bug.cgi?id=1072186 http://bugzilla.opensuse.org/show_bug.cgi?id=1072186#c1 Dave Plater <davejplater@gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |INVALID --- Comment #1 from Dave Plater <davejplater@gmail.com> --- Fortunately we only have stable lilypond version 2.18.2, I'm waiting patiently for 2.20.0 which shouldn't have this vulnerability. -- You are receiving this mail because: You are on the CC list for the bug.