File _patchinfo of Package patchinfo.8109

<patchinfo incident="8109">
  <issue tracker="bnc" id="1041090">trackerbug: packages do not build reproducibly from unsorted input</issue>
  <issue tracker="bnc" id="1093056">VUL-0: CVE-2018-10992: lilypond: Does not validate strings before launching the program specified by the BROWSER environment variable, which allows remote attackers to conduct argument-injection attacks</issue>
  <issue tracker="cve" id="2018-10992"/>
  <category>security</category>
  <rating>moderate</rating>
  <packager>plater</packager>
  <description>This update for lilypond fixes the following issues:

  - CVE-2018-10992: lilypond: Does not validate strings before launching the program specified by the BROWSER environment variable, which allows remote attackers to conduct argument-injection attacks (bsc#1093056)
  - packages do not build reproducibly from unsorted input (bsc#1041090)

</description>
  <summary>Security update for lilypond</summary>
</patchinfo>