Hi everybody!

12 years ago a security problem was introduced into lilypond-invoke-editor.
On 2017/11/15 the problem was reported to the bug-lilypond mailing list by 
Gabriel Corona.

If you decided to install lilypond-invoke-editor helper as a general URI 
helper, you _are_ affected.

If you decided to install lilypond-invoke-editor to only handle textedit URIs 
(or if you do not use it at all) you are _not_ affected.

If you do not know if you are affected:

1.: locate lilypond-invoke-editor

2. Open lilypond-invoke-editor in your favorite text editor. Search for

       (if (is-textedit-uri? uri)
         (run-editor uri)
         (run-browser uri)))))

and replace it with

       (if (is-textedit-uri? uri)
         (run-editor uri)))))

Knut

_______________________________________________
lilypond-user mailing list
lilypond-user@gnu.org
https://lists.gnu.org/mailman/listinfo/lilypond-user

Reply via email to