lilypond-user
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Security problem: lilypond-invoke-editor


From: Knut Petersen
Subject: Security problem: lilypond-invoke-editor
Date: Thu, 23 Nov 2017 10:11:33 +0100
User-agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.4.0

Hi everybody!

12 years ago a security problem was introduced into lilypond-invoke-editor.
On 2017/11/15 the problem was reported to the bug-lilypond mailing list by 
Gabriel Corona.

If you decided to install lilypond-invoke-editor helper as a general URI 
helper, you _are_ affected.

If you decided to install lilypond-invoke-editor to only handle textedit URIs 
(or if you do not use it at all) you are _not_ affected.

If you do not know if you are affected:

1.: locate lilypond-invoke-editor

2. Open lilypond-invoke-editor in your favorite text editor. Search for

       (if (is-textedit-uri? uri)
         (run-editor uri)
         (run-browser uri)))))

and replace it with

       (if (is-textedit-uri? uri)
         (run-editor uri)))))

Knut



reply via email to

[Prev in Thread] Current Thread [Next in Thread]