I finally investigated this, but came to the conclusion that horizon-eda isn't affected by it, because it doesn't use the version of dxflib in the horizon-eda sources but links against the version shipped by debian. Am I missing anything here?
signature.asc
Description: PGP signature