New comment by ericonr on void-packages repository

https://github.com/void-linux/void-packages/pull/26849#issuecomment-736148253

Comment:
1.4.3 has been out for a while, and fixes a CVE.

But you could go for 1.3.9, so as not to jump to the newer release yet.