Mandriva Linux Security Advisory - A vulnerability was found in xdg-open and xdg-email commands, which allows remote attackers to execute arbitrary commands if the user is tricked into trying to open a maliciously crafted URL.
c57058cff63e5c4b204a28c96e5dac52120dcb9b25ca85429a33d8f82e0db392
Gentoo Linux Security Advisory GLSA 200801-21 - Miroslav Lichvar discovered that the xdg-open and xdg-email shell scripts do not properly sanitize their input before processing it. Versions less than 1.0.2-r1 are affected.
63f3182343c30dfedc2a8048424752a5871c33f6276b4ce3b7be1951157153e2