An issue with rxvt-unicode's handling of escape sequences, such as in text files or program output, was reported. This could lead to arbitrary command execution. Full details are available in the original report: http://seclists.org/oss-sec/2014/q2/204 This issue has been fixed in version 9.20.
Created rxvt-unicode tracking bugs for this issue: Affects: fedora-all [bug 1093288] Affects: epel-all [bug 1093289]
rxvt-unicode-9.20-1.fc19 has been pushed to the Fedora 19 stable repository. If problems still persist, please make note of it in this bug report.
rxvt-unicode-9.20-1.fc20 has been pushed to the Fedora 20 stable repository. If problems still persist, please make note of it in this bug report.
rxvt-unicode-9.20-1.el6 has been pushed to the Fedora EPEL 6 stable repository. If problems still persist, please make note of it in this bug report.