sensible-browser in sensible-utils before 0.0.11 does not validate strings before launching the program specified by the BROWSER environment variable, which allows remote attackers to conduct argument-injection attacks via a crafted URL, as demonstrated by a --proxy-pac-file argument. Debian bug: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=881767 References: http://metadata.ftp-master.debian.org/changelogs/main/s/sensible-utils/sensible-utils_0.0.11_changelog
Created sensible-utils tracking bugs for this issue: Affects: epel-7 [bug 1524936] Affects: fedora-all [bug 1524935]
Seems to be fixed with newest 0.0.11 update.
This CVE Bugzilla entry is for community support informational purposes only as it does not affect a package in a commercially supported Red Hat product. Refer to the dependent bugs for status of those individual community products.