USN-3584-1: sensible-utils vulnerability
26 February 2018
sensible-utils could be made to run programs as your login if it opened a malicious URL.
- sensible-utils - Utilities for sensible alternative selection
Gabriel Corona discovered that sensible-utils incorrectly validated strings
when launcher a browser with the sensible-browser tool. A remote attacker
could possibly use this issue with a specially crafted URL to conduct an
argument injection attack and execute arbitrary code.
The problem can be corrected by updating your system to the following package versions:
In general, a standard system update will make all the necessary changes.