USN-6141-1: xfce4-settings vulnerability
Robin Peraglie and Johannes Moritz discovered that xfce4-settings
incorrectly parsed quoted input when processed through xdg-open.
A remote attacker could possibly use this issue to inject
arbitrary arguments into the default browser or file manager.
Source: USN-6141-1: xfce4-settings vulnerability