This is not a security hole. If you can modify a user's ~/.fehbg you can almost certainly edit other shell scripts in the user's home directory too. Furthermore, while it is possible for feh to write a destructive command to ~/.fehbg, it is extremely unlikely that a user will make it do so accidentally.
Ben. -- Ben Hutchings Larkinson's Law: All laws are basically false.
signature.asc
Description: This is a digitally signed message part