Updated fish package fixes multiple security vulnerabilities

Updated fish packages fix security vulnerability: fish, from at least version 1.16.0 to version 2.1.0 inclusive, does not check the credentials of processes communicating over the fishd universal variable server UNIX domain socket. This allows a local attacker to elevate their privileges to those...

PT-2020-7642

Name of the Vulnerable Software and Affected Versions fish aka fish-shell versions 2.0.0 through 2.1.0 Description The issue allows remote attackers to execute arbitrary code via unspecified vectors, as demonstrated by set prompt, due to a lack of access restriction to the configuration service a...

Fedora 21 : fish-2.1.1-1.fc21 (2014-11915)

Update to 2.1.1 NB: Most security issues should already be fixed. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Fedora Update for fish FEDORA-2014-11838

Check the version of fish SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.868367";...

Fedora 20 : fish-2.1.1-1.fc20 (2014-11850)

Update to 2.1.1 NB: Most security bugs were already fixed Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

Fedora Update for fish FEDORA-2014-11850

Check the version of fish SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.868366";...

Fedora 19 : fish-2.1.1-1.fc19 (2014-11838)

Update to 2.1.1 NB: Most security bugs were already fixed Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

[SECURITY] Fedora 20 Update: fish-2.1.1-1.fc20

fish is a fully-equipped command line shell like bash or zsh that is smart and user-friendly. fish supports powerful features like syntax highlighting, autosuggestions, and tab completions that just work, with nothing to learn or configure...

[SECURITY] Fedora 21 Update: fish-2.1.1-1.fc21

fish is a fully-equipped command line shell like bash or zsh that is smart and user-friendly. fish supports powerful features like syntax highlighting, autosuggestions, and tab completions that just work, with nothing to learn or configure...

[SECURITY] Fedora 19 Update: fish-2.1.1-1.fc19

fish is a fully-equipped command line shell like bash or zsh that is smart and user-friendly. fish supports powerful features like syntax highlighting, autosuggestions, and tab completions that just work, with nothing to learn or configure...

FreeBSD : fish -- local privilege escalation and remote code execution (6c083cf8-4830-11e4-ae2c-c80aa9043978)

Fish developer David Adam reports : This release fixes a number of local privilege escalation vulnerability and one remote code execution vulnerability. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXM...

fish -- local privilege escalation and remote code execution

Fish developer David Adam reports: This release fixes a number of local privilege escalation vulnerability and one remote code execution vulnerability...

PT-2020-7641

Name of the Vulnerable Software and Affected Versions fish-shell versions 1.16.0 through 2.1.0 Description The issue is related to the psub function, which does not properly create temporary files. This allows local users to execute arbitrary commands via a temporary file with a predictable name...

PT-2020-7661

Name of the Vulnerable Software and Affected Versions fish-shell versions 1.23.0 through 2.1.1 Description The issue is related to the improper creation of temporary files by the funced function in fish-shell, allowing local users to gain privileges via a temporary file with a predictable name...

PT-2018-4210

Name of the Vulnerable Software and Affected Versions fish versions prior to 2.1.1 Description The issue allows local users to write to arbitrary files via a symlink attack on several temporary files, including /tmp/fishd.log.%s, /tmp/.pac-cache.$USER, /tmp/.yum-cache.$USER, or...

[SECURITY] Fedora 20 Update: fish-2.1.0-11.fc20

fish is a fully-equipped command line shell like bash or zsh that is smart and user-friendly. fish supports powerful features like syntax highlighting, autosuggestions, and tab completions that just work, with nothing to learn or configure...

[SECURITY] Fedora 19 Update: fish-2.1.0-11.fc19

fish is a fully-equipped command line shell like bash or zsh that is smart and user-friendly. fish supports powerful features like syntax highlighting, autosuggestions, and tab completions that just work, with nothing to learn or configure...

Fedora 19 : fish-2.1.0-11.fc19 (2014-9402)

Improve fixes for CVE-2014-2905 and CVE-2014-2914 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora Update for fish FEDORA-2014-9402

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for fish FEDORA-2014-9407

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...