A vulnerability was discovered in Fish when handling git repository configuration that may lead to execution of arbitrary code
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| app-shells/fish | * | < 3.4.0 | >= 3.4.0 |
Smart and user-friendly command line shell for macOS, Linux, and the rest of the family. It includes features like syntax highlighting, autosuggest-as-you-type, and fancy tab completions that just work, with no configuration required.
A vulnerability have been discovered in Fish. Please review the CVE identifiers referenced below for details.
A user may be enticed to cd into a git repository under control by an attacker (e.g. on a shared filesystem or by unpacking an archive) and execute arbitrary commands.
There is no known workaround at this time.
All fish users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-shells/fish-3.4.0"
Multiple vulnerabilities have been found in fish, the worst of which could result in local privilege escalation or remote arbitrary code execution.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| app-shells/fish | * | < 2.1.1 | >= 2.1.1 |
fish is the Friendly Interactive SHell.
Multiple vulnerabilities have been discovered in fish. Please review the CVE identifiers referenced below for details.
A local attacker may be able to gain escalated privileges or overwrite arbitrary files. Furthermore, a remote attacker may be able to execute arbitrary code.
There is no known workaround at this time.
All fish users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-shells/fish-2.1.1"