[ GLSA 201412-49 ] fish

[GLSA]

Gentoo Linux Security Advisory

Title: fish: Multiple vulnerabilities (GLSA 201412-49)
Severity: high
Exploitable: local, remote
Date: December 28, 2014
Bug(s): #509044
ID: 201412-49

Synopsis

Multiple vulnerabilities have been found in fish, the worst of
which could result in local privilege escalation or remote arbitrary code
execution.


Background

fish is the Friendly Interactive SHell.

Affected Packages

Package: app-shells/fish
Vulnerable: < 2.1.1
Unaffected: >= 2.1.1
Architectures: All supported architectures


Description

Multiple vulnerabilities have been discovered in fish. Please review the
CVE identifiers referenced below for details.


Impact

A local attacker may be able to gain escalated privileges or overwrite
arbitrary files. Furthermore, a remote attacker may be able to execute
arbitrary code.


Workaround

There is no known workaround at this time.

Resolution

All fish users should upgrade to the latest version: