Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -5 articles for you...
203
security advisorycritical updatefish shellMageia 9: 2023-0344 Critical Advisory on Fish Shell CVE-2023-49284
Mageia 9 is updated to version 3.6.4 to fix CVE-2023-49284. Mageia 8 receives an upstream patch to fix CVE-2023-49284. CVE-2023-49284: fish shell uses certain Unicode non-characters internally for marking wildcards and expansions. It will incorrectly allow these markers to be read on command substitution output, rather . MGASA-2023-0344 - Updated fish packages fix a security vulnerability Publication date: 12 Dec 2023 URL: https://advisories.mageia.org/MGASA-2023-0344.html Type: security Affected Mageia releases: 8, 9 CVE: CVE-2023-49284 Mageia 9 is updated to version 3.6.4 to fix CVE-2023-49284. Mageia 8 receives an upstream patch to fix CVE-2023-49284. CVE-2023-49284: fish shell uses certain Unicode non-characters internally for marking wildcards and expansions. It will incorrectly allow these markers to be read on command substitution output, rather than transforming them into a safe internal representation. References: - https://bugs.mageia.org/show_bug.cgi?id=32614 - https://www.cve.org/CVERecord?id=CVE-2023-49284 SRPMS: - 8/core/fish-3.4.1-1.1.mga8 - 9/core/fish-3.6.4-1.mga9 . The recent Mageia 9 update enhances the fish shell, fixing the CVE-2023-49284 vulnerability and includes upstream patches for Mageia 8 users too. Mageia Security Advisory, Fish Shell Update, Unicode Command Issue. . Severity: Critical. LinuxSecurity.com Team
Dec 12, 2023
•Critical
Mageia
87
security advisorycriticalsoftware updateDebian: DSA-5234-1 Critical: Fish Shell Arbitrary Code Execution
An arbitrary code execution vulnerability was disovered in fish, a command line shell. When using the default configuraton of fish, changing to a directory automatically ran `git` commands in order to display information about the current repository in the prompt. Such . - ------------------------------------------------------------------------- Debian Security Advisory DSA-5234-1
Sep 21, 2022
•Critical
Debian
89
security advisorycritical issueFedoraFedora 36 FEDORA-2022-443c5ec2dd Critical: fish Arbitrary Code Execution
Update to 3.4.1. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2022-443c5ec2dd 2022-04-04 00:14:55.469231 --------------------------------------------------------------------------------Name : fish Product : Fedora 36 Version : 3.4.1 Release : 1.fc36 URL : https://fishshell.com Summary : Friendly interactive shell Description : fish is a fully-equipped command line shell (like bash or zsh) that is smart and user-friendly. fish supports powerful features like syntax highlighting, autosuggestions, and tab completions that just work, with nothing to learn or configure. --------------------------------------------------------------------------------Update Information: Update to 3.4.1 --------------------------------------------------------------------------------ChangeLog: * Sun Apr 3 2022 Igor Raits 3.4.1-1 - Update to 3.4.1 --------------------------------------------------------------------------------References: [ 1 ] Bug #2064332 - CVE-2022-20001 fish: Arbitrary Code Execution [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2064332 [ 2 ] Bug #2068710 - fish-3.4.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2068710 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2022-443c5ec2dd' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Apr 03, 2022
•Critical
Fedora
91
security advisoryhigh severitygentooGentoo GLSA 201412-49 High Severity: Fish Shell Privilege Escalation
Multiple vulnerabilities have been found in fish, the worst of which could result in local privilege escalation or remote arbitrary code execution. [More...]. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 201412-49 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: High Title: fish: Multiple vulnerabilities Date: December 28, 2014 Bugs: #509044 ID: 201412-49 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======= Multiple vulnerabilities have been found in fish, the worst of which could result in local privilege escalation or remote arbitrary code execution. Background ========= fish is the Friendly Interactive SHell. Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 app-shells/fish < 2.1.1 > = 2.1.1 Description ========== Multiple vulnerabilities have been discovered in fish. Please review the CVE identifiers referenced below for details. Impact ===== A local attacker may be able to gain escalated privileges or overwrite arbitrary files. Furthermore, a remote attacker may be able to execute arbitrary code. Workaround ========= There is no known workaround at this time. Resolution ========= All fish users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose "> =app-shells/fish-2.1.1" References ========= [ 1 ] CVE-2014-2905 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-2905 [ 2 ] CVE-2014-2906 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-2906 [ 3 ] CVE-2014-2914 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-2914 [ 4 ] CVE-2014-3219 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-3219 Availability =========== This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/201412-49 Concerns? ======== Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to
Dec 28, 2014
Gentoo
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!