fish before 2.1.1 allows local users to write to arbitrary files via a symlink attack on (1) /tmp/fishd.log.%s, (2) /tmp/.pac-cache.$USER, (3) /tmp/.yum-cache.$USER, or (4) /tmp/.rpm-cache.$USER.

This update includes fish3 into the openSUSE Leap 15.1 distribution.

This update supplies the 'fish3' package, complementary to the 'fish' package.

The remote host is affected by the vulnerability described in GLSA-201412-49 (fish: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in fish. Please review the       CVE identifiers referenced below for details.
  Impact :

    A local attacker may be able to gain escalated privileges or overwrite       arbitrary files. Furthermore, a remote attacker may be able to execute       arbitrary code.
  Workaround :

    There is no known workaround at this time.

Fish developer David Adam reports :

This release fixes a number of local privilege escalation vulnerability and one remote code execution vulnerability.

CVE-2014-2905 is severe. Apparently requesting stable instead of testing doesn't work.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
129379	openSUSE Security Update : fish3 (openSUSE-2019-2188)	Nessus	SuSE Local Security Checks	critical
129343	openSUSE Security Update : fish3 (openSUSE-2019-2177)	Nessus	SuSE Local Security Checks	critical
80270	GLSA-201412-49 : fish: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	critical
77976	FreeBSD : fish -- local privilege escalation and remote code execution (6c083cf8-4830-11e4-ae2c-c80aa9043978)	Nessus	FreeBSD Local Security Checks	critical
73929	Fedora 19 : fish-2.1.0-9.fc19 (2014-5783)	Nessus	Fedora Local Security Checks	high

Detections

Analytics

CVE-2014-3219

high

Tenable Plugins

critical

critical

critical

critical

high