According to https://launchpad.net/ubuntu/+source/fish the following
versions of fish are in supported releases:
* trusty: 2.0.0
* utopic: 2.1.0
* vivid: 2.1.0
The 2.x line has security issues only resolved in 2.1.1. Precise and
earlier have much older versions (1.23.1) - I don't think these need to
be updated, afaik 1.x is a substantially different codebase - but
maintainer would know better than me.
oss-sec announcement and release notes:
* http://seclists.org/oss-sec/2014/q3/799
* http://fishshell.com/release_notes.html
Debian has not yet updated, but related requests are here:
* https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=730683#10
* https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=746259
** Bug watch added: Debian Bug tracker #746259
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=746259
** Tags added: security
** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2014-2905
** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2014-2906
** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2014-3856
** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2014-2914
** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2014-3219
** Information type changed from Public to Public Security
** Summary changed:
- Update fish package to version 2.1.1 (security update)
+ Security update: fish version 2.1.1
** Description changed:
- Please update the fish package to version 2.1.
+ ~~Please update the fish package to version 2.1.~~
- Maybe the package can be pulled from the official PPA:
- https://launchpad.net/~fish-shell/+archive/release-2
+ See
+ https://bugs.launchpad.net/ubuntu/+source/fish/+bug/1282631/comments/4
+ for security-related update.
+
+ The official PPA contains the update https://launchpad.net/~fish-
+ shell/+archive/release-2
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1282631
Title:
Security update: fish version 2.1.1
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/fish/+bug/1282631/+subscriptions
--
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs