According to https://launchpad.net/ubuntu/+source/fish the following versions of fish are in supported releases:
* trusty: 2.0.0 * utopic: 2.1.0 * vivid: 2.1.0 The 2.x line has security issues only resolved in 2.1.1. Precise and earlier have much older versions (1.23.1) - I don't think these need to be updated, afaik 1.x is a substantially different codebase - but maintainer would know better than me. oss-sec announcement and release notes: * http://seclists.org/oss-sec/2014/q3/799 * http://fishshell.com/release_notes.html Debian has not yet updated, but related requests are here: * https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=730683#10 * https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=746259 ** Bug watch added: Debian Bug tracker #746259 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=746259 ** Tags added: security ** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2014-2905 ** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2014-2906 ** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2014-3856 ** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2014-2914 ** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2014-3219 ** Information type changed from Public to Public Security ** Summary changed: - Update fish package to version 2.1.1 (security update) + Security update: fish version 2.1.1 ** Description changed: - Please update the fish package to version 2.1. + ~~Please update the fish package to version 2.1.~~ - Maybe the package can be pulled from the official PPA: - https://launchpad.net/~fish-shell/+archive/release-2 + See + https://bugs.launchpad.net/ubuntu/+source/fish/+bug/1282631/comments/4 + for security-related update. + + The official PPA contains the update https://launchpad.net/~fish- + shell/+archive/release-2 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1282631 Title: Security update: fish version 2.1.1 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/fish/+bug/1282631/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
