Multiple insecure temporary files in Fish-shell

Release date:
Updated on:

Affected Systems:
Fish-shell 1.16.0-2.1.0
Description:
--------------------------------------------------------------------------------
Bugtraq id: 67098
CVE (CAN) ID: CVE-2014-2906
 
Fish is a Unix shell. Provides user-friendly and powerful command line completion, including descriptions of each completion item, tab completion of strings containing wildcards, and completion of many specific commands.
 
Fish-shell 1.16.0-2.1.0 has multiple insecure temporary file creation vulnerabilities. Local attackers can exploit this vulnerability to gain Elevation of Privilege.
 
<* Source: David Adam
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:
 
Fish-shell
----------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:
 
Http://fishshell.com/