Debian/fish: unknown
fish (aka fish-shell) 1.16.0 before 2.1.1 does not properly check the credentials, which allows local users to gain privileges via the universal variable socket, related to /tmp/fishd.socket.user perm
Action: Upgrade fish to 2.1.1-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.1.1-1 | - |
Fixed versions
| 2.1.1-1 |
Sources
published · modified · JSON