Zanchey

**Name of the Vulnerable Software and Affected Versions** fish (aka fish-shell) versions 2.0.0 through 2.1.0 **Description** The issue allows remote attackers to execute arbitrary code via unspecified vectors, as demonstrated by set prompt, due to a lack of access restriction to the configuration service (aka fish config). **Recommendations** For fish (aka fish-shell) versions 2.0.0 through 2.1.0, update to version 2.1.1 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** fish versions prior to 2.1.1 **Description** The issue allows local users to write to arbitrary files via a symlink attack on several temporary files, including /tmp/fishd.log.%s, /tmp/.pac-cache.$USER, /tmp/.yum-cache.$USER, or /tmp/.rpm-cache.$USER. **Recommendations** For versions prior to 2.1.1, update to version 2.1.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the temporary files /tmp/fishd.log.%s, /tmp/.pac-cache.$USER, /tmp/.yum-cache.$USER, and /tmp/.rpm-cache.$USER to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** fish-shell versions 1.16.0 through 2.1.0 **Description** The issue is related to the `psub` function, which does not properly create temporary files. This allows local users to execute arbitrary commands via a temporary file with a predictable name. **Recommendations** For fish-shell versions 1.16.0 through 2.1.0, update to version 2.1.1 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** fish-shell versions 1.23.0 through 2.1.1 **Description** The issue is related to the improper creation of temporary files by the funced function in fish-shell, allowing local users to gain privileges via a temporary file with a predictable name. **Recommendations** For fish-shell versions 1.23.0 through 2.1.1, update to version 2.1.1 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** fish versions 1.16.0 through 2.1.0 **Description** The issue is related to improper credential checking, allowing local users to gain privileges. This is connected to the `/tmp/fishd.socket.user` permissions and the universal variable socket. The exploitation of this issue can lead to a breach of confidentiality, integrity, and availability of protected information. It can be exploited locally. **Recommendations** For fish versions 1.16.0 through 2.1.0, update to version 2.1.1 or later to resolve the issue.