openSUSE-SU-2022:0096-1

See a problem?
Import Source
https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2022:0096-1.json
JSON Data
https://api.osv.dev/v1/vulns/openSUSE-SU-2022:0096-1
Upstream
Related
Published
2022-03-31T08:02:53Z
Modified
2026-02-04T02:53:44Z
Summary
Security update for fish3
Details

This update for fish3 fixes the following issues:

  • CVE-2022-20001: Navigating to a compromised git repository may lead to arbitrary code execution (bsc#1197139)
References

Affected packages

SUSE:Package Hub 15 SP3 / fish3

Package

Name
fish3
Purl
pkg:rpm/suse/fish3&distro=SUSE%20Package%20Hub%2015%20SP3

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.3.1-bp153.2.10.1

Ecosystem specific 

{
    "binaries":  [
        {
            "fish3":  "3.3.1-bp153.2.10.1",
            "fish3-devel":  "3.3.1-bp153.2.10.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2022:0096-1.json"

openSUSE:Leap 15.3 / fish3

Package

Name
fish3
Purl
pkg:rpm/opensuse/fish3&distro=openSUSE%20Leap%2015.3

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.3.1-bp153.2.10.1

Ecosystem specific 

{
    "binaries":  [
        {
            "fish3":  "3.3.1-bp153.2.10.1",
            "fish3-devel":  "3.3.1-bp153.2.10.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2022:0096-1.json"