The author of the fish shell will soon release version 2.2.1, which
will fix vulnerabilities for CVE's CVE-2014-29{05,06,14} which affects
versions 1.16.0-2.1.0.
See the link to the bug report for the (copius) details.
Link to bug report:
https://bugzilla.redhat.com/show_bug.cgi?id=1092091