The author of the fish shell will soon release version 2.2.1, which will fix vulnerabilities for CVE's CVE-2014-29{05,06,14} which affects versions 1.16.0-2.1.0. See the link to the bug report for the (copius) details. Link to bug report: https://bugzilla.redhat.com/show_bug.cgi?id=1092091