Stay Secure with the Latest Linux Advisories

security advisoryFedoraterminal emulator

Fedora 22: Shellinabox 2.19 moderate: DNS Rebinding Attack

* Added support for middle-click paste * Improved iOS support * New logic to enable soft keyboard icon * Disable HTTPS fallback using the URL /plain. Consequently disables automatic upgrades from HTTP to HTTPS (CVE-2015-8400). -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2015-463143720f 2016-01-07 23:40:26.816421 -------------------------------------------------------------------------------- Name : shellinabox Product : Fedora 22 Version : 2.19 Release : 1.fc22 URL : https://github.com/shellinabox/shellinabox Summary : Web based AJAX terminal emulator Description : Shell In A Box implements a web server that can export arbitrary command line tools to a web based terminal emulator. This emulator is accessible to any JavaScript and CSS enabled web browser and does not require any additional browser plugins. -------------------------------------------------------------------------------- Update Information: * Added support for middle-click paste * Improved iOS support * New logic to enable soft keyboard icon * Disable HTTPS fallback using the URL /plain. Consequently disables automatic upgrades from HTTP to HTTPS (CVE-2015-8400) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1287579 - CVE-2015-8400 shellinabox: DNS rebinding attack due to HTTP fallback [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1287579 [ 2 ] Bug #1287578 - CVE-2015-8400 shellinabox: DNS rebinding attack due to HTTP fallback [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1287578 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update shellinabox' at the command line. For more information, refer to "Managing Software with yum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by theFedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. https://lists.fedoraproject.org/admin/lists/package-announce.lists.fedoraproject.org/ . Elevate your Fedora setup with an upgraded shellinabox, addressing DNS rebinding vulnerabilities and enhancing compatibility with iOS devices.. Shell In A Box, Fedora Update, Terminal Emulator, DNS Issue, iOS Support. . LinuxSecurity.com Team

Jan 08, 2016 Fedora