[SECURITY] [DSA 3364-1] linux security update

- ------------------------------------------------------------
-------------
Debian Security Advisory DSA-3364-1                   security@debian.org
https://www.debian.org/security/                            Ben Hutchings
September 21, 2015                    https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package        : linux
CVE ID         : CVE-2015-0272 CVE-2015-2925 CVE-2015-5156 CVE-2015-6252
                 CVE-2015-6937
Debian Bug     : 796036

Several vulnerabilities have been discovered in the Linux kernel that
may lead to a privilege escalation or denial of service.

CVE-2015-0272

    It was discovered that NetworkManager would set IPv6 MTUs based on
    the values received in IPv6 RAs (Router Advertisements), without
    sufficiently validating these values. A remote attacker could
    exploit this attack to disable IPv6 connectivity. This has been
    mitigated by adding validation in the kernel.

CVE-2015-2925

    Jann Horn discovered that when a subdirectory of a filesystem is
    bind-mounted into a container that has its own user and mount
    namespaces, a process with CAP_SYS_ADMIN capability in the user
    namespace can access files outside of the subdirectory.  The
    default Debian configuration mitigated this as it does not allow
    unprivileged users to create new user namespaces.

Air Drive Plus v2.4 iOS - Arbitrary File Upload Vulnerability

Document Title:
===============
Air Drive Plus v2.4 iOS - Arbitrary File Upload Vulnerability


References (Source):
====================
http://www.vulnerability-lab.com/get_content.php?id=1597


Release Date:
=============
2015-09-21


Vulnerability Laboratory ID (VL-ID):
====================================
1597


Common Vulnerability Scoring System:
==============================
======
8.7


Product & Service Introduction:
===============================
Turn your iPhone, iPod touch, and iPad into a wireless disk. Share your files and photos over network, no USB cable or extra software required.

(Copy of the Vendor Homepage: https://itunes.apple.com/tr/app/air-drive-plus-your-file-manager/id422806570 )


Abstract Advisory Information:
==============================
The Vulnerability Laboratory Research Team discovered an arbitrary file upload web vulnerability in the official Photo Transfer 2 - v1.0 iOS mobile web-application.

UDID v1.0 iOS - Persistent Mail Encode Vulnerability

Document Title:
===============
UDID v1.0 iOS -  Persistent Mail Encode Vulnerability


References (Source):
====================
http://www.vulnerability-lab.com/get_content.php?id=1590


Release Date:
=============
2015-09-22


Vulnerability Laboratory ID (VL-ID):
====================================
1590


Common Vulnerability Scoring System:
==============================
======
3.6


Product & Service Introduction:
===============================
Here is the easiest way to get your device information such as UDID, Device Name, OS Version and many more,
in just one click. You can also share your device information with any one.

(Copy of the Vendor Homepage: https://itunes.apple.com/de/app/my-device-udid/id504520659 )

[security bulletin] HPSBUX03511 SSRT102248 rev.1 - HP-UX BIND service running named, Remote Denial of Service (DoS)

Note: the current version of the following document is available here:
https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/
docDisplay?docId=emr_na-c04800156

SUPPORT COMMUNICATION - SECURITY BULLETIN

Document ID: c04800156
Version: 1

HPSBUX03511 SSRT102248 rev.1 - HP-UX BIND service running named, Remote
Denial of Service (DoS)

NOTICE: The information in this Security Bulletin should be acted upon as
soon as possible.

Release Date: 2015-09-21
Last Updated: 2015-09-21

Potential Security Impact: Remote denial of service (DoS)

Source: Hewlett-Packard Company, HP Software Security Response Team

VULNERABILITY SUMMARY
A potential security vulnerability has been identified in the HP-UX BIND
service running named. This vulnerability could be exploited remotely to
create a Denial of Service (DoS).

References:

CVE-2015-5722
CVE-2015-5477
SSRT102248

SUPPORTED SOFTWARE VERSIONS*: ONLY impacted versions are listed.
HP-UX B.11.31 BIND 9.7.3 prior to C.9.7.3.8.0 (named)

BACKGROUND

CVSS 2.0 Base Metrics
==============================
=============================
  Reference              Base Vector             Base Score
CVE-2015-5722    (AV:N/AC:L/Au:N/C:N/I:N/A:C)       7.8
CVE-2015-5477    (AV:N/AC:L/Au:N/C:N/I:N/A:C)       7.8
===========================================================
             Information on CVSS is documented
            in HP Customer Notice: HPSN-2008-002