[El-errata] New glibc updates available via Ksplice (ELSA-2015-2172)

[Errata Announcements for Oracle Linux]

Synopsis: ELSA-2015-2172 can now be patched using Ksplice
CVEs: CVE-2015-5277

Users with Oracle Linux Premier Support can now use Ksplice to patch
against the latest Oracle Security Advisory, ELSA-2015-2172.

INSTALLING THE UPDATES

We recommend that all users of Ksplice on OL 7 install these updates.

You can install these updates by running:

# ksplice -y user upgrade


DESCRIPTION

* CVE-2015-5277: Privilege escalation in nss_files file parsing.

Incorrect handling of long lines in nss_files could result heap
corruption.  A local attacker could potentially use this flaw to
escalate privileges.

SUPPORT

Ksplice support is available at ksplice-support_ww at oracle.com.