[El-errata] New glibc updates available via Ksplice (ELSA-2015-2172)

Errata Announcements for Oracle Linux el-errata at oss.oracle.com
Thu Nov 26 02:33:51 PST 2015

Synopsis: ELSA-2015-2172 can now be patched using Ksplice
CVEs: CVE-2015-5277

Users with Oracle Linux Premier Support can now use Ksplice to patch
against the latest Oracle Security Advisory, ELSA-2015-2172.


We recommend that all users of Ksplice on OL 7 install these updates.

You can install these updates by running:

# ksplice -y user upgrade


* CVE-2015-5277: Privilege escalation in nss_files file parsing.

Incorrect handling of long lines in nss_files could result heap
corruption.  A local attacker could potentially use this flaw to
escalate privileges.


Ksplice support is available at ksplice-support_ww at oracle.com.

More information about the El-errata mailing list