---
title: "Security digest: November 23, 2015"
url: https://erroneo.us/security/2015-11-23/
description: "November 23, 2015 vulnerability digest: 1 brief (ABRT CVE-2015-5287: 2015 RHEL 7 Local Root Bug…). What to patch and who can relax."
type: security-digest-day
section: "Security Digest"
date_published: 2015-11-23
date_modified: 2026-08-26
publisher: erroneo.us
author: erroneo.us Security Desk
license: All rights reserved. Quote with attribution and a link.
---

# Security digest: November 23, 2015

1 editorial brief.

## Take stock

- Most can relax: ABRT CVE-2015-5287: 2015 RHEL 7 Local Root Bug Now in KEV . Anyone still running RHEL 7, CentOS 7 or similar hosts with abrt older than 2.1.11-35.el7, especially shared or multi-user systems and old appliances built on CentOS 7.
- None of it touches your stack? Then there is nothing to do today. That is a result, not a failure to read carefully.

## Editorial briefs

- **Most can relax** [ABRT CVE-2015-5287: 2015 RHEL 7 Local Root Bug Now in KEV](https://erroneo.us/security/briefs/abrt-symlink-privilege-escalation-cve-2015-5287/index.md): This is a ten-year-old local root bug that any RHEL 7 or CentOS 7 host updated since late 2015 already has fixed; the KEV listing matters only for forgotten, never-patched machines, and those have bigger problems.

## Known exploited (CISA KEV)

None.

## Critical advisories

None.

---
Source page: https://erroneo.us/security/2015-11-23/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt