[prev in list] [next in list] [prev in thread] [next in thread] 

List:       fedora-buildsys-list
Subject:    Security release of Mock
From:       Miroslav_Suchý <msuchy () redhat ! com>
Date:       2016-09-14 6:43:20
Message-ID: 967ba6c1-82cc-afbf-2511-823e7f1ce226 () redhat ! com
[Download RAW message or body]

I released new version of Mock. It is security release. All users of mock-scm are encouraged to upgrade.
If you use just mock (not the scm subpackage) then you are not affected.

From:
https://github.com/rpm-software-management/mock/wiki/Release-Notes-1.2.21


Mock version 1.2.21 is security release. It fixes:

    CVE-2016-6299 - privilige escalation via mock-scm RHBZ#1375493

Additionally it has those changes:

    root_cache: Mention root cache being created in state updates (log messages)
    Rename mageia pubkey to RPM-GPG-KEY-Mageia
    require generic system-release rather than fedora-release RHBZ#1367746



-- 
Miroslav Suchy, RHCA
Red Hat, Senior Software Engineer, #brno, #devexp, #fedora-buildsys
--
buildsys mailing list
buildsys@lists.fedoraproject.org
https://lists.fedoraproject.org/admin/lists/buildsys@lists.fedoraproject.org
[prev in list] [next in list] [prev in thread] [next in thread]