Description
The scm plug-in in mock might allow attackers to bypass the intended chroot protection mechanism and gain root privileges via a crafted spec file.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 16.04 LTS | mock | No fix yet | — |
References
- https://bugzilla.redhat.com/show_bug.cgi?id=1375490
- FEDORA-2016-145afea99e vendor-advisory
- FEDORA-2016-5a12527790 vendor-advisory
- [oss-security] 20160913 CVE-2016-6299 mock: privilige escalation via mock-scm mailing-list
- FEDORA-2016-34e61fa48d vendor-advisory
- 92948 vdb-entry