[Secure-testing-commits] r44551 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2016-09-13 12:02:08 +0000 (Tue, 13 Sep 2016)
New Revision: 44551

Modified:
   data/CVE/list
Log:
Add CVE-2016-6299 to be checked

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-09-13 10:27:19 UTC (rev 44550)
+++ data/CVE/list	2016-09-13 12:02:08 UTC (rev 44551)
@@ -5370,8 +5370,12 @@
 	NOTE: Fixed by: https://git.busybox.net/busybox/commit/?id=150dc7a2b483b8338a3e185c478b4b23ee884e71
 CVE-2016-6300
 	REJECTED
-CVE-2016-6299
+CVE-2016-6299 [privilige escalation via mock-scm]
 	RESERVED
+	- mock <undetermined>
+	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1375490
+	NOTE: https://github.com/rpm-software-management/mock/commit/8b02f43beadacf6911200b48d94e39e891a41da9
+	TODO: check
 CVE-2016-6298 (The _Rsa15 class in the RSA 1.5 algorithm implementation in jwa.py in ...)
 	- python-jwcrypto <undetermined>
 	NOTE: https://github.com/latchset/jwcrypto/issues/65