I released new version of Mock. It is security release. All users of mock-scm are encouraged to upgrade. If you use just mock (not the scm subpackage) then you are not affected.
From: https://github.com/rpm-software-management/mock/wiki/Release-Notes-1.2.21 Mock version 1.2.21 is security release. It fixes: CVE-2016-6299 - privilige escalation via mock-scm RHBZ#1375493 Additionally it has those changes: root_cache: Mention root cache being created in state updates (log messages) Rename mageia pubkey to RPM-GPG-KEY-Mageia require generic system-release rather than fedora-release RHBZ#1367746 -- Miroslav Suchy, RHCA Red Hat, Senior Software Engineer, #brno, #devexp, #fedora-buildsys -- buildsys mailing list [email protected] https://lists.fedoraproject.org/admin/lists/[email protected]
