Bug 19159

Summary:	mongodb new security issue CVE-2016-6494
Product:	Mageia	Reporter:	David Walser <luigiwalser>
Component:	Security	Assignee:	Joseph Wang <joequant>
Status:	RESOLVED INVALID	QA Contact:	Sec team <security>
Severity:	normal
Priority:	Normal	CC:	mageia
Version:	Cauldron
Target Milestone:	---
Hardware:	All
OS:	Linux
URL:	http://lwn.net/Vulnerabilities/696696/
Whiteboard:	MGA5TOO
Source RPM:	mongodb-3.2.5-3.mga6.src.rpm	CVE:
Status comment:

Description David Walser 2016-08-08 22:05:25 CEST

Debian-LTS has issued an advisory today (August 8):
http://lwn.net/Alerts/696673/

Mageia 5 is also affected.

David Walser 2016-08-08 22:05:31 CEST

Whiteboard: (none) => MGA5TOO

Comment 1 Nicolas Lécureuil 2016-11-18 01:43:01 CET

https://bugzilla.suse.com/show_bug.cgi?id=991387

i will use the same conclusion: 


"reading upstream discussion this looks like a non issue (umask)"

same is done in RHEL

Status: NEW => RESOLVED
CC: (none) => mageia
Resolution: (none) => INVALID