CVE-2020-13847

Sylabs Singularity 3.0 through 3.5 lacks support for an Integrity Check. Singularity's sign and verify commands do not sign metadata found in the global header or data object descriptors of a SIF file...

CVE-2020-13847

CVE-2020-13847 affects Sylabs Singularity 3.0–3.5 where the signing/verification code does not sign metadata in the SIF global header or data-object descriptors, allowing signed containers to potentially behave unexpectedly if modified. Public advisories (openSUSE/SUSE) note a fix in Singularity ...

CVE-2020-13847

Removed by vendor...

CVE-2020-13847

Sylabs Singularity 3.0 through 3.5 lacks support for an Integrity Check. Singularity's sign and verify commands do not sign metadata found in the global header or data object descriptors of a SIF file...

openSUSE: Security Advisory for singularity (openSUSE-SU-2020:0057_1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

openSUSE Security Update : singularity (openSUSE-2020-57)

This update for singularity fixes the following issues : - CVE-2019-19724: Fixed incorrect file permissions on user configuration and cache directories boo1159550. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

OPENSUSE-SU-2020:0057-1 Security update for singularity

This update for singularity fixes the following issues: - CVE-2019-19724: Fixed incorrect file permissions on user configuration and cache directories boo1159550...

Security update for singularity (moderate)

openSUSE Security Update: Security update for singularity Announcement ID: openSUSE-SU-2020:0057-1 Rating: moderate References: 1159550 Cross-References: CVE-2019-19724 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for...

Fedora Update for singularity FEDORA-2019-f4eb2a01d1

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 31 : singularity (2019-f4eb2a01d1)

Upgrade to upstream 3.5.2, still using golang-1.11 on epel8 ---- Upgrade to upstream 3.5.1, use golang-1.11 on epel8 ---- Upgrade to upstream 3.5.0 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempte...

[SECURITY] Fedora 31 Update: singularity-3.5.2-1.1.fc31

Singularity provides functionality to make portable containers that can be used across host environments...

Insecure Permission

github.com/sylabs/singularity is vulnerable to insecure permissions. When a user's configuration directory $HOME/.singularity is newly created, it makes directories with insecure permissions 777 on $HOME/.singularity and SINGULARITYCACHEDIR directories, allowing other users to perform malicious...

Singularity Information Disclosure Vulnerability (CNVD-2020-03164)

Singularity is a Linux-based container platform for running standalone applications. A security vulnerability exists in Singularity versions 3.3.0 through 3.5.1, which stems from a program that sets insecure permissions 777 for $HOME/.singularity. An attacker can exploit the vulnerability to...

CVE-2019-19724

Insecure permissions 777 are set on $HOME/.singularity when it is newly created by Singularity version from 3.3.0 to 3.5.1, which could lead to an information leak, and malicious redirection of operations performed against Sylabs cloud services...

CVE-2019-19724

Insecure permissions 777 are set on $HOME/.singularity when it is newly created by Singularity version from 3.3.0 to 3.5.1, which could lead to an information leak, and malicious redirection of operations performed against Sylabs cloud services...

Information disclosure

Insecure permissions 777 are set on $HOME/.singularity when it is newly created by Singularity version from 3.3.0 to 3.5.1, which could lead to an information leak, and malicious redirection of operations performed against Sylabs cloud services...

CVE-2019-19724

Insecure permissions 777 are set on $HOME/.singularity when it is newly created by Singularity version from 3.3.0 to 3.5.1, which could lead to an information leak, and malicious redirection of operations performed against Sylabs cloud services...

CVE-2019-19724

Insecure permissions 777 are set on $HOME/.singularity when it is newly created by Singularity version from 3.3.0 to 3.5.1, which could lead to an information leak, and malicious redirection of operations performed against Sylabs cloud services...

CVE-2019-19724

CVE-2019-19724 affects Singularity 3.3.0–3.5.1, where newly created $HOME/.singularity could have insecure permissions (777), enabling information disclosure and malicious redirection of operations against Sylabs cloud services. Publicly available connected documents show openSUSE advisories (ope...

OPENSUSE-SU-2019:2288-1 Security update for singularity

This update for singularity fixes the following issues: singularity was updated to version 3.4.1: This point release addresses the following issues: - Fixes an issue where a PID namespace was always being used - Fixes compilation on non 64-bit architectures - Allows fakeroot builds for zypper,...