SuseOPENSUSE-SU-2021:1525-1Security update for singularity (moderate)
5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N
4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:S/C:N/I:P/A:N
An update that fixes one vulnerability is now available.
Description:
This update for singularity fixes the following issues:
Update to 3.8.5:
- CVE-2021-41190: Fixed OCI manifest and index parsing confusion
(boo#1193273). - Building Singularity from source requires go greater or equal 1.16. We
now aim to support the two most recent stable versions of Go. This
corresponds to the Go Release Maintenance Policy - Sourcing a script based on PATH is now permitted, fixing a regression
introduced in 3.6.0. - Environment variables in container definition files are properly scoped,
fixing a regression introduced in 3.8.0. - Fix the oras contexts to avoid hangs upon failed pushes to Harbor
registry.
Patch Instructions:
To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or “zypper patch”.
Alternatively you can run the command listed for your product:
-
openSUSE Backports SLE-15-SP3:
zypper in -t patch openSUSE-2021-1525=1
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| openSUSE Backports SLE | 15-SP3 | aarch64 | - opensuse backports sle | < 15-SP3 (aarch64 i586 s390x x86_64): | - openSUSE Backports SLE-15-SP3 (aarch64 i586 s390x x86_64):.aarch64.rpm |
| openSUSE Backports SLE | 15-SP3 | i586 | - opensuse backports sle | < 15-SP3 (aarch64 i586 s390x x86_64): | - openSUSE Backports SLE-15-SP3 (aarch64 i586 s390x x86_64):.i586.rpm |
| openSUSE Backports SLE | 15-SP3 | s390x | - opensuse backports sle | < 15-SP3 (aarch64 i586 s390x x86_64): | - openSUSE Backports SLE-15-SP3 (aarch64 i586 s390x x86_64):.s390x.rpm |
| openSUSE Backports SLE | 15-SP3 | x86_64 | - opensuse backports sle | < 15-SP3 (aarch64 i586 s390x x86_64): | - openSUSE Backports SLE-15-SP3 (aarch64 i586 s390x x86_64):.x86_64.rpm |
Related
5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N
4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:S/C:N/I:P/A:N