openSUSE 15 SP3: 2021:0911-1 Moderate: Singularity Vulnerability Patch
opensuse
May 30, 2021
An update that fixes one vulnerability is now available
Description
This update for singularity fixes the following issues:
singularity was updated to version 3.7.3:
- Fix for CVE-2021-29136: A dependency used to extract docker/OCI image
layers can be tricked into modifying host files by creating a malicious
layer that has a symlink with the name "." (or "/"), when running as
root.
Topics Covered
Patch
Patch Instructions:
To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
- openSUSE Backports SLE-15-SP2:
zypper in -t patch openSUSE-2021-810=1
Package List
- openSUSE Backports SLE-15-SP2 (aarch64 s390x x86_64):
singularity-3.7.3-bp152.2.19.3
References
https://www.suse.com/security/cve/CVE-2021-29136.html
https://bugzilla.suse.com/1184147
PREVIOUS
NEXT
Announcement ID: openSUSE-SU-2021:0810-1
Rating: moderate
Affected Products:
openSUSE Backports SLE-15-SP2
.
Topics Covered
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!