Alerts This Week
Warning Icon 1 697
Alerts This Week
Warning Icon 1 697

openSUSE 15-SP3: 2021:1525-1 Moderate: Singularity Security Fix

opensuse
Calendar Grey December 4, 2021
Dist Opensuse Esm H88
This release tackles a significant flaw in Synapse on Ubuntu, boosting both safety and performance.
An update that fixes one vulnerability is now available

Description

This update for singularity fixes the following issues:

Update to 3.8.5:

- CVE-2021-41190: Fixed OCI manifest and index parsing confusion

(boo#1193273).

- Building Singularity from source requires go greater or equal 1.16. We

now aim to support the two most recent stable versions of Go. This

corresponds to the Go Release Maintenance Policy

- Sourcing a script based on PATH is now permitted, fixing a regression

introduced in 3.6.0.

- Environment variables in container definition files are properly scoped,

fixing a regression introduced in 3.8.0.

- Fix the oras contexts to avoid hangs upon failed pushes to Harbor

registry.

Patch

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods

like YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

- openSUSE Backports SLE-15-SP3:

zypper in -t patch openSUSE-2021-1525=1

Package List

- openSUSE Backports SLE-15-SP3 (aarch64 i586 s390x x86_64):

singularity-3.8.5-bp153.2.10.1

References

https://www.suse.com/security/cve/CVE-2021-41190.html

https://bugzilla.suse.com/1193273

Announcement ID: openSUSE-SU-2021:1525-1
Rating: moderate
Affected Products: openSUSE Backports SLE-15-SP3 .

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here