Oval Definition:oval:org.opensuse.security:def:109837
Revision Date:2021-05-30Version:1
Title:Security update for singularity (Moderate)
Description:

This update for singularity fixes the following issues:

singularity was updated to version 3.7.3:

- Fix for CVE-2021-29136: A dependency used to extract docker/OCI image layers can be tricked into modifying host files by creating a malicious layer that has a symlink with the name '.' (or '/'), when running as root.
Family:unixClass:patch
Status:Reference(s):1184147
CVE-2021-29136
openSUSE-SU-2021:0810-1
Platform(s):SUSE Linux Enterprise High Performance Computing 15 SP2
SUSE Linux Enterprise Server 15 SP2
SUSE Linux Enterprise Server for SAP Applications 15 SP2
SUSE Linux Enterprise Storage 7
SUSE Manager Proxy 4.1
SUSE Manager Server 4.1
SUSE Package Hub for SUSE Linux Enterprise 15 SP2
Product(s):
Definition Synopsis
  • SUSE Package Hub for SUSE Linux Enterprise 15 SP2 is installed
  • AND singularity-3.7.3-bp152.2.19.3 is installed
  • BACK