Alpine/singularity: high 7.5
Sylabs Singularity 3.0 through 3.5 has Improper Validation of an Integrity Check Value. Image integrity is not validated when an ECL policy is enforced. The fingerprint required by the ECL is compared
Action: Upgrade singularity to 3.6.0-r0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.0.0 | 3.6.0-r0 | - |
Fixed versions
| 3.6.0-r0 |
Sources
- osv: ALPINE-CVE-2020-13845#Alpine:v3.24/singularity
- https://security.alpinelinux.org/vuln/CVE-2020-13845
published · modified · JSON