CVE-2020-15229

Go/github.com/sylabs/singularity CVE-2020-15229: high 8.2

Path traversal and files overwrite with unsquashfs in singularity

Action: Upgrade github.com/sylabs/singularity to 3.6.4 or later.

go get github.com/sylabs/singularity@v3.6.4

Affected

Fixed versions

Sources

• osv: GHSA-7gcp-w6ww-2xv9
• https://github.com/hpcng/singularity/security/advisories/GHSA-7gcp-w6ww-2xv9
• https://nvd.nist.gov/vuln/detail/CVE-2020-15229
• https://github.com/hpcng/singularity/pull/5611
• https://github.com/hpcng/singularity/commit/eba3dea260b117198fdb6faf41f2482ab2f8d53e
• https://github.com/hpcng/singularity/blob/v3.6.4/CHANGELOG.md#security-related-fixes
• http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00070.html
• http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00071.html
• http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00009.html

CVE-2020-15229 · published 2021-05-24T16:59:53Z · modified 2026-09-10T03:49:04.743871790Z · JSON