CVE-2020-25039
1 advisory.
Go/github.com/sylabs/singularity CVE-2020-25039: high 8.1, EPSS 2.01%
Insecure permissions on user namespace / fakeroot temporary rootfs in Singularity
Action: Upgrade github.com/sylabs/singularity to 3.6.3 or later.
go get github.com/sylabs/singularity@v3.6.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.2.0 | 3.6.3 | - |
Fixed versions
| 3.6.3 |
Sources
- osv: GHSA-w6v2-qchm-grj7
- https://github.com/hpcng/singularity/security/advisories/GHSA-w6v2-qchm-grj7
- https://nvd.nist.gov/vuln/detail/CVE-2020-25039
- https://medium.com/sylabs
- http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00070.html
- http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00088.html
CVE-2020-25039 · published · modified · JSON