CVE-2020-25039
Sylabs Singularity 3.2.0 through 3.6.2 has Insecure Permissions on temporary directories used in fakeroot or user namespace container execution.
Summary
Insecure permissions on user namespace / fakeroot temporary rootfs in Singularity
Original description
The description as published by the source.
Sylabs Singularity 3.2.0 through 3.6.2 has Insecure Permissions on temporary directories used in fakeroot or user namespace container execution.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Affected packages
Go
github.com/sylabs/singularity
[{"type":"SEMVER","events":[{"introduced":"3.2.0"},{"fixed":"3.6.3"}]}]
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Ubuntu UBUNTU-CVE-2020-25039 singularity-container
References
- advisory github.com
- advisory nvd.nist.gov
- advisory lists.opensuse.org
- advisory lists.opensuse.org
- web medium.com