CVE-2020-25039
Sylabs Singularity 3.2.0 through 3.6.2 has Insecure Permissions on temporary directories used in fakeroot or user namespace container execution.
Résumé
Insecure permissions on user namespace / fakeroot temporary rootfs in Singularity
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Sylabs Singularity 3.2.0 through 3.6.2 has Insecure Permissions on temporary directories used in fakeroot or user namespace container execution.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
Go
github.com/sylabs/singularity
[{"type":"SEMVER","events":[{"introduced":"3.2.0"},{"fixed":"3.6.3"}]}]
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Ubuntu UBUNTU-CVE-2020-25039 singularity-container
Références
- advisory github.com
- advisory nvd.nist.gov
- advisory lists.opensuse.org
- advisory lists.opensuse.org
- web medium.com