openSUSE-SU-2020:1770-1

Import Source

JSON Data

https://api.test.osv.dev/v1/vulns/openSUSE-SU-2020:1770-1

Related

Published

2020-10-29T17:24:21Z

Modified

2020-10-29T17:24:21Z

Summary

Security update for singularity

Details

This update for singularity fixes the following issues:

Update to new version 3.6.4:

CVE-2020-15229: Due to insecure handling of path traversal and the lack of path sanitization within unsquashfs, it is possible to overwrite/create files on the host filesystem during the extraction of a crafted squashfs filesystem (boo#1177901).

References

Affected packages

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

3.6.4-lp152.2.9.1

{
    "binaries": [
        {
            "singularity": "3.6.4-lp152.2.9.1"
        }
    ]
}