openSUSE-SU-2020:1814-1

Import Source

JSON Data

https://api.test.osv.dev/v1/vulns/openSUSE-SU-2020:1814-1

Related

Published

2020-11-01T23:23:57Z

Modified

2020-11-01T23:23:57Z

Summary

Security update for singularity

Details

This update for singularity fixes the following issues:

Update to new version 3.6.4:

CVE-2020-15229: Due to insecure handling of path traversal and the lack of path sanitization within unsquashfs, it is possible to overwrite/create files on the host filesystem during the extraction of a crafted squashfs filesystem (boo#1177901).

This update was imported from the openSUSE:Leap:15.2:Update update project.

References

Affected packages

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

3.6.4-bp152.2.12.1

{
    "binaries": [
        {
            "singularity": "3.6.4-bp152.2.12.1"
        }
    ]
}