Patchwire CVEs, their patch status, and feeds to follow them

CVE-2018-19295

Fixed in a distro release EPSS <1%

Sylabs Singularity 2.4 to 2.6 allows local users to conduct Improper Input Validation attacks.

Published 2018-12-17 · CVE record · OSV

Products: sylabs singularity

Fixed upstream

EcosystemPackageFixed in
Gogithub.com/sylabs/singularity2.6.1

Distro releases

ReleasePackageFixed in
SUSE Package Hub 12 SP3singularity2.6.1-14.1
SUSE Package Hub 15singularity2.6.1-bp150.3.6.1
Ubuntu Pro 18.04 LTSsingularity-container2.4.2-4ubuntu0.1~esm1
openSUSE Leap 15.0singularity2.6.1-bp150.3.6.1
openSUSE Tumbleweedsingularity3.8.3-1.2