CVE-2019-19724
Fixed in a distro release EPSS 1%
Insecure permissions (777) are set on $HOME/.singularity when it is newly created by Singularity (version from 3.3.0 to 3.5.1), which could lead to an information leak, and malicious redirection of operations performed against Sylabs cloud services.
Products: sylabs singularity
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Go | github.com/sylabs/singularity | 3.5.2 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| openSUSE Leap 15.1 | singularity | 2.6.1-lp151.2.3.1 |
| openSUSE Leap 15.1 | singularity | 3.6.0-lp151.2.6.1 |
| openSUSE Tumbleweed | singularity | 3.8.3-1.2 |