USN-4840-1: Singularity vulnerabilities
15 March 2021
Several security issues were fixed in Singularity.
Releases
Packages
- singularity-container - container platform focused on supporting "Mobility of Compute"
Details
It was discovered that Singularity incorrectly handled certain inputs. An
attacker could possibly use this issue to obtain sensitive information.
(CVE-2018-19295)
It was discovered that Singularity incorrectly handled access control. An
attacker could possibly use this issue to obtain sensitive information.
(CVE-2018-12021)
Update instructions
The problem can be corrected by updating your system to the following package versions:
Ubuntu 18.04
-
singularity-container
-
2.4.2-4ubuntu0.1~esm1
Available with Ubuntu Pro
In general, a standard system update will make all the necessary changes.