Описание
Singularity insecure permissions
Insecure permissions (777) are set on $HOME/.singularity when it is newly created by Singularity (version from 3.3.0 to 3.5.1), which could lead to an information leak, and malicious redirection of operations performed against Sylabs cloud services.
Ссылки
- https://nvd.nist.gov/vuln/detail/CVE-2019-19724
- https://github.com/sylabs/singularity/commit/2cda4981812c29f0fb11d3ea6aaf6139f665a631
- https://github.com/sylabs/singularity/releases/tag/v3.5.2
- http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00025.html
- http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00059.html
Пакеты
github.com/sylabs/singularity
>= 3.3.0, <= 3.5.1
3.5.2
Связанные уязвимости
Insecure permissions (777) are set on $HOME/.singularity when it is newly created by Singularity (version from 3.3.0 to 3.5.1), which could lead to an information leak, and malicious redirection of operations performed against Sylabs cloud services.
Insecure permissions (777) are set on $HOME/.singularity when it is newly created by Singularity (version from 3.3.0 to 3.5.1), which could lead to an information leak, and malicious redirection of operations performed against Sylabs cloud services.
Insecure permissions (777) are set on $HOME/.singularity when it is ne ...
