Количество 5
Количество 5
CVE-2022-39237
syslabs/sif is the Singularity Image Format (SIF) reference implementation. In versions prior to 2.8.1the `github.com/sylabs/sif/v2/pkg/integrity` package did not verify that the hash algorithm(s) used are cryptographically secure when verifying digital signatures. A patch is available in version >= v2.8.1 of the module. Users are encouraged to upgrade. Users unable to upgrade may independently validate that the hash algorithm(s) used for metadata digest(s) and signature hash are cryptographically secure.
CVE-2022-39237
syslabs/sif is the Singularity Image Format (SIF) reference implementation. In versions prior to 2.8.1the `github.com/sylabs/sif/v2/pkg/integrity` package did not verify that the hash algorithm(s) used are cryptographically secure when verifying digital signatures. A patch is available in version >= v2.8.1 of the module. Users are encouraged to upgrade. Users unable to upgrade may independently validate that the hash algorithm(s) used for metadata digest(s) and signature hash are cryptographically secure.
CVE-2022-39237
syslabs/sif is the Singularity Image Format (SIF) reference implementa ...
GHSA-m5m3-46gj-wch8
SIF's Digital Signature Hash Algorithms Not Validated
openSUSE-SU-2023:0018-1
Security update for apptainer
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2022-39237 syslabs/sif is the Singularity Image Format (SIF) reference implementation. In versions prior to 2.8.1the `github.com/sylabs/sif/v2/pkg/integrity` package did not verify that the hash algorithm(s) used are cryptographically secure when verifying digital signatures. A patch is available in version >= v2.8.1 of the module. Users are encouraged to upgrade. Users unable to upgrade may independently validate that the hash algorithm(s) used for metadata digest(s) and signature hash are cryptographically secure. | CVSS3: 6.3 | 0% Низкий | больше 3 лет назад |
 | CVE-2022-39237 syslabs/sif is the Singularity Image Format (SIF) reference implementation. In versions prior to 2.8.1the `github.com/sylabs/sif/v2/pkg/integrity` package did not verify that the hash algorithm(s) used are cryptographically secure when verifying digital signatures. A patch is available in version >= v2.8.1 of the module. Users are encouraged to upgrade. Users unable to upgrade may independently validate that the hash algorithm(s) used for metadata digest(s) and signature hash are cryptographically secure. | CVSS3: 6.3 | 0% Низкий | больше 3 лет назад |
| CVE-2022-39237 syslabs/sif is the Singularity Image Format (SIF) reference implementa ... | CVSS3: 6.3 | 0% Низкий | больше 3 лет назад |
| GHSA-m5m3-46gj-wch8 SIF's Digital Signature Hash Algorithms Not Validated | CVSS3: 6.3 | 0% Низкий | больше 3 лет назад |
 | openSUSE-SU-2023:0018-1 Security update for apptainer | около 3 лет назад |
Уязвимостей на страницу