Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2020-13847
7.5
HIGHCVSS v3
Published
July 14, 2020
CVSS v2
5 MEDIUM
Affected
2 projects
Assigned by
MITRE
Severity scale
010
Description
Sylabs Singularity 3.0 through 3.5 lacks support for an Integrity Check. Singularity's sign and verify commands do not sign metadata found in the global header or data object descriptors of a SIF file.
sylabs/singularity
GitHubSingularityCE is the Community Edition of Singularity, an open source container platform designed to be simple, fast, and secure.
GitHubSingularityCE is the Community Edition of Singularity, an open source container platform designed to be simple, fast, and secure.>= 3.0.0, <= 3.5.0NVD
apptainer/singularityGitHubSingularity has been renamed to Apptainer as part of us moving the project to the Linux Foundation. This repo has been persisted as a snapshot right before the changes.
GitHubSingularity has been renamed to Apptainer as part of us moving the project to the Linux Foundation. This repo has been persisted as a snapshot right before the changes.>= 3.0.0, <= 3.5.0NVD