Summary: | <sys-cluster/singularity-3.6.0: Multiple vulnerabilities (CVE-2020-{13845,13846,13847}) | ||
---|---|---|---|
Product: | Gentoo Security | Reporter: | John Helmert III <ajak> |
Component: | Vulnerabilities | Assignee: | Gentoo Security <security> |
Status: | RESOLVED FIXED | ||
Severity: | trivial | CC: | jlec, marecki |
Priority: | Normal | ||
Version: | unspecified | ||
Hardware: | All | ||
OS: | Linux | ||
URL: | https://github.com/hpcng/singularity/releases/tag/v3.6.0 | ||
Whiteboard: | ~1 [noglsa] | ||
Package list: | Runtime testing required: | --- |
Description
John Helmert III
2020-07-19 19:41:37 UTC
Maintainer, please bump to 3.6.0. The bug has been referenced in the following commit(s): https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=042d44f63a5f66394ffa94e0e904f5437d349d1f commit 042d44f63a5f66394ffa94e0e904f5437d349d1f Author: Marek Szuba <marecki@gentoo.org> AuthorDate: 2020-07-21 15:14:59 +0000 Commit: Marek Szuba <marecki@gentoo.org> CommitDate: 2020-07-21 15:14:59 +0000 sys-cluster/singularity: remove old 2.6.1 is ancient and doesn't support Python versions newer than 3.6, 3.5.3 has several known security vulnerabilities. Bug: https://bugs.gentoo.org/733238 Signed-off-by: Marek Szuba <marecki@gentoo.org> sys-cluster/singularity/Manifest | 2 - sys-cluster/singularity/singularity-2.6.1.ebuild | 44 -------------- .../singularity/singularity-3.5.3-r1.ebuild | 69 ---------------------- 3 files changed, 115 deletions(-) (In reply to Larry the Git Cow from comment #2) > The bug has been referenced in the following commit(s): > > https://gitweb.gentoo.org/repo/gentoo.git/commit/ > ?id=042d44f63a5f66394ffa94e0e904f5437d349d1f > > commit 042d44f63a5f66394ffa94e0e904f5437d349d1f > Author: Marek Szuba <marecki@gentoo.org> > AuthorDate: 2020-07-21 15:14:59 +0000 > Commit: Marek Szuba <marecki@gentoo.org> > CommitDate: 2020-07-21 15:14:59 +0000 > > sys-cluster/singularity: remove old > > 2.6.1 is ancient and doesn't support Python versions newer than 3.6, > 3.5.3 has several known security vulnerabilities. > > Bug: https://bugs.gentoo.org/733238 > Signed-off-by: Marek Szuba <marecki@gentoo.org> > > sys-cluster/singularity/Manifest | 2 - > sys-cluster/singularity/singularity-2.6.1.ebuild | 44 -------------- > .../singularity/singularity-3.5.3-r1.ebuild | 69 > ---------------------- > 3 files changed, 115 deletions(-) Thanks. Cleanup done, noglsa, closing. |