[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[bug#33730] [PATCH] gnu: Singularity: Update to 2.6.1 [fixes CVE-2018-19
|
From: |
Ludovic Courtès |
|
Subject: |
[bug#33730] [PATCH] gnu: Singularity: Update to 2.6.1 [fixes CVE-2018-19295]. |
|
Date: |
Thu, 13 Dec 2018 23:52:09 +0100 |
|
User-agent: |
Gnus/5.13 (Gnus v5.13) Emacs/26.1 (gnu/linux) |
Hi Leo,
Leo Famulari <address@hidden> skribis:
> Our Singularity package is not vulnerable to CVE-2018-19295 by default,
> becuase that vulnerability is based on the 'mount', 'start', and
> 'action' Singularity binaries being installed setuid, which we do not do
> in Guix.
>
> * gnu/packages/linux.scm (singularity): Update to 2.6.1.
LGTM. Thanks for the patch and for the analysis!
Ludo’.