article · OSTI OAI (U.S. Department of Energy Office of Scientific and Technical Information) · 2021

hpcng/singularity: Singularity 3.7.3

Gregory Kurtzer, Krishna Muriki, Bauer, Michael, Kaneshiro, Ian, Trudgian, David, Godlove, David

Cited by 11Open access

Abstract

Singularity 3.7.3 is a security release. We recommend all users upgrade to this version. Security Related Fixes CVE-2021-29136: A dependency used by Singularity to extract docker/OCI image layers can be tricked into modifying host files by creating a malicious layer that has a symlink with the name "." (or "/"), when running as root. This vulnerability affects a <code>singularity build</code> or <code>singularity pull</code> as root, from a docker or OCI source. Thanks / Reporting Bugs Thanks to our contributors for code, feedback and, testing efforts! As always, please report any bugs to: https://github.com/hpcng/singularity/issues/new If you think that you've discovered a security vulnerability please report it to: security@sylabs.io Have fun! Downloads Please use the <code>singularity-3.7.3.tar.gz</code> download below to obtain and install Singularity 3.7.3. The GitHub auto-generated 'Source Code' downloads do not include required dependencies etc.

Cite this paper

APA 7

Kurtzer, G., Muriki, K., Bauer, M., Kaneshiro, I., Trudgian, D., & Godlove, D. (2021). hpcng/singularity: Singularity 3.7.3. OSTI OAI (U.S. Department of Energy Office of Scientific and Technical Information). https://doi.org/10.5281/zenodo.1310023

MLA 9

Kurtzer, Gregory, et al. “hpcng/singularity: Singularity 3.7.3.” OSTI OAI (U.S. Department of Energy Office of Scientific and Technical Information), 2021, https://doi.org/10.5281/zenodo.1310023.

Chicago

Kurtzer, Gregory, Krishna Muriki, Michael Bauer, Ian Kaneshiro, David Trudgian, and David Godlove. 2021. “hpcng/singularity: Singularity 3.7.3.” OSTI OAI (U.S. Department of Energy Office of Scientific and Technical Information). https://doi.org/10.5281/zenodo.1310023.

Harvard

Kurtzer, G. et al. (2021) ‘hpcng/singularity: Singularity 3.7.3’, OSTI OAI (U.S. Department of Energy Office of Scientific and Technical Information). Available at: https://doi.org/10.5281/zenodo.1310023.

BibTeX

@article{kurtzer2021hpcng,
  title = {{hpcng/singularity: Singularity 3.7.3}},
  author = {Kurtzer, Gregory and Muriki, Krishna and Bauer, Michael and Kaneshiro, Ian and Trudgian, David and Godlove, David},
  journal = {OSTI OAI (U.S. Department of Energy Office of Scientific and Technical Information)},
  year = {2021},
  doi = {10.5281/zenodo.1310023}
}

Made from the index record. Check names, capitalisation and page numbers against the paper. Need another style? AI for Research has over 10,000.