Name | Modified | Size | Downloads / Week |
---|---|---|---|
Parent folder | |||
singularity-3.8.5.tar.gz | 2021-11-29 | 7.9 MB | |
sha256sums | 2021-11-29 | 91 Bytes | |
README.md | 2021-11-20 | 1.3 kB | |
Singularity 3.8.5 source code.tar.gz | 2021-11-20 | 1.7 MB | |
Singularity 3.8.5 source code.zip | 2021-11-20 | 2.2 MB | |
Totals: 5 Items | 11.8 MB | 0 |
Security Related Fixes
- CVE-2021-41190 / GHSA-77vh-xpmg-72qh: OCI specifications allow ambiguous documents that contain both "manifests" and "layers" fields. Interpretation depends on the presence / value of a Content-Type header. Dependencies handling the retrieval of OCI images have been updated to versions that reject ambiguous documents.
Changed defaults / behaviours
- Building Singularity from source requires go >=1.16. We now aim to support the two most recent stable versions of Go. This corresponds to the Go Release Maintenance Policy and Security Policy, ensuring critical bug fixes and security patches are available for all supported language versions. However, rpm packaging applies a patch to support older native go installations.
Bug fixes
- Sourcing a script based on PATH is now permitted, fixing a regression introduced in 3.6.0.
- Environment variables in container definition files are properly scoped, fixing a regression introduced in 3.8.0.