FEDORA-2018-abe4d2383e — security update for singularity

stable

FEDORA-2018-abe4d2383e created by bbockelm 6 years ago for Fedora 27

This is a straightforward update from 2.5.1 to the newly-released 2.5.2. Release notes are here:

The most important fix is a security issue in the overlay code. Please look for regressions in your Singularity runtime workflows.

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2018-abe4d2383e

This update has been submitted for testing by bbockelm.

This update has been pushed to testing.

Tests passed for Fedora 27:

Install singularity and debootstrap
Cloned a definition file repo we have
Built our base ubuntu image as squashfs formated container ( singularity build ubuntu.simg ubuntu.def")
Converted this squashfs container to a writable ext3 format ("singularity build --writable ubuntu.img ubuntu.simg")
Shelled into new writable image and installed python ("singularity shell --writable ubuntu.img; apt-get -y install python-dev")
Executed python within the container, checking version ("singularity exec ubuntu.img python --version")
Pulled latest Docker Hub Ubuntu image into a squashfs formtted container ("singularity pull docker://ubuntu:latest")
Checked Ubuntu version of Docker-based image with 'exec' ("singularity exec ubuntu-latest.simg cat /etc/*release")