gnu: Singularity: Update to 2.6.1 [fixes CVE-2018-19295].
Our Singularity package is not vulnerable to CVE-2018-19295 by default, becuase that vulnerability is based on the 'mount', 'start', and 'action' Singularity binaries being installed setuid, which we do not do in Guix. * gnu/packages/linux.scm (singularity): Update to 2.6.1.
This commit is contained in:
parent
0afeb7468c
commit
edc6dd0324
|
@ -2612,7 +2612,7 @@ thanks to the use of namespaces.")
|
|||
(define-public singularity
|
||||
(package
|
||||
(name "singularity")
|
||||
(version "2.5.1")
|
||||
(version "2.6.1")
|
||||
(source (origin
|
||||
(method url-fetch)
|
||||
(uri (string-append "https://github.com/singularityware/singularity/"
|
||||
|
@ -2620,7 +2620,7 @@ thanks to the use of namespaces.")
|
|||
"/singularity-" version ".tar.gz"))
|
||||
(sha256
|
||||
(base32
|
||||
"0f28dgf2qcy8ljjfix7p9q36q12j7rxyicfzzi4n0fl8zr8ab88g"))))
|
||||
"1whx0hqqi1326scgdxxxa1d94vn95mnq0drid6s8wdp84ni4d3gk"))))
|
||||
(build-system gnu-build-system)
|
||||
(arguments
|
||||
`(#:configure-flags
|
||||
|
|
Loading…
Reference in New Issue