Singularity ineffectively applies of selinux / apparmor LSM process labels in github.com/sylabs/singularity
Singularity ineffectively applies of selinux / apparmor LSM process labels in github.com/sylabs/singularity. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: github.com/sylabs/singularity/v4 before v4.1.11.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-64750US | — | — | ||
SingularityCE and SingularityPRO are open source container platforms. Prior to SingularityCE 4.3.5 and SingularityPRO 4.1.11 and 4.3.5, if a user relies on LSM restrictions to prev… | ||||
references
External citations — patches, advisories, analysis.
- https://github.com/advisories/GHSA-fh74-hm69-rqjwWEB
- https://github.com/opencontainers/runc/security/advisories/GHSA-cgrx-mc8f-2prmWEB
- https://github.com/sylabs/singularity/commit/27882963879a7af1699fd6511c3f5f1371d80f33FIX
- https://github.com/sylabs/singularity/commit/5af3e790c40593591dfc26d0692e4d4b21c29ba0FIX
- https://github.com/sylabs/singularity/pull/3850FIX
- https://github.com/sylabs/singularity/security/advisories/GHSA-wwrx-w7c9-rf87ADVISORY
- https://nvd.nist.gov/vuln/detail/CVE-2025-64750ADVISORY
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan