File _patchinfo of Package patchinfo.9500

<patchinfo incident="9500">
  <issue tracker="bnc" id="1100333">VUL-0: CVE-2018-12021: singularity: Singularity 2.3.0 through 2.5.1 is affected by an incorrect access control onsystems supporting overlay file system</issue>
  <issue tracker="bnc" id="1111411">singularity: re-audit for changes, and squashfs enablement</issue>
  <issue tracker="cve" id="2018-12021"/>
  <issue tracker="cve" id="2018-19295"/>
  <category>security</category>
  <rating>moderate</rating>
  <packager>eeich</packager>
  <description>This update for singularity to version 2.6.1 fixes the following issues:

Security issues fixed:

- CVE-2018-19295: Mount points are not mounted with shared mount propagation by default anymore, as this may result in privilege escalation (boo#1111411).
- CVE-2018-12021: Fixed a incorrect access control issues on systems supporting overlay file system (boo#1100333).
</description>
  <summary>Security update for singularity</summary>
</patchinfo>