sylabs/singularity: SingularityCE 4.4.2
Authors/Creators
- Dave Trudgian1
- Gregory M. Kurtzer2
- cclerget
- Michael Bauer3
- Ian Kaneshiro
- David Godlove2
- Vanessa Sochat
- Yannick Cote4
- Carlos Eduardo Arango Gutierrez5
- Geoffroy Vallee6
- DrDaveD
- Justin Cook7
- Adam Hughes8
- Jason Stover
- Brian P Bockelman9
- Marcelo Magallon10
- Jacob Chappell11
- Mike Frisch
- Daniel T
- Carl Madison
- Sasha Yakovtseva
- Amanda Duffy12
- Satrajit Ghosh13
- ^^
- Tru Huynh14
- Mike Gray15
- Yaroslav Halchenko16
- Felix Abecassis5
- 1. @sylabs
- 2. CIQ
- 3. Nominal
- 4. Red Hat
- 5. NVIDIA
- 6. @NVIDIA
- 7. @NERSC
- 8. Sylabs Inc
- 9. Morgridge Institute for Research
- 10. @grafana
- 11. @lampo
- 12. Lenovo
- 13. MIT
- 14. Unité de Bioinformatique Structurale, Institut Pasteur
- 15. @ambi-robotics
- 16. Dartmouth College, @dandi, @Debian, @DataLad, @neurodebian, @PyMVPA, @fail2ban
Description
Security Related Fixes
- Fix for CVE-2026-47215 / GHSA-wqcr-7rf3-f64m Incorrect path matching for 'limit container paths' directive
Changed Defaults / Behaviours
Although SingularityCE does not aim to contain execution / prevent host modification when started as the host root user, the following changes have been adopted to permit finer control over the use of external binaries, with a modified default search path when singularity is run as the host root user:
- When started as host root, external binaries (except those with explicit configuration entries) are now found using the
root search pathinsingularity.conf. By default this excludes searching the environment$PATH. Add$PATH:to the start ofroot search pathinsingularity.confto restore previous behavior. - When started as non-root / fake root, external binaries (except those with explicit configuration entires) are now found using the
user search pathinsingularity.conf. By default this includes$PATH, so there is no effective behaviour change vs previous versions.
Thank you to @KoseceMehmet for suggesting this change.
Thanks / Reporting Bugs
Thanks to our contributors for code, feedback and, testing efforts!
As always, please report any bugs to: https://github.com/sylabs/singularity/issues/new
If you think that you've discovered a security vulnerability please report it to: security@sylabs.io
Have fun!
Downloads
Source Code
Please use the singularity-ce-4.4.2.tar.gz download below to obtain and install SingularityCE 4.4.2. The GitHub auto-generated 'Source Code' downloads do not include required dependencies etc.
Packages
RPM / DEB packages are provided for:
- Ubuntu 22.04 (jammy)
- Ubuntu 24.04 (noble)
- RHEL/CentOS/AlmaLinux/Rocky 8 (el8)
- RHEL/CentOS/AlmaLinux/Rocky 9 (el9)
- RHEL/CentOS/AlmaLinux/Rocky 10 (el10)
These packages were built with Go 1.26.4
Upload-time immutable digests are now provided for release downloads by GitHub. A separate sha256sums file will no longer be provided.
Files
sylabs/singularity-v4.4.2.zip
Files
(6.1 MB)
| Name | Size | Download all |
|---|---|---|
|
md5:0942c42deec78d01779495037a072b25
|
6.1 MB | Preview Download |
Additional details
Related works
- Is supplement to
- Software: https://github.com/sylabs/singularity/tree/v4.4.2 (URL)
Software
- Repository URL
- https://github.com/sylabs/singularity