Sylabs Singularity 3.0 through 3.5 lacks support for an Integrity Check. Singularitys sign and verify commands do not sign metadata found in the global header or data object descriptors of a SIF file.
The product does not validate or incorrectly validates the integrity check values or “checksums” of a message. This may prevent it from detecting if the data has been modified or corrupted in transmission.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Singularity | Sylabs | 3.0.0 (including) | 3.5.0 (including) |
| Singularity-container | Ubuntu | bionic | * |
| Singularity-container | Ubuntu | eoan | * |
| Singularity-container | Ubuntu | trusty | * |