singularity-container - Debian Package Tracker

general

source: singularity-container (main)
version: 4.1.5+ds4-1
maintainer: Debian HPC Team (archive) (DMD)
uploaders: Benda Xu [DMD] – Mehdi Dogguy [DMD]
arch: all any
std-ver: 4.6.2
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

unstable: 4.1.5+ds4-1

versioned links

4.0.3+ds1-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
4.1.5+ds4-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

golang-github-sylabs-singularity-dev
singularity-container

action needed

A new upstream version is available: 4.3.1 high

A new upstream version 4.3.1 is available, you should consider packaging it.

Created: 2024-09-08 Last update: 2025-04-29 13:34

1 security issue in bookworm high

There is 1 open security issue in bookworm.

1 important issue:

CVE-2022-23538: github.com/sylabs/scs-library-client is the Go client for the Singularity Container Services (SCS) Container Library Service. When the scs-library-client is used to pull a container image, with authentication, the HTTP Authorization header sent by the client to the library service may be incorrectly leaked to an S3 backing storage provider. This occurs in a specific flow, where the library service redirects the client to a backing S3 storage server, to perform a multi-part concurrent download. Depending on site configuration, the S3 service may be provided by a third party. An attacker with access to the S3 service may be able to extract user credentials, allowing them to impersonate the user. The vulnerable multi-part concurrent download flow, with redirect to S3, is only used when communicating with a Singularity Enterprise 1.x installation, or third party server implementing this flow. Interaction with Singularity Enterprise 2.x, and Singularity Container Services (cloud.sylabs.io), does not trigger the vulnerable flow. We encourage all users to update. Users who interact with a Singularity Enterprise 1.x installation, using a 3rd party S3 storage service, are advised to revoke and recreate their authentication tokens within Singularity Enterprise. There is no workaround available at this time.

Created: 2023-01-18 Last update: 2023-01-19 06:08

The package has not entered testing even though the delay is over normal

The package has not entered testing even though the 10-day delay is over. Check why.

Created: 2025-03-05 Last update: 2025-04-29 15:04

version in VCS is newer than in repository, is it time to upload? normal

vcswatch reports that this package seems to have a new changelog entry (version 4.1.5+ds4-2, distribution UNRELEASED) and new commits in its VCS. You should consider whether it's time to make an upload.

Here are the relevant commit messages:

commit 3f7c09573fc21ef64ccd2f4e486a8c1b4b0e7fb2
Author: Roland Mas <lolando@debian.org>
Date:   Thu Apr 17 14:56:36 2025 +0200

    Document bug fix

commit cd70e0f2e1abef25fe02d10e133c63eb01896c05
Merge: 1fca728 15461f3
Author: Roland Mas <lolando@debian.org>
Date:   Thu Apr 17 12:55:51 2025 +0000

    Merge branch 'alternatives' into 'master'
    
    Use alternatives to avoid conflicts with apptainer
    
    See merge request go-team/packages/singularity-container!8

commit 15461f3837cb45ea73056b105907eedc725ccba0
Author: Roland Mas <lolando@debian.org>
Date:   Thu Apr 17 14:54:29 2025 +0200

    Document changes

commit dc3eae3bd6ff847e59c8f37eb827db907564298b
Author: Roland Mas <lolando@debian.org>
Date:   Mon Apr 14 11:14:09 2025 +0200

    Use alternatives to avoid conflicts with apptainer

Created: 2025-04-17 Last update: 2025-04-28 15:28

lintian reports 8 warnings normal

Lintian reports 8 warnings about this package. You should make the package lintian clean getting rid of them.

Created: 2025-04-11 Last update: 2025-04-11 03:31

RFH: The maintainer is looking for help with this package. normal

The current maintainer is looking for someone who can help with the maintenance of this package. If you are interested in this package, please consider helping out. One way you can help is offer to be a co-maintainer or triage bugs in the BTS. Please see bug number #1068578 for more information.

Created: 2024-04-07 Last update: 2024-04-07 13:09

debian/patches: 1 patch to forward upstream low

Among the 4 debian patches available in version 4.1.5+ds4-1 of the package, we noticed the following issues:

1 patch where the metadata indicates that the patch has not yet been forwarded upstream. You should either forward the patch upstream or update the metadata to document its real status.

Created: 2023-02-26 Last update: 2025-02-28 10:03

Standards version of the package is outdated. wishlist

The package should be updated to follow the last version of Debian Policy (Standards-Version 4.7.2 instead of 4.6.2).

Created: 2024-04-07 Last update: 2025-02-27 22:26

testing migrations

excuses:
- Migration status for singularity-container (- to 4.1.5+ds4-1): BLOCKED: Rejected/violates migration policy/introduces a regression
- Issues preventing migration:
- ∙ ∙ Updating singularity-container would introduce bugs in testing: #1029669, #1101692, #1102938
- ∙ ∙ singularity-container/mips64el has unsatisfiable Built-Using on golang-1.21 1.21.6-1
- ∙ ∙ singularity-container/mips64el has unsatisfiable Built-Using on golang-github-container-orchestrated-devices-container-device-interface 0.6.1-2
- ∙ ∙ missing build on mips64el
- ∙ ∙ blocked by freeze: is not in testing
- Additional info:
- ∙ ∙ Piuparts tested OK - https://piuparts.debian.org/sid/source/s/singularity-container.html
- ∙ ∙ Reproducible on amd64 - info ♻
- ∙ ∙ New but not reproducible on arm64 - info ♻
- ∙ ∙ Reproducible on armhf - info ♻
- ∙ ∙ New but not reproducible on i386 - info ♻
- ∙ ∙ 60 days old (needed 10 days)
- Not considered

news

[rss feed]

[2025-02-27] Accepted singularity-container 4.1.5+ds4-1 (source) into unstable (Nilesh Patra)
[2024-08-19] Accepted singularity-container 4.1.5+ds3-1 (source) into unstable (Nilesh Patra)
[2024-08-18] Accepted singularity-container 4.1.5+ds2-1 (source) into unstable (Nilesh Patra)
[2024-04-07] Accepted singularity-container 4.1.2+ds1-1 (source) into unstable (Nilesh Patra)
[2024-02-24] Accepted singularity-container 4.1.1+ds2-1 (source) into unstable (Nilesh Patra)
[2024-01-16] Accepted singularity-container 4.0.3+ds1-1 (source) into unstable (Nilesh Patra)
[2023-11-19] Accepted singularity-container 4.0.2+ds1-1 (source) into unstable (Nilesh Patra)
[2023-10-18] Accepted singularity-container 4.0.1+ds1-1 (source) into unstable (Nilesh Patra)
[2023-08-01] Accepted singularity-container 3.11.4+ds1-1 (source) into unstable (Nilesh Patra)
[2023-03-03] Accepted singularity-container 3.11.0+ds1-1 (source) into unstable (Nilesh Patra)
[2023-02-25] singularity-container REMOVED from testing (Debian testing watch)
[2022-10-18] singularity-container 3.10.3+ds1-1 MIGRATED to testing (Debian testing watch)
[2022-10-12] Accepted singularity-container 3.10.3+ds1-1 (source) into unstable (Nilesh Patra)
[2022-09-30] singularity-container 3.10.2+ds3-1 MIGRATED to testing (Debian testing watch)
[2022-09-25] Accepted singularity-container 3.10.2+ds3-1 (source) into unstable (Nilesh Patra)
[2022-08-10] singularity-container 3.10.2+ds2-3 MIGRATED to testing (Debian testing watch)
[2022-08-04] Accepted singularity-container 3.10.2+ds2-3 (source) into unstable (Nilesh Patra)
[2022-07-31] Accepted singularity-container 3.10.2+ds2-2 (source) into unstable (Nilesh Patra)
[2022-07-31] Accepted singularity-container 3.10.2+ds2-1 (source) into unstable (Nilesh Patra)
[2022-07-31] singularity-container 3.10.1+ds1-1 MIGRATED to testing (Debian testing watch)
[2022-07-24] Accepted singularity-container 3.10.1+ds1-1 (source) into unstable (Nilesh Patra)
[2022-06-26] singularity-container 3.10.0+ds2-3 MIGRATED to testing (Debian testing watch)
[2022-06-17] Accepted singularity-container 3.10.0+ds2-3 (source) into unstable (Nilesh Patra)
[2022-06-14] Accepted singularity-container 3.10.0+ds2-2 (source) into unstable (Nilesh Patra)
[2022-06-13] Accepted singularity-container 3.10.0+ds2-1 (source) into unstable (Nilesh Patra)
[2022-06-13] Accepted singularity-container 3.10.0+ds1-1 (source) into unstable (Nilesh Patra)
[2022-05-03] singularity-container 3.9.9+ds1-1 MIGRATED to testing (Debian testing watch)
[2022-04-27] Accepted singularity-container 3.9.9+ds1-1 (source) into unstable (Nilesh Patra)
[2022-04-21] singularity-container 3.9.8+ds1-1 MIGRATED to testing (Debian testing watch)
[2022-04-15] Accepted singularity-container 3.9.8+ds1-1 (source) into unstable (Nilesh Patra)

bugs [bug history graph]

all: 3
RC: 2
I&N: 0
M&W: 0
F&P: 1
patch: 0

links

homepage
lintian (0, 8)
buildd: logs, checks, cross
popcon
browse source code
edit tags
other distros
security tracker
screenshots
debian patches

ubuntu

[Information about Ubuntu for Debian Developers]

version: 4.1.5+ds4-1
3 bugs