Security update for singularity (moderate)

An update that fixes two vulnerabilities is now available.

Description:

This update for singularity to version 2.6.1 fixes the following issues:

Security issues fixed:

• CVE-2018-19295: Mount points are not mounted with shared mount
  propagation by default anymore, as this may result in privilege
  escalation (boo#1111411).
• CVE-2018-12021: Fixed a incorrect access control issues on systems
  supporting overlay file system (boo#1100333).

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or “zypper patch”.

Alternatively you can run the command listed for your product:

• SUSE Package Hub for SUSE Linux Enterprise 12:

  zypper in -t patch openSUSE-2019-95=1