Apptainer security release 1.4.5 is now available. It resolves a moderate severity CVE with the --security option. Thanks to Sylabs who discovered the problem and disclosed it to us for a coordinated release. It also fixes a problem with signals when directly running interactive programs that accept commands.
Complete details are in the release announcement at
https://github.com/apptainer/apptainer/releases/tag/v1.4.5
The new version is also available now in the Ubuntu PPA. It should be in epel-testing and Fedora updates-testing tomorrow, and if no problems are found, in epel and Fedora updates repositories in about a week.
Please report any problems to
https://github.com/apptainer/apptainer/issues.
Dave