shield Security update for containerd, docker, docker-runc, golang-github-docker-libnetwork

SUSE-SLE-Module-Containers-15-SP1-2020-35

This update for containerd, docker, docker-runc, golang-github-docker-libnetwork fixes the following issues: Security issue fixed: - CVE-2019-16884: Fixed incomplete patch for LSM bypass via malicious Docker image that mount over a /proc directory (bsc#1152308). Bug fixes: - Update to Docker 19.03.5-ce (bsc#1158590). - Update to Docker 19.03.3-ce (bsc#1153367). - Update to Docker 19.03.2-ce (bsc#1150397). - Fixed default installation such that --userns-remap=default works properly (bsc#1143349). - Fixed nginx blocked by apparmor (bsc#1122469).

• Release Date
  Jan 8 2020
• References
  Bugzilla: 1150397, 1152308, 1153367, 1158590, 1143349, 1122469
  CVEs: CVE-2019-16884
• Type
  security
• Severity
  moderate

cloud_download Downloads

Containers Module 15.1 s390x

• Packages
  containerd
  Standalone OCI Container Daemon

  1.2.10-5.19.1 lock rpm lock src

  docker
  The Moby-project Linux container runtime

  19.03.5_ce-6.31.1 lock rpm lock src

  docker-bash-completion
  Bash Completion for docker

  19.03.5_ce-6.31.1 lock rpm

  docker-libnetwork
  Docker Networking

  0.7.0.1+gitr2877_3eb39382bfa6-4.18.1 lock rpm

  docker-runc
  Tool for spawning and running OCI containers

  1.0.0rc8+gitr3917_3e425f80a8c9-6.27.1 lock rpm lock src

  golang-github-docker-libnetwork
  Docker Networking

  0.7.0.1+gitr2877_3eb39382bfa6-4.18.1 lock src

Containers Module 15.1 ppc64le

• Packages
  containerd
  Standalone OCI Container Daemon

  1.2.10-5.19.1 lock rpm lock src

  docker
  The Moby-project Linux container runtime

  19.03.5_ce-6.31.1 lock rpm lock src

  docker-bash-completion
  Bash Completion for docker

  19.03.5_ce-6.31.1 lock rpm

  docker-libnetwork
  Docker Networking

  0.7.0.1+gitr2877_3eb39382bfa6-4.18.1 lock rpm

  docker-runc
  Tool for spawning and running OCI containers

  1.0.0rc8+gitr3917_3e425f80a8c9-6.27.1 lock rpm lock src

  golang-github-docker-libnetwork
  Docker Networking

  0.7.0.1+gitr2877_3eb39382bfa6-4.18.1 lock src

Containers Module 15.1 aarch64

• Packages
  containerd
  Standalone OCI Container Daemon

  1.2.10-5.19.1 lock rpm lock src

  docker
  The Moby-project Linux container runtime

  19.03.5_ce-6.31.1 lock rpm lock src

  docker-bash-completion
  Bash Completion for docker

  19.03.5_ce-6.31.1 lock rpm

  docker-libnetwork
  Docker Networking

  0.7.0.1+gitr2877_3eb39382bfa6-4.18.1 lock rpm

  docker-runc
  Tool for spawning and running OCI containers

  1.0.0rc8+gitr3917_3e425f80a8c9-6.27.1 lock rpm lock src

  golang-github-docker-libnetwork
  Docker Networking

  0.7.0.1+gitr2877_3eb39382bfa6-4.18.1 lock src

Containers Module 15.1 x86_64

• Packages
  containerd
  Standalone OCI Container Daemon

  1.2.10-5.19.1 lock rpm lock src

  docker
  The Moby-project Linux container runtime

  19.03.5_ce-6.31.1 lock rpm lock src

  docker-bash-completion
  Bash Completion for docker

  19.03.5_ce-6.31.1 lock rpm

  docker-libnetwork
  Docker Networking

  0.7.0.1+gitr2877_3eb39382bfa6-4.18.1 lock rpm

  docker-runc
  Tool for spawning and running OCI containers

  1.0.0rc8+gitr3917_3e425f80a8c9-6.27.1 lock rpm lock src

  golang-github-docker-libnetwork
  Docker Networking

  0.7.0.1+gitr2877_3eb39382bfa6-4.18.1 lock src