| Revision Date: | 2020-12-02 | Version: | 1 |
| Title: | Security update for docker-runc (Moderate) |
| Description: |
This update for docker-runc fixes the following issues:
- CVE-2019-16884: Fixed an LSM bypass via malicious Docker images that mount over a /proc directory. (bsc#1152308)
|
| Family: | unix | Class: | patch |
| Status: | | Reference(s): | 1047962
1049826
1053177
1065022
1071995
1099019
1100331
1100352
1102261
1110542
1111319
1112911
1113296
1114908
1115341
1116840
1118758
1119373
1119820
1119873
1120263
1120463
1120629
1120630
1120631
1121611
1121967
1122062
1122471
1123043
1123137
1123681
1123843
1123865
1123967
1124897
1125415
1125601
1127026
1127153
1127155
1127220
1129715
1130161
1130245
1131823
1134452
1135749
1137526
1137977
1138920
1139649
1141688
1141897
1142160
1142413
1142649
1142825
1142832
1142835
1143409
1144065
1144902
1145579
1145580
1145582
1146111
1146115
1146123
1148517
1149145
1152308
1152856
1153163
1153164
1154064
1154212
1154289
1154598
663358
764147
965786
978193
993025
CVE-2018-10892
CVE-2018-13301
CVE-2018-20532
CVE-2018-20533
CVE-2018-20534
CVE-2019-10181
CVE-2019-10182
CVE-2019-10185
CVE-2019-10214
CVE-2019-10218
CVE-2019-12730
CVE-2019-13509
CVE-2019-14250
CVE-2019-14271
CVE-2019-14809
CVE-2019-14833
CVE-2019-14847
CVE-2019-15847
CVE-2019-16884
CVE-2019-17177
CVE-2019-17178
CVE-2019-17542
CVE-2019-2894
CVE-2019-2933
CVE-2019-2945
CVE-2019-2949
CVE-2019-2958
CVE-2019-2962
CVE-2019-2964
CVE-2019-2973
CVE-2019-2975
CVE-2019-2977
CVE-2019-2978
CVE-2019-2981
CVE-2019-2983
CVE-2019-2987
CVE-2019-2988
CVE-2019-2989
CVE-2019-2992
CVE-2019-2999
CVE-2019-5736
CVE-2019-6706
CVE-2019-9511
CVE-2019-9512
CVE-2019-9513
CVE-2019-9514
CVE-2019-9516
CVE-2019-9718
SUSE-SU-2019:0247-1
SUSE-SU-2019:2030-1
SUSE-SU-2019:2033-1
SUSE-SU-2019:2117-1
SUSE-SU-2019:2213-1
SUSE-SU-2019:2341-1
SUSE-SU-2019:2559-1
SUSE-SU-2019:2702-1
SUSE-SU-2019:2786-1
SUSE-SU-2019:2868-1
SUSE-SU-2019:2998-1
SUSE-SU-2019:3078-1
SUSE-SU-2019:3184-1
|
| Platform(s): | SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5
SUSE Linux Enterprise Desktop 11 SP2
SUSE Linux Enterprise Desktop 11 SP3
SUSE Linux Enterprise Desktop 12
SUSE Linux Enterprise Desktop 12 SP1
SUSE Linux Enterprise Desktop 12 SP2
SUSE Linux Enterprise Desktop 12 SP4
SUSE Linux Enterprise High Availability 12 SP2
SUSE Linux Enterprise High Availability 12 SP3
SUSE Linux Enterprise High Availability 12 SP4
SUSE Linux Enterprise High Availability 15
SUSE Linux Enterprise Module for Containers 15
SUSE Linux Enterprise Module for Containers 15 SP1
SUSE Linux Enterprise Module for High Performance Computing 12
SUSE Linux Enterprise Module for High Performance Computing 15
SUSE Linux Enterprise Module for Legacy Software 15
SUSE Linux Enterprise Module for Legacy Software 15 SP1
SUSE Linux Enterprise Module for Live Patching 15
SUSE Linux Enterprise Module for Live Patching 15 SP1
SUSE Linux Enterprise Module for Open Buildservice Development Tools 15
SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP1
SUSE Linux Enterprise Module for Server Applications 15
SUSE Linux Enterprise Module for Server Applications 15 SP1
SUSE Linux Enterprise Module for Web Scripting 12
SUSE Linux Enterprise Module for Web Scripting 15
SUSE Linux Enterprise Module for Web Scripting 15 SP1
SUSE Linux Enterprise Server 11
SUSE Linux Enterprise Server 11 SP1-LTSS
SUSE Linux Enterprise Server 11 SP2
SUSE Linux Enterprise Server 11 SP2-LTSS
SUSE Linux Enterprise Server 11 SP3
SUSE Linux Enterprise Server 11 SP4
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise Server 12 SP2
SUSE Linux Enterprise Server 12 SP3
SUSE Linux Enterprise Server for Raspberry Pi 12 SP2
SUSE Linux Enterprise Server for Rasperry Pi 12 SP2
SUSE Linux Enterprise Server for VMWare 11 SP2
SUSE Linux Enterprise Server for VMWare 11 SP3
SUSE Linux Enterprise Software Development Kit 12
SUSE Linux Enterprise Software Development Kit 12 SP1
SUSE Linux Enterprise Workstation Extension 12 SP1
SUSE Linux Enterprise Workstation Extension 15
SUSE Linux Enterprise Workstation Extension 15 SP1
| Product(s): | |
| Definition Synopsis |
| SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5 is installed AND Package Information
openstack-neutron-2014.2.2.dev26-3 is installed
OR openstack-neutron-dhcp-agent-2014.2.2.dev26-3 is installed
OR openstack-neutron-ha-tool-2014.2.2.dev26-3 is installed
OR openstack-neutron-l3-agent-2014.2.2.dev26-3 is installed
OR openstack-neutron-lbaas-agent-2014.2.2.dev26-3 is installed
OR openstack-neutron-linuxbridge-agent-2014.2.2.dev26-3 is installed
OR openstack-neutron-metadata-agent-2014.2.2.dev26-3 is installed
OR openstack-neutron-metering-agent-2014.2.2.dev26-3 is installed
OR openstack-neutron-openvswitch-agent-2014.2.2.dev26-3 is installed
OR openstack-neutron-vpn-agent-2014.2.2.dev26-3 is installed
OR python-neutron-2014.2.2.dev26-3 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Desktop 12 is installed
AND Package Information
ImageMagick-6.8.8.1-5 is installed
OR libMagick++-6_Q16-3-6.8.8.1-5 is installed
OR libMagickCore-6_Q16-1-6.8.8.1-5 is installed
OR libMagickCore-6_Q16-1-32bit-6.8.8.1-5 is installed
OR libMagickWand-6_Q16-1-6.8.8.1-5 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Desktop 12 SP1 is installed
AND Package Information
libdcerpc-binding0-4.2.4-28.8 is installed
OR libdcerpc-binding0-32bit-4.2.4-28.8 is installed
OR libdcerpc0-4.2.4-28.8 is installed
OR libdcerpc0-32bit-4.2.4-28.8 is installed
OR libgensec0-4.2.4-28.8 is installed
OR libgensec0-32bit-4.2.4-28.8 is installed
OR libndr-krb5pac0-4.2.4-28.8 is installed
OR libndr-krb5pac0-32bit-4.2.4-28.8 is installed
OR libndr-nbt0-4.2.4-28.8 is installed
OR libndr-nbt0-32bit-4.2.4-28.8 is installed
OR libndr-standard0-4.2.4-28.8 is installed
OR libndr-standard0-32bit-4.2.4-28.8 is installed
OR libndr0-4.2.4-28.8 is installed
OR libndr0-32bit-4.2.4-28.8 is installed
OR libnetapi0-4.2.4-28.8 is installed
OR libnetapi0-32bit-4.2.4-28.8 is installed
OR libregistry0-4.2.4-28.8 is installed
OR libsamba-credentials0-4.2.4-28.8 is installed
OR libsamba-credentials0-32bit-4.2.4-28.8 is installed
OR libsamba-hostconfig0-4.2.4-28.8 is installed
OR libsamba-hostconfig0-32bit-4.2.4-28.8 is installed
OR libsamba-passdb0-4.2.4-28.8 is installed
OR libsamba-passdb0-32bit-4.2.4-28.8 is installed
OR libsamba-util0-4.2.4-28.8 is installed
OR libsamba-util0-32bit-4.2.4-28.8 is installed
OR libsamdb0-4.2.4-28.8 is installed
OR libsamdb0-32bit-4.2.4-28.8 is installed
OR libsmbclient-raw0-4.2.4-28.8 is installed
OR libsmbclient-raw0-32bit-4.2.4-28.8 is installed
OR libsmbclient0-4.2.4-28.8 is installed
OR libsmbclient0-32bit-4.2.4-28.8 is installed
OR libsmbconf0-4.2.4-28.8 is installed
OR libsmbconf0-32bit-4.2.4-28.8 is installed
OR libsmbldap0-4.2.4-28.8 is installed
OR libsmbldap0-32bit-4.2.4-28.8 is installed
OR libtevent-util0-4.2.4-28.8 is installed
OR libtevent-util0-32bit-4.2.4-28.8 is installed
OR libwbclient0-4.2.4-28.8 is installed
OR libwbclient0-32bit-4.2.4-28.8 is installed
OR samba-4.2.4-28.8 is installed
OR samba-32bit-4.2.4-28.8 is installed
OR samba-client-4.2.4-28.8 is installed
OR samba-client-32bit-4.2.4-28.8 is installed
OR samba-doc-4.2.4-28.8 is installed
OR samba-libs-4.2.4-28.8 is installed
OR samba-libs-32bit-4.2.4-28.8 is installed
OR samba-winbind-4.2.4-28.8 is installed
OR samba-winbind-32bit-4.2.4-28.8 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Desktop 12 SP2 is installed
AND Package Information
libpython3_4m1_0-3.4.5-19 is installed
OR python3-3.4.5-19 is installed
OR python3-base-3.4.5-19 is installed
OR python3-curses-3.4.5-19 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Desktop 12 SP4 is installed
AND Package Information
libfreebl3-3.29.5-58.12 is installed
OR libfreebl3-32bit-3.29.5-58.12 is installed
OR libsoftokn3-3.29.5-58.12 is installed
OR libsoftokn3-32bit-3.29.5-58.12 is installed
OR mozilla-nss-3.29.5-58.12 is installed
OR mozilla-nss-32bit-3.29.5-58.12 is installed
OR mozilla-nss-certs-3.29.5-58.12 is installed
OR mozilla-nss-certs-32bit-3.29.5-58.12 is installed
OR mozilla-nss-sysinit-3.29.5-58.12 is installed
OR mozilla-nss-sysinit-32bit-3.29.5-58.12 is installed
OR mozilla-nss-tools-3.29.5-58.12 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise High Availability 12 SP2 is installed
AND Package Information
cluster-md-kmp-default-4.4.21-69 is installed
OR cluster-network-kmp-default-4.4.21-69 is installed
OR dlm-kmp-default-4.4.21-69 is installed
OR gfs2-kmp-default-4.4.21-69 is installed
OR ocfs2-kmp-default-4.4.21-69 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise High Availability 12 SP3 is installed
AND fence-agents-4.0.25+git.1485179354.eb43835-2 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise High Availability 12 SP4 is installed
AND ctdb-4.6.16+git.124.aee309c5c18-3.32 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise High Availability 15 is installed
AND Package Information
ctdb-4.7.8+git.86.94b6d10f7dd-4.15 is installed
OR samba-4.7.8+git.86.94b6d10f7dd-4.15 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Containers 15 is installed
AND docker-runc-1.0.0rc8+gitr3826_425e105d5a03-6.24 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Containers 15 SP1 is installed
AND buildah-1.7.1-3.3 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for High Performance Computing 12 is installed
AND Package Information
libslurm29-16.05.8.1-5 is installed
OR perl-slurm-16.05.8.1-5 is installed
OR slurm-16.05.8.1-5 is installed
OR slurm-auth-none-16.05.8.1-5 is installed
OR slurm-devel-16.05.8.1-5 is installed
OR slurm-doc-16.05.8.1-5 is installed
OR slurm-lua-16.05.8.1-5 is installed
OR slurm-munge-16.05.8.1-5 is installed
OR slurm-pam_slurm-16.05.8.1-5 is installed
OR slurm-plugins-16.05.8.1-5 is installed
OR slurm-sched-wiki-16.05.8.1-5 is installed
OR slurm-slurmdbd-16.05.8.1-5 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for High Performance Computing 15 is installed
AND Package Information
libpmi0-17.11.13-6.18 is installed
OR libslurm32-17.11.13-6.18 is installed
OR perl-slurm-17.11.13-6.18 is installed
OR slurm-17.11.13-6.18 is installed
OR slurm-auth-none-17.11.13-6.18 is installed
OR slurm-config-17.11.13-6.18 is installed
OR slurm-devel-17.11.13-6.18 is installed
OR slurm-doc-17.11.13-6.18 is installed
OR slurm-lua-17.11.13-6.18 is installed
OR slurm-munge-17.11.13-6.18 is installed
OR slurm-node-17.11.13-6.18 is installed
OR slurm-pam_slurm-17.11.13-6.18 is installed
OR slurm-plugins-17.11.13-6.18 is installed
OR slurm-slurmdbd-17.11.13-6.18 is installed
OR slurm-sql-17.11.13-6.18 is installed
OR slurm-torque-17.11.13-6.18 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Legacy Software 15 is installed
AND Package Information
kernel-default-4.12.14-25.3 is installed
OR reiserfs-kmp-default-4.12.14-25.3 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Legacy Software 15 SP1 is installed
AND Package Information
java-1_8_0-openjdk-1.8.0.212-3.19 is installed
OR java-1_8_0-openjdk-demo-1.8.0.212-3.19 is installed
OR java-1_8_0-openjdk-devel-1.8.0.212-3.19 is installed
OR java-1_8_0-openjdk-headless-1.8.0.212-3.19 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Live Patching 15 is installed
AND Package Information
kernel-default-4.12.14-25.13 is installed
OR kernel-default-livepatch-4.12.14-25.13 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Live Patching 15 SP1 is installed
AND Package Information
kernel-default-4.12.14-197.21 is installed
OR kernel-default-livepatch-4.12.14-197.21 is installed
OR kernel-default-livepatch-devel-4.12.14-197.21 is installed
OR kernel-livepatch-4_12_14-197_21-default-1-3.3 is installed
OR kernel-livepatch-SLE15-SP1_Update_6-1-3.3 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 is installed
AND Package Information
PackageKit-1.1.10-4.10 is installed
OR PackageKit-branding-upstream-1.1.10-4.10 is installed
OR libsolv-0.7.5-3.12 is installed
OR libsolv-demo-0.7.5-3.12 is installed
OR libzypp-17.12.0-3.23 is installed
OR libzypp-devel-doc-17.12.0-3.23 is installed
OR yast2-pkg-bindings-devel-doc-4.0.13-3.7 is installed
OR zypper-1.14.28-3.18 is installed
OR zypper-aptitude-1.14.28-3.18 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP1 is installed
AND Package Information
libxslt-1.1.32-3.3 is installed
OR libxslt-devel-32bit-1.1.32-3.3 is installed
OR libxslt-python-1.1.32-3.3 is installed
OR libxslt1-32bit-1.1.32-3.3 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Server Applications 15 is installed
AND Package Information
libvirt-4.0.0-9.22 is installed
OR libvirt-admin-4.0.0-9.22 is installed
OR libvirt-client-4.0.0-9.22 is installed
OR libvirt-daemon-4.0.0-9.22 is installed
OR libvirt-daemon-config-network-4.0.0-9.22 is installed
OR libvirt-daemon-config-nwfilter-4.0.0-9.22 is installed
OR libvirt-daemon-driver-interface-4.0.0-9.22 is installed
OR libvirt-daemon-driver-libxl-4.0.0-9.22 is installed
OR libvirt-daemon-driver-lxc-4.0.0-9.22 is installed
OR libvirt-daemon-driver-network-4.0.0-9.22 is installed
OR libvirt-daemon-driver-nodedev-4.0.0-9.22 is installed
OR libvirt-daemon-driver-nwfilter-4.0.0-9.22 is installed
OR libvirt-daemon-driver-qemu-4.0.0-9.22 is installed
OR libvirt-daemon-driver-secret-4.0.0-9.22 is installed
OR libvirt-daemon-driver-storage-4.0.0-9.22 is installed
OR libvirt-daemon-driver-storage-core-4.0.0-9.22 is installed
OR libvirt-daemon-driver-storage-disk-4.0.0-9.22 is installed
OR libvirt-daemon-driver-storage-iscsi-4.0.0-9.22 is installed
OR libvirt-daemon-driver-storage-logical-4.0.0-9.22 is installed
OR libvirt-daemon-driver-storage-mpath-4.0.0-9.22 is installed
OR libvirt-daemon-driver-storage-rbd-4.0.0-9.22 is installed
OR libvirt-daemon-driver-storage-scsi-4.0.0-9.22 is installed
OR libvirt-daemon-hooks-4.0.0-9.22 is installed
OR libvirt-daemon-lxc-4.0.0-9.22 is installed
OR libvirt-daemon-qemu-4.0.0-9.22 is installed
OR libvirt-daemon-xen-4.0.0-9.22 is installed
OR libvirt-devel-4.0.0-9.22 is installed
OR libvirt-doc-4.0.0-9.22 is installed
OR libvirt-lock-sanlock-4.0.0-9.22 is installed
OR libvirt-nss-4.0.0-9.22 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed
AND Package Information
libvirt-5.1.0-8.6 is installed
OR libvirt-admin-5.1.0-8.6 is installed
OR libvirt-bash-completion-5.1.0-8.6 is installed
OR libvirt-client-5.1.0-8.6 is installed
OR libvirt-daemon-5.1.0-8.6 is installed
OR libvirt-daemon-config-network-5.1.0-8.6 is installed
OR libvirt-daemon-config-nwfilter-5.1.0-8.6 is installed
OR libvirt-daemon-driver-interface-5.1.0-8.6 is installed
OR libvirt-daemon-driver-libxl-5.1.0-8.6 is installed
OR libvirt-daemon-driver-lxc-5.1.0-8.6 is installed
OR libvirt-daemon-driver-network-5.1.0-8.6 is installed
OR libvirt-daemon-driver-nodedev-5.1.0-8.6 is installed
OR libvirt-daemon-driver-nwfilter-5.1.0-8.6 is installed
OR libvirt-daemon-driver-qemu-5.1.0-8.6 is installed
OR libvirt-daemon-driver-secret-5.1.0-8.6 is installed
OR libvirt-daemon-driver-storage-5.1.0-8.6 is installed
OR libvirt-daemon-driver-storage-core-5.1.0-8.6 is installed
OR libvirt-daemon-driver-storage-disk-5.1.0-8.6 is installed
OR libvirt-daemon-driver-storage-iscsi-5.1.0-8.6 is installed
OR libvirt-daemon-driver-storage-logical-5.1.0-8.6 is installed
OR libvirt-daemon-driver-storage-mpath-5.1.0-8.6 is installed
OR libvirt-daemon-driver-storage-rbd-5.1.0-8.6 is installed
OR libvirt-daemon-driver-storage-scsi-5.1.0-8.6 is installed
OR libvirt-daemon-hooks-5.1.0-8.6 is installed
OR libvirt-daemon-lxc-5.1.0-8.6 is installed
OR libvirt-daemon-qemu-5.1.0-8.6 is installed
OR libvirt-daemon-xen-5.1.0-8.6 is installed
OR libvirt-devel-5.1.0-8.6 is installed
OR libvirt-doc-5.1.0-8.6 is installed
OR libvirt-lock-sanlock-5.1.0-8.6 is installed
OR libvirt-nss-5.1.0-8.6 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Web Scripting 12 is installed
AND Package Information
libpython3_4m1_0-3.4.1-2 is installed
OR python3-base-3.4.1-2 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Web Scripting 15 is installed
AND Package Information
nodejs10-10.15.2-1.6 is installed
OR nodejs10-devel-10.15.2-1.6 is installed
OR nodejs10-docs-10.15.2-1.6 is installed
OR npm10-10.15.2-1.6 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Web Scripting 15 SP1 is installed
AND jakarta-commons-fileupload-1.1.1-4.3 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 is installed
AND apache-commons-httpclient-3.1-4 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP2 is installed
AND Package Information
ibus-chewing-1.4.14-4 is installed
OR ibus-pinyin-1.5.0-7 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP3 is installed
AND Package Information
apache-commons-daemon-1.0.15-6 is installed
OR apache-commons-daemon-javadoc-1.0.15-6 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed
AND python-pywbem-0.7.0-4 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server for Rasperry Pi 12 SP2 is installed
AND Package Information
gc-7.2d-5.1 is installed
OR libgc1-7.2d-5.1 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Software Development Kit 12 is installed
AND Package Information
kernel-docs-3.12.32-33.3 is installed
OR kernel-obs-build-3.12.32-33.1 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Software Development Kit 12 SP1 is installed
AND libtool-2.4.2-14.60 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Workstation Extension 12 SP1 is installed
AND Package Information
libmysqlclient_r18-10.0.21-1.17 is installed
OR libmysqlclient_r18-32bit-10.0.21-1.17 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Workstation Extension 15 is installed
AND Package Information
xorg-x11-server-1.19.6-8.3 is installed
OR xorg-x11-server-wayland-1.19.6-8.3 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Workstation Extension 15 SP1 is installed
AND Package Information
evolution-3.26.6-4.3 is installed
OR evolution-devel-3.26.6-4.3 is installed
OR evolution-lang-3.26.6-4.3 is installed
OR evolution-plugin-bogofilter-3.26.6-4.3 is installed
OR evolution-plugin-pst-import-3.26.6-4.3 is installed
OR evolution-plugin-spamassassin-3.26.6-4.3 is installed
|