Oval Definition:oval:org.opensuse.security:def:65740
Revision Date:2020-12-01Version:1
Title:Security update for containerd, docker, docker-runc, golang-github-docker-libnetwork (Moderate)
Description:

This update for containerd, docker, docker-runc, golang-github-docker-libnetwork fixes the following issues:

Security issue fixed:

- CVE-2019-16884: Fixed incomplete patch for LSM bypass via malicious Docker image that mount over a /proc directory (bsc#1152308).

Bug fixes:

- Update to Docker 19.03.5-ce (bsc#1158590). - Update to Docker 19.03.3-ce (bsc#1153367). - Update to Docker 19.03.2-ce (bsc#1150397). - Fixed default installation such that --userns-remap=default works properly (bsc#1143349). - Fixed nginx blocked by apparmor (bsc#1122469).
Family:unixClass:patch
Status:Reference(s):1122469
1143349
1150397
1152308
1153367
1154212
1158442
1158590
CVE-2019-16884
CVE-2019-17631
CVE-2019-2933
CVE-2019-2945
CVE-2019-2958
CVE-2019-2962
CVE-2019-2964
CVE-2019-2973
CVE-2019-2975
CVE-2019-2978
CVE-2019-2981
CVE-2019-2983
CVE-2019-2988
CVE-2019-2989
CVE-2019-2992
CVE-2019-2996
CVE-2019-2999
SUSE-SU-2020:0001-1
SUSE-SU-2020:0035-1
Platform(s):SUSE Linux Enterprise Module for Legacy Software 15 SP1
SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP1
Product(s):
Definition Synopsis
  • SUSE Linux Enterprise Module for Legacy Software 15 SP1 is installed
  • AND Package Information
  • java-1_8_0-ibm-1.8.0_sr6.0-3.30 is installed
  • OR java-1_8_0-ibm-alsa-1.8.0_sr6.0-3.30 is installed
  • OR java-1_8_0-ibm-devel-1.8.0_sr6.0-3.30 is installed
  • OR java-1_8_0-ibm-plugin-1.8.0_sr6.0-3.30 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP1 is installed
  • AND Package Information
  • containerd-1.2.10-5.19 is installed
  • OR containerd-ctr-1.2.10-5.19 is installed
  • OR containerd-kubic-1.2.10-5.19 is installed
  • OR containerd-kubic-ctr-1.2.10-5.19 is installed
  • OR docker-19.03.5_ce-6.31 is installed
  • OR docker-kubic-19.03.5_ce-6.31 is installed
  • OR docker-kubic-bash-completion-19.03.5_ce-6.31 is installed
  • OR docker-kubic-kubeadm-criconfig-19.03.5_ce-6.31 is installed
  • OR docker-kubic-test-19.03.5_ce-6.31 is installed
  • OR docker-kubic-zsh-completion-19.03.5_ce-6.31 is installed
  • OR docker-libnetwork-kubic-0.7.0.1+gitr2877_3eb39382bfa6-4.18 is installed
  • OR docker-runc-kubic-1.0.0rc8+gitr3917_3e425f80a8c9-6.27 is installed
  • OR docker-test-19.03.5_ce-6.31 is installed
  • OR docker-zsh-completion-19.03.5_ce-6.31 is installed
  • OR golang-github-docker-libnetwork-0.7.0.1+gitr2877_3eb39382bfa6-4.18 is installed
  • OR golang-github-docker-libnetwork-kubic-0.7.0.1+gitr2877_3eb39382bfa6-4.18 is installed
  • BACK