File _patchinfo of Package patchinfo.9399
<patchinfo incident="9399">
<binary>_buildenv</binary>
<binary>_statistics</binary>
<binary>containerd</binary>
<binary>containerd-ctr</binary>
<binary>containerd-kubic</binary>
<binary>containerd-kubic-ctr</binary>
<binary>containerd-kubic-test</binary>
<binary>containerd-test</binary>
<binary>docker</binary>
<binary>docker-bash-completion</binary>
<binary>docker-debuginfo</binary>
<binary>docker-debugsource</binary>
<binary>docker-kubic</binary>
<binary>docker-kubic-bash-completion</binary>
<binary>docker-kubic-debuginfo</binary>
<binary>docker-kubic-debugsource</binary>
<binary>docker-kubic-test</binary>
<binary>docker-kubic-test-debuginfo</binary>
<binary>docker-kubic-zsh-completion</binary>
<binary>docker-libnetwork</binary>
<binary>docker-libnetwork-debuginfo</binary>
<binary>docker-libnetwork-kubic</binary>
<binary>docker-libnetwork-kubic-debuginfo</binary>
<binary>docker-runc</binary>
<binary>docker-runc-debuginfo</binary>
<binary>docker-runc-kubic</binary>
<binary>docker-runc-kubic-debuginfo</binary>
<binary>docker-runc-kubic-test</binary>
<binary>docker-runc-test</binary>
<binary>docker-test</binary>
<binary>docker-test-debuginfo</binary>
<binary>docker-zsh-completion</binary>
<binary>go</binary>
<binary>go-doc</binary>
<binary>go-race</binary>
<binary>go1.10</binary>
<binary>go1.10-doc</binary>
<binary>go1.10-race</binary>
<binary>golang-github-docker-libnetwork</binary>
<binary>golang-github-docker-libnetwork-kubic</binary>
<binary>golang-packaging</binary>
<packager>cyphar</packager>
<issue tracker="bnc" id="1104821">Make cri-o default for kubernetes on Kubic</issue>
<issue tracker="bnc" id="1118898">VUL-0: CVE-2018-16874: go: cmd/go: directory traversal</issue>
<issue tracker="bnc" id="1108038">docker hard-requires git-core</issue>
<issue tracker="bnc" id="1114209">go: provides(API) causes "have option" unresolveable builds</issue>
<issue tracker="bnc" id="1118897">VUL-0: CVE-2018-16873: go: cmd/go: remote command execution</issue>
<issue tracker="bnc" id="1118899">VUL-0: CVE-2018-16875: go: crypto/x509: CPU denial of service</issue>
<issue tracker="bnc" id="1105000">harmonise docker and docker-kubic packaging</issue>
<issue tracker="bnc" id="1094680">Pod in terminating status</issue>
<issue tracker="bnc" id="1080978">caasp v2 to v3 upgrade fails</issue>
<issue tracker="bnc" id="1095817">containers packages fail randomly due to %check</issue>
<issue tracker="bnc" id="1084533">3rd party registries used the default Docker certificate instead of the one specified for the registry</issue>
<issue tracker="bnc" id="1113978">go 1.10 fails to build on ppc64le</issue>
<issue tracker="bnc" id="1102522">Docker v18.06-ce upgrade.</issue>
<issue tracker="bnc" id="1047218">trackerbug: packages do not build reproducibly from including build time</issue>
<issue tracker="bnc" id="1098017">go1.10 fails to rebuild on Leap15 ppc64le</issue>
<issue tracker="bnc" id="1113313">need SLE12 containers module docker update to 18.06.1-ce as soon as possible</issue>
<issue tracker="bnc" id="1086185">Kubelet: reserve compute resources for system daemons</issue>
<issue tracker="bnc" id="1074971">[TRACKERBUG] Enabling mirroring of private
registries with docker</issue>
<issue tracker="bnc" id="1081495">golang: arbitrary command execution via VCS path</issue>
<issue tracker="fate" id="325877"></issue>
<issue tracker="cve" id="2018-16873"></issue>
<issue tracker="cve" id="2018-16875"></issue>
<issue tracker="cve" id="2018-16874"></issue>
<issue tracker="cve" id="2018-7187"></issue>
<issue tracker="bnc" id="1119634">go: multi-version installation is broken on version switch</issue>
<issue tracker="bnc" id="1119706">go get broken for import path patterns containing "..."</issue>
<category>security</category>
<rating>important</rating>
<summary>Security update for containerd, docker and go</summary>
<description>
This update for containerd, docker and go fixes the following issues:
containerd and docker:
- Add backport for building containerd (bsc#1102522, bsc#1113313)
- Upgrade to containerd v1.1.2, which is required for Docker v18.06.1-ce.
(bsc#1102522)
- Enable seccomp support (fate#325877)
- Update to containerd v1.1.1, which is the required version for the Docker
v18.06.0-ce upgrade. (bsc#1102522)
- Put containerd under the podruntime slice (bsc#1086185)
- 3rd party registries used the default Docker certificate (bsc#1084533)
- Handle build breakage due to missing 'export GOPATH' (caused by resolution of
boo#1119634). I believe Docker is one of the only packages with this problem.
go:
- golang: arbitrary command execution via VCS path (bsc#1081495, CVE-2018-7187)
- Make profile.d/go.sh no longer set GOROOT=, in order to make switching
between versions no longer break. This ends up removing the need for go.sh
entirely (because GOPATH is also set automatically) (boo#1119634)
- Fix a regression that broke go get for import path patterns containing "..."
(bsc#1119706)
Additionally, the package go1.10 has been added.
This update was imported from the SUSE:SLE-15:Update update project.</description>
<message>Updating docker will restart the docker service, which may stop some of your docker containers. Do you want to proceed with the update?</message>
</patchinfo>