File _patchinfo of Package patchinfo.9399
<patchinfo incident="9399"> <binary>_buildenv</binary> <binary>_statistics</binary> <binary>containerd</binary> <binary>containerd-ctr</binary> <binary>containerd-kubic</binary> <binary>containerd-kubic-ctr</binary> <binary>containerd-kubic-test</binary> <binary>containerd-test</binary> <binary>docker</binary> <binary>docker-bash-completion</binary> <binary>docker-debuginfo</binary> <binary>docker-debugsource</binary> <binary>docker-kubic</binary> <binary>docker-kubic-bash-completion</binary> <binary>docker-kubic-debuginfo</binary> <binary>docker-kubic-debugsource</binary> <binary>docker-kubic-test</binary> <binary>docker-kubic-test-debuginfo</binary> <binary>docker-kubic-zsh-completion</binary> <binary>docker-libnetwork</binary> <binary>docker-libnetwork-debuginfo</binary> <binary>docker-libnetwork-kubic</binary> <binary>docker-libnetwork-kubic-debuginfo</binary> <binary>docker-runc</binary> <binary>docker-runc-debuginfo</binary> <binary>docker-runc-kubic</binary> <binary>docker-runc-kubic-debuginfo</binary> <binary>docker-runc-kubic-test</binary> <binary>docker-runc-test</binary> <binary>docker-test</binary> <binary>docker-test-debuginfo</binary> <binary>docker-zsh-completion</binary> <binary>go</binary> <binary>go-doc</binary> <binary>go-race</binary> <binary>go1.10</binary> <binary>go1.10-doc</binary> <binary>go1.10-race</binary> <binary>golang-github-docker-libnetwork</binary> <binary>golang-github-docker-libnetwork-kubic</binary> <binary>golang-packaging</binary> <packager>cyphar</packager> <issue tracker="bnc" id="1104821">Make cri-o default for kubernetes on Kubic</issue> <issue tracker="bnc" id="1118898">VUL-0: CVE-2018-16874: go: cmd/go: directory traversal</issue> <issue tracker="bnc" id="1108038">docker hard-requires git-core</issue> <issue tracker="bnc" id="1114209">go: provides(API) causes "have option" unresolveable builds</issue> <issue tracker="bnc" id="1118897">VUL-0: CVE-2018-16873: go: cmd/go: remote command execution</issue> <issue tracker="bnc" id="1118899">VUL-0: CVE-2018-16875: go: crypto/x509: CPU denial of service</issue> <issue tracker="bnc" id="1105000">harmonise docker and docker-kubic packaging</issue> <issue tracker="bnc" id="1094680">Pod in terminating status</issue> <issue tracker="bnc" id="1080978">caasp v2 to v3 upgrade fails</issue> <issue tracker="bnc" id="1095817">containers packages fail randomly due to %check</issue> <issue tracker="bnc" id="1084533">3rd party registries used the default Docker certificate instead of the one specified for the registry</issue> <issue tracker="bnc" id="1113978">go 1.10 fails to build on ppc64le</issue> <issue tracker="bnc" id="1102522">Docker v18.06-ce upgrade.</issue> <issue tracker="bnc" id="1047218">trackerbug: packages do not build reproducibly from including build time</issue> <issue tracker="bnc" id="1098017">go1.10 fails to rebuild on Leap15 ppc64le</issue> <issue tracker="bnc" id="1113313">need SLE12 containers module docker update to 18.06.1-ce as soon as possible</issue> <issue tracker="bnc" id="1086185">Kubelet: reserve compute resources for system daemons</issue> <issue tracker="bnc" id="1074971">[TRACKERBUG] Enabling mirroring of private registries with docker</issue> <issue tracker="bnc" id="1081495">golang: arbitrary command execution via VCS path</issue> <issue tracker="fate" id="325877"></issue> <issue tracker="cve" id="2018-16873"></issue> <issue tracker="cve" id="2018-16875"></issue> <issue tracker="cve" id="2018-16874"></issue> <issue tracker="cve" id="2018-7187"></issue> <issue tracker="bnc" id="1119634">go: multi-version installation is broken on version switch</issue> <issue tracker="bnc" id="1119706">go get broken for import path patterns containing "..."</issue> <category>security</category> <rating>important</rating> <summary>Security update for containerd, docker and go</summary> <description> This update for containerd, docker and go fixes the following issues: containerd and docker: - Add backport for building containerd (bsc#1102522, bsc#1113313) - Upgrade to containerd v1.1.2, which is required for Docker v18.06.1-ce. (bsc#1102522) - Enable seccomp support (fate#325877) - Update to containerd v1.1.1, which is the required version for the Docker v18.06.0-ce upgrade. (bsc#1102522) - Put containerd under the podruntime slice (bsc#1086185) - 3rd party registries used the default Docker certificate (bsc#1084533) - Handle build breakage due to missing 'export GOPATH' (caused by resolution of boo#1119634). I believe Docker is one of the only packages with this problem. go: - golang: arbitrary command execution via VCS path (bsc#1081495, CVE-2018-7187) - Make profile.d/go.sh no longer set GOROOT=, in order to make switching between versions no longer break. This ends up removing the need for go.sh entirely (because GOPATH is also set automatically) (boo#1119634) - Fix a regression that broke go get for import path patterns containing "..." (bsc#1119706) Additionally, the package go1.10 has been added. This update was imported from the SUSE:SLE-15:Update update project.</description> <message>Updating docker will restart the docker service, which may stop some of your docker containers. Do you want to proceed with the update?</message> </patchinfo>