SUSE-SU-2019:2119-1

Details

Description of the patch:

This update for containerd, docker, docker-runc, golang-github-docker-libnetwork fixes the following issues:

Docker:

CVE-2019-14271: Fixed a code injection if the nsswitch facility dynamically loaded a library inside a chroot (bsc#1143409).
CVE-2019-13509: Fixed an information leak in the debug log (bsc#1142160).
Update to version 19.03.1-ce, see changelog at /usr/share/doc/packages/docker/CHANGELOG.md (bsc#1142413).

golang-github-docker-libnetwork:

Update to version git.fc5a7d91d54cc98f64fc28f9e288b46a0bee756c, which is required by docker (bsc#1142413).

Affected Packages

containerd

SUSE Linux Enterprise High Performance Computing 12SUSE Linux Enterprise Module for Containers 12SUSE Linux Enterprise Server 12SUSE Linux Enterprise Server 12 SP3SUSE Linux Enterprise Server 12 SP4

Fixed in:

1.2.6-16.23.1

docker

SUSE Linux Enterprise High Performance Computing 12SUSE Linux Enterprise Module for Containers 12SUSE Linux Enterprise Server 12SUSE Linux Enterprise Server 12 SP3SUSE Linux Enterprise Server 12 SP4

Fixed in:

19.03.1_ce-98.46.1

docker-libnetwork

SUSE Linux Enterprise High Performance Computing 12SUSE Linux Enterprise Module for Containers 12SUSE Linux Enterprise Server 12SUSE Linux Enterprise Server 12 SP3SUSE Linux Enterprise Server 12 SP4

Fixed in:

0.7.0.1+gitr2800_fc5a7d91d54c-25.1

docker-runc

SUSE Linux Enterprise High Performance Computing 12SUSE Linux Enterprise Module for Containers 12SUSE Linux Enterprise Server 12SUSE Linux Enterprise Server 12 SP3SUSE Linux Enterprise Server 12 SP4

Fixed in:

1.0.0rc8+gitr3826_425e105d5a03-1.29.1

References

ADVISORY

https://bugzilla.suse.com/1100331

ADVISORY

https://bugzilla.suse.com/1121967

ADVISORY

https://bugzilla.suse.com/1142160

ADVISORY

https://bugzilla.suse.com/1142413

ADVISORY