{"id":"openSUSE-SU-2019:0295-1","summary":"Security update for containerd, docker, docker-runc, golang-github-docker-libnetwork, runc","details":"This update for containerd, docker, docker-runc, golang-github-docker-libnetwork, runc fixes the following issues:\n\nSecurity issues fixed: \n\n- CVE-2018-16875: Fixed a CPU Denial of Service (bsc#1118899).\n- CVE-2018-16874: Fixed a vulnerabity in go get command which could allow directory traversal in GOPATH mode (bsc#1118898).\n- CVE-2018-16873: Fixed a vulnerability in go get command which could allow remote code execution when executed with -u in GOPATH mode (bsc#1118897).\n- CVE-2019-5736: Effectively copying /proc/self/exe during re-exec to avoid write attacks to the host runc binary, which could lead to a container\n  breakout (bsc#1121967).\n\nOther changes and fixes: \n\n- Update shell completion to use Group: System/Shells.\n- Add daemon.json file with rotation logs configuration (bsc#1114832)\n- Update to Docker 18.09.1-ce (bsc#1124308) and to to runc 96ec2177ae84.\n  See upstream changelog in the packaged /usr/share/doc/packages/docker/CHANGELOG.md.\n- Update go requirements to \u003e= go1.10 \n- Use -buildmode=pie for tests and binary build (bsc#1048046 and bsc#1051429).\n- Remove the usage of 'cp -r' to reduce noise in the build logs.\n\nThis update was imported from the SUSE:SLE-15:Update update project.","modified":"2026-03-11T07:32:03.333970Z","published":"2019-03-23T11:11:59Z","related":["CVE-2018-16873","CVE-2018-16874","CVE-2018-16875","CVE-2019-5736"],"upstream":["CVE-2018-16873","CVE-2018-16874","CVE-2018-16875","CVE-2019-5736"],"references":[{"type":"ADVISORY","url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/UBFTSNKGB464HWO65FTEXANGAGVXV4XW/#UBFTSNKGB464HWO65FTEXANGAGVXV4XW"},{"type":"REPORT","url":"https://bugzilla.suse.com/1048046"},{"type":"REPORT","url":"https://bugzilla.suse.com/1051429"},{"type":"REPORT","url":"https://bugzilla.suse.com/1114832"},{"type":"REPORT","url":"https://bugzilla.suse.com/1118897"},{"type":"REPORT","url":"https://bugzilla.suse.com/1118898"},{"type":"REPORT","url":"https://bugzilla.suse.com/1118899"},{"type":"REPORT","url":"https://bugzilla.suse.com/1121967"},{"type":"REPORT","url":"https://bugzilla.suse.com/1124308"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2018-16873"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2018-16874"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2018-16875"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2019-5736"}],"schema_version":"1.7.5"}