{"affected":[{"ecosystem_specific":{"binaries":[{"containerd":"1.1.2-5.3.4","docker":"18.06.1_ce-6.8.2","docker-bash-completion":"18.06.1_ce-6.8.2","docker-libnetwork":"0.7.0.1+gitr2664_3ac297bc7fd0-4.3.5","docker-runc":"1.0.0rc5+gitr3562_69663f0bd4b6-6.3.4"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Module for Containers 15","name":"containerd","purl":"pkg:rpm/suse/containerd&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Containers%2015"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"1.1.2-5.3.4"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"containerd":"1.1.2-5.3.4","docker":"18.06.1_ce-6.8.2","docker-bash-completion":"18.06.1_ce-6.8.2","docker-libnetwork":"0.7.0.1+gitr2664_3ac297bc7fd0-4.3.5","docker-runc":"1.0.0rc5+gitr3562_69663f0bd4b6-6.3.4"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Module for Containers 15","name":"docker","purl":"pkg:rpm/suse/docker&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Containers%2015"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"18.06.1_ce-6.8.2"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"containerd":"1.1.2-5.3.4","docker":"18.06.1_ce-6.8.2","docker-bash-completion":"18.06.1_ce-6.8.2","docker-libnetwork":"0.7.0.1+gitr2664_3ac297bc7fd0-4.3.5","docker-runc":"1.0.0rc5+gitr3562_69663f0bd4b6-6.3.4"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Module for Containers 15","name":"docker-runc","purl":"pkg:rpm/suse/docker-runc&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Containers%2015"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"1.0.0rc5+gitr3562_69663f0bd4b6-6.3.4"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"containerd":"1.1.2-5.3.4","docker":"18.06.1_ce-6.8.2","docker-bash-completion":"18.06.1_ce-6.8.2","docker-libnetwork":"0.7.0.1+gitr2664_3ac297bc7fd0-4.3.5","docker-runc":"1.0.0rc5+gitr3562_69663f0bd4b6-6.3.4"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Module for Containers 15","name":"golang-github-docker-libnetwork","purl":"pkg:rpm/suse/golang-github-docker-libnetwork&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Containers%2015"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"0.7.0.1+gitr2664_3ac297bc7fd0-4.3.5"}],"type":"ECOSYSTEM"}]}],"aliases":[],"details":"\nThis update for containerd, docker and go fixes the following issues:\n\ncontainerd and docker:\n\n- Add backport for building containerd (bsc#1102522, bsc#1113313)\n- Upgrade to containerd v1.1.2, which is required for Docker v18.06.1-ce.\n  (bsc#1102522)\n- Enable seccomp support on SLE12 (fate#325877)\n- Update to containerd v1.1.1, which is the required version for the Docker\n  v18.06.0-ce upgrade. (bsc#1102522)\n- Put containerd under the podruntime slice (bsc#1086185) \n- 3rd party registries used the default Docker certificate (bsc#1084533)\n- Handle build breakage due to missing 'export GOPATH' (caused by resolution of\n  boo#1119634). I believe Docker is one of the only packages with this problem.\n\ngo:\n  \n- golang: arbitrary command execution via VCS path (bsc#1081495, CVE-2018-7187)\n- Make profile.d/go.sh no longer set GOROOT=, in order to make switching\n  between versions no longer break. This ends up removing the need for go.sh\n  entirely (because GOPATH is also set automatically) (boo#1119634)\n- Fix a regression that broke go get for import path patterns containing '...'\n  (bsc#1119706)\n\nAdditionally, the package go1.10 has been added.\n","id":"SUSE-SU-2018:4297-1","modified":"2018-12-28T17:39:11Z","published":"2018-12-28T17:39:11Z","references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2018/suse-su-20184297-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1047218"},{"type":"REPORT","url":"https://bugzilla.suse.com/1074971"},{"type":"REPORT","url":"https://bugzilla.suse.com/1080978"},{"type":"REPORT","url":"https://bugzilla.suse.com/1081495"},{"type":"REPORT","url":"https://bugzilla.suse.com/1084533"},{"type":"REPORT","url":"https://bugzilla.suse.com/1086185"},{"type":"REPORT","url":"https://bugzilla.suse.com/1094680"},{"type":"REPORT","url":"https://bugzilla.suse.com/1095817"},{"type":"REPORT","url":"https://bugzilla.suse.com/1098017"},{"type":"REPORT","url":"https://bugzilla.suse.com/1102522"},{"type":"REPORT","url":"https://bugzilla.suse.com/1104821"},{"type":"REPORT","url":"https://bugzilla.suse.com/1105000"},{"type":"REPORT","url":"https://bugzilla.suse.com/1108038"},{"type":"REPORT","url":"https://bugzilla.suse.com/1113313"},{"type":"REPORT","url":"https://bugzilla.suse.com/1113978"},{"type":"REPORT","url":"https://bugzilla.suse.com/1114209"},{"type":"REPORT","url":"https://bugzilla.suse.com/1118897"},{"type":"REPORT","url":"https://bugzilla.suse.com/1118898"},{"type":"REPORT","url":"https://bugzilla.suse.com/1118899"},{"type":"REPORT","url":"https://bugzilla.suse.com/1119634"},{"type":"REPORT","url":"https://bugzilla.suse.com/1119706"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2018-16873"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2018-16874"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2018-16875"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2018-7187"}],"related":["CVE-2018-16873","CVE-2018-16874","CVE-2018-16875","CVE-2018-7187"],"summary":"Security update for containerd, docker and go","upstream":["CVE-2018-16873","CVE-2018-16874","CVE-2018-16875","CVE-2018-7187"]}