This update for containerd, docker and go fixes the following issues :

containerd and docker :

  - Add backport for building containerd (bsc#1102522,     bsc#1113313)

  - Upgrade to containerd v1.1.2, which is required for     Docker v18.06.1-ce. (bsc#1102522)

  - Enable seccomp support (fate#325877)

  - Update to containerd v1.1.1, which is the required     version for the Docker v18.06.0-ce upgrade.
    (bsc#1102522)

  - Put containerd under the podruntime slice (bsc#1086185) 

  - 3rd party registries used the default Docker certificate     (bsc#1084533)

  - Handle build breakage due to missing 'export GOPATH'     (caused by resolution of boo#1119634). I believe Docker     is one of the only packages with this problem.

go :

  - golang: arbitrary command execution via VCS path     (bsc#1081495, CVE-2018-7187)

  - Make profile.d/go.sh no longer set GOROOT=, in order to     make switching between versions no longer break. This     ends up removing the need for go.sh entirely (because     GOPATH is also set automatically) (boo#1119634)

  - Fix a regression that broke go get for import path     patterns containing '...' (bsc#1119706)

Additionally, the package go1.10 has been added.

This update was imported from the SUSE:SLE-15:Update update project.

Detections

Analytics

openSUSE Security Update : containerd / docker and go (openSUSE-2018-1626)

high Nessus Plugin ID 119952

Version 1.4