Security update for Docker and dependencies
This update for Docker and its dependencies fixes the following issues: - fix runc and containerd revisions (bsc#1009961) docker: - Updates version 1.11.2 to 1.12.3 (bsc#1004490, bsc#996015, bsc#995058) - Fix ambient capability usage in containers (bsc#1007249, CVE-2016-8867) - Change the internal mountpoint name to not use ':' as that character can be considered a special character by other tools. (bsc#999582) - Add dockerd(8) man page. - Package docker-proxy (which was split out of the docker binary in 1.12). (bsc#995620) - Docker 'migrator' prevents installing 'docker', if docker 1.9 was installed before but there were no images. (bsc#995102) - Specify an 'OCI' runtime for our runc package explicitly. (bsc#978260) - Use gcc6-go instead of gcc5-go (bsc#988408) For a detailed description of all fixes and improvements, please refer to: https://github.com/docker/docker/releases/tag/v1.12.3 https://github.com/docker/docker/blob/v1.12.2/CHANGELOG.md https://github.com/docker/docker/releases/tag/v1.12.1 https://github.com/docker/docker/releases/tag/v1.12.0 containerd: - Update to current version required from Docker 1.12.3. - Add missing Requires(post): %fillup_prereq. (bsc#1006368) - Use gcc6-go instead of gcc5-go. (bsc#988408) runc: - Update to current version required from Docker 1.12.3. - Use gcc6-go instead of gcc5-go. (bsc#988408) rubygem-excon: - Updates version from 0.39.6 to 0.52.0. For a detailed description of all fixes and improvements, please refer to the installed changelog.txt. rubygem-docker-api: - Updated version from 1.17.0 to 1.31.0.
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
This update for Docker and its dependencies fixes the following issues: - fix runc and containerd revisions (bsc#1009961) docker: - Updates version 1.11.2 to 1.12.3 (bsc#1004490, bsc#996015, bsc#995058) - Fix ambient capability usage in containers (bsc#1007249, CVE-2016-8867) - Change the internal mountpoint name to not use ':' as that character can be considered a special character by other tools. (bsc#999582) - Add dockerd(8) man page. - Package docker-proxy (which was split out of the docker binary in 1.12). (bsc#995620) - Docker 'migrator' prevents installing 'docker', if docker 1.9 was installed before but there were no images. (bsc#995102) - Specify an 'OCI' runtime for our runc package explicitly. (bsc#978260) - Use gcc6-go instead of gcc5-go (bsc#988408) For a detailed description of all fixes and improvements, please refer to: https://github.com/docker/docker/releases/tag/v1.12.3 https://github.com/docker/docker/blob/v1.12.2/CHANGELOG.md https://github.com/docker/docker/releases/tag/v1.12.1 https://github.com/docker/docker/releases/tag/v1.12.0 containerd: - Update to current version required from Docker 1.12.3. - Add missing Requires(post): %fillup_prereq. (bsc#1006368) - Use gcc6-go instead of gcc5-go. (bsc#988408) runc: - Update to current version required from Docker 1.12.3. - Use gcc6-go instead of gcc5-go. (bsc#988408) rubygem-excon: - Updates version from 0.39.6 to 0.52.0. For a detailed description of all fixes and improvements, please refer to the installed changelog.txt. rubygem-docker-api: - Updated version from 1.17.0 to 1.31.0.
05 / REFERENCES
Further evidence
- https://bugzilla.suse.com/1004490
- https://bugzilla.suse.com/1006368
- https://bugzilla.suse.com/1007249
- https://bugzilla.suse.com/1009961
- https://bugzilla.suse.com/974208
- https://bugzilla.suse.com/978260
- https://bugzilla.suse.com/983015
- https://bugzilla.suse.com/987198
- https://bugzilla.suse.com/988408
- https://bugzilla.suse.com/989566
- https://bugzilla.suse.com/995058
- https://bugzilla.suse.com/995102
- https://bugzilla.suse.com/995620
- https://bugzilla.suse.com/996015
- https://bugzilla.suse.com/999582
- https://www.suse.com/security/cve/CVE-2016-8867
- https://www.suse.com/support/update/announcement/2016/suse-su-20163084-1/