Security update for containerd, docker, docker-runc, golang-github-docker-libnetwork (moderate)

An update that solves one vulnerability and has 5 fixes is
now available.

Description:

This update for containerd, docker, docker-runc,
golang-github-docker-libnetwork fixes the following issues:

Security issue fixed:

• CVE-2019-16884: Fixed incomplete patch for LSM bypass via malicious
  Docker image that mount over a /proc directory (bsc#1152308).

Bug fixes:

• Update to Docker 19.03.5-ce (bsc#1158590).
• Update to Docker 19.03.3-ce (bsc#1153367).
• Update to Docker 19.03.2-ce (bsc#1150397).
• Fixed default installation such that --userns-remap=default works
  properly (bsc#1143349).
• Fixed nginx blocked by apparmor (bsc#1122469).

This update was imported from the SUSE:SLE-15:Update update project.

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or “zypper patch”.

Alternatively you can run the command listed for your product:

• openSUSE Leap 15.1:

  zypper in -t patch openSUSE-2020-45=1