File _patchinfo of Package patchinfo.16761
<patchinfo incident="16761">
<issue tracker="bnc" id="1177480">SLES 12 SP5 GMC - DASD passthrough: Unable to format passed-through DASD device from guest: dasdfmt command fails with ioctl() error. (kvm/libvirt)</issue>
<issue tracker="bnc" id="1175465">libvirtd can't start VM, can't get devmapper targets for its disc</issue>
<issue tracker="bnc" id="1176430">XEN internal error: unexpected domain Domain-0 already exists in sles15sp2</issue>
<issue tracker="bnc" id="1177155">VUL-0: CVE-2020-25637: libvirt: double free in qemuAgentGetInterfaces() in qemu_agent.c</issue>
<issue tracker="bnc" id="1174955">VUL-0: CVE-2020-15708: libvirt: Arbitrary File Write Privilege Escalation Vulnerability in service file</issue>
<issue tracker="bnc" id="1175574">libvirt-6.0.0-lp152.8.1 fails to build</issue>
<issue tracker="cve" id="2020-25637"/>
<issue tracker="cve" id="2020-15708"/>
<packager>jfehlig</packager>
<rating>important</rating>
<category>security</category>
<summary>Security update for libvirt</summary>
<description>This update for libvirt fixes the following issues:
- CVE-2020-15708: Added a note to libvirtd.conf about polkit auth in SUSE distros (bsc#1174955).
- CVE-2020-25637: Fixed a double free in qemuAgentGetInterfaces() (bsc#1177155).
- qemu: Adjust max memlock on mdev hotplug (bsc#1177480).
- Xen: Don't add dom0 twice on driver reload (bsc#1176430).
- virdevmapper: Handle kernel without device-mapper support (bsc#1175465).
- Fixed an issue where building was failing (bsc#1175574).
</description>
</patchinfo>