File _patchinfo of Package patchinfo.16766
<patchinfo incident="16766"> <issue tracker="cve" id="2020-25637"/> <issue tracker="cve" id="2020-15708"/> <issue tracker="bnc" id="1177155">VUL-0: CVE-2020-25637: libvirt: double free in qemuAgentGetInterfaces() in qemu_agent.c</issue> <issue tracker="bnc" id="1171701">XEN Live migration: failed to send migration data to destination host</issue> <issue tracker="bnc" id="1174955">VUL-0: CVE-2020-15708: libvirt: Arbitrary File Write Privilege Escalation Vulnerability in service file</issue> <packager>jfehlig</packager> <rating>important</rating> <category>security</category> <summary>Security update for libvirt</summary> <description>This update for libvirt fixes the following issues: - CVE-2020-15708: Added a note to libvirtd.conf about polkit auth in SUSE distros (bsc#1174955). - CVE-2020-25637: Fixed a double free in qemuAgentGetInterfaces() (bsc#1177155). - libxl: Fixed lock manager lock ordering (bsc#1171701). </description> </patchinfo>