File _patchinfo of Package patchinfo.16766
<patchinfo incident="16766">
<issue tracker="cve" id="2020-25637"/>
<issue tracker="cve" id="2020-15708"/>
<issue tracker="bnc" id="1177155">VUL-0: CVE-2020-25637: libvirt: double free in qemuAgentGetInterfaces() in qemu_agent.c</issue>
<issue tracker="bnc" id="1171701">XEN Live migration: failed to send migration data to destination host</issue>
<issue tracker="bnc" id="1174955">VUL-0: CVE-2020-15708: libvirt: Arbitrary File Write Privilege Escalation Vulnerability in service file</issue>
<packager>jfehlig</packager>
<rating>important</rating>
<category>security</category>
<summary>Security update for libvirt</summary>
<description>This update for libvirt fixes the following issues:
- CVE-2020-15708: Added a note to libvirtd.conf about polkit auth in SUSE distros (bsc#1174955).
- CVE-2020-25637: Fixed a double free in qemuAgentGetInterfaces() (bsc#1177155).
- libxl: Fixed lock manager lock ordering (bsc#1171701).
</description>
</patchinfo>