Bug 1943399

Summary: qemu-kvm-ev: usb: out-of-bounds r/w(CVE-2020-14364
Product: [oVirt] ovirt-distribution Reporter: jasonrao <rjmcy>
Component: qemu-kvm-evAssignee: Sandro Bonazzola <sbonazzo>
Status: CLOSED CURRENTRELEASE QA Contact: meital avital <mavital>
Severity: high Docs Contact:
Priority: unspecified    
Version: ---CC: bugs, michal.skrivanek, pasik, rjmcy
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2021-03-26 09:16:50 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: Virt RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description jasonrao 2021-03-26 01:41:59 UTC
Description of problem:
 The qemu-kvm-rhev has fixed the issue, but CentOS community hasn't updated the repaired version of qemu-kvm-ev;

Comment 1 Michal Skrivanek 2021-03-26 09:16:50 UTC
oVirt 4.3 is superseded by oVirt 4.4 for 10 months now. Please upgrade.

if this is for other use case just to consume qemu-kvm-ev from CentOS Virt SIG then please open an issue on CentOS side or push an update yourself, as otherwise this package is there primarily for oVirt.