I am not use to qemu-kvm RHEL patch process, Gerd, you are better placed to handle the patch thanks.

upstream commit 07d49a53b6394941ed833486a3acb5c480d87db2

backport posted.

Fix included in qemu-kvm-rhev-2.1.2-6.el7

Reproduce this bug as follow version:

Host:
# uname -r
3.10.0-191.el7.x86_64
# rpm -q qemu-kvm-rhev
qemu-kvm-rhev-2.1.2-5.el7.x86_64


Guest:rhel7

Steps:

1.Boot guest with 
"spice port=5932,password=redhat "

2.set password expire time as 1000 sec :
..
{ "execute": "expire_password", "arguments": { "protocol": "spice", "time": "+60" } }

3.before the password expired, use virt-viewer to connect the guest:
#remote-viewer spice://$hostIP:5932


Results:

can't login with the correct password although the password is not expired.

Verify this bug as follow version:


Host:
# uname -r
3.10.0-191.el7.x86_64
# rpm -q qemu-kvm-rhev
qemu-kvm-rhev-2.1.2-6.el7.x86_64


Steps as same as reproduce

Results: can login with the correct password .


According to above test ,this bug fixed.

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://rhn.redhat.com/errata/RHSA-2015-0624.html