Hi Sandro,
I'm not quite understanding the verification flow for this bug. Can you please specify the required steps for it's verification?

- verify bug #1208485, bug #1199907, bug #1216172 
- check that the rpm has version 1.2.4
- check that the src.rpm contains 1.2.4 tar.gz

(In reply to Sandro Bonazzola from comment #2)
> - verify bug #1208485, bug #1199907, bug #1216172 
> - check that the rpm has version 1.2.4
> - check that the src.rpm contains 1.2.4 tar.gz

3.5.z shouldn't be delayed by 3.6 1216172, especially as it's scenario not reproduced on vt15.1 3.5.z. 
rpm -qa ovirt-hosted-engine-setup
ovirt-hosted-engine-setup-1.2.4-2.el7ev.noarch


Tested on these components on two RHEL7.1 hosts:
 rpm -qa vdsm libvirt* sanlock* qemu-kvm* ovirt* mom
libvirt-python-1.2.8-7.el7_1.1.x86_64                                   
libvirt-daemon-driver-nodedev-1.2.8-16.el7_1.3.x86_64                   
mom-0.4.1-5.el7ev.noarch                                                
vdsm-4.16.18-1.el7ev.x86_64                                             
sanlock-3.2.2-2.el7.x86_64                                              
sanlock-lib-3.2.2-2.el7.x86_64                                          
sanlock-python-3.2.2-2.el7.x86_64                                       
ovirt-host-deploy-1.3.0-2.el7ev.noarch                                  
libvirt-client-1.2.8-16.el7_1.3.x86_64                                  
libvirt-daemon-driver-nwfilter-1.2.8-16.el7_1.3.x86_64                  
libvirt-daemon-config-nwfilter-1.2.8-16.el7_1.3.x86_64                  
libvirt-daemon-driver-interface-1.2.8-16.el7_1.3.x86_64                 
libvirt-daemon-driver-secret-1.2.8-16.el7_1.3.x86_64                    
libvirt-daemon-driver-qemu-1.2.8-16.el7_1.3.x86_64                      
libvirt-daemon-driver-storage-1.2.8-16.el7_1.3.x86_64                   
ovirt-hosted-engine-ha-1.2.6-2.el7ev.noarch                             
qemu-kvm-tools-rhev-2.1.2-23.el7_1.3.x86_64
qemu-kvm-rhev-2.1.2-23.el7_1.3.x86_64
libvirt-daemon-1.2.8-16.el7_1.3.x86_64
libvirt-lock-sanlock-1.2.8-16.el7_1.3.x86_64
libvirt-daemon-driver-network-1.2.8-16.el7_1.3.x86_64
libvirt-daemon-kvm-1.2.8-16.el7_1.3.x86_64
ovirt-hosted-engine-setup-1.2.4-2.el7ev.noarch
qemu-kvm-common-rhev-2.1.2-23.el7_1.3.x86_64

Engine on RHEL6.6:
rhevm-3.5.3-1.3.el6ev.noarch

(In reply to Nikolai Sednev from comment #5)
> (In reply to Sandro Bonazzola from comment #2)
> > - verify bug #1208485, bug #1199907, bug #1216172 
> > - check that the rpm has version 1.2.4
> > - check that the src.rpm contains 1.2.4 tar.gz
> 
> 3.5.z shouldn't be delayed by 3.6 1216172, especially as it's scenario not
> reproduced on vt15.1 3.5.z. 

Correct, removed the 3.6 bug 1216172 and added it's 3.5 clone bug 1221290

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://rhn.redhat.com/errata/RHBA-2015-1108.html