Bug 1712250 - MDS mitigation dependencies bump up
Summary: MDS mitigation dependencies bump up
Alias: None
Product: vdsm
Classification: oVirt
Component: General
Version: 4.30.15
Hardware: Unspecified
OS: Unspecified
Target Milestone: ovirt-4.3.4
: 4.30.16
Assignee: Michal Skrivanek
QA Contact: Pavel Novotny
Depends On:
Blocks: 1712253
TreeView+ depends on / blocked
Reported: 2019-05-21 07:21 UTC by Michal Skrivanek
Modified: 2019-06-20 11:48 UTC (History)
3 users (show)

Fixed In Version: vdsm-4.30.16
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
: 1712253 (view as bug list)
Last Closed: 2019-06-20 11:48:03 UTC
oVirt Team: Virt
rbarry: ovirt-4.3?

Attachments (Terms of Use)

System ID Private Priority Status Summary Last Updated
oVirt gerrit 100039 0 None None None 2019-05-21 07:24:23 UTC
oVirt gerrit 100194 0 ovirt-4.3 MERGED spec: bump up requirements for MDS CVEs 2019-05-21 08:25:26 UTC

Description Michal Skrivanek 2019-05-21 07:21:54 UTC
require packages to mitigate https://access.redhat.com/security/vulnerabilities/mds

Comment 1 Pavel Novotny 2019-06-14 13:00:22 UTC
Verified in vdsm-4.30.17-1.el7ev.x86_64

Following dependencies have been bumped up:

# rpm -q vdsm
# rpm -qR vdsm | egrep 'libvirt-python|libvirt-daemon-kvm|kernel|qemu-kvm-rhev'
kernel >= 3.10.0-957.12.2.el7
libvirt-daemon-kvm >= 4.5.0-10.el7_6.9
libvirt-python >= 4.5.0-1.el7
qemu-kvm-rhev >= 10:2.12.0-18.el7_6.5

Comment 2 Sandro Bonazzola 2019-06-20 11:48:03 UTC
This bugzilla is included in oVirt 4.3.4 release, published on June 11th 2019.

Since the problem described in this bug report should be
resolved in oVirt 4.3.4 release, it has been closed with a resolution of CURRENT RELEASE.

If the solution does not work for you, please open a new bug report.

Note You need to log in before you can comment on or make changes to this bug.