Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.

Bug 1943399

Summary:	qemu-kvm-ev: usb: out-of-bounds r/w(CVE-2020-14364
Product:	[oVirt] ovirt-distribution	Reporter:	jasonrao <rjmcy>
Component:	qemu-kvm-ev	Assignee:	Sandro Bonazzola <sbonazzo>
Status:	CLOSED CURRENTRELEASE	QA Contact:	meital avital <mavital>
Severity:	high	Docs Contact:
Priority:	unspecified
Version:	---	CC:	bugs, michal.skrivanek, pasik, rjmcy
Target Milestone:	---
Target Release:	---
Hardware:	Unspecified
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2021-03-26 09:16:50 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	Virt	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description jasonrao 2021-03-26 01:41:59 UTC

Description of problem:
 The qemu-kvm-rhev has fixed the issue, but CentOS community hasn't updated the repaired version of qemu-kvm-ev;

Comment 1 Michal Skrivanek 2021-03-26 09:16:50 UTC

oVirt 4.3 is superseded by oVirt 4.4 for 10 months now. Please upgrade.

if this is for other use case just to consume qemu-kvm-ev from CentOS Virt SIG then please open an issue on CentOS side or push an update yourself, as otherwise this package is there primarily for oVirt.