[ovirt-users] Are Ovirt updates nessessary after CVE-2017-5754 CVE-2017-5753 CVE-2017-5715

[Derek Atkins]

Yaniv Kaul <ykaul at redhat.com> writes:

> On Mon, Jan 8, 2018 at 7:32 PM, Derek Atkins <warlord at mit.edu> wrote:
>
>     Michal Skrivanek <michal.skrivanek at redhat.com> writes:
>    
>     >             > If there are Patches nessessary will there also be updates
>     for
>     >             ovirt 4.1 or
>     >             > only 4.2?
>     >
>     > 4.1 will be covered
>    
>     What about 4.0?  Or will that not be covered because it depends on 7.3,
>     which also isn't covered??
>
> It will not be covered because we have 4.1 and 4.2 out, both of which we take
> care of.

I was afraid of that.  So I will need to upgrade to at least 7.4/4.1 to
get this fixed.   I'll need to find some time to do that.  :(

My users don't like having downtime..  and this is a single-host system.

> Y.

-derek

-- 
       Derek Atkins                 617-623-3745
       derek at ihtfp.com             www.ihtfp.com
       Computer and Internet Security Consultant