Hi, just pushed to testing a new build of qemu-kvm-ev, here’s the ChangeLog:

* Thu Mar 2 2017 Sandro Bonazzola –
ev-2.6.0-28.el7_3.6.1
– Removing RH branding from package name

* Mon Feb 13 2017 Miroslav Rezanina –
rhev-2.6.0-28.el7_3.6
– kvm-cirrus-fix-patterncopy-checks.patch [bz#1420493]
– kvm-Revert-cirrus-allow-zero-source-pitch-in-pattern-fil.patch
[bz#1420493]
– kvm-cirrus-add-blit_is_unsafe-call-to-cirrus_bitblt_cput.patch
[bz#1420493]
– Resolves: bz#1420493
(EMBARGOED CVE-2017-2620 qemu-kvm-rhev: Qemu: display: cirrus: potential arbitrary code execution via cirrus_bitblt_cputovideo [rhel-7.3.z])

* Fri Feb 10 2017 Miroslav Rezanina –
rhev-2.6.0-28.el7_3.5
– kvm-memory-Provide-memory_region_init_rom.patch [bz#1420456]
– kvm-pci-mark-ROMs-read-only.patch [bz#1420456]
– kvm-vhost-skip-ROM-sections.patch [bz#1420456]
– kvm-display-cirrus-check-vga-bits-per-pixel-bpp-value.patch [bz#1418234]
– kvm-display-cirrus-ignore-source-pitch-value-as-needed-i.patch
[bz#1418234]
– kvm-cirrus-handle-negative-pitch-in-cirrus_invalidate_re.patch
[bz#1418234]
– kvm-cirrus-allow-zero-source-pitch-in-pattern-fill-rops.patch [bz#1418234]
– kvm-cirrus-fix-blit-address-mask-handling.patch [bz#1418234]
– kvm-cirrus-fix-oob-access-issue-CVE-2017-2615.patch [bz#1418234]
– Resolves: bz#1418234
(CVE-2017-2615 qemu-kvm-rhev: Qemu: display: cirrus: oob access while doing bitblt copy backward mode [rhel-7.3.z])
– Resolves: bz#1420456
([ppc64le]reset vm when do migration, HMP in src host promp “tcmalloc:
large alloc 1073872896 bytes…”)

* Wed Feb 08 2017 Miroslav Rezanina –
rhev-2.6.0-28.el7_3.4
– kvm-Disable-usbredir-and-libcacard-for-unsupported-archi.patch
[bz#1420428]
– Resolves: bz#1420428
(Remove dependencies required by spice on ppc64le)

In order to test it:

# yum install CentOS-release-qemu-ev
# yum-config-manager –enable CentOS-qemu-ev-test
# yum install qemu-kvm-ev

Or just yum update if you already have qemu-kvm-ev installed and test repository enabled.

If you test it, please provide feedback.