Cinder

  1. Series icehouse
  2. Bug #1350504
  3. Comment #35

Comment 35 for bug 1350504

Revision history for this message
Duncan Thomas (duncan-thomas) wrote : Re: GlusterFS driver uses unsafe qcow2 format detection (CVE-2014-3641)

I think you meant @cinder-coresec there.

The fix in #30 looks good from a security point of view.

I think Petrut is correct in requiring his patch to be applied too to stop the windows driver being broken, though I can't test it.

The linux smb driver is affected, but is fixed by Eric's patch.