Ubuntu Cloud Archive

  1. Bug #2059809
  2. Comment #150

Comment 150 for bug 2059809

Revision history for this message
Felix Huettner (felix.huettner) wrote : Re: Arbitrary file access through QCOW2 external data file (CVE-2024-32498)

@Dan on #147: the patch seems to solve the issue we found and i did not observe other issues when using it.

I am not sure if it is the nicest approach since we try to guess a value that we could also get from the image metadata. But that is something than can still be changed later on.

Thanks a lot