Comment 165 for bug 2059809

Revision history for this message
Dan Smith (danms) wrote (last edit ): Re: Arbitrary file access through QCOW2 external data file (CVE-2024-32498)

@zigo glance is good, nova is good as far as I know (meaning, all the cases reported are covered now and confirmed by others). I think that the cinder patch from Felix means cinder is covered, but it would be good to hear from Cinder people that it's suitable from their perspective and get the backport patches going.