Ubuntu Cloud Archive

  1. Bug #2059809
  2. Comment #184

Comment 184 for bug 2059809

Revision history for this message
Sylvain Bauza (sylvain-bauza) wrote : Re: Arbitrary file access through QCOW2 external data file (CVE-2024-32498)

In order to backport the Nova patches to Wallaby, I needed to also backport those changes :

https://github.com/openstack/nova/commit/4a968c98c160cd86c3de32c7455140b5610e02c1 (merged in Yoga)
https://github.com/openstack/nova/commit/48a6a9cab2e60244343e4981b346c8fc8cf90fa3 (merged in Zed)
https://github.com/openstack/nova/commit/2eeefabde4f5f46e95849efe910027455ba70186 (merged in Antelope)

HTH.