Ubuntu Cloud Archive

  1. Bug #2059809
  2. Comment #187

Comment 187 for bug 2059809

Revision history for this message
Thomas Goirand (thomas-goirand) wrote : Re: Arbitrary file access through QCOW2 external data file (CVE-2024-32498)

Hi!

This patch, on top of Felix's one, repairs Cinder 3 broken unit tests. I'm not sure if that's the way the Cinder team would do, but it works for me.

Also, IMO the Cinder team should create some good and bad qcow2 images so that we check the format_inspector. We currently have zero tests for it.