Ubuntu Cloud Archive

  1. Bug #2059809
  2. Comment #207

Comment 207 for bug 2059809

Revision history for this message
Abhishek Kekane (abhishek-kekane) wrote : Re: Arbitrary file access through QCOW2 external data file (CVE-2024-32498)

Thomas, I think pre-wallaby you should only apply 1st commit from the attached patch which is "Reject qcow files with data-file attributes". Otherwise it will require whole lot changes to be backported.

Also if possible could you provide glance logs?