Comment 226 for bug 2059809

Revision history for this message
Jeremy Stanley (fungi) wrote : Re: Arbitrary file access through QCOW2 external data file (CVE-2024-32498)

While we're waiting on the final Cinder backports, it would also be good to get clarification from Dan and/or other Glance folks as to whether the patch in comment #220 including the additional QED checks should be backported to replace the earlier Glance patches from comments #136-139.