Comment 45 for bug 2059809
Revision history for this message
| Dan Smith (danms) wrote Re: Arbitrary file access through QCOW2 external data file | #45 |
© 2004
Canonical Ltd.
•
Terms of use
•
Data privacy
•
Contact Launchpad Support
•
Blog
•
Careers
•
System status
•
bbfa235
(Get the code!)
Martin, qemu* is behaving as expected with this external file reference, so it's not a qemu bug. It's an openstack bug to take files with such references from untrusted sources, which is why we've made the changes in the openstack services that are vulnerable.
I'm not sure what you're trying to show with your latest example, other than that qemu behaves as expected.