Comment 74 for bug 2059809

Revision history for this message
Jeremy Stanley (fungi) wrote : Re: Arbitrary file access through QCOW2 external data file

Arnaud: To get more specific, the long-term goal is to move it into somewhere like oslo.utils, possibly as early as 2024.2/Dalmatian (depending on whether anyone has time), but backporting that adds a lot more complexity and delay between public disclosure and having fixes available to users. In particular, we'd need to backport it to each maintained stable branch of oslo.utils, tag new point releases on each of those branches, update central constraints for all branches, and merge changes to every supported branch of each affected service to consume the new feature. Downstream consumers could directly patch oslo.utils along with patching the services, though that's still more complexity for them than just patching the services.