Comment 52 for bug 2059809

Revision history for this message
Jeremy Stanley (fungi) wrote : Re: Arbitrary file access through QCOW2 external data file

In case it's unclear, the intent of the fixes for OpenStack services is to reject potentially risky QCOW2 image files and avoid ever handing them off to subsystems where they might cause a problem. We don't expect to change qemu's behaviors regarding QCOW2 files, we simply don't want to trigger them.