OpenStack Security Advisory

  1. Bug #1350504
  2. Comment #62

Comment 62 for bug 1350504

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to cinder (master)

Reviewed: https://review.openstack.org/125665
Committed: https://git.openstack.org/cgit/openstack/cinder/commit/?id=dca3c8323cf8cf12aa8ce4ba21f647ce631e8153
Submitter: Jenkins
Branch: master

commit dca3c8323cf8cf12aa8ce4ba21f647ce631e8153
Author: Eric Harney <email address hidden>
Date: Tue Sep 9 16:20:24 2014 -0400

    Refuse invalid qcow2 backing files

    Don't allow qcow2 files that are pointing to backing files outside of:

    volume-<id>
    volume-<id>.<snap-id>
    volume-<id>.tmp-snap-<snap-id>

    (optionally prefixed with /mnt/path)

    Closes-Bug: #1350504

    Change-Id: Ic89cffc93940b7b119cfcde3362f304c9f2875df