OpenStack Security Advisory

  1. Bug #1350504
  2. Comment #66

Comment 66 for bug 1350504

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Related fix merged to cinder (proposed/juno)

Reviewed: https://review.openstack.org/125672
Committed: https://git.openstack.org/cgit/openstack/cinder/commit/?id=79afa849658f689a9105473fdfba1d993684d3df
Submitter: Jenkins
Branch: proposed/juno

commit 79afa849658f689a9105473fdfba1d993684d3df
Author: Lucian Petrut <email address hidden>
Date: Tue Sep 30 11:58:22 2014 +0300

    Windows SMBFS: Handle volume_name in _qemu_img_info

    The volume_name is now parsed to the _qemu_img_info wrapper. As
    this method is not prone to security issues because this driver
    does not support raw images (at least not yet), we don't have to
    perform any checks on the backing image file path.

    Thus, this method simply ignores this argument that will be parsed
    by the base class methods.

    Related-Bug: #1350504

    Change-Id: I801a6338250ec2dc631c4058543f7d0088b3e4d4
    (cherry picked from commit 5e0ce63d6df39dcad5a0ef35553369e49c67dfb8)