[Openstack] Is there a security issue with qcow2 images ?
Hi Folks, I have a half remembered conversation from the Boston summit where someone said that there was a security issue in using qcow2 as a format for creating snapshot images. Does that ring any bells with anyone, and if so can you expand on the potential issue please ? I think it was something to do with why base images have to be expanded after download, but I might be wrong on that. I'm particularly interested in using qcow2 as an upload format for snapshots. Thanks Phil ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] Is there a security issue with qcow2 images ?
There was a security issue and it was fixed. Details here https://bugs.launchpad.net/nova/+bug/853330 Vish On Jan 25, 2012, at 10:11 AM, Day, Phil wrote: Hi Folks, I have a half remembered conversation from the Boston summit where someone said that there was a security issue in using qcow2 as a format for creating snapshot images. Does that ring any bells with anyone, and if so can you expand on the potential issue please ? I think it was something to do with why base images have to be expanded after download, but I might be wrong on that. I’m particularly interested in using qcow2 as an upload format for snapshots. Thanks Phil ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] Is there a security issue with qcow2 images ?
Just FYI for the mailing list we found the bug and the resolution here: https://bugs.launchpad.net/nova/+bug/853330 Cheers, -Blake On Wed, Jan 25, 2012 at 12:11 PM, Day, Phil philip@hp.com wrote: Hi Folks, ** ** I have a half remembered conversation from the Boston summit where someone said that there was a security issue in using qcow2 as a format for creating snapshot images. ** ** Does that ring any bells with anyone, and if so can you expand on the potential issue please ? ** ** I think it was something to do with why base images have to be expanded after download, but I might be wrong on that. I’m particularly interested in using qcow2 as an upload format for snapshots. ** ** Thanks Phil ** ** ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
