Re: [PATCH v4 7/7] qemu-img: Deprecate use of -b without -F

2020-03-17 Thread Kashyap Chamarthy
On Thu, Mar 12, 2020 at 02:28:22PM -0500, Eric Blake wrote: > Creating an image that requires format probing of the backing image is > inherently unsafe (we've had several CVEs over the years based on > probes leaking information to the guest on a subsequent boot, although > these days tools like l

Re: [PATCH v4 7/7] qemu-img: Deprecate use of -b without -F

2020-03-13 Thread Eric Blake
On 3/12/20 2:28 PM, Eric Blake wrote: Creating an image that requires format probing of the backing image is inherently unsafe (we've had several CVEs over the years based on probes leaking information to the guest on a subsequent boot, although these days tools like libvirt are aware of the issu

[PATCH v4 7/7] qemu-img: Deprecate use of -b without -F

2020-03-12 Thread Eric Blake
Creating an image that requires format probing of the backing image is inherently unsafe (we've had several CVEs over the years based on probes leaking information to the guest on a subsequent boot, although these days tools like libvirt are aware of the issue enough to prevent the worst effects).