[Openstack] Is there a security issue with qcow2 images ?

Blake Yeager blake.yeager at gmail.com
Wed Jan 25 18:28:01 UTC 2012


Just FYI for the mailing list we found the bug and the resolution here:

https://bugs.launchpad.net/nova/+bug/853330

Cheers,
-Blake

On Wed, Jan 25, 2012 at 12:11 PM, Day, Phil <philip.day at hp.com> wrote:

> Hi Folks,****
>
> ** **
>
> I have a half remembered conversation from the Boston summit where someone
> said that there was a security issue in using qcow2 as a format for
> creating snapshot images.  ****
>
> ** **
>
> Does that ring any bells with anyone, and if so can you expand on the
> potential issue please ?****
>
> ** **
>
> I think it was something to do with why base images have to be expanded
> after download, but I might be wrong on that.   I’m particularly interested
> in using qcow2 as an upload format for snapshots.****
>
> ** **
>
> Thanks****
>
> Phil****
>
> ** **
>
> _______________________________________________
> Mailing list: https://launchpad.net/~openstack
> Post to     : openstack at lists.launchpad.net
> Unsubscribe : https://launchpad.net/~openstack
> More help   : https://help.launchpad.net/ListHelp
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack/attachments/20120125/c1601953/attachment.html>


More information about the Openstack mailing list