← Back to team overview

openstack team mailing list archive

Re: Is there a security issue with qcow2 images ?


There was a security issue and it was fixed.  Details here

On Jan 25, 2012, at 10:11 AM, Day, Phil wrote:

> Hi Folks,
> I have a half remembered conversation from the Boston summit where someone said that there was a security issue in using qcow2 as a format for creating snapshot images. 
> Does that ring any bells with anyone, and if so can you expand on the potential issue please ?
> I think it was something to do with why base images have to be expanded after download, but I might be wrong on that.   I’m particularly interested in using qcow2 as an upload format for snapshots.
> Thanks
> Phil
> _______________________________________________
> Mailing list: https://launchpad.net/~openstack
> Post to     : openstack@xxxxxxxxxxxxxxxxxxx
> Unsubscribe : https://launchpad.net/~openstack
> More help   : https://help.launchpad.net/ListHelp