OpenStack Compute (nova)

  1. Bug #1449062
  2. Comment #76

Comment 76 for bug 1449062

Revision history for this message
Kashyap Chamarthy (kashyapc) wrote : Re: qemu-img calls need to be restricted by ulimit (CVE-2015-5162)

Jeremy: Hemanth (in comment#72) seems to have mixed up this bug (which sets limits for memory / CPU usage for `qemu-img` calls) with *another* bug[x] that is about disk image format guessing.

So, the Nova patches that fix this bug (1449062) are sufficient for the problem it is solving (setting a cap on memory / CPU usage).

[x] https://bugs.launchpad.net/nova/+bug/1415087 --
    [OSSA 2015-011] Format-guessing and file disclosure
    in image convert (CVE-2015-1850, CVE-2015-1851)