Comment 35 for bug 1996188

Revision history for this message
Arnaud Morin (arnaud-morin) wrote : Re: Arbitrary file access through custom VMDK flat descriptor

Just to let you know that glance is affected by the bug with the import plugin.
A user can trigger the conversion if the operator enabled this in the config:

[image_import_opts]
image_import_plugins = ['image_conversion']

Then, as a regular user:
openstack image create --file leak.qcow --disk-format qcow2 --import leak9.qcow

Will test the patch to make sure this is mitigating the issue now