|
|
|
|
|
|
|
|
|
|
xen-devel
Re: [Xen-devel] QEMU "drive_init()" Disk Format Security Bypass
On 08 May 2008 Thu 19:58:04 Ian Jackson wrote:
> We can add a safety catch so that if what is supposedly a raw image
> looks like a cow disk, we fail, unless the rawness was explicitly
> specified. So we can avoid data corruption although as far as I can
> see at the moment we have to at least break some existing
> deployments.
Thank you for reply.
Should I file a bug about this situation? I'm looking forward to security fix.
Btw, KVM also fixed this vulnerability (they just pulled latest qemu code).
_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-devel
|
|
|
|
|