d1f105a6ed
The NFS driver uses qcow2 images with backing files to represent volume snapshots, which is not allowed for qcow2 disk images downloaded from glance. The driver uses cinder.image_utils to convert a qcow2 snapshot to a raw volume; this was not a problem for the first snapshot, whose backing file is raw, and hence passed the image format inspector, but the second snapshot has a qcow2 backing file, which the image_utils were rejecting as a security risk. Thus we now pass the qemu_img_info from the backing image as an additional parameter to the image convert call, which indicates that the file has already been screened and allows the conversion to occur. Co-authored-by: Fernando Ferraz <fesilva@redhat.com> Co-authored-by: Brian Rosmaita <rosmaita.fossdev@gmail.com> Closes-bug: #2074377 Change-Id: I49404e87eb0c77b4ed92918404f86c073fbfd713 (cherry picked from commit 9687fbac79b0af266dcefb89b8ecc5c2940f6c80) (cherry picked from commit ca82907201bd79a0d3bb172b52da3689ba541396) (cherry picked from commit 39883f2b70c5c1f01f3908f216e6215f7832b274) (cherry picked from commit 32a71114c82d498ca9c78dcbf4ba311699bfccdd)
9 lines
311 B
YAML
9 lines
311 B
YAML
---
|
|
fixes:
|
|
- |
|
|
NFS driver `bug #2074377
|
|
<https://bugs.launchpad.net/cinder/+bug/2074377>`_: Fixed regression
|
|
caused by change I65857288b797 (the mitigation for CVE-2024-32498)
|
|
that was preventing the creation of a new volume from the second and
|
|
subsequent snapshots of an existing volume.
|