[Bug 908111] New: qemu-img disk corruption
http://bugzilla.opensuse.org/show_bug.cgi?id=908111 Bug ID: 908111 Summary: qemu-img disk corruption Classification: openSUSE Product: openSUSE Distribution Version: 13.2 RC 1 Hardware: All OS: Linux Status: NEW Severity: Major Priority: P5 - None Component: Other Assignee: bnc-team-screening@forge.provo.novell.com Reporter: tony@bakeyournoodle.com QA Contact: qa-bugs@suse.de Found By: --- Blocker: --- qemu-img convert can corrupt disk images under certain circumstances. The issue was discovered in an openstack context but isn't limited to that environment. I have done a source code audit of the packages at http://software.opensuse.org/package/qemu and opensuse tumbleweed, 13.2, 13.1, 12.3 are all affected by this issue. For a detailed analysis and link to the required fixes please see: https://bugs.launchpad.net/qemu/+bug/1368815 -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=908111 Bernhard Wiedemann <bwiedemann@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |brogers@suse.com, | |bwiedemann@suse.com, | |dmueller@suse.com Assignee|bnc-team-screening@forge.pr |afaerber@suse.com |ovo.novell.com | -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=908111 Martin Pluskal <mpluskal@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |mpluskal@suse.com -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=908111 Marcus Meissner <meissner@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |meissner@suse.com --- Comment #1 from Marcus Meissner <meissner@suse.com> --- Andreas, can you sbumit fixes for openSUSE or assign to someon else? 12.3 no longer needed (out of support) -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=908111 Andreas Färber <afaerber@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Flags| |needinfo?(meissner@suse.com | |) --- Comment #2 from Andreas Färber <afaerber@suse.com> --- (In reply to Marcus Meissner from comment #1)
Andreas, can you sbumit fixes for openSUSE or assign to someon else?
Marcus, what should actually be done here? The patch linked to seems to be for OpenStack rather than QEMU, so I cannot just submit that. Do we have an existing security bug tracking the QEMU side, or do patches need to be conceived for upstream submission first before we can submit packages with such a fix? Thanks. -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=908111 Andreas Färber <afaerber@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Depends on| |908381 Flags|needinfo?(meissner@suse.com | |) | -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=908111 --- Comment #3 from Tony Breeds <tony@bakeyournoodle.com> --- The important fixes for qemu are in comment 8: --- FWIW the following 2 commits in qemu master resolve the issue for qemu-img. http://git.qemu.org/?p=qemu.git;a=commit;h=38c4d0aea3e1264c86e282d99560330ad... http://git.qemu.org/?p=qemu.git;a=commit;h=7c15903789953ead14a417882657d52dc... If possible they should be back ported to trusty and utopic. You'll also need something like: http://git.qemu.org/?p=qemu.git;a=commit;h=4f11aa8a40351b28c0e67c7276e0003b3... before my 2 patches. --- -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=908111 Dinar Valeev <dvaleev@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |dvaleev@suse.com -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=908111 http://bugzilla.opensuse.org/show_bug.cgi?id=908111#c4 Tomáš Chvátal <tchvatal@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |FIXED --- Comment #4 from Tomáš Chvátal <tchvatal@suse.com> --- 13.2 is out of support and leap/tw have newer qemu containing the fixes. This can be closed as fixed then. -- You are receiving this mail because: You are on the CC list for the bug.
participants (1)
-
bugzilla_noreply＠novell.com