EUVD-2016-10396

Malware in sbrugna...

USN-6073-5: Nova regression

USN-6073-3 fixed a vulnerability in Nova. The update introduced a regression causing Nova to be unable to detach volumes from instances. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Jan Wasilewski and Gorka Eguileor discovered that Nova incorrectly...

CVE-2016-9592

The CVE-2016-9592 entry describes a denial-of-service risk in OpenShift before versions 3.3.1.11, 3.2.1.23, and 3.4. The root cause is a flaw where a volume fails to detach, causing the delete operation to fail with a VolumeInUse error. Because the delete operation is retried every 30 seconds for...

UBUNTU-CVE-2017-18191

An issue was discovered in OpenStack Nova 15.x through 15.1.0 and 16.x through 16.1.1. By detaching and reattaching an encrypted volume, an attacker may access the underlying raw volume and corrupt the LUKS header, resulting in a denial of service attack on the compute host. The same code error...