Red Hat Security Advisory

RHSA-2024:0281

Secondary Scheduler Operator for Red Hat OpenShift 1.2.1 for RHEL 9

Released 2024-03-06 · Red Hat rating Moderate · View on Red Hat →

Fixed in

OSSO 1.2 for RHEL 9 openshift-secondary-scheduler-operator/secondary-scheduler-operator-bundle, openshift-secondary-scheduler-operator/secondary-scheduler-rhel9-operator

Fixes 2 records

TI-2023-24277 CVE-2023-45287 · GHSA-33qr-2xwr-95pw

Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

LOW 35

Before Go 1.20, the RSA based TLS key exchanges used the math/big library, which is not constant time.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0125 Published 2023-12-05 Partial fix · 1.20.0 CWE-203

TI-2023-20467 CVE-2023-39326 · GHSA-9f76-wg39-x86h

Denial of service via chunk extensions in net/http

LOW 26

A malicious HTTP sender can use chunk extensions to cause a receiver reading from a request or response body to read many more bytes from the network than are in the body.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01208 Published 2023-12-06 Partial fix · 1.20.12, 1.21.5