Red Hat Security AdvisoryRHSA-2024:8219
Secondary Scheduler Operator for Red Hat OpenShift 1.2.2 for RHEL 9
Released 2024-11-18 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- OSSO 1.2 for RHEL 9 openshift-secondary-scheduler-operator/secondary-scheduler-rhel9-operator
Fixes 3 records
Priority MEDIUM 42
The net/http HTTP/1.1 client mishandled the case where a server responds to a request with an "Expect: 100-continue" header with a non-informational (200 or higher) status.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01414 · Published 2024-07-02 · Partial fix · 1.21.12, 1.22.5
Priority MEDIUM 41
Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01046 · Published 2024-09-06 · Partial fix · 1.22.7, 1.23.1 CWE-674
Priority LOW 22
Calling any of the Parse functions on Go source code which contains deeply nested literals can cause a panic due to stack exhaustion.
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00839 · Published 2024-09-06 · Partial fix · 1.22.7, 1.23.1
