RHSA-2024:0281: Moderate: Secondary Scheduler Operator for Red Hat OpenShift 1.2.1 for RHEL 9

The Secondary Scheduler Operator for Red Hat OpenShift is an optional<br>operator that makes it possible to deploy a secondary scheduler by<br>providing a scheduler image. You can run a scheduler with custom<br>plugins without applying additional manifests, such as cluster roles<br>and deployments.<br>Security Fix(es):<br><li> golang: net/http/internal: Denial of Service (DoS) via Resource Consumption via HTTP requests (CVE-2023-39326)</li> <li> golang: crypto/tls: Timing Side Channel attack in RSA based TLS key exchanges. (CVE-2023-45287)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

— Red Hat