RHSA-2024:3637: Moderate: Secondary Scheduler Operator for Red Hat OpenShift 1.3.0 for RHEL 9

The Secondary Scheduler Operator for Red Hat OpenShift is an optionaloperator that makes it possible to deploy a secondary scheduler byproviding a scheduler image. You can run a scheduler with customplugins without applying additional manifests, such as cluster rolesand deployments.Security Fix(es): golang: net/http: memory exhaustion in Request.ParseMultipartForm (CVE-2023-45290) golang: crypto/x509: Verify panics on certificates with an unknown public key algorithm (CVE-2024-24783) golang: net/mail: comments in display names are incorrectly handled (CVE-2024-24784) golang: html/template: errors returned from MarshalJSON methods may break template escaping (CVE-2024-24785) golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS (CVE-2023-45288) golang-protobuf: encoding/protojson, internal/encoding/json: infinite loop in protojson.Unmarshal when unmarshaling certain forms of invalid JSON (CVE-2024-24786)

— Red Hat