RHSA-2024:0281MediumCVSS 7.5

Red Hat Security Advisory: Secondary Scheduler Operator for Red Hat OpenShift 1.2.1 for RHEL 9

Published
March 6, 2024
Last Modified
August 2, 2026

🔗 CVE IDs covered (2)

CVE-2023-39326 →CVE-2023-45287 →

📋 Description

CVE-2023-39326 — golang: net/http/internal: Denial of Service (DoS) via Resource Consumption via HTTP requests CVE-2023-45287 — golang: crypto/tls: Timing Side Channel attack in RSA based TLS key exchanges.

🎯 Affected products3

  • OSSO 1.2 for RHEL 9
  • openshift-secondary-scheduler-operator/secondary-scheduler-operator-bundle@sha256:959d5567fa57212bb1d707c6cd0b67d47af4431d7b567f81bcb7e19892fdde30_amd64 as a component of OSSO 1.2 for RHEL 9
  • openshift-secondary-scheduler-operator/secondary-scheduler-rhel9-operator@sha256:b085cface9e8b74c3a2588ac70ccb1ea75740065aa006d2993c7f7295154c9dc_amd64 as a component of OSSO 1.2 for RHEL 9

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Workaround: No mitigation is available for this flaw. Workaround: No current mitigation is available for this vulnerability.

🔗 References (9)