Lucene search

K
redhatRedHatRHSA-2024:4867
HistoryJul 25, 2024 - 1:07 p.m.

(RHSA-2024:4867) Moderate: Release of openshift-serverless-clients kn 1.33.1 security update and bug fixes

2024-07-2513:07:04
access.redhat.com
10
red hat
openshift serverless
kn cli
security update
bug fixes
rpm package
golang
archive/zip
rapid reset flaw
cve-2024-24789
cvss score
references section
non-linux platforms

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

AI Score

7.3

Confidence

Low

Red Hat OpenShift Serverless Client kn 1.33.1 provides a CLI to interact with
Red Hat OpenShift Serverless 1.33.1. The kn CLI is delivered as an RPM package
for installation on RHEL platforms, and as binaries for non-Linux platforms.

This release includes security, bug fixes, and enhancements.

Security Fix(es):

  • golang: archive/zip: Incorrect handling of certain ZIP files(CVE-2024-24789)

A Red Hat Security Bulletin, which addresses further details about the Rapid
Reset flaw is available in the References section.

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s)
listed in the References section.

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

AI Score

7.3

Confidence

Low

Related for RHSA-2024:4867